Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 03:58:46.749 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56300 10 6452 1 2025-08-28 03:59:33.073 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 03:59:33.282 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 03:59:29.311 00:00:10.324 TCP 23.104.0.1:57532 -> 1.101.0.1:3000 11 1507 1 2025-08-28 03:59:46.960 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52518 12 6556 1 2025-08-28 03:55:19.339 00:06:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 04:00:29.671 00:00:10.346 TCP 23.104.0.1:42388 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:00:47.195 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56548 10 6452 1 2025-08-28 03:56:19.341 00:06:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 04:01:30.091 00:00:10.363 TCP 23.104.0.1:53638 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:01:47.418 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:46302 12 10365 1 2025-08-28 04:02:30.494 00:00:10.391 TCP 23.104.0.1:47146 -> 1.101.0.1:3000 15 1926 1 2025-08-28 04:02:47.619 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59040 10 6452 1 2025-08-28 04:03:30.922 00:00:10.389 TCP 23.104.0.1:35680 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:03:47.836 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37128 10 6452 1 2025-08-28 04:04:33.177 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:04:33.288 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:04:31.351 00:00:10.371 TCP 23.104.0.1:51312 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:04:48.074 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47072 10 6452 1 2025-08-28 04:05:31.759 00:00:10.378 TCP 23.104.0.1:45438 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:05:48.287 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6452 1 2025-08-28 04:06:32.176 00:00:10.367 TCP 23.104.0.1:53134 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:06:48.461 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45384 10 6452 1 2025-08-28 04:02:19.340 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 04:07:32.581 00:00:10.361 TCP 23.104.0.1:37292 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:07:48.668 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55422 10 6452 1 2025-08-28 04:03:19.342 00:06:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 04:08:32.981 00:00:10.369 TCP 23.104.0.1:35196 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:08:48.877 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50750 10 6452 1 2025-08-28 04:09:33.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:09:33.230 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:09:33.387 00:00:10.359 TCP 23.104.0.1:44762 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:09:49.101 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39768 10 6452 1 2025-08-28 04:10:33.784 00:00:10.365 TCP 23.104.0.1:47334 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:10:49.321 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51518 10 6452 1 2025-08-28 04:11:34.194 00:00:10.369 TCP 23.104.0.1:51244 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:11:49.504 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54424 10 6452 1 2025-08-28 04:12:34.602 00:00:10.381 TCP 23.104.0.1:48200 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:12:49.719 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48364 10 6452 1 2025-08-28 04:13:35.051 00:00:10.372 TCP 23.104.0.1:58732 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:13:49.928 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56986 10 6452 1 2025-08-28 04:09:19.344 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 04:14:33.418 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:14:33.606 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:14:35.465 00:00:10.364 TCP 23.104.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:14:50.134 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57914 10 6452 1 2025-08-28 04:10:19.347 00:06:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 04:15:35.871 00:00:10.622 TCP 23.104.0.1:37044 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:15:50.341 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:36974 10 6452 1 2025-08-28 04:16:36.531 00:00:10.371 TCP 23.104.0.1:48250 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:16:50.508 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50338 10 6452 1 2025-08-28 04:17:36.943 00:00:10.372 TCP 23.104.0.1:48608 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:17:50.715 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54462 10 6452 1 2025-08-28 04:18:37.356 00:00:10.362 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:18:50.921 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52330 10 6452 1 2025-08-28 04:19:33.822 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:19:33.946 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:19:37.759 00:00:10.331 TCP 23.104.0.1:57160 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:19:51.137 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56702 10 6452 1 2025-08-28 04:20:38.122 00:00:10.367 TCP 23.104.0.1:45538 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:20:51.353 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51382 10 6452 1 2025-08-28 04:16:19.347 00:06:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 04:21:38.529 00:00:10.363 TCP 23.104.0.1:50536 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:21:51.565 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58348 10 6452 1 2025-08-28 04:17:19.349 00:06:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 04:22:38.927 00:00:10.370 TCP 23.104.0.1:60354 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:22:51.783 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36736 10 6452 1 2025-08-28 04:23:39.339 00:00:10.369 TCP 23.104.0.1:58844 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:23:52.008 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41750 10 6452 1 2025-08-28 04:24:33.643 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:24:33.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:24:39.747 00:00:10.393 TCP 23.104.0.1:35208 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:24:52.233 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55674 10 6452 1 2025-08-28 04:25:40.181 00:00:10.379 TCP 23.104.0.1:49182 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:25:52.453 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39808 10 6452 1 2025-08-28 04:26:40.608 00:00:10.325 TCP 23.104.0.1:55516 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:26:52.687 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45070 10 6452 1 2025-08-28 04:27:40.975 00:00:10.371 TCP 23.104.0.1:46950 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:27:52.901 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54298 10 6452 1 2025-08-28 04:23:19.347 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 04:28:41.393 00:00:10.358 TCP 23.104.0.1:38514 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:28:53.119 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50492 10 6452 1 2025-08-28 04:24:19.350 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 04:29:33.679 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:29:33.743 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:29:41.788 00:00:10.364 TCP 23.104.0.1:53282 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:29:53.334 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41124 10 6452 1 2025-08-28 04:30:42.205 00:00:10.365 TCP 23.104.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:30:53.547 00:00:10.521 TCP 1.101.0.1:3000 -> 22.102.0.1:41794 10 6452 1 2025-08-28 04:31:42.612 00:00:10.360 TCP 23.104.0.1:42400 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:31:54.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57810 10 6452 1 2025-08-28 04:32:43.009 00:00:10.325 TCP 23.104.0.1:51384 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:32:54.318 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60322 10 6452 1 2025-08-28 04:33:43.373 00:00:10.364 TCP 23.104.0.1:40216 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:33:54.532 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:46846 10 6452 1 2025-08-28 04:34:33.813 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:34:33.683 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:34:43.775 00:00:10.326 TCP 23.104.0.1:33566 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:34:54.717 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44838 10 6452 1 2025-08-28 04:30:19.350 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 04:35:44.153 00:00:10.370 TCP 23.104.0.1:58710 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:35:54.893 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46552 10 6452 1 2025-08-28 04:31:19.353 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 04:36:44.566 00:00:10.362 TCP 23.104.0.1:44580 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:36:55.119 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:59222 10 6452 1 2025-08-28 04:37:44.969 00:00:10.337 TCP 23.104.0.1:52378 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:37:55.304 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41146 10 6452 1 2025-08-28 04:38:45.341 00:00:10.321 TCP 23.104.0.1:45130 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:38:55.479 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48082 10 6452 1 2025-08-28 04:39:33.830 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:39:33.983 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:39:45.703 00:00:10.376 TCP 23.104.0.1:40348 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:39:55.697 00:00:10.309 TCP 1.101.0.1:3000 -> 22.102.0.1:33172 10 6452 1 2025-08-28 04:40:46.113 00:00:10.365 TCP 23.104.0.1:37234 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:40:56.071 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-08-28 04:41:46.517 00:00:10.374 TCP 23.104.0.1:58076 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:41:56.278 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36002 10 6452 1 2025-08-28 04:37:19.353 00:06:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 04:42:46.922 00:00:10.342 TCP 23.104.0.1:59516 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:42:56.496 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41558 10 6452 1 2025-08-28 04:38:19.357 00:06:00.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 04:43:47.324 00:00:10.323 TCP 23.104.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:43:56.723 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54232 10 6452 1 2025-08-28 04:44:34.081 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:44:34.162 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:44:47.685 00:00:10.367 TCP 23.104.0.1:35272 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:44:56.942 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36458 10 6452 1 2025-08-28 04:45:48.103 00:00:10.329 TCP 23.104.0.1:35700 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:45:57.181 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53656 10 6452 1 2025-08-28 04:46:48.467 00:00:10.323 TCP 23.104.0.1:51378 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:46:57.405 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42388 10 6452 1 2025-08-28 04:47:48.827 00:00:10.397 TCP 23.104.0.1:51150 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:47:57.629 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40920 10 6452 1 2025-08-28 04:48:49.263 00:00:10.326 TCP 23.104.0.1:59610 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:48:57.840 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49704 10 6452 1 2025-08-28 04:44:19.357 00:06:00.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 04:49:34.061 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:49:34.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:49:49.624 00:00:10.364 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:49:58.074 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52252 10 6452 1 2025-08-28 04:45:19.359 00:06:00.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 04:50:50.027 00:00:10.325 TCP 23.104.0.1:58816 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:50:58.253 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50550 10 6452 1 2025-08-28 04:51:50.392 00:00:10.368 TCP 23.104.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:51:58.465 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57254 10 6452 1 2025-08-28 04:52:50.799 00:00:10.345 TCP 23.104.0.1:49708 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:52:58.675 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54092 10 6452 1 2025-08-28 04:53:51.183 00:00:10.326 TCP 23.104.0.1:35324 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:53:58.889 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48620 10 6452 1 2025-08-28 04:54:34.537 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 04:54:34.435 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 04:54:51.550 00:00:10.361 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:54:59.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35226 10 6452 1 2025-08-28 04:55:51.949 00:00:10.375 TCP 23.104.0.1:41176 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:55:59.319 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51638 10 6452 1 2025-08-28 04:51:19.359 00:06:00.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 04:56:52.360 00:00:10.327 TCP 23.104.0.1:52328 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:56:59.536 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33394 10 6452 1 2025-08-28 04:52:19.361 00:06:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 04:57:52.727 00:00:10.382 TCP 23.104.0.1:54644 -> 1.101.0.1:3000 11 1507 1 2025-08-28 04:57:59.711 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:45366 10 6452 1 Summary: total flows: 161, total bytes: 502015, total packets: 1581, avg bps: 1062, avg pps: 0, avg bpp: 317 Time window: 2025-08-28 03:55:19 - 2025-08-28 04:58:19 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0039s User: 0.0010s Wall: 0.0021s flows/second: 77405.2 Runtime: 0.0021s