Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-29 13:58:48.321 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56286 10 6452 1 2025-08-29 13:59:40.457 00:00:10.363 TCP 23.104.0.1:44534 -> 1.101.0.1:3000 11 1507 1 2025-08-29 13:59:48.500 00:00:14.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-08-29 14:00:14.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:00:14.206 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:00:40.864 00:00:10.367 TCP 23.104.0.1:35056 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:00:52.750 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54460 10 6452 1 2025-08-29 14:01:41.270 00:00:10.321 TCP 23.104.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:01:52.958 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:59770 10 6452 1 2025-08-29 13:57:20.495 00:06:00.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 14:02:41.629 00:00:10.363 TCP 23.104.0.1:52198 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:02:53.198 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2025-08-29 14:03:42.033 00:00:10.368 TCP 23.104.0.1:53348 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:03:53.421 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44496 10 6452 1 2025-08-29 13:59:20.492 00:06:00.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 14:04:42.441 00:00:10.372 TCP 23.104.0.1:47410 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:04:53.643 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35962 10 6452 1 2025-08-29 14:05:14.221 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:05:13.872 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:05:42.846 00:00:10.385 TCP 23.104.0.1:34086 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:05:53.852 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36416 10 6452 1 2025-08-29 14:06:43.272 00:00:10.329 TCP 23.104.0.1:52190 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:06:54.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49336 10 6452 1 2025-08-29 14:07:43.633 00:00:10.366 TCP 23.104.0.1:46224 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:07:54.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-08-29 14:08:44.033 00:00:10.325 TCP 23.104.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:08:54.505 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32906 10 6452 1 2025-08-29 14:04:20.494 00:06:00.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 14:09:44.396 00:00:10.363 TCP 23.104.0.1:55290 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:09:54.719 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34334 10 6452 1 2025-08-29 14:10:14.116 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:10:13.973 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:10:44.802 00:00:10.361 TCP 23.104.0.1:47002 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:10:54.893 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55742 10 6452 1 2025-08-29 14:06:20.492 00:06:00.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 14:11:45.210 00:00:10.366 TCP 23.104.0.1:38498 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:11:55.113 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40868 10 6452 1 2025-08-29 14:12:45.612 00:00:10.363 TCP 23.104.0.1:33802 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:12:55.333 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36484 10 6452 1 2025-08-29 14:13:46.013 00:00:10.360 TCP 23.104.0.1:38382 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:13:55.546 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56526 10 6452 1 2025-08-29 14:14:46.414 00:00:10.369 TCP 23.104.0.1:40848 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:14:55.718 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59288 10 6452 1 2025-08-29 14:15:14.265 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:15:14.566 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:15:46.818 00:00:10.334 TCP 23.104.0.1:53440 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:15:55.937 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:51604 10 6452 1 2025-08-29 14:11:20.496 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 14:16:47.187 00:00:10.329 TCP 23.104.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:16:56.182 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45634 10 6452 1 2025-08-29 14:17:47.555 00:00:10.324 TCP 23.104.0.1:59020 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:17:56.395 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33186 10 6452 1 2025-08-29 14:13:20.496 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 14:18:47.920 00:00:10.386 TCP 23.104.0.1:47416 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:18:56.620 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37318 10 6452 1 2025-08-29 14:19:48.347 00:00:10.362 TCP 23.104.0.1:54412 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:19:56.842 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41890 10 6452 1 2025-08-29 14:20:14.577 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:20:14.352 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:20:48.748 00:00:10.375 TCP 23.104.0.1:41658 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:20:57.081 00:00:10.346 TCP 1.101.0.1:3000 -> 22.102.0.1:41080 10 6452 1 2025-08-29 14:21:49.163 00:00:10.365 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:21:57.469 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53808 10 6452 1 2025-08-29 14:22:49.566 00:00:10.367 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:22:57.647 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57010 10 6452 1 2025-08-29 14:18:20.499 00:06:00.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 14:23:49.972 00:00:10.366 TCP 23.104.0.1:56756 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:23:57.855 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37780 10 6452 1 2025-08-29 14:24:50.375 00:00:10.366 TCP 23.104.0.1:45982 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:24:58.089 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:50566 10 6452 1 2025-08-29 14:25:14.415 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:25:14.293 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:20:20.499 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 14:25:50.790 00:00:10.366 TCP 23.104.0.1:46412 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:25:58.323 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46146 10 6452 1 2025-08-29 14:26:51.202 00:00:10.446 TCP 23.104.0.1:52716 -> 1.101.0.1:3000 15 1926 1 2025-08-29 14:26:58.544 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54586 12 10367 1 2025-08-29 14:27:51.697 00:00:10.364 TCP 23.104.0.1:53458 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:27:58.774 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33098 10 6452 1 2025-08-29 14:28:52.106 00:00:10.326 TCP 23.104.0.1:54276 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:28:58.987 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58632 10 6452 1 2025-08-29 14:29:52.475 00:00:10.364 TCP 23.104.0.1:34974 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:29:59.235 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38114 10 6452 1 2025-08-29 14:30:14.816 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:30:14.720 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:25:20.503 00:06:00.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 14:30:52.884 00:00:10.393 TCP 23.104.0.1:57410 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:30:59.461 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37640 10 6452 1 2025-08-29 14:31:53.312 00:00:10.365 TCP 23.104.0.1:53382 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:31:59.671 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33118 10 6452 1 2025-08-29 14:27:20.501 00:06:00.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 14:32:53.719 00:00:10.371 TCP 23.104.0.1:56488 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:32:59.858 00:00:10.367 TCP 1.101.0.1:3000 -> 22.102.0.1:55326 10 6452 1 2025-08-29 14:33:54.128 00:00:10.377 TCP 23.104.0.1:34510 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:34:00.265 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48164 10 6452 1 2025-08-29 14:34:54.541 00:00:10.362 TCP 23.104.0.1:42892 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:35:00.495 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50982 10 6452 1 2025-08-29 14:35:14.942 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:35:14.884 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:35:54.947 00:00:10.377 TCP 23.104.0.1:59056 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:36:00.709 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37488 10 6452 1 2025-08-29 14:36:55.356 00:00:10.367 TCP 23.104.0.1:56186 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:37:00.932 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:59224 10 6452 1 2025-08-29 14:32:20.514 00:06:00.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 14:37:55.764 00:00:10.373 TCP 23.104.0.1:46012 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:38:01.139 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34366 10 6452 1 2025-08-29 14:38:56.177 00:00:10.368 TCP 23.104.0.1:44168 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:39:01.351 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52656 10 6452 1 2025-08-29 14:34:20.513 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 14:39:56.580 00:00:10.323 TCP 23.104.0.1:50966 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:40:01.574 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46978 10 6452 1 2025-08-29 14:40:14.982 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:40:15.036 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:40:56.942 00:00:10.368 TCP 23.104.0.1:49924 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:41:01.750 00:00:10.578 TCP 1.101.0.1:3000 -> 22.102.0.1:42808 10 6452 1 2025-08-29 14:41:57.349 00:00:10.364 TCP 23.104.0.1:56246 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:42:02.370 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43318 10 6452 1 2025-08-29 14:42:57.756 00:00:10.374 TCP 23.104.0.1:46028 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:43:02.597 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53608 10 6452 1 2025-08-29 14:43:58.173 00:00:10.360 TCP 23.104.0.1:37966 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:44:02.815 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54500 10 6452 1 2025-08-29 14:39:20.518 00:06:00.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 14:44:58.571 00:00:10.365 TCP 23.104.0.1:59444 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:45:15.089 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:45:15.030 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:45:03.044 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:32902 10 6452 1 2025-08-29 14:45:58.976 00:00:10.373 TCP 23.104.0.1:53120 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:46:03.249 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52788 10 6452 1 2025-08-29 14:41:20.516 00:06:00.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 14:46:59.395 00:00:10.362 TCP 23.104.0.1:40532 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:47:03.457 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58684 10 6452 1 2025-08-29 14:47:59.799 00:00:10.369 TCP 23.104.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:48:03.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39440 10 6452 1 2025-08-29 14:49:00.207 00:00:10.372 TCP 23.104.0.1:58726 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:49:03.885 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45372 10 6452 1 2025-08-29 14:50:00.618 00:00:10.361 TCP 23.104.0.1:54214 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:50:15.184 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:50:04.104 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38348 10 6452 1 2025-08-29 14:50:15.138 00:00:00.011 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:51:01.018 00:00:10.359 TCP 23.104.0.1:55108 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:51:04.319 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54414 10 6452 1 2025-08-29 14:46:20.516 00:06:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 14:52:01.414 00:00:10.366 TCP 23.104.0.1:50114 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:52:04.489 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-08-29 14:53:01.825 00:00:10.373 TCP 23.104.0.1:53392 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:53:04.668 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57876 10 6452 1 2025-08-29 14:48:20.515 00:06:00.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 14:54:02.238 00:00:10.370 TCP 23.104.0.1:36710 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:54:04.835 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48104 10 6452 1 2025-08-29 14:55:05.063 00:00:10.553 TCP 1.101.0.1:3000 -> 22.102.0.1:50728 10 6452 1 2025-08-29 14:55:15.167 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 14:55:15.234 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 14:55:02.660 00:00:10.352 TCP 23.104.0.1:50552 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:56:03.060 00:00:10.366 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:56:05.659 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33160 10 6452 1 2025-08-29 14:57:05.869 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:46042 10 6452 1 2025-08-29 14:57:03.462 00:00:10.325 TCP 23.104.0.1:60390 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:58:03.833 00:00:10.383 TCP 23.104.0.1:43932 -> 1.101.0.1:3000 11 1507 1 2025-08-29 14:58:06.122 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35736 10 6452 1 2025-08-29 14:53:20.518 00:06:00.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 Summary: total flows: 160, total bytes: 501052, total packets: 1565, avg bps: 1077, avg pps: 0, avg bpp: 320 Time window: 2025-08-29 13:57:20 - 2025-08-29 14:59:20 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0033s User: 0.0017s Wall: 0.0032s flows/second: 50697.9 Runtime: 0.0032s