Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 22:59:00.351 00:00:10.364 TCP 23.104.0.1:38474 -> 1.101.0.1:3000 11 1507 1 2025-08-09 22:59:08.669 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-08-09 23:00:00.752 00:00:10.336 TCP 23.104.0.1:49384 -> 1.101.0.1:3000 11 1507 1 2025-08-09 22:56:08.851 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 23:00:08.891 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33092 10 6452 1 2025-08-09 23:00:47.046 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:00:47.155 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 22:57:08.854 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 23:01:01.127 00:00:10.367 TCP 23.104.0.1:54128 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:01:09.082 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 11 6504 1 2025-08-09 23:02:01.531 00:00:10.364 TCP 23.104.0.1:48138 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:02:09.356 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57704 10 6452 1 2025-08-09 23:03:01.935 00:00:10.374 TCP 23.104.0.1:42960 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:03:09.567 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36892 10 6452 1 2025-08-09 23:04:02.346 00:00:10.370 TCP 23.104.0.1:36606 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:04:09.742 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42558 10 6452 1 2025-08-09 23:05:02.754 00:00:10.371 TCP 23.104.0.1:34478 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:05:09.958 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 10 6452 1 2025-08-09 23:05:46.887 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 23:05:47.253 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:02:08.853 00:05:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 23:06:03.162 00:00:10.321 TCP 23.104.0.1:52684 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:06:10.177 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33888 10 6452 1 2025-08-09 23:03:08.856 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 23:07:03.522 00:00:10.358 TCP 23.104.0.1:51214 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:07:10.354 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43296 10 6452 1 2025-08-09 23:08:03.921 00:00:10.389 TCP 23.104.0.1:59404 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:08:10.570 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42526 10 6452 1 2025-08-09 23:09:04.352 00:00:10.364 TCP 23.104.0.1:42408 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:09:10.741 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43388 10 6452 1 2025-08-09 23:10:04.757 00:00:10.349 TCP 23.104.0.1:43458 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:10:10.954 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50318 10 6452 1 2025-08-09 23:10:47.439 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 23:10:47.432 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:11:05.153 00:00:10.365 TCP 23.104.0.1:59024 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:11:11.189 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54724 10 6452 1 2025-08-09 23:08:08.855 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 23:12:05.569 00:00:10.373 TCP 23.104.0.1:53404 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:12:11.404 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49910 10 6452 1 2025-08-09 23:09:08.858 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 23:13:05.982 00:00:10.369 TCP 23.104.0.1:36530 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:13:11.577 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34698 10 6452 1 2025-08-09 23:14:06.389 00:00:10.368 TCP 23.104.0.1:34018 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:14:11.748 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48884 10 6452 1 2025-08-09 23:15:06.791 00:00:10.371 TCP 23.104.0.1:59306 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:15:11.963 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53572 10 6452 1 2025-08-09 23:15:47.347 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:15:47.481 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 23:16:07.199 00:00:10.370 TCP 23.104.0.1:46378 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:16:12.147 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 2025-08-09 23:17:07.613 00:00:10.367 TCP 23.104.0.1:35024 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:17:12.381 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44484 10 6452 1 2025-08-09 23:14:08.857 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 23:18:08.021 00:00:10.363 TCP 23.104.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:18:12.552 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47434 10 6452 1 2025-08-09 23:15:08.860 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 23:19:08.422 00:00:10.367 TCP 23.104.0.1:53810 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:19:12.727 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54372 10 6452 1 2025-08-09 23:20:08.823 00:00:10.380 TCP 23.104.0.1:54184 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:20:12.940 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:46038 10 6452 1 2025-08-09 23:20:47.602 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 23:20:47.412 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:21:09.242 00:00:10.338 TCP 23.104.0.1:43216 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:21:13.132 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38176 10 6452 1 2025-08-09 23:22:09.626 00:00:10.365 TCP 23.104.0.1:45986 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:22:13.344 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51846 10 6452 1 2025-08-09 23:23:10.033 00:00:10.423 TCP 23.104.0.1:35954 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:23:13.518 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47684 10 6452 1 2025-08-09 23:20:08.857 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 23:24:10.496 00:00:10.418 TCP 23.104.0.1:36616 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:24:13.733 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41064 10 6452 1 2025-08-09 23:21:08.860 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 23:25:10.957 00:00:10.333 TCP 23.104.0.1:54388 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:25:13.959 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:58648 10 6452 1 2025-08-09 23:25:47.856 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:25:47.544 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 23:26:11.326 00:00:10.361 TCP 23.104.0.1:35920 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:26:14.137 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41150 10 6452 1 2025-08-09 23:27:11.722 00:00:10.372 TCP 23.104.0.1:46188 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:27:14.353 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50428 10 6452 1 2025-08-09 23:28:14.528 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33644 10 6452 1 2025-08-09 23:28:12.131 00:00:10.334 TCP 23.104.0.1:58410 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:29:14.741 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57508 10 6452 1 2025-08-09 23:29:12.498 00:00:10.329 TCP 23.104.0.1:43884 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:26:08.859 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 23:30:12.862 00:00:10.370 TCP 23.104.0.1:60526 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:30:14.914 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60658 10 6452 1 2025-08-09 23:30:47.650 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 23:30:47.829 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:27:08.861 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 23:31:15.105 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39896 10 6452 1 2025-08-09 23:31:13.268 00:00:10.360 TCP 23.104.0.1:46602 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:32:13.664 00:00:10.363 TCP 23.104.0.1:36488 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:32:15.313 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59122 10 6452 1 2025-08-09 23:33:14.095 00:00:10.360 TCP 23.104.0.1:47770 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:33:15.523 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35976 10 6452 1 2025-08-09 23:34:14.497 00:00:10.322 TCP 23.104.0.1:47990 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:34:15.732 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45022 10 6452 1 2025-08-09 23:35:15.907 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52928 10 6452 1 2025-08-09 23:35:14.859 00:00:10.329 TCP 23.104.0.1:56910 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:35:47.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 23:35:47.706 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:32:08.858 00:05:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 23:36:16.117 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52068 10 6452 1 2025-08-09 23:36:15.233 00:00:10.362 TCP 23.104.0.1:39016 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:33:08.862 00:05:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 23:37:16.333 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33578 10 6452 1 2025-08-09 23:37:15.635 00:00:10.383 TCP 23.104.0.1:40642 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:38:16.500 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35836 10 6452 1 2025-08-09 23:38:16.089 00:00:10.363 TCP 23.104.0.1:52468 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:39:16.676 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47612 10 6452 1 2025-08-09 23:39:16.496 00:00:10.372 TCP 23.104.0.1:34946 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:40:16.887 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44814 10 6452 1 2025-08-09 23:40:16.902 00:00:10.374 TCP 23.104.0.1:57950 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:40:48.295 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 23:40:48.260 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:41:17.113 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38184 10 6452 1 2025-08-09 23:41:17.320 00:00:10.388 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:38:08.865 00:05:00.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 23:42:17.745 00:00:10.395 TCP 23.104.0.1:60362 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:42:17.335 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:36466 10 6452 1 2025-08-09 23:39:08.867 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 23:43:17.566 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59428 10 6452 1 2025-08-09 23:43:18.179 00:00:14.186 TCP 23.104.0.1:45190 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:44:17.747 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52984 10 6452 1 2025-08-09 23:44:22.437 00:00:10.324 TCP 23.104.0.1:51442 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:45:17.957 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59032 10 6452 1 2025-08-09 23:45:22.801 00:00:10.370 TCP 23.104.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:45:48.341 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 23:45:48.369 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:46:18.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49116 10 6452 1 2025-08-09 23:46:23.210 00:00:10.383 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:47:18.390 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:51770 11 6504 1 2025-08-09 23:47:23.635 00:00:10.322 TCP 23.104.0.1:37728 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:44:08.866 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 23:48:18.663 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35090 10 6452 1 2025-08-09 23:48:24.001 00:00:10.362 TCP 23.104.0.1:58498 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:45:08.869 00:05:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 23:49:18.879 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 12 10365 1 2025-08-09 23:49:24.401 00:00:10.443 TCP 23.104.0.1:45922 -> 1.101.0.1:3000 15 1926 1 2025-08-09 23:50:19.134 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34028 10 6452 1 2025-08-09 23:50:24.887 00:00:10.379 TCP 23.104.0.1:49902 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:50:47.893 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:50:48.017 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 23:51:19.347 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34112 10 6452 1 2025-08-09 23:51:25.304 00:00:10.325 TCP 23.104.0.1:46026 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:52:19.554 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60940 10 6452 1 2025-08-09 23:52:25.677 00:00:10.373 TCP 23.104.0.1:60024 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:53:19.726 00:00:10.368 TCP 1.101.0.1:3000 -> 22.102.0.1:58534 10 6452 1 2025-08-09 23:53:26.104 00:00:10.363 TCP 23.104.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:50:08.868 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 23:54:20.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-08-09 23:54:26.507 00:00:10.330 TCP 23.104.0.1:39734 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:51:08.872 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 23:55:20.339 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36800 10 6452 1 2025-08-09 23:55:26.871 00:00:10.324 TCP 23.104.0.1:53692 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:55:48.287 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 23:55:48.085 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 23:56:20.547 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:32970 10 6452 1 2025-08-09 23:56:27.232 00:00:10.367 TCP 23.104.0.1:57988 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:57:20.721 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47976 10 6452 1 2025-08-09 23:57:27.636 00:00:10.362 TCP 23.104.0.1:54796 -> 1.101.0.1:3000 11 1507 1 2025-08-09 23:58:20.931 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:45156 10 6452 1 2025-08-09 23:58:28.058 00:00:10.330 TCP 23.104.0.1:45748 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502784, total packets: 1580, avg bps: 1072, avg pps: 0, avg bpp: 318 Time window: 2025-08-09 22:56:08 - 2025-08-09 23:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0009s User: 0.0027s Wall: 0.0018s flows/second: 90164.6 Runtime: 0.0018s