Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 22:59:17.149 00:00:10.365 TCP 23.104.0.1:45672 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:59:36.418 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42956 10 6452 1 2025-08-25 23:00:17.556 00:00:10.365 TCP 23.104.0.1:53042 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:00:36.636 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42286 10 6452 1 2025-08-25 23:01:17.961 00:00:10.367 TCP 23.104.0.1:51132 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:01:36.850 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56544 10 6452 1 2025-08-25 23:02:18.371 00:00:10.332 TCP 23.104.0.1:56666 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:02:37.081 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55478 10 6452 1 2025-08-25 23:03:18.737 00:00:10.331 TCP 23.104.0.1:47506 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:03:28.977 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 23:03:28.973 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:03:37.261 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54134 10 6452 1 2025-08-25 23:04:19.111 00:00:10.364 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:04:37.477 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59910 10 6452 1 2025-08-25 23:00:17.773 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 23:00:17.774 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 23:05:19.520 00:00:10.325 TCP 23.104.0.1:44084 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:05:37.685 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33906 10 6452 1 2025-08-25 23:06:19.888 00:00:10.428 TCP 23.104.0.1:41316 -> 1.101.0.1:3000 15 1926 1 2025-08-25 23:06:37.898 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:39652 12 10367 1 2025-08-25 23:07:20.347 00:00:10.363 TCP 23.104.0.1:43386 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:07:38.140 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45132 10 6452 1 2025-08-25 23:08:29.518 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:08:29.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 23:08:20.749 00:00:10.363 TCP 23.104.0.1:57218 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:08:38.323 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54022 10 6452 1 2025-08-25 23:09:21.156 00:00:10.356 TCP 23.104.0.1:60252 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:09:38.537 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41774 10 6452 1 2025-08-25 23:10:21.549 00:00:10.366 TCP 23.104.0.1:51078 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:10:38.718 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38908 10 6452 1 2025-08-25 23:11:21.954 00:00:10.383 TCP 23.104.0.1:34168 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:11:38.896 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49012 10 6452 1 2025-08-25 23:07:17.784 00:06:00.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 23:07:17.774 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 23:12:22.369 00:00:10.362 TCP 23.104.0.1:54430 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:12:39.119 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34746 10 6452 1 2025-08-25 23:13:29.582 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:13:29.385 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 23:13:22.771 00:00:10.329 TCP 23.104.0.1:59906 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:13:39.325 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33384 10 6452 1 2025-08-25 23:14:23.142 00:00:14.517 TCP 23.104.0.1:51402 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:14:39.546 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57950 10 6452 1 2025-08-25 23:15:27.702 00:00:10.367 TCP 23.104.0.1:37026 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:15:39.761 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49556 10 6452 1 2025-08-25 23:16:28.108 00:00:10.450 TCP 23.104.0.1:47764 -> 1.101.0.1:3000 15 1926 1 2025-08-25 23:16:39.934 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:53900 12 10365 1 2025-08-25 23:17:28.603 00:00:10.326 TCP 23.104.0.1:42576 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:17:40.205 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60966 10 6452 1 2025-08-25 23:18:29.568 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 23:18:29.592 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:18:28.967 00:00:10.385 TCP 23.104.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:18:40.424 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55440 10 6452 1 2025-08-25 23:14:17.777 00:06:00.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 23:14:17.775 00:06:00.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 23:19:29.389 00:00:10.368 TCP 23.104.0.1:41244 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:19:40.644 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57144 10 6452 1 2025-08-25 23:20:29.796 00:00:10.365 TCP 23.104.0.1:54790 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:20:40.865 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52640 10 6452 1 2025-08-25 23:21:30.200 00:00:10.362 TCP 23.104.0.1:42896 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:21:41.096 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:49440 10 6452 1 2025-08-25 23:22:30.601 00:00:10.370 TCP 23.104.0.1:57554 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:22:41.381 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55072 10 6452 1 2025-08-25 23:23:29.467 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 23:23:29.654 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:23:31.011 00:00:10.377 TCP 23.104.0.1:54740 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:23:41.557 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39062 10 6452 1 2025-08-25 23:24:31.429 00:00:10.371 TCP 23.104.0.1:33516 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:24:41.770 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42442 10 6452 1 2025-08-25 23:25:31.838 00:00:10.398 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:25:41.980 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51228 10 6452 1 2025-08-25 23:21:17.780 00:06:00.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 23:21:17.779 00:06:00.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 23:26:32.270 00:00:10.369 TCP 23.104.0.1:37580 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:26:42.210 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42690 10 6452 1 2025-08-25 23:27:32.678 00:00:10.317 TCP 23.104.0.1:55994 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:27:42.377 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34794 10 6452 1 2025-08-25 23:28:30.803 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:28:30.645 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 23:28:33.034 00:00:10.324 TCP 23.104.0.1:56962 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:28:42.588 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 10 6452 1 2025-08-25 23:29:33.398 00:00:10.369 TCP 23.104.0.1:52064 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:29:42.810 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57986 10 6452 1 2025-08-25 23:30:33.801 00:00:10.363 TCP 23.104.0.1:45336 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:30:42.976 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54358 10 6452 1 2025-08-25 23:31:34.205 00:00:10.375 TCP 23.104.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:31:43.201 00:00:10.405 TCP 1.101.0.1:3000 -> 22.102.0.1:42270 10 6452 1 2025-08-25 23:32:34.617 00:00:10.318 TCP 23.104.0.1:35894 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:32:43.645 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52472 10 6452 1 2025-08-25 23:28:17.780 00:06:00.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 23:28:17.783 00:06:00.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 23:33:29.860 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 23:33:29.708 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:33:34.975 00:00:10.367 TCP 23.104.0.1:58646 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:33:43.817 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36226 10 6452 1 2025-08-25 23:34:35.381 00:00:10.324 TCP 23.104.0.1:45076 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:34:43.986 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34406 10 6452 1 2025-08-25 23:35:35.746 00:00:10.325 TCP 23.104.0.1:55382 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:35:44.211 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53642 10 6452 1 2025-08-25 23:36:36.113 00:00:10.381 TCP 23.104.0.1:35072 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:36:44.422 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36720 10 6452 1 2025-08-25 23:37:36.539 00:00:10.366 TCP 23.104.0.1:48412 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:37:44.637 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57590 10 6452 1 2025-08-25 23:38:30.077 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:38:30.372 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 23:38:36.945 00:00:10.643 TCP 23.104.0.1:40656 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:38:44.843 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51150 10 6452 1 2025-08-25 23:39:37.637 00:00:10.368 TCP 23.104.0.1:51606 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:39:45.082 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57728 10 6452 1 2025-08-25 23:35:17.783 00:06:00.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 23:35:17.780 00:06:00.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 23:40:38.053 00:00:10.370 TCP 23.104.0.1:59546 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:40:45.306 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51910 10 6452 1 2025-08-25 23:41:38.460 00:00:10.334 TCP 23.104.0.1:49844 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:41:45.528 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40178 10 6452 1 2025-08-25 23:42:38.829 00:00:10.388 TCP 23.104.0.1:56368 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:42:45.743 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41196 10 6452 1 2025-08-25 23:43:29.871 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 23:43:30.039 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:43:39.254 00:00:10.366 TCP 23.104.0.1:37886 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:43:45.964 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:46136 10 6452 1 2025-08-25 23:44:39.659 00:00:10.325 TCP 23.104.0.1:59778 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:44:46.149 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56702 10 6452 1 2025-08-25 23:45:40.022 00:00:10.363 TCP 23.104.0.1:58052 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:45:46.363 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50952 10 6452 1 2025-08-25 23:46:40.425 00:00:10.368 TCP 23.104.0.1:35182 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:46:46.572 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42614 10 6452 1 2025-08-25 23:42:17.789 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 23:42:17.791 00:06:00.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 23:47:40.833 00:00:10.385 TCP 23.104.0.1:37526 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:47:46.743 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35994 10 6452 1 2025-08-25 23:48:29.907 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 23:48:29.835 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:48:41.257 00:00:10.364 TCP 23.104.0.1:55878 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:48:46.960 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:42124 10 6452 1 2025-08-25 23:49:41.660 00:00:10.324 TCP 23.104.0.1:43010 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:49:47.144 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58834 10 6452 1 2025-08-25 23:50:42.025 00:00:10.367 TCP 23.104.0.1:39418 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:50:47.358 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37192 10 6452 1 2025-08-25 23:51:42.429 00:00:10.330 TCP 23.104.0.1:59276 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:51:47.531 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6452 1 2025-08-25 23:52:42.795 00:00:10.323 TCP 23.104.0.1:43010 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:52:47.748 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35522 10 6452 1 2025-08-25 23:53:30.483 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:53:30.294 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 23:53:43.154 00:00:10.369 TCP 23.104.0.1:54460 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:53:47.974 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:36860 10 6452 1 2025-08-25 23:49:17.791 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 23:49:17.793 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 23:54:43.561 00:00:10.425 TCP 23.104.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:54:48.167 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40802 10 6452 1 2025-08-25 23:55:44.026 00:00:10.366 TCP 23.104.0.1:55146 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:55:48.379 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48910 10 6452 1 2025-08-25 23:56:44.429 00:00:10.359 TCP 23.104.0.1:52360 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:56:48.601 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41178 10 6452 1 2025-08-25 23:57:44.826 00:00:10.367 TCP 23.104.0.1:55224 -> 1.101.0.1:3000 11 1507 1 2025-08-25 23:57:48.820 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35260 10 6452 1 2025-08-25 23:58:30.406 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 23:58:30.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 158, total bytes: 498071, total packets: 1547, avg bps: 1121, avg pps: 0, avg bpp: 321 Time window: 2025-08-25 22:59:17 - 2025-08-25 23:58:30 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0030s User: 0.0015s Wall: 0.0031s flows/second: 50918.2 Runtime: 0.0031s