Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 22:59:23.678 00:00:10.369 TCP 23.104.0.1:48018 -> 1.101.0.1:3000 11 1507 1 2025-09-07 22:59:44.988 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 22:59:45.006 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 22:59:35.926 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60802 10 6452 1 2025-09-07 23:00:24.109 00:00:10.321 TCP 23.104.0.1:34618 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:00:36.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46874 10 6452 1 2025-09-07 22:56:25.139 00:06:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 23:01:24.468 00:00:10.364 TCP 23.104.0.1:41128 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:01:36.349 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54180 10 6452 1 2025-09-07 23:02:24.871 00:00:10.368 TCP 23.104.0.1:41130 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:02:36.561 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33568 10 6452 1 2025-09-07 23:03:25.294 00:00:10.366 TCP 23.104.0.1:56664 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:03:36.778 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58956 10 6452 1 2025-09-07 23:04:25.698 00:00:10.711 TCP 23.104.0.1:56612 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:04:44.827 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:04:44.912 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:04:36.955 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45198 10 6452 1 2025-09-07 23:00:25.142 00:06:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 23:05:26.447 00:00:10.365 TCP 23.104.0.1:57434 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:05:37.177 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38284 10 6452 1 2025-09-07 23:06:26.848 00:00:10.350 TCP 23.104.0.1:50046 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:06:37.353 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 10 6452 1 2025-09-07 23:07:27.235 00:00:10.365 TCP 23.104.0.1:43664 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:07:37.574 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35906 10 6452 1 2025-09-07 23:03:25.142 00:06:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 23:08:27.640 00:00:10.322 TCP 23.104.0.1:54768 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:08:37.793 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57388 10 6452 1 2025-09-07 23:09:28.004 00:00:10.363 TCP 23.104.0.1:43230 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:09:45.216 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:09:44.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:09:38.016 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39208 10 6452 1 2025-09-07 23:10:28.409 00:00:10.384 TCP 23.104.0.1:42080 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:10:38.231 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34984 10 6452 1 2025-09-07 23:11:28.874 00:00:10.368 TCP 23.104.0.1:38018 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:11:38.443 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50278 10 6452 1 2025-09-07 23:07:25.148 00:06:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 23:12:29.286 00:00:10.374 TCP 23.104.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:12:38.662 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59436 10 6452 1 2025-09-07 23:13:29.714 00:00:10.376 TCP 23.104.0.1:56942 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:13:38.876 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35556 10 6452 1 2025-09-07 23:14:30.127 00:00:10.362 TCP 23.104.0.1:41622 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:14:45.256 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:14:45.206 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:14:39.075 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33688 10 6452 1 2025-09-07 23:10:25.147 00:06:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 23:15:30.529 00:00:10.363 TCP 23.104.0.1:57754 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:15:39.285 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42604 10 6452 1 2025-09-07 23:16:30.937 00:00:10.366 TCP 23.104.0.1:49178 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:16:39.501 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6452 1 2025-09-07 23:17:31.350 00:00:10.332 TCP 23.104.0.1:39742 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:17:39.716 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58994 10 6452 1 2025-09-07 23:18:31.725 00:00:10.340 TCP 23.104.0.1:46312 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:18:39.931 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:52298 10 6452 1 2025-09-07 23:14:25.152 00:06:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 23:19:45.210 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:19:45.273 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:19:32.102 00:00:10.325 TCP 23.104.0.1:52840 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:19:40.118 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48714 10 6452 1 2025-09-07 23:20:32.464 00:00:10.360 TCP 23.104.0.1:57508 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:20:40.345 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48320 10 6452 1 2025-09-07 23:21:32.884 00:00:10.382 TCP 23.104.0.1:38072 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:21:40.557 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6452 1 2025-09-07 23:17:25.149 00:06:00.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 23:22:33.305 00:00:10.321 TCP 23.104.0.1:45852 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:22:40.779 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45178 10 6452 1 2025-09-07 23:23:33.667 00:00:10.359 TCP 23.104.0.1:48892 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:23:40.989 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48924 10 6452 1 2025-09-07 23:24:45.409 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:24:34.090 00:00:10.369 TCP 23.104.0.1:53648 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:24:45.366 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:24:41.213 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44310 10 6452 1 2025-09-07 23:25:34.498 00:00:10.364 TCP 23.104.0.1:41274 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:25:41.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53996 10 6452 1 2025-09-07 23:21:25.154 00:06:00.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 23:26:34.896 00:00:10.370 TCP 23.104.0.1:35658 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:26:41.648 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43544 10 6452 1 2025-09-07 23:27:35.301 00:00:10.367 TCP 23.104.0.1:34124 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:27:41.862 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42736 10 6452 1 2025-09-07 23:28:35.704 00:00:10.340 TCP 23.104.0.1:36530 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:28:42.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43974 10 6452 1 2025-09-07 23:24:25.151 00:06:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 23:29:45.131 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:29:36.106 00:00:10.361 TCP 23.104.0.1:49228 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:29:45.315 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:29:42.294 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44774 10 6452 1 2025-09-07 23:30:36.504 00:00:10.368 TCP 23.104.0.1:58622 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:30:42.466 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59978 10 6452 1 2025-09-07 23:31:36.912 00:00:10.372 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:31:42.642 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53282 10 6452 1 2025-09-07 23:32:37.328 00:00:10.370 TCP 23.104.0.1:44300 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:32:42.825 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40560 10 6452 1 2025-09-07 23:28:25.155 00:06:00.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 23:33:37.743 00:00:10.321 TCP 23.104.0.1:38104 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:33:43.039 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56294 10 6452 1 2025-09-07 23:34:45.568 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:34:45.332 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:34:38.108 00:00:10.336 TCP 23.104.0.1:59216 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:34:43.249 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49964 10 6452 1 2025-09-07 23:35:38.482 00:00:10.365 TCP 23.104.0.1:60604 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:35:43.460 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40464 10 6452 1 2025-09-07 23:31:25.155 00:06:00.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 23:36:38.886 00:00:10.381 TCP 23.104.0.1:48454 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:36:43.670 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39862 10 6452 1 2025-09-07 23:37:39.301 00:00:10.766 TCP 23.104.0.1:60800 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:37:43.840 00:00:10.567 TCP 1.101.0.1:3000 -> 22.102.0.1:59692 10 6452 1 2025-09-07 23:38:40.130 00:00:10.325 TCP 23.104.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:38:44.448 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40064 10 6452 1 2025-09-07 23:39:45.633 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:39:45.614 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:39:40.494 00:00:10.368 TCP 23.104.0.1:48658 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:39:44.660 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38326 10 6452 1 2025-09-07 23:35:25.159 00:06:00.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 23:40:40.900 00:00:10.324 TCP 23.104.0.1:46224 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:40:44.875 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40024 10 6452 1 2025-09-07 23:41:41.272 00:00:10.371 TCP 23.104.0.1:39740 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:41:45.097 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56428 10 6452 1 2025-09-07 23:42:41.678 00:00:10.374 TCP 23.104.0.1:51850 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:42:45.302 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35504 10 6452 1 2025-09-07 23:38:25.155 00:06:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 23:43:45.510 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54470 10 6452 1 2025-09-07 23:43:42.110 00:00:10.364 TCP 23.104.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:44:46.005 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:44:45.724 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:44:45.723 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35076 10 6452 1 2025-09-07 23:44:42.516 00:00:10.376 TCP 23.104.0.1:35780 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:45:45.938 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37838 10 6452 1 2025-09-07 23:45:42.938 00:00:10.384 TCP 23.104.0.1:34524 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:46:43.356 00:00:10.366 TCP 23.104.0.1:51480 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:46:46.180 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6452 1 2025-09-07 23:42:25.158 00:06:00.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 23:47:43.756 00:00:10.392 TCP 23.104.0.1:57666 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:47:46.354 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52424 10 6452 1 2025-09-07 23:48:46.579 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59934 12 10367 1 2025-09-07 23:48:44.188 00:00:10.445 TCP 23.104.0.1:37084 -> 1.101.0.1:3000 15 1926 1 2025-09-07 23:49:46.017 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:49:46.141 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:49:46.818 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54892 10 6452 1 2025-09-07 23:49:44.672 00:00:10.376 TCP 23.104.0.1:41700 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:45:25.160 00:06:00.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 23:50:45.114 00:00:10.365 TCP 23.104.0.1:36130 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:50:46.987 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:45266 10 6452 1 2025-09-07 23:51:45.518 00:00:10.379 TCP 23.104.0.1:44638 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:51:47.227 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43898 10 6452 1 2025-09-07 23:52:45.937 00:00:10.381 TCP 23.104.0.1:48394 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:52:47.402 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49694 10 6452 1 2025-09-07 23:53:46.358 00:00:10.377 TCP 23.104.0.1:41318 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:53:47.615 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44688 10 6452 1 2025-09-07 23:49:25.164 00:06:00.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 23:54:46.103 00:00:00.050 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:54:45.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:54:47.833 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34614 10 6452 1 2025-09-07 23:54:46.778 00:00:10.736 TCP 23.104.0.1:42602 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:55:47.553 00:00:10.365 TCP 23.104.0.1:50684 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:55:48.065 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47266 10 6452 1 2025-09-07 23:56:48.269 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52640 10 6452 1 2025-09-07 23:56:47.983 00:00:10.369 TCP 23.104.0.1:33486 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:52:25.161 00:06:00.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 23:57:48.485 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51010 10 6452 1 2025-09-07 23:57:48.390 00:00:10.369 TCP 23.104.0.1:43980 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 494600, total packets: 1555, avg bps: 1063, avg pps: 0, avg bpp: 318 Time window: 2025-09-07 22:56:25 - 2025-09-07 23:58:25 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0020s User: 0.0030s Wall: 0.0021s flows/second: 76884.3 Runtime: 0.0021s