Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-09 22:58:43.056 00:00:10.335 TCP 23.104.0.1:51422 -> 1.101.0.1:3000 11 1507 1 2025-09-09 22:58:55.853 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36160 10 6452 1 2025-09-09 22:59:43.441 00:00:10.326 TCP 23.104.0.1:38500 -> 1.101.0.1:3000 11 1507 1 2025-09-09 22:59:56.086 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-09-09 23:00:50.125 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:00:50.184 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:00:43.805 00:00:10.363 TCP 23.104.0.1:32914 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:00:56.295 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39698 10 6452 1 2025-09-09 22:56:26.083 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-09-09 23:01:44.205 00:00:10.321 TCP 23.104.0.1:49552 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:01:56.515 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42852 10 6452 1 2025-09-09 23:02:44.564 00:00:10.359 TCP 23.104.0.1:35274 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:02:56.731 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44128 10 6452 1 2025-09-09 22:59:26.085 00:04:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-09 23:03:44.975 00:00:10.348 TCP 23.104.0.1:45708 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:03:56.902 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:34408 10 6452 1 2025-09-09 23:04:45.359 00:00:10.362 TCP 23.104.0.1:48996 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:04:57.094 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43204 10 6452 1 2025-09-09 23:05:50.057 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:05:49.762 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:05:45.756 00:00:10.375 TCP 23.104.0.1:60640 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:05:57.307 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35058 10 6452 1 2025-09-09 23:06:46.165 00:00:10.365 TCP 23.104.0.1:57116 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:06:57.527 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38292 10 6452 1 2025-09-09 23:02:26.880 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-09-09 23:07:46.570 00:00:10.367 TCP 23.104.0.1:42182 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:07:57.743 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48536 10 6452 1 2025-09-09 23:04:26.087 00:04:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-09 23:08:46.974 00:00:10.367 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:08:57.959 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39728 12 6556 1 2025-09-09 23:09:47.378 00:00:10.363 TCP 23.104.0.1:57196 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:09:58.199 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34072 10 6452 1 2025-09-09 23:10:50.058 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:10:49.934 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:10:47.785 00:00:10.507 TCP 23.104.0.1:35188 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:10:58.414 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53594 10 6452 1 2025-09-09 23:11:48.329 00:00:10.371 TCP 23.104.0.1:57042 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:11:58.630 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6452 1 2025-09-09 23:12:48.744 00:00:10.363 TCP 23.104.0.1:39552 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:12:58.841 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50128 10 6452 1 2025-09-09 23:13:49.147 00:00:10.368 TCP 23.104.0.1:52354 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:13:59.015 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59170 10 6452 1 2025-09-09 23:09:26.097 00:06:00.004 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-09-09 23:09:26.100 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-09-09 23:14:49.554 00:00:10.369 TCP 23.104.0.1:35628 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:14:59.230 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52142 10 6452 1 2025-09-09 23:15:50.305 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:15:50.156 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:15:49.960 00:00:10.320 TCP 23.104.0.1:42226 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:15:59.402 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45534 10 6452 1 2025-09-09 23:16:50.317 00:00:10.326 TCP 23.104.0.1:39194 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:16:59.610 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51454 10 6452 1 2025-09-09 23:15:26.885 00:02:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 5 298 1 2025-09-09 23:17:50.678 00:00:10.374 TCP 23.104.0.1:35802 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:17:59.823 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37904 10 6452 1 2025-09-09 23:18:51.103 00:00:10.364 TCP 23.104.0.1:44504 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:19:00.051 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56922 10 6452 1 2025-09-09 23:19:51.502 00:00:10.858 TCP 23.104.0.1:53198 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:20:00.220 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:49750 10 6452 1 2025-09-09 23:15:26.882 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-09-09 23:20:50.463 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:20:50.310 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:20:52.404 00:00:10.365 TCP 23.104.0.1:59538 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:21:00.392 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44122 10 6452 1 2025-09-09 23:21:52.806 00:00:10.365 TCP 23.104.0.1:40968 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:22:00.606 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47486 10 6452 1 2025-09-09 23:18:26.102 00:04:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-09 23:22:53.208 00:00:10.367 TCP 23.104.0.1:49998 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:23:00.819 00:00:10.418 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-09-09 23:23:53.622 00:00:10.396 TCP 23.104.0.1:40408 -> 1.101.0.1:3000 15 1926 1 2025-09-09 23:24:01.275 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:39242 13 13935 1 2025-09-09 23:24:54.061 00:00:10.369 TCP 23.104.0.1:38606 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:25:01.519 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60024 10 6452 1 2025-09-09 23:22:26.104 00:03:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 8 492 1 2025-09-09 23:25:50.442 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:25:50.541 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:25:54.476 00:00:10.329 TCP 23.104.0.1:54518 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:26:01.736 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35934 10 6452 1 2025-09-09 23:26:54.842 00:00:10.394 TCP 23.104.0.1:50492 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:27:01.948 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38620 10 6452 1 2025-09-09 23:23:26.102 00:04:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-09 23:27:55.272 00:00:10.367 TCP 23.104.0.1:37718 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:28:02.173 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46296 10 6452 1 2025-09-09 23:28:55.687 00:00:10.365 TCP 23.104.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:29:02.387 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35636 10 6452 1 2025-09-09 23:29:56.103 00:00:10.324 TCP 23.104.0.1:47840 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:30:02.562 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51648 10 6452 1 2025-09-09 23:26:26.105 00:04:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-09 23:30:50.730 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:30:50.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:30:56.469 00:00:10.367 TCP 23.104.0.1:60530 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:31:02.773 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41218 10 6452 1 2025-09-09 23:31:56.886 00:00:10.395 TCP 23.104.0.1:47720 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:32:02.985 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46182 10 6452 1 2025-09-09 23:28:26.103 00:04:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-09 23:32:57.319 00:00:10.367 TCP 23.104.0.1:47058 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:33:03.216 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54792 10 6452 1 2025-09-09 23:33:57.722 00:00:10.377 TCP 23.104.0.1:55332 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:34:03.428 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53154 10 6452 1 2025-09-09 23:34:58.139 00:00:10.370 TCP 23.104.0.1:39322 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:35:03.650 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47406 10 6452 1 2025-09-09 23:31:26.107 00:04:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-09 23:35:50.529 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:35:50.723 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:35:58.547 00:00:10.328 TCP 23.104.0.1:45134 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:36:03.865 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39670 10 6452 1 2025-09-09 23:36:58.912 00:00:10.367 TCP 23.104.0.1:60202 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:37:04.098 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56500 10 6452 1 2025-09-09 23:37:59.320 00:00:10.386 TCP 23.104.0.1:34322 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:38:04.322 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33060 10 6452 1 2025-09-09 23:33:26.105 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-09-09 23:38:59.728 00:00:10.414 TCP 23.104.0.1:57996 -> 1.101.0.1:3000 15 1926 1 2025-09-09 23:39:04.501 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:36080 12 10367 1 2025-09-09 23:40:00.181 00:00:10.323 TCP 23.104.0.1:44306 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:40:04.748 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40888 10 6452 1 2025-09-09 23:36:26.108 00:04:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-09 23:40:50.920 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:40:50.607 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:41:00.542 00:00:10.366 TCP 23.104.0.1:58872 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:41:04.965 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45596 10 6452 1 2025-09-09 23:42:00.943 00:00:10.935 TCP 23.104.0.1:36448 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:42:05.144 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39510 10 6452 1 2025-09-09 23:43:01.915 00:00:10.350 TCP 23.104.0.1:45698 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:43:05.357 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59328 10 6452 1 2025-09-09 23:44:02.306 00:00:10.364 TCP 23.104.0.1:53774 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:44:05.570 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49010 10 6452 1 2025-09-09 23:39:26.896 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-09-09 23:45:05.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60044 10 6452 1 2025-09-09 23:45:02.707 00:00:10.325 TCP 23.104.0.1:34926 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:45:51.284 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:45:51.233 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:46:03.098 00:00:10.366 TCP 23.104.0.1:49862 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:46:05.991 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:49382 10 6452 1 2025-09-09 23:41:26.110 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-09-09 23:47:06.175 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44130 10 6452 1 2025-09-09 23:47:03.505 00:00:10.321 TCP 23.104.0.1:39730 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:48:03.865 00:00:10.325 TCP 23.104.0.1:53882 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:48:06.389 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39700 10 6452 1 2025-09-09 23:49:04.230 00:00:10.368 TCP 23.104.0.1:60454 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:49:06.611 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38112 10 6452 1 2025-09-09 23:46:26.110 00:03:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 8 492 1 2025-09-09 23:50:06.786 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41426 10 6452 1 2025-09-09 23:50:04.644 00:00:10.367 TCP 23.104.0.1:39888 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:50:50.922 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:50:51.033 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:51:05.065 00:00:10.358 TCP 23.104.0.1:41662 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:51:07.000 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50510 10 6452 1 2025-09-09 23:52:05.462 00:00:10.371 TCP 23.104.0.1:53244 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:52:07.221 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53272 10 6452 1 2025-09-09 23:47:26.898 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-09-09 23:53:05.871 00:00:10.364 TCP 23.104.0.1:48754 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:53:07.428 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33142 10 6452 1 2025-09-09 23:54:06.275 00:00:10.361 TCP 23.104.0.1:39704 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:54:07.645 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54686 10 6452 1 2025-09-09 23:50:26.110 00:04:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-09 23:55:07.856 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43440 10 6452 1 2025-09-09 23:55:06.674 00:00:10.365 TCP 23.104.0.1:58612 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:55:50.708 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-09 23:55:51.016 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-09 23:56:07.104 00:00:10.365 TCP 23.104.0.1:35772 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:56:08.044 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34468 10 6452 1 2025-09-09 23:57:08.257 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45634 10 6452 1 2025-09-09 23:57:07.506 00:00:10.367 TCP 23.104.0.1:47126 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:58:07.910 00:00:10.322 TCP 23.104.0.1:34550 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:58:08.468 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58128 10 6452 1 Summary: total flows: 165, total bytes: 509950, total packets: 1575, avg bps: 1098, avg pps: 0, avg bpp: 323 Time window: 2025-09-09 22:56:26 - 2025-09-09 23:58:18 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0028s User: 0.0019s Wall: 0.0024s flows/second: 69212.9 Runtime: 0.0024s