Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 22:58:45.478 00:00:10.365 TCP 23.104.0.1:40014 -> 1.101.0.1:3000 11 1507 1 2025-09-28 22:58:55.719 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42280 10 6452 1 2025-09-28 22:59:45.882 00:00:10.377 TCP 23.104.0.1:48676 -> 1.101.0.1:3000 11 1507 1 2025-09-28 22:59:58.544 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 22:59:58.597 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 22:59:55.894 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39480 10 6452 1 2025-09-28 22:56:34.970 00:05:01.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 23:00:46.298 00:00:10.367 TCP 23.104.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:00:56.113 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41646 10 6452 1 2025-09-28 22:57:34.972 00:05:01.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 23:01:46.705 00:00:10.368 TCP 23.104.0.1:44298 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:01:56.328 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50790 10 6452 1 2025-09-28 23:02:47.117 00:00:10.319 TCP 23.104.0.1:33478 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:02:56.497 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47418 10 6452 1 2025-09-28 23:03:47.476 00:00:10.370 TCP 23.104.0.1:42050 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:03:56.671 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52218 10 6452 1 2025-09-28 23:04:58.868 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 23:04:47.888 00:00:10.381 TCP 23.104.0.1:48190 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:04:58.910 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 23:04:56.881 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34816 10 6452 1 2025-09-28 23:05:48.312 00:00:10.380 TCP 23.104.0.1:52076 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:05:57.082 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59186 10 6452 1 2025-09-28 23:02:34.973 00:05:01.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 23:06:48.734 00:00:10.368 TCP 23.104.0.1:57888 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:06:57.304 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60520 10 6452 1 2025-09-28 23:03:34.974 00:05:01.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 23:07:49.142 00:00:10.366 TCP 23.104.0.1:49476 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:07:57.525 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51958 10 6452 1 2025-09-28 23:08:49.546 00:00:10.323 TCP 23.104.0.1:58966 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:08:57.742 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37920 10 6452 1 2025-09-28 23:09:49.908 00:00:10.324 TCP 23.104.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:09:58.636 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 23:09:58.757 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 23:09:57.913 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59914 10 6452 1 2025-09-28 23:10:50.274 00:00:10.366 TCP 23.104.0.1:37204 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:10:58.127 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40886 10 6452 1 2025-09-28 23:11:50.682 00:00:10.369 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:11:58.339 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50228 10 6452 1 2025-09-28 23:08:34.973 00:05:01.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 23:12:51.101 00:00:10.364 TCP 23.104.0.1:39320 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:12:58.554 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55106 10 6452 1 2025-09-28 23:09:34.975 00:05:01.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 23:13:51.505 00:00:10.360 TCP 23.104.0.1:51480 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:13:58.780 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:45870 10 6452 1 2025-09-28 23:14:58.823 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 23:14:58.936 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 23:14:51.904 00:00:10.364 TCP 23.104.0.1:39066 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:14:58.950 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:35978 10 6452 1 2025-09-28 23:15:52.306 00:00:10.365 TCP 23.104.0.1:51064 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:15:59.182 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58244 10 6452 1 2025-09-28 23:16:52.707 00:00:10.369 TCP 23.104.0.1:41810 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:16:59.393 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59710 10 6452 1 2025-09-28 23:17:53.109 00:00:10.324 TCP 23.104.0.1:41290 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:17:59.605 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58156 10 6452 1 2025-09-28 23:14:34.975 00:05:01.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 23:18:53.477 00:00:10.358 TCP 23.104.0.1:52120 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:18:59.821 00:00:10.394 TCP 1.101.0.1:3000 -> 22.102.0.1:54780 10 6452 1 2025-09-28 23:15:34.977 00:05:01.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 23:19:58.857 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 23:19:58.938 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 23:19:53.874 00:00:10.364 TCP 23.104.0.1:37604 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:20:00.254 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35480 10 6452 1 2025-09-28 23:20:54.276 00:00:10.338 TCP 23.104.0.1:37822 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:21:00.427 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 10 6452 1 2025-09-28 23:21:54.655 00:00:10.323 TCP 23.104.0.1:51556 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:22:00.609 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42070 10 6452 1 2025-09-28 23:22:55.020 00:00:10.366 TCP 23.104.0.1:44506 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:23:00.824 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44136 10 6452 1 2025-09-28 23:23:55.422 00:00:10.367 TCP 23.104.0.1:52128 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:24:01.073 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50374 10 6452 1 2025-09-28 23:20:34.977 00:05:01.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 23:24:58.778 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 23:24:58.997 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 23:24:55.826 00:00:10.371 TCP 23.104.0.1:50640 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:25:01.290 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54154 10 6452 1 2025-09-28 23:21:34.978 00:05:01.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 23:25:56.230 00:00:10.368 TCP 23.104.0.1:51166 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:26:01.469 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:49104 10 6452 1 2025-09-28 23:26:56.635 00:00:10.373 TCP 23.104.0.1:58454 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:27:01.673 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:54244 10 6452 1 2025-09-28 23:28:01.849 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:37408 10 6452 1 2025-09-28 23:27:57.063 00:00:10.326 TCP 23.104.0.1:57326 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:28:57.431 00:00:10.366 TCP 23.104.0.1:42592 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:29:02.044 00:00:10.807 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6452 1 2025-09-28 23:29:59.167 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 23:29:59.314 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 23:29:57.838 00:00:10.348 TCP 23.104.0.1:38168 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:30:02.892 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 12 6556 1 2025-09-28 23:26:34.977 00:05:01.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 23:30:58.224 00:00:10.365 TCP 23.104.0.1:58980 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:31:03.109 00:00:10.267 TCP 1.101.0.1:3000 -> 22.102.0.1:60214 10 6452 1 2025-09-28 23:27:34.981 00:05:01.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 23:31:58.625 00:00:10.366 TCP 23.104.0.1:53552 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:32:03.416 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38320 10 6452 1 2025-09-28 23:32:59.031 00:00:10.373 TCP 23.104.0.1:54606 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:33:03.587 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47320 10 6452 1 2025-09-28 23:33:59.454 00:00:10.367 TCP 23.104.0.1:46462 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:34:03.760 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58566 10 6452 1 2025-09-28 23:34:59.358 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 23:34:59.102 00:00:00.050 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 23:34:59.869 00:00:10.364 TCP 23.104.0.1:48618 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:35:03.931 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:37776 10 6452 1 2025-09-28 23:36:00.275 00:00:10.705 TCP 23.104.0.1:47902 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:36:04.113 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:43706 10 6452 1 2025-09-28 23:32:34.977 00:05:01.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 23:37:01.018 00:00:10.361 TCP 23.104.0.1:41826 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:37:04.315 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51496 10 6452 1 2025-09-28 23:33:34.981 00:05:01.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 23:38:01.420 00:00:10.366 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:38:04.527 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39926 10 6452 1 2025-09-28 23:39:04.753 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57348 10 6452 1 2025-09-28 23:39:01.824 00:00:10.374 TCP 23.104.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:39:59.473 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 23:39:59.406 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 23:40:04.921 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40844 10 6452 1 2025-09-28 23:40:02.229 00:00:10.323 TCP 23.104.0.1:57024 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:41:05.148 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-09-28 23:41:02.589 00:00:10.378 TCP 23.104.0.1:57528 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:42:05.322 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35414 10 6452 1 2025-09-28 23:42:03.002 00:00:10.361 TCP 23.104.0.1:33968 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:38:34.981 00:05:01.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 23:43:05.530 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56374 10 6452 1 2025-09-28 23:43:03.401 00:00:10.365 TCP 23.104.0.1:32778 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:39:34.984 00:05:01.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 23:44:05.741 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39618 10 6452 1 2025-09-28 23:44:03.806 00:00:10.335 TCP 23.104.0.1:41582 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:44:59.287 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 23:44:59.548 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 23:45:05.950 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49460 10 6452 1 2025-09-28 23:45:04.179 00:00:10.369 TCP 23.104.0.1:51752 -> 1.101.0.1:3000 12 1559 1 2025-09-28 23:46:06.174 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36166 10 6452 1 2025-09-28 23:46:04.584 00:00:10.367 TCP 23.104.0.1:34726 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:47:04.991 00:00:10.372 TCP 23.104.0.1:33946 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:47:06.389 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51276 10 6452 1 2025-09-28 23:48:05.400 00:00:10.369 TCP 23.104.0.1:52506 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:48:06.604 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55846 10 6452 1 2025-09-28 23:44:34.982 00:05:01.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 23:49:05.805 00:00:10.367 TCP 23.104.0.1:42508 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:49:06.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56584 10 6452 1 2025-09-28 23:45:34.985 00:05:01.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 23:49:59.435 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 23:49:59.766 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 23:50:06.208 00:00:10.364 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:50:07.034 00:00:10.686 TCP 1.101.0.1:3000 -> 22.102.0.1:55200 10 6452 1 2025-09-28 23:51:06.609 00:00:10.363 TCP 23.104.0.1:55414 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:51:07.756 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50092 10 6452 1 2025-09-28 23:52:07.925 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46040 10 6452 1 2025-09-28 23:52:07.020 00:00:10.367 TCP 23.104.0.1:59686 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:53:08.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35260 10 6452 1 2025-09-28 23:53:07.426 00:00:10.366 TCP 23.104.0.1:46938 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:54:08.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44052 10 6452 1 2025-09-28 23:54:07.829 00:00:10.386 TCP 23.104.0.1:35140 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:50:34.985 00:05:01.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 23:54:59.571 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 23:54:59.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 23:55:08.554 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48976 10 6452 1 2025-09-28 23:55:08.252 00:00:10.362 TCP 23.104.0.1:35510 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:51:34.987 00:05:01.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 23:56:08.725 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43580 10 6452 1 2025-09-28 23:56:08.653 00:00:10.372 TCP 23.104.0.1:43516 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:57:08.903 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53216 10 6452 1 2025-09-28 23:57:09.090 00:00:10.365 TCP 23.104.0.1:33978 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:58:09.492 00:00:10.370 TCP 23.104.0.1:45654 -> 1.101.0.1:3000 11 1507 1 2025-09-28 23:58:09.122 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:52928 10 6452 1 Summary: total flows: 164, total bytes: 498504, total packets: 1575, avg bps: 1076, avg pps: 0, avg bpp: 316 Time window: 2025-09-28 22:56:34 - 2025-09-28 23:58:19 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0009s Wall: 0.0044s flows/second: 36946.3 Runtime: 0.0045s