Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 08:58:48.668 00:00:10.345 TCP 23.104.0.1:37562 -> 1.101.0.1:3000 11 1507 1 2025-10-02 08:59:06.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51706 10 6452 1 2025-10-02 08:59:49.081 00:00:10.369 TCP 23.104.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:00:06.322 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46576 10 6452 1 2025-10-02 08:56:36.524 00:05:01.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 09:00:49.492 00:00:10.365 TCP 23.104.0.1:37308 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:01:06.545 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51690 10 6452 1 2025-10-02 09:01:37.135 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:01:37.206 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 08:57:36.527 00:05:01.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 09:01:49.907 00:00:10.374 TCP 23.104.0.1:37300 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:02:06.715 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43494 10 6452 1 2025-10-02 09:02:50.314 00:00:10.366 TCP 23.104.0.1:51066 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:03:06.933 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:56384 10 6452 1 2025-10-02 09:03:50.718 00:00:10.378 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:04:07.125 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42400 10 6452 1 2025-10-02 09:04:51.150 00:00:10.369 TCP 23.104.0.1:41552 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:05:07.301 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54360 10 6452 1 2025-10-02 09:05:51.557 00:00:10.330 TCP 23.104.0.1:46840 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:06:07.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60692 10 6452 1 2025-10-02 09:06:37.369 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:02:36.525 00:05:01.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 09:06:37.358 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:06:51.923 00:00:10.340 TCP 23.104.0.1:43938 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:07:07.721 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-10-02 09:03:36.528 00:05:01.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 09:07:52.300 00:00:10.362 TCP 23.104.0.1:59678 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:08:07.936 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54412 12 6556 1 2025-10-02 09:08:52.697 00:00:10.363 TCP 23.104.0.1:46758 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:09:08.171 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44272 10 6452 1 2025-10-02 09:09:53.110 00:00:10.364 TCP 23.104.0.1:46108 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:10:08.378 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41540 10 6452 1 2025-10-02 09:10:53.510 00:00:10.362 TCP 23.104.0.1:41244 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:11:08.595 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42320 10 6452 1 2025-10-02 09:11:37.395 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:11:37.901 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:11:53.915 00:00:10.383 TCP 23.104.0.1:36712 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:12:08.810 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52346 10 6452 1 2025-10-02 09:08:36.527 00:05:01.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 09:12:54.335 00:00:10.365 TCP 23.104.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:13:09.028 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35912 10 6452 1 2025-10-02 09:09:36.531 00:05:01.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 09:13:54.750 00:00:10.395 TCP 23.104.0.1:46250 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:14:09.204 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37590 10 6452 1 2025-10-02 09:14:55.176 00:00:10.367 TCP 23.104.0.1:60632 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:15:09.381 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56030 10 6452 1 2025-10-02 09:15:55.580 00:00:10.368 TCP 23.104.0.1:57496 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:16:09.588 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60776 10 6452 1 2025-10-02 09:16:37.574 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:16:37.549 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:16:55.983 00:00:10.334 TCP 23.104.0.1:53414 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:17:09.765 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34628 10 6452 1 2025-10-02 09:17:56.354 00:00:10.364 TCP 23.104.0.1:54964 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:18:09.977 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54122 10 6452 1 2025-10-02 09:14:36.528 00:05:01.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 09:18:56.757 00:00:10.382 TCP 23.104.0.1:49956 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:19:10.230 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56210 10 6452 1 2025-10-02 09:15:36.532 00:05:01.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 09:19:57.173 00:00:10.364 TCP 23.104.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:20:10.439 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56708 10 6452 1 2025-10-02 09:20:57.576 00:00:10.359 TCP 23.104.0.1:49402 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:21:10.659 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35054 10 6452 1 2025-10-02 09:21:38.040 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:21:37.987 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:21:57.974 00:00:10.372 TCP 23.104.0.1:39906 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:22:10.874 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55380 10 6452 1 2025-10-02 09:22:58.382 00:00:10.363 TCP 23.104.0.1:40836 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:23:11.107 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41694 10 6452 1 2025-10-02 09:23:58.783 00:00:10.366 TCP 23.104.0.1:56040 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:24:11.317 00:00:10.611 TCP 1.101.0.1:3000 -> 22.102.0.1:47418 10 6452 1 2025-10-02 09:20:36.532 00:05:01.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 09:24:59.186 00:00:10.324 TCP 23.104.0.1:52414 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:25:11.967 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50738 10 6452 1 2025-10-02 09:21:36.534 00:05:01.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 09:25:59.545 00:00:10.359 TCP 23.104.0.1:59190 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:26:12.200 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48368 10 6452 1 2025-10-02 09:26:37.942 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:26:37.896 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:26:59.942 00:00:10.333 TCP 23.104.0.1:35754 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:27:12.416 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45570 10 6452 1 2025-10-02 09:28:00.311 00:00:10.368 TCP 23.104.0.1:36188 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:28:12.627 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46854 10 6452 1 2025-10-02 09:29:00.723 00:00:10.373 TCP 23.104.0.1:47160 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:29:12.850 00:00:10.388 TCP 1.101.0.1:3000 -> 22.102.0.1:37956 10 6452 1 2025-10-02 09:30:01.134 00:00:10.365 TCP 23.104.0.1:46474 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:30:13.276 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43282 10 6452 1 2025-10-02 09:26:36.531 00:05:01.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 09:31:01.538 00:00:10.367 TCP 23.104.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:31:13.493 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39658 10 6452 1 2025-10-02 09:31:37.812 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:31:37.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:27:36.535 00:05:01.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 09:32:01.944 00:00:10.370 TCP 23.104.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:32:13.671 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34112 10 6452 1 2025-10-02 09:33:02.355 00:00:10.366 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:33:13.886 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54376 10 6452 1 2025-10-02 09:34:02.755 00:00:10.330 TCP 23.104.0.1:44090 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:34:14.106 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58112 10 6452 1 2025-10-02 09:35:03.125 00:00:10.360 TCP 23.104.0.1:51380 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:35:14.275 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37772 10 6452 1 2025-10-02 09:36:03.524 00:00:10.321 TCP 23.104.0.1:35004 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:36:14.504 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53438 10 6452 1 2025-10-02 09:36:38.081 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:36:37.710 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:32:36.533 00:05:01.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 09:37:03.885 00:00:10.384 TCP 23.104.0.1:47620 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:37:14.716 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59254 10 6452 1 2025-10-02 09:33:36.536 00:05:01.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 09:38:04.314 00:00:10.366 TCP 23.104.0.1:36090 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:38:14.929 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:50382 10 6452 1 2025-10-02 09:39:04.722 00:00:10.382 TCP 23.104.0.1:52970 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:39:15.167 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60126 10 6452 1 2025-10-02 09:40:05.151 00:00:10.364 TCP 23.104.0.1:37704 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:40:15.379 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50418 10 6452 1 2025-10-02 09:41:05.556 00:00:10.363 TCP 23.104.0.1:49364 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:41:15.591 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34898 10 6452 1 2025-10-02 09:41:37.865 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:41:37.889 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:42:05.958 00:00:10.373 TCP 23.104.0.1:38468 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:42:15.804 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40646 10 6452 1 2025-10-02 09:38:36.535 00:05:01.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 09:43:06.368 00:00:10.954 TCP 23.104.0.1:37912 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:43:16.038 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39484 10 6452 1 2025-10-02 09:39:36.538 00:05:01.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 09:44:07.361 00:00:10.366 TCP 23.104.0.1:60618 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:44:16.215 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-10-02 09:45:07.764 00:00:10.332 TCP 23.104.0.1:45448 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:45:16.387 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48192 10 6452 1 2025-10-02 09:46:08.137 00:00:10.326 TCP 23.104.0.1:53572 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:46:16.561 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37288 10 6452 1 2025-10-02 09:46:38.234 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:46:38.259 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:47:08.505 00:00:10.751 TCP 23.104.0.1:59994 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:47:16.736 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49482 10 6452 1 2025-10-02 09:48:09.298 00:00:11.027 TCP 23.104.0.1:57132 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:48:16.913 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54924 10 6452 1 2025-10-02 09:44:36.537 00:05:01.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 09:49:10.363 00:00:10.658 TCP 23.104.0.1:43308 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:49:17.123 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60404 10 6452 1 2025-10-02 09:45:36.539 00:05:01.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 09:50:11.060 00:00:10.360 TCP 23.104.0.1:52726 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:50:17.338 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55876 10 6452 1 2025-10-02 09:51:11.458 00:00:10.321 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:51:17.555 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59394 10 6452 1 2025-10-02 09:51:38.280 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:51:38.321 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:52:11.816 00:00:11.039 TCP 23.104.0.1:47248 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:52:17.729 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52110 10 6452 1 2025-10-02 09:53:12.894 00:00:10.371 TCP 23.104.0.1:50674 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:53:17.937 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43260 10 6452 1 2025-10-02 09:54:13.305 00:00:10.367 TCP 23.104.0.1:55794 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:54:18.174 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60546 10 6452 1 2025-10-02 09:50:36.539 00:05:01.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 09:55:13.710 00:00:10.325 TCP 23.104.0.1:43974 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:55:18.383 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57130 10 6452 1 2025-10-02 09:51:36.541 00:05:01.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 09:56:14.101 00:00:10.361 TCP 23.104.0.1:50272 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:56:18.590 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45404 10 6452 1 2025-10-02 09:56:38.417 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:56:38.793 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 09:57:14.508 00:00:10.365 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:57:18.800 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43164 10 6452 1 2025-10-02 09:58:14.911 00:00:10.360 TCP 23.104.0.1:43540 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:58:18.969 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1074, avg pps: 0, avg bpp: 316 Time window: 2025-10-02 08:56:36 - 2025-10-02 09:58:29 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0010s Wall: 0.0016s flows/second: 104523.0 Runtime: 0.0016s