Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 19:58:42.030 00:00:10.363 TCP 23.104.0.1:45336 -> 1.101.0.1:3000 11 1507 1 2025-10-03 19:59:13.641 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53664 10 6452 1 2025-10-03 19:59:42.434 00:00:10.327 TCP 23.104.0.1:42718 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:00:13.852 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41266 10 6452 1 2025-10-03 19:56:37.251 00:05:01.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 20:00:42.799 00:00:10.368 TCP 23.104.0.1:37950 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:01:14.035 00:00:10.690 TCP 1.101.0.1:3000 -> 22.102.0.1:40138 10 6452 1 2025-10-03 19:57:37.254 00:05:01.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 20:01:43.203 00:00:10.369 TCP 23.104.0.1:33570 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:02:19.906 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:02:19.819 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:02:14.759 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50474 10 6452 1 2025-10-03 20:02:43.608 00:00:10.370 TCP 23.104.0.1:55456 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:03:14.977 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:41362 13 6608 1 2025-10-03 20:03:44.023 00:00:10.364 TCP 23.104.0.1:38472 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:04:15.226 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56910 10 6452 1 2025-10-03 20:04:44.425 00:00:10.324 TCP 23.104.0.1:36526 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:05:15.450 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55618 10 6452 1 2025-10-03 20:05:44.790 00:00:10.321 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:06:15.666 00:00:10.585 TCP 1.101.0.1:3000 -> 22.102.0.1:45578 10 6452 1 2025-10-03 20:02:37.251 00:05:01.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 20:06:45.152 00:00:10.371 TCP 23.104.0.1:58560 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:07:19.685 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:07:19.612 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:07:16.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34942 10 6452 1 2025-10-03 20:03:37.254 00:05:01.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 20:07:45.556 00:00:10.322 TCP 23.104.0.1:47234 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:08:16.512 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47222 10 6452 1 2025-10-03 20:08:45.919 00:00:10.809 TCP 23.104.0.1:39028 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:09:16.724 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41178 10 6452 1 2025-10-03 20:09:46.763 00:00:10.326 TCP 23.104.0.1:52550 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:10:16.940 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54986 10 6452 1 2025-10-03 20:10:47.142 00:00:10.364 TCP 23.104.0.1:39566 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:11:17.178 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43316 10 6452 1 2025-10-03 20:11:47.547 00:00:10.371 TCP 23.104.0.1:44234 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:12:19.744 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:12:19.757 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:12:17.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37458 10 6452 1 2025-10-03 20:08:37.253 00:05:01.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 20:12:47.969 00:00:10.370 TCP 23.104.0.1:34536 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:13:17.608 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38504 10 6452 1 2025-10-03 20:09:37.254 00:05:01.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 20:13:48.374 00:00:10.361 TCP 23.104.0.1:37302 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:14:17.822 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:44320 10 6452 1 2025-10-03 20:14:48.775 00:00:10.365 TCP 23.104.0.1:55888 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:15:18.005 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52274 10 6452 1 2025-10-03 20:15:49.185 00:00:10.325 TCP 23.104.0.1:48476 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:16:18.223 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36552 10 6452 1 2025-10-03 20:16:49.548 00:00:10.360 TCP 23.104.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:17:19.794 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:17:19.944 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:17:18.446 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50844 10 6452 1 2025-10-03 20:17:49.949 00:00:10.372 TCP 23.104.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:18:18.665 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47864 10 6452 1 2025-10-03 20:14:37.253 00:05:01.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 20:18:50.355 00:00:10.360 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:19:18.879 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39800 10 6452 1 2025-10-03 20:15:37.257 00:05:01.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 20:19:50.753 00:00:10.379 TCP 23.104.0.1:46760 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:20:19.106 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47596 10 6452 1 2025-10-03 20:20:51.174 00:00:10.363 TCP 23.104.0.1:35526 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:21:19.324 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54082 10 6452 1 2025-10-03 20:21:51.575 00:00:10.373 TCP 23.104.0.1:56366 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:22:19.726 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:22:19.892 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:22:19.553 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38778 10 6452 1 2025-10-03 20:22:51.981 00:00:10.329 TCP 23.104.0.1:50040 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:23:19.781 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54262 10 6452 1 2025-10-03 20:23:52.347 00:00:10.370 TCP 23.104.0.1:54580 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:24:20.002 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44782 10 6452 1 2025-10-03 20:20:37.256 00:05:01.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 20:24:52.758 00:00:10.375 TCP 23.104.0.1:59686 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:25:20.218 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55404 10 6452 1 2025-10-03 20:21:37.259 00:05:01.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 20:25:53.172 00:00:10.366 TCP 23.104.0.1:35838 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:26:20.431 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35898 10 6452 1 2025-10-03 20:26:53.579 00:00:10.327 TCP 23.104.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:27:20.267 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:27:20.417 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:27:20.599 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36662 10 6452 1 2025-10-03 20:27:53.946 00:00:10.379 TCP 23.104.0.1:39194 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:28:20.811 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55128 10 6452 1 2025-10-03 20:28:54.374 00:00:10.363 TCP 23.104.0.1:40170 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:29:21.041 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43312 10 6452 1 2025-10-03 20:29:54.778 00:00:10.368 TCP 23.104.0.1:36752 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:30:21.264 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-10-03 20:26:37.258 00:05:01.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 20:30:55.211 00:00:10.323 TCP 23.104.0.1:50912 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:31:21.481 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58350 10 6452 1 2025-10-03 20:27:37.260 00:05:01.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 20:31:55.574 00:00:10.367 TCP 23.104.0.1:41656 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:32:19.954 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:32:20.184 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:32:21.696 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60626 10 6452 1 2025-10-03 20:32:55.985 00:00:10.332 TCP 23.104.0.1:43050 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:33:21.912 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43312 10 6452 1 2025-10-03 20:33:56.362 00:00:10.325 TCP 23.104.0.1:33054 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:34:22.126 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41908 10 6452 1 2025-10-03 20:34:56.724 00:00:10.367 TCP 23.104.0.1:47474 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:35:22.349 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53140 10 6452 1 2025-10-03 20:35:57.130 00:00:10.375 TCP 23.104.0.1:33326 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:36:22.572 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46870 10 6452 1 2025-10-03 20:32:37.258 00:05:01.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 20:36:57.566 00:00:10.414 TCP 23.104.0.1:54446 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:37:20.303 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:37:19.998 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:37:22.784 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33728 10 6452 1 2025-10-03 20:33:37.264 00:05:01.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 20:37:58.022 00:00:11.538 TCP 23.104.0.1:44354 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:38:23.009 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56478 10 6452 1 2025-10-03 20:38:59.593 00:00:10.361 TCP 23.104.0.1:35034 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:39:23.228 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54144 10 6452 1 2025-10-03 20:39:59.992 00:00:10.367 TCP 23.104.0.1:36206 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:40:23.455 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44256 10 6452 1 2025-10-03 20:41:00.398 00:00:10.362 TCP 23.104.0.1:44054 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:41:23.671 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43946 10 6452 1 2025-10-03 20:42:00.800 00:00:10.366 TCP 23.104.0.1:54038 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:42:20.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:42:20.531 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:42:23.892 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:60876 10 6452 1 2025-10-03 20:38:37.262 00:05:01.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 20:43:01.208 00:00:10.366 TCP 23.104.0.1:38006 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:43:24.107 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49742 10 6452 1 2025-10-03 20:39:37.264 00:05:01.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 20:44:01.618 00:00:10.371 TCP 23.104.0.1:59236 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:44:24.321 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37188 10 6452 1 2025-10-03 20:45:02.028 00:00:10.367 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:45:24.546 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45762 10 6452 1 2025-10-03 20:46:02.436 00:00:10.363 TCP 23.104.0.1:34872 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:46:24.757 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46964 10 6452 1 2025-10-03 20:47:20.219 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:47:02.836 00:00:10.388 TCP 23.104.0.1:55974 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:47:20.206 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:47:24.971 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:60706 10 6452 1 2025-10-03 20:48:03.265 00:00:10.365 TCP 23.104.0.1:38404 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:48:25.219 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43092 10 6452 1 2025-10-03 20:44:37.261 00:05:01.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 20:49:03.669 00:00:10.368 TCP 23.104.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:49:25.434 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52264 10 6452 1 2025-10-03 20:45:37.264 00:05:01.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 20:50:04.096 00:00:10.324 TCP 23.104.0.1:52224 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:50:25.651 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49408 10 6452 1 2025-10-03 20:51:04.460 00:00:10.357 TCP 23.104.0.1:34258 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:51:25.829 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56314 10 6452 1 2025-10-03 20:52:04.867 00:00:10.369 TCP 23.104.0.1:38472 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:52:20.628 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:52:20.633 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:52:26.073 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40206 10 6452 1 2025-10-03 20:53:05.271 00:00:10.368 TCP 23.104.0.1:58058 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:53:26.289 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:33766 10 6452 1 2025-10-03 20:54:05.674 00:00:10.325 TCP 23.104.0.1:53094 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:54:26.478 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40764 10 6452 1 2025-10-03 20:50:37.263 00:05:01.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 20:55:06.035 00:00:10.330 TCP 23.104.0.1:53818 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:55:26.694 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58296 10 6452 1 2025-10-03 20:51:37.266 00:05:01.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 20:56:06.406 00:00:10.371 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:56:26.910 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36740 10 6452 1 2025-10-03 20:57:20.604 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 20:57:20.389 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 20:57:06.818 00:00:10.360 TCP 23.104.0.1:44846 -> 1.101.0.1:3000 11 1507 1 2025-10-03 20:57:27.129 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46708 10 6452 1 2025-10-03 20:58:07.213 00:00:10.435 TCP 23.104.0.1:50390 -> 1.101.0.1:3000 15 1926 1 2025-10-03 20:58:27.366 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:57636 12 10375 1 Summary: total flows: 164, total bytes: 502846, total packets: 1581, avg bps: 1081, avg pps: 0, avg bpp: 318 Time window: 2025-10-03 19:56:37 - 2025-10-03 20:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0009s Wall: 0.0029s flows/second: 57065.4 Runtime: 0.0029s