Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 08:58:42.175 00:00:10.363 TCP 23.104.0.1:49860 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:59:08.979 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47520 12 6556 1 2025-10-05 08:59:42.572 00:00:10.361 TCP 23.104.0.1:46176 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:00:09.196 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54422 10 6452 1 2025-10-05 08:56:37.896 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 09:00:42.967 00:00:10.380 TCP 23.104.0.1:45732 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:01:09.411 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42128 10 6452 1 2025-10-05 08:57:37.898 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 09:01:43.386 00:00:10.752 TCP 23.104.0.1:42826 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:02:09.629 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43332 10 6452 1 2025-10-05 09:02:44.177 00:00:10.361 TCP 23.104.0.1:60170 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:03:03.968 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:03:03.710 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:03:09.837 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56916 10 6452 1 2025-10-05 09:03:44.577 00:00:10.365 TCP 23.104.0.1:55020 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:04:10.074 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45920 10 6452 1 2025-10-05 09:04:44.993 00:00:10.368 TCP 23.104.0.1:42334 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:05:10.296 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41510 10 6452 1 2025-10-05 09:05:45.395 00:00:10.322 TCP 23.104.0.1:33792 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:06:10.521 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38924 10 6452 1 2025-10-05 09:02:37.897 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 09:06:45.757 00:00:10.384 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:07:10.739 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34248 10 6452 1 2025-10-05 09:03:37.900 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 09:07:46.181 00:00:10.368 TCP 23.104.0.1:37156 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:08:04.129 00:00:00.006 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:08:04.077 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:08:10.951 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:47384 10 6452 1 2025-10-05 09:08:46.591 00:00:10.336 TCP 23.104.0.1:36446 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:09:11.138 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38966 10 6452 1 2025-10-05 09:09:46.968 00:00:10.377 TCP 23.104.0.1:52514 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:10:11.353 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 10 6452 1 2025-10-05 09:10:47.390 00:00:10.592 TCP 23.104.0.1:60702 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:11:11.568 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53702 10 6452 1 2025-10-05 09:11:48.023 00:00:10.364 TCP 23.104.0.1:51704 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:12:11.780 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39390 10 6452 1 2025-10-05 09:08:37.898 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 09:12:48.427 00:00:10.369 TCP 23.104.0.1:59364 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:13:03.943 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:13:04.368 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:13:11.993 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47326 10 6452 1 2025-10-05 09:09:37.902 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 09:13:48.834 00:00:10.346 TCP 23.104.0.1:45886 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:14:12.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56236 10 6452 1 2025-10-05 09:14:49.219 00:00:10.363 TCP 23.104.0.1:38500 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:15:12.426 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48574 10 6452 1 2025-10-05 09:15:49.621 00:00:10.872 TCP 23.104.0.1:54156 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:16:12.604 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:54820 10 6452 1 2025-10-05 09:16:50.531 00:00:10.326 TCP 23.104.0.1:56034 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:17:12.789 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52778 10 6452 1 2025-10-05 09:17:50.899 00:00:10.330 TCP 23.104.0.1:53208 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:18:04.161 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:18:04.313 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:18:12.962 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:56790 12 6556 1 2025-10-05 09:14:37.899 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 09:18:51.278 00:00:10.363 TCP 23.104.0.1:40946 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:19:13.192 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46842 10 6452 1 2025-10-05 09:15:37.902 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 09:19:51.678 00:00:10.373 TCP 23.104.0.1:44008 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:20:13.410 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35464 10 6452 1 2025-10-05 09:20:52.103 00:00:10.363 TCP 23.104.0.1:57950 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:21:13.627 00:00:10.794 TCP 1.101.0.1:3000 -> 22.102.0.1:55774 10 6452 1 2025-10-05 09:21:52.508 00:00:10.370 TCP 23.104.0.1:36440 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:22:14.460 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33892 10 6452 1 2025-10-05 09:23:04.282 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:22:52.914 00:00:10.369 TCP 23.104.0.1:38636 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:23:04.402 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:23:14.664 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:33718 10 6452 1 2025-10-05 09:23:53.321 00:00:10.375 TCP 23.104.0.1:35092 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:24:14.834 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-10-05 09:20:37.900 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 09:24:53.739 00:00:10.402 TCP 23.104.0.1:51348 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:25:15.074 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57878 10 6452 1 2025-10-05 09:21:37.902 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 09:25:54.179 00:00:10.324 TCP 23.104.0.1:47738 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:26:15.284 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57948 10 6452 1 2025-10-05 09:26:54.537 00:00:10.326 TCP 23.104.0.1:49244 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:27:15.497 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52238 10 6452 1 2025-10-05 09:28:04.373 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:27:54.898 00:00:10.373 TCP 23.104.0.1:57974 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:28:04.445 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:28:15.666 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59902 10 6452 1 2025-10-05 09:28:55.310 00:00:10.362 TCP 23.104.0.1:39578 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:29:15.873 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44184 10 6452 1 2025-10-05 09:29:55.710 00:00:10.366 TCP 23.104.0.1:45434 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:30:16.107 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46154 10 6452 1 2025-10-05 09:26:37.907 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 09:30:56.117 00:00:10.364 TCP 23.104.0.1:54038 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:31:16.350 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45232 10 6452 1 2025-10-05 09:27:37.908 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 09:31:56.521 00:00:10.324 TCP 23.104.0.1:34550 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:32:16.565 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52544 10 6452 1 2025-10-05 09:33:04.711 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:33:04.728 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:32:56.883 00:00:10.368 TCP 23.104.0.1:57078 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:33:16.778 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33312 10 6452 1 2025-10-05 09:33:57.288 00:00:10.368 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:34:16.987 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39264 10 6452 1 2025-10-05 09:34:57.699 00:00:10.367 TCP 23.104.0.1:42702 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:35:17.209 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42002 10 6452 1 2025-10-05 09:35:58.107 00:00:10.649 TCP 23.104.0.1:37192 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:36:17.419 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-10-05 09:32:37.908 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 09:36:58.796 00:00:10.330 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:37:17.588 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35354 10 6452 1 2025-10-05 09:33:37.910 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 09:38:04.707 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:38:04.731 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:37:59.163 00:00:10.363 TCP 23.104.0.1:43858 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:38:17.761 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57358 10 6452 1 2025-10-05 09:38:59.564 00:00:10.372 TCP 23.104.0.1:44900 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:39:17.930 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:54140 10 6452 1 2025-10-05 09:39:59.977 00:00:10.366 TCP 23.104.0.1:34032 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:40:18.176 00:00:10.703 TCP 1.101.0.1:3000 -> 22.102.0.1:40908 10 6452 1 2025-10-05 09:41:00.380 00:00:10.370 TCP 23.104.0.1:53154 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:41:18.917 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47642 10 6452 1 2025-10-05 09:42:00.790 00:00:10.362 TCP 23.104.0.1:46446 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:42:19.129 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58838 10 6452 1 2025-10-05 09:38:37.908 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 09:43:04.698 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:43:05.022 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:43:01.209 00:00:10.373 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:43:19.304 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6452 1 2025-10-05 09:39:37.911 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 09:44:01.621 00:00:10.367 TCP 23.104.0.1:51844 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:44:19.520 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33426 10 6452 1 2025-10-05 09:45:02.024 00:00:10.375 TCP 23.104.0.1:43294 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:45:19.730 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36498 10 6452 1 2025-10-05 09:46:02.451 00:00:10.362 TCP 23.104.0.1:40482 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:46:19.946 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55836 10 6452 1 2025-10-05 09:47:02.847 00:00:10.389 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:47:20.183 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37450 10 6452 1 2025-10-05 09:48:04.657 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:48:04.651 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:48:03.272 00:00:10.419 TCP 23.104.0.1:47734 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:48:20.398 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36026 10 6452 1 2025-10-05 09:44:37.911 00:05:02.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 09:49:03.733 00:00:10.372 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:49:20.614 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:47768 10 6452 1 2025-10-05 09:45:37.915 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 09:50:04.139 00:00:10.368 TCP 23.104.0.1:42090 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:50:20.779 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38018 10 6452 1 2025-10-05 09:51:04.545 00:00:10.362 TCP 23.104.0.1:54634 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:51:21.006 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41042 10 6452 1 2025-10-05 09:52:04.945 00:00:10.367 TCP 23.104.0.1:52002 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:52:21.227 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40366 10 6452 1 2025-10-05 09:53:05.011 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:53:04.995 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:53:05.356 00:00:10.365 TCP 23.104.0.1:56432 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:53:21.433 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:42864 12 10375 1 2025-10-05 09:54:05.755 00:00:10.409 TCP 23.104.0.1:45814 -> 1.101.0.1:3000 15 1926 1 2025-10-05 09:54:21.671 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44420 10 6452 1 2025-10-05 09:50:37.914 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 09:55:06.200 00:00:10.368 TCP 23.104.0.1:49316 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:55:21.907 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36004 10 6452 1 2025-10-05 09:51:37.916 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 09:56:06.603 00:00:10.365 TCP 23.104.0.1:44678 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:56:22.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37192 10 6452 1 2025-10-05 09:57:07.007 00:00:10.369 TCP 23.104.0.1:40312 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:57:22.306 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52126 10 6452 1 2025-10-05 09:58:05.232 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 09:58:05.038 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 09:58:07.418 00:00:10.370 TCP 23.104.0.1:46872 -> 1.101.0.1:3000 11 1507 1 2025-10-05 09:58:22.531 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58474 10 6452 1 Summary: total flows: 164, total bytes: 502898, total packets: 1582, avg bps: 1083, avg pps: 0, avg bpp: 317 Time window: 2025-10-05 08:56:37 - 2025-10-05 09:58:32 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0025s flows/second: 65386.5 Runtime: 0.0025s