Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 16:59:02.768 00:00:10.376 TCP 23.104.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-10-05 16:59:05.405 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38894 10 6452 1 2025-10-05 17:00:03.185 00:00:10.410 TCP 23.104.0.1:33552 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:00:05.621 00:00:22.813 TCP 1.101.0.1:3000 -> 22.102.0.1:34448 10 6452 1 2025-10-05 16:56:38.121 00:05:01.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 17:01:03.635 00:00:10.364 TCP 23.104.0.1:58502 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:01:18.487 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53702 10 6452 1 2025-10-05 16:57:38.124 00:05:01.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 17:02:04.035 00:00:10.363 TCP 23.104.0.1:52960 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:02:18.697 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54370 10 6452 1 2025-10-05 17:03:13.489 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:03:13.519 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:03:04.444 00:00:10.369 TCP 23.104.0.1:53384 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:03:18.904 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54348 10 6452 1 2025-10-05 17:04:04.854 00:00:10.391 TCP 23.104.0.1:56966 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:04:19.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35876 10 6452 1 2025-10-05 17:05:05.288 00:00:10.367 TCP 23.104.0.1:39400 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:05:19.329 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54174 10 6452 1 2025-10-05 17:06:05.692 00:00:10.326 TCP 23.104.0.1:55678 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:06:19.505 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60130 10 6452 1 2025-10-05 17:02:38.124 00:05:01.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 17:07:06.067 00:00:10.839 TCP 23.104.0.1:51634 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:07:19.726 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49776 10 6452 1 2025-10-05 17:03:38.126 00:05:01.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 17:08:13.731 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:08:13.732 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:08:06.964 00:00:10.373 TCP 23.104.0.1:46824 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:08:19.954 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:51662 12 6556 1 2025-10-05 17:09:07.375 00:00:10.677 TCP 23.104.0.1:52228 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:09:20.195 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:52182 10 6452 1 2025-10-05 17:10:08.106 00:00:10.361 TCP 23.104.0.1:46904 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:10:20.377 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39940 10 6452 1 2025-10-05 17:11:08.507 00:00:10.362 TCP 23.104.0.1:38426 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:11:20.589 00:00:10.416 TCP 1.101.0.1:3000 -> 22.102.0.1:48946 10 6452 1 2025-10-05 17:12:08.909 00:00:10.366 TCP 23.104.0.1:52308 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:12:21.070 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42458 10 6452 1 2025-10-05 17:08:38.125 00:05:01.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 17:13:13.905 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:13:13.775 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:13:09.324 00:00:10.330 TCP 23.104.0.1:50424 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:13:21.285 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38212 10 6452 1 2025-10-05 17:09:38.128 00:05:01.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 17:14:09.705 00:00:10.371 TCP 23.104.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:14:21.472 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55490 10 6452 1 2025-10-05 17:15:10.119 00:00:10.368 TCP 23.104.0.1:41332 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:15:21.687 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56864 10 6452 1 2025-10-05 17:16:10.523 00:00:10.367 TCP 23.104.0.1:38930 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:16:21.899 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:50128 10 6452 1 2025-10-05 17:17:10.924 00:00:10.389 TCP 23.104.0.1:33746 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:17:22.088 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41398 10 6452 1 2025-10-05 17:18:13.866 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:18:13.799 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:18:11.353 00:00:10.364 TCP 23.104.0.1:42320 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:18:22.304 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46476 10 6452 1 2025-10-05 17:14:38.125 00:05:01.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 17:19:11.755 00:00:10.374 TCP 23.104.0.1:47760 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:19:22.521 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34206 10 6452 1 2025-10-05 17:15:38.128 00:05:01.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 17:20:12.163 00:00:10.365 TCP 23.104.0.1:51946 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:20:22.737 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42148 10 6452 1 2025-10-05 17:21:12.569 00:00:10.362 TCP 23.104.0.1:38708 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:21:22.951 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51600 10 6452 1 2025-10-05 17:22:12.968 00:00:10.370 TCP 23.104.0.1:49946 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:22:23.130 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47936 10 6452 1 2025-10-05 17:23:14.017 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:23:14.079 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:23:13.375 00:00:10.362 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:23:23.344 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34730 10 6452 1 2025-10-05 17:24:13.774 00:00:10.367 TCP 23.104.0.1:56198 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:24:23.518 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36914 10 6452 1 2025-10-05 17:20:38.128 00:05:01.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 17:25:14.181 00:00:10.368 TCP 23.104.0.1:35784 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:25:23.702 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47710 10 6452 1 2025-10-05 17:21:38.131 00:05:01.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 17:26:14.581 00:00:10.329 TCP 23.104.0.1:48308 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:26:23.924 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:46198 10 6452 1 2025-10-05 17:27:14.945 00:00:10.371 TCP 23.104.0.1:58246 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:27:24.183 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51498 10 6452 1 2025-10-05 17:28:14.273 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:28:14.031 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:28:15.350 00:00:10.325 TCP 23.104.0.1:55348 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:28:24.408 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45082 10 6452 1 2025-10-05 17:29:15.712 00:00:10.373 TCP 23.104.0.1:39228 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:29:24.634 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34738 10 6452 1 2025-10-05 17:30:16.123 00:00:10.369 TCP 23.104.0.1:33982 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:30:24.844 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57288 10 6452 1 2025-10-05 17:26:38.129 00:05:01.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 17:31:16.533 00:00:10.324 TCP 23.104.0.1:43290 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:31:25.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35112 10 6452 1 2025-10-05 17:27:38.133 00:05:01.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 17:32:16.895 00:00:10.371 TCP 23.104.0.1:41946 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:32:25.289 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33216 10 6452 1 2025-10-05 17:33:14.219 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:33:14.238 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:33:17.308 00:00:10.367 TCP 23.104.0.1:47884 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:33:25.495 00:00:10.276 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6452 1 2025-10-05 17:34:17.712 00:00:10.372 TCP 23.104.0.1:50916 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:34:25.807 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37142 10 6452 1 2025-10-05 17:35:18.124 00:00:10.379 TCP 23.104.0.1:44220 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:35:25.978 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41676 11 6492 1 2025-10-05 17:36:18.539 00:00:10.337 TCP 23.104.0.1:49036 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:36:26.207 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45846 10 6452 1 2025-10-05 17:32:38.131 00:05:01.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 17:37:18.923 00:00:10.378 TCP 23.104.0.1:52008 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:37:26.426 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56220 10 6452 1 2025-10-05 17:33:38.133 00:05:01.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 17:38:14.186 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:38:14.276 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:38:19.332 00:00:10.365 TCP 23.104.0.1:36860 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:38:26.642 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40954 10 6452 1 2025-10-05 17:39:19.735 00:00:10.364 TCP 23.104.0.1:39586 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:39:26.854 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46438 10 6452 1 2025-10-05 17:40:20.137 00:00:10.368 TCP 23.104.0.1:48646 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:40:27.086 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60200 10 6452 1 2025-10-05 17:41:20.543 00:00:10.366 TCP 23.104.0.1:32814 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:41:27.302 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49658 10 6452 1 2025-10-05 17:42:20.943 00:00:10.326 TCP 23.104.0.1:43576 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:42:27.480 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52694 10 6452 1 2025-10-05 17:38:38.132 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 17:43:14.601 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:43:14.395 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:43:21.307 00:00:10.324 TCP 23.104.0.1:38978 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:39:38.134 00:05:01.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 17:43:27.726 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33822 10 6452 1 2025-10-05 17:44:21.668 00:00:10.365 TCP 23.104.0.1:60778 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:44:27.941 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56560 10 6452 1 2025-10-05 17:45:22.100 00:00:10.366 TCP 23.104.0.1:58050 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:45:28.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47648 10 6452 1 2025-10-05 17:46:22.504 00:00:10.321 TCP 23.104.0.1:39322 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:46:28.390 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42326 10 6452 1 2025-10-05 17:47:22.867 00:00:10.367 TCP 23.104.0.1:59262 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:47:28.601 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47036 10 6452 1 2025-10-05 17:48:14.455 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:48:14.182 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:48:23.273 00:00:10.359 TCP 23.104.0.1:50746 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:44:38.135 00:05:01.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 17:48:28.817 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53468 10 6452 1 2025-10-05 17:49:23.673 00:00:10.370 TCP 23.104.0.1:48202 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:45:38.138 00:05:01.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 17:49:29.071 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60346 10 6452 1 2025-10-05 17:50:24.100 00:00:10.369 TCP 23.104.0.1:49410 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:50:29.281 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38094 10 6452 1 2025-10-05 17:51:24.510 00:00:10.365 TCP 23.104.0.1:53736 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:51:29.455 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44198 10 6452 1 2025-10-05 17:52:24.924 00:00:10.327 TCP 23.104.0.1:56452 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:52:29.669 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48028 10 6452 1 2025-10-05 17:53:14.573 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:53:14.724 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:53:25.296 00:00:10.388 TCP 23.104.0.1:59030 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:53:29.893 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48834 10 6452 1 2025-10-05 17:54:25.717 00:00:10.372 TCP 23.104.0.1:53900 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:54:30.114 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37738 10 6452 1 2025-10-05 17:50:38.136 00:05:01.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 17:55:26.125 00:00:10.330 TCP 23.104.0.1:34880 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:55:30.331 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48798 10 6452 1 2025-10-05 17:51:38.139 00:05:01.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 17:56:26.492 00:00:10.366 TCP 23.104.0.1:59438 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:56:30.558 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60536 10 6452 1 2025-10-05 17:57:30.770 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40608 10 6452 1 2025-10-05 17:57:26.895 00:00:10.373 TCP 23.104.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-10-05 17:58:14.753 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 17:58:14.699 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 17:58:30.986 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:55628 10 6452 1 2025-10-05 17:58:27.308 00:00:10.319 TCP 23.104.0.1:51702 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498492, total packets: 1575, avg bps: 1071, avg pps: 0, avg bpp: 316 Time window: 2025-10-05 16:56:38 - 2025-10-05 17:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0056s User: 0.0000s Wall: 0.0022s flows/second: 74275.5 Runtime: 0.0022s