Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 08:58:44.209 00:00:10.327 TCP 23.104.0.1:42870 -> 1.101.0.1:3000 11 1507 1 2025-10-06 08:58:49.279 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:58408 12 10369 1 2025-10-06 08:59:44.577 00:00:10.589 TCP 23.104.0.1:40984 -> 1.101.0.1:3000 15 1926 1 2025-10-06 08:59:49.521 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57702 10 6452 1 2025-10-06 08:56:38.430 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 09:00:45.204 00:00:10.362 TCP 23.104.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:00:49.739 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33468 10 6452 1 2025-10-06 08:57:38.432 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 09:01:45.619 00:00:10.388 TCP 23.104.0.1:51014 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:01:49.917 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42502 10 6452 1 2025-10-06 09:02:46.055 00:00:10.365 TCP 23.104.0.1:37562 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:02:50.129 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37564 10 6452 1 2025-10-06 09:03:32.784 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:03:32.771 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 09:03:46.461 00:00:10.371 TCP 23.104.0.1:36860 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:03:50.341 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43698 10 6452 1 2025-10-06 09:04:50.567 00:00:10.276 TCP 1.101.0.1:3000 -> 22.102.0.1:38662 10 6452 1 2025-10-06 09:04:46.875 00:00:10.372 TCP 23.104.0.1:50336 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:05:47.284 00:00:10.326 TCP 23.104.0.1:36096 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:05:50.889 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54486 10 6452 1 2025-10-06 09:02:38.429 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 09:06:47.645 00:00:10.720 TCP 23.104.0.1:54184 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:06:51.118 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54874 10 6452 1 2025-10-06 09:03:38.432 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 09:07:51.349 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59554 10 6452 1 2025-10-06 09:07:48.402 00:00:10.330 TCP 23.104.0.1:43230 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:08:33.036 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 09:08:32.969 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:08:51.529 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41928 10 6452 1 2025-10-06 09:08:48.759 00:00:10.386 TCP 23.104.0.1:50252 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:09:51.757 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51830 10 6452 1 2025-10-06 09:09:49.182 00:00:10.327 TCP 23.104.0.1:43880 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:10:49.547 00:00:10.362 TCP 23.104.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:10:51.972 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:48970 10 6452 1 2025-10-06 09:11:49.947 00:00:10.380 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:11:52.164 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-10-06 09:08:38.429 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 09:12:50.366 00:00:10.324 TCP 23.104.0.1:41488 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:12:52.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36124 10 6452 1 2025-10-06 09:13:32.958 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:13:32.967 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 09:09:38.434 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 09:13:50.725 00:00:18.291 TCP 23.104.0.1:37334 -> 1.101.0.1:3000 15 1926 1 2025-10-06 09:13:52.601 00:00:16.274 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 12 10375 1 2025-10-06 09:14:59.640 00:00:10.365 TCP 23.104.0.1:43180 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:14:58.914 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56528 10 6452 1 2025-10-06 09:15:59.123 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38242 10 6452 1 2025-10-06 09:16:00.062 00:00:10.507 TCP 23.104.0.1:57612 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:17:00.610 00:00:10.367 TCP 23.104.0.1:39042 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:16:59.354 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57354 10 6452 1 2025-10-06 09:17:59.584 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44710 10 6452 1 2025-10-06 09:18:01.016 00:00:10.369 TCP 23.104.0.1:45834 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:18:33.170 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:18:33.152 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 09:14:38.431 00:05:02.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 09:19:01.420 00:00:10.360 TCP 23.104.0.1:46444 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:18:59.801 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59492 10 6452 1 2025-10-06 09:15:38.434 00:05:02.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 09:20:00.027 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54570 10 6452 1 2025-10-06 09:20:01.822 00:00:10.365 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:21:00.246 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32770 10 6452 1 2025-10-06 09:21:02.226 00:00:10.363 TCP 23.104.0.1:57724 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:22:00.463 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53936 10 6452 1 2025-10-06 09:22:02.627 00:00:10.360 TCP 23.104.0.1:41250 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:23:00.674 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55134 10 6452 1 2025-10-06 09:23:03.027 00:00:10.359 TCP 23.104.0.1:50096 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:23:33.306 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:23:33.224 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 09:24:00.895 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58756 10 6452 1 2025-10-06 09:24:03.421 00:00:10.368 TCP 23.104.0.1:54942 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:20:38.431 00:05:02.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 09:25:01.083 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40800 10 6452 1 2025-10-06 09:25:03.826 00:00:10.363 TCP 23.104.0.1:55088 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:21:38.434 00:05:02.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 09:26:01.307 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45140 10 6452 1 2025-10-06 09:26:04.227 00:00:10.359 TCP 23.104.0.1:45156 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:27:01.524 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33982 10 6452 1 2025-10-06 09:27:04.624 00:00:10.327 TCP 23.104.0.1:34052 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:28:01.732 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42156 10 6452 1 2025-10-06 09:28:04.986 00:00:10.330 TCP 23.104.0.1:58798 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:28:33.373 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:28:33.359 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 09:29:01.905 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:42926 12 10369 1 2025-10-06 09:29:05.349 00:00:10.437 TCP 23.104.0.1:53142 -> 1.101.0.1:3000 15 1926 1 2025-10-06 09:30:05.827 00:00:10.363 TCP 23.104.0.1:47900 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:30:02.149 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37134 10 6452 1 2025-10-06 09:26:38.437 00:05:02.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 09:31:02.365 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43042 10 6452 1 2025-10-06 09:31:06.232 00:00:10.370 TCP 23.104.0.1:59428 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:27:38.439 00:05:01.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 09:32:02.582 00:00:10.944 TCP 1.101.0.1:3000 -> 22.102.0.1:37770 11 6504 1 2025-10-06 09:32:06.634 00:00:10.325 TCP 23.104.0.1:60112 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:33:03.569 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45258 10 6452 1 2025-10-06 09:33:06.996 00:00:10.359 TCP 23.104.0.1:43410 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:33:33.404 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:33:33.087 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 09:34:03.781 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50228 10 6452 1 2025-10-06 09:34:07.397 00:00:10.364 TCP 23.104.0.1:55534 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:35:03.999 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53306 10 6452 1 2025-10-06 09:35:07.799 00:00:10.364 TCP 23.104.0.1:47686 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:36:04.223 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34766 10 6452 1 2025-10-06 09:36:08.202 00:00:10.370 TCP 23.104.0.1:53914 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:32:38.440 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 09:37:04.448 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38182 10 6452 1 2025-10-06 09:37:08.608 00:00:10.324 TCP 23.104.0.1:39856 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:33:38.443 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 09:38:04.679 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43728 10 6452 1 2025-10-06 09:38:08.970 00:00:10.367 TCP 23.104.0.1:52562 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:38:33.519 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:38:33.601 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 09:39:04.894 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 10 6452 1 2025-10-06 09:39:09.376 00:00:10.330 TCP 23.104.0.1:43314 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:40:05.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55126 10 6452 1 2025-10-06 09:40:09.762 00:00:10.385 TCP 23.104.0.1:55514 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:41:05.325 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34048 10 6452 1 2025-10-06 09:41:10.185 00:00:10.378 TCP 23.104.0.1:43080 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:42:05.499 00:00:10.376 TCP 1.101.0.1:3000 -> 22.102.0.1:48772 10 6452 1 2025-10-06 09:42:10.612 00:00:10.366 TCP 23.104.0.1:40128 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:38:38.442 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 09:43:05.917 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33774 10 6452 1 2025-10-06 09:43:11.016 00:00:10.369 TCP 23.104.0.1:35836 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:43:33.623 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:43:33.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 09:39:38.445 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 09:44:06.131 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59630 10 6452 1 2025-10-06 09:44:11.424 00:00:10.365 TCP 23.104.0.1:58504 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:45:06.301 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56090 10 6452 1 2025-10-06 09:45:11.828 00:00:10.362 TCP 23.104.0.1:59754 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:46:06.518 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58150 10 6452 1 2025-10-06 09:46:12.231 00:00:10.369 TCP 23.104.0.1:34256 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:47:06.730 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56042 10 6452 1 2025-10-06 09:47:12.643 00:00:10.324 TCP 23.104.0.1:59406 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:48:06.951 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42102 10 6452 1 2025-10-06 09:48:13.007 00:00:10.386 TCP 23.104.0.1:32942 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:48:33.758 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 09:48:33.515 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:44:38.443 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 09:49:07.133 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39086 10 6452 1 2025-10-06 09:49:13.434 00:00:10.366 TCP 23.104.0.1:42582 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:45:38.446 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 09:50:07.349 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39862 10 6452 1 2025-10-06 09:50:13.836 00:00:10.352 TCP 23.104.0.1:49106 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:51:07.525 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 10 6452 1 2025-10-06 09:51:14.225 00:00:10.384 TCP 23.104.0.1:58268 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:52:07.697 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39346 10 6452 1 2025-10-06 09:52:14.635 00:00:10.366 TCP 23.104.0.1:57812 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:53:07.871 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40768 10 6452 1 2025-10-06 09:53:15.035 00:00:10.327 TCP 23.104.0.1:53352 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:53:33.953 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 09:53:33.891 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:54:08.102 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49616 10 6452 1 2025-10-06 09:54:15.401 00:00:10.330 TCP 23.104.0.1:57038 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:50:38.446 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 09:55:08.320 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56558 10 6452 1 2025-10-06 09:55:15.769 00:00:10.376 TCP 23.104.0.1:55000 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:51:38.448 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 09:56:08.539 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43352 10 6452 1 2025-10-06 09:56:16.182 00:00:10.363 TCP 23.104.0.1:35996 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:57:08.749 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54356 10 6452 1 2025-10-06 09:57:16.587 00:00:10.363 TCP 23.104.0.1:40318 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:58:08.966 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37624 12 6556 1 2025-10-06 09:58:16.989 00:00:10.373 TCP 23.104.0.1:38982 -> 1.101.0.1:3000 11 1507 1 2025-10-06 09:58:33.923 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 09:58:33.913 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 164, total bytes: 511518, total packets: 1593, avg bps: 1101, avg pps: 0, avg bpp: 321 Time window: 2025-10-06 08:56:38 - 2025-10-06 09:58:33 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0019s Wall: 0.0027s flows/second: 60222.9 Runtime: 0.0027s