Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 18:58:59.883 00:00:10.336 TCP 23.104.0.1:48900 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:59:13.620 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:59:13.836 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:59:13.728 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46052 10 6452 1 2025-10-07 19:00:00.254 00:00:10.327 TCP 23.104.0.1:49490 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:00:13.935 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60690 10 6452 1 2025-10-07 18:56:39.124 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 19:01:00.632 00:00:10.371 TCP 23.104.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:01:14.174 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38060 10 6452 1 2025-10-07 18:57:39.129 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 19:02:01.046 00:00:10.323 TCP 23.104.0.1:53996 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:02:14.394 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6452 1 2025-10-07 19:03:01.406 00:00:10.373 TCP 23.104.0.1:33996 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:03:14.612 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58092 10 6452 1 2025-10-07 19:04:13.819 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:04:13.819 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:04:01.814 00:00:10.368 TCP 23.104.0.1:59430 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:04:14.828 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:34036 10 6452 1 2025-10-07 19:05:02.222 00:00:10.363 TCP 23.104.0.1:49954 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:05:15.019 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48194 10 6452 1 2025-10-07 19:06:02.625 00:00:10.907 TCP 23.104.0.1:36858 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:06:15.231 00:00:10.565 TCP 1.101.0.1:3000 -> 22.102.0.1:39776 10 6452 1 2025-10-07 19:02:39.125 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 19:07:03.573 00:00:10.369 TCP 23.104.0.1:34458 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:07:15.838 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43316 10 6452 1 2025-10-07 19:03:39.129 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 19:08:03.982 00:00:10.323 TCP 23.104.0.1:60756 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:08:16.011 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41710 10 6452 1 2025-10-07 19:09:14.053 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:09:13.806 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:09:04.344 00:00:10.369 TCP 23.104.0.1:36032 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:09:16.229 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44314 10 6452 1 2025-10-07 19:10:04.758 00:00:10.334 TCP 23.104.0.1:38188 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:10:16.440 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47592 10 6452 1 2025-10-07 19:11:05.126 00:00:10.328 TCP 23.104.0.1:59158 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:11:16.615 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54772 10 6452 1 2025-10-07 19:12:05.495 00:00:10.367 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:12:16.836 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34484 10 6452 1 2025-10-07 19:08:39.127 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 19:13:05.899 00:00:10.369 TCP 23.104.0.1:51242 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:13:17.080 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50100 10 6452 1 2025-10-07 19:09:39.130 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 19:14:13.796 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:14:06.308 00:00:10.363 TCP 23.104.0.1:43860 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:14:13.930 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:14:17.300 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54326 10 6452 1 2025-10-07 19:15:06.710 00:00:10.369 TCP 23.104.0.1:59494 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:15:17.512 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39184 10 6452 1 2025-10-07 19:16:07.109 00:00:10.366 TCP 23.104.0.1:45640 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:16:17.726 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33080 10 6452 1 2025-10-07 19:17:07.516 00:00:10.366 TCP 23.104.0.1:35150 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:17:17.935 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:33508 10 6452 1 2025-10-07 19:18:07.919 00:00:10.566 TCP 23.104.0.1:42760 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:18:18.128 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52870 10 6452 1 2025-10-07 19:14:39.128 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 19:19:13.955 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:19:13.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:19:08.531 00:00:10.365 TCP 23.104.0.1:59474 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:19:18.304 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58962 10 6452 1 2025-10-07 19:15:39.131 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 19:20:08.936 00:00:10.365 TCP 23.104.0.1:55582 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:20:18.519 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33118 10 6452 1 2025-10-07 19:21:09.340 00:00:10.364 TCP 23.104.0.1:51310 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:21:18.730 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34396 10 6452 1 2025-10-07 19:22:09.744 00:00:10.366 TCP 23.104.0.1:54594 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:22:18.909 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47216 10 6452 1 2025-10-07 19:23:10.148 00:00:10.333 TCP 23.104.0.1:48940 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:23:19.121 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44996 10 6452 1 2025-10-07 19:24:14.230 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:24:13.955 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:24:10.520 00:00:10.324 TCP 23.104.0.1:32940 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:24:19.337 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46850 10 6452 1 2025-10-07 19:20:39.129 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 19:25:10.881 00:00:10.380 TCP 23.104.0.1:46776 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:25:19.516 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59972 10 6452 1 2025-10-07 19:21:39.134 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 19:26:11.303 00:00:10.918 TCP 23.104.0.1:36866 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:26:19.731 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 10 6452 1 2025-10-07 19:27:12.289 00:00:10.324 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:27:19.945 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:54830 10 6452 1 2025-10-07 19:28:12.651 00:00:10.367 TCP 23.104.0.1:52008 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:28:20.192 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34290 12 6556 1 2025-10-07 19:29:14.389 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:29:14.298 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:29:13.064 00:00:10.370 TCP 23.104.0.1:42584 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:29:20.406 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51948 10 6452 1 2025-10-07 19:30:13.470 00:00:10.365 TCP 23.104.0.1:48076 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:30:20.621 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45530 10 6452 1 2025-10-07 19:26:39.134 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 19:31:13.874 00:00:10.367 TCP 23.104.0.1:48286 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:31:20.797 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34902 10 6452 1 2025-10-07 19:27:39.137 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 19:32:14.278 00:00:10.374 TCP 23.104.0.1:46198 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:32:21.034 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36942 10 6452 1 2025-10-07 19:33:14.691 00:00:10.365 TCP 23.104.0.1:36188 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:33:21.248 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54274 10 6452 1 2025-10-07 19:34:14.327 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:34:14.442 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:34:15.105 00:00:10.416 TCP 23.104.0.1:60246 -> 1.101.0.1:3000 15 1926 1 2025-10-07 19:34:21.417 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:47610 12 10375 1 2025-10-07 19:35:15.549 00:00:10.363 TCP 23.104.0.1:59330 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:35:21.658 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52824 10 6452 1 2025-10-07 19:36:15.950 00:00:10.332 TCP 23.104.0.1:40570 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:36:21.875 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52836 10 6452 1 2025-10-07 19:32:39.135 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 19:37:16.321 00:00:10.380 TCP 23.104.0.1:44534 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:37:22.103 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36316 10 6452 1 2025-10-07 19:33:39.138 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 19:38:16.738 00:00:10.367 TCP 23.104.0.1:38692 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:38:22.317 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36042 10 6452 1 2025-10-07 19:39:14.460 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:39:14.594 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:39:17.138 00:00:10.323 TCP 23.104.0.1:53978 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:39:22.533 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35864 10 6452 1 2025-10-07 19:40:17.504 00:00:10.369 TCP 23.104.0.1:45238 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:40:22.709 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:58208 10 6452 1 2025-10-07 19:41:17.915 00:00:10.364 TCP 23.104.0.1:45338 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:41:22.877 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39850 10 6452 1 2025-10-07 19:42:18.322 00:00:10.364 TCP 23.104.0.1:37130 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:42:23.102 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:49100 10 6452 1 2025-10-07 19:38:39.137 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 19:43:18.720 00:00:10.370 TCP 23.104.0.1:56036 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:43:23.312 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55030 10 6452 1 2025-10-07 19:39:39.141 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 19:44:14.332 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:44:14.570 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:44:19.127 00:00:10.365 TCP 23.104.0.1:38482 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:44:23.527 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40002 10 6452 1 2025-10-07 19:45:19.529 00:00:10.371 TCP 23.104.0.1:47884 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:45:23.739 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60190 10 6452 1 2025-10-07 19:46:19.933 00:00:10.378 TCP 23.104.0.1:56264 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:46:23.955 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51106 10 6452 1 2025-10-07 19:47:20.348 00:00:10.582 TCP 23.104.0.1:47212 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:47:24.181 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52702 10 6452 1 2025-10-07 19:48:20.968 00:00:10.372 TCP 23.104.0.1:51834 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:48:24.393 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35610 10 6452 1 2025-10-07 19:44:39.138 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 19:49:14.840 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:49:14.559 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:49:21.377 00:00:10.326 TCP 23.104.0.1:51796 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:49:24.600 00:00:10.553 TCP 1.101.0.1:3000 -> 22.102.0.1:41970 10 6452 1 2025-10-07 19:45:39.141 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 19:50:21.738 00:00:10.367 TCP 23.104.0.1:57706 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:50:25.186 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39906 10 6452 1 2025-10-07 19:51:22.140 00:00:10.364 TCP 23.104.0.1:59474 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:51:25.401 00:00:10.766 TCP 1.101.0.1:3000 -> 22.102.0.1:44442 10 6452 1 2025-10-07 19:52:22.542 00:00:10.325 TCP 23.104.0.1:53746 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:52:26.208 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6452 1 2025-10-07 19:53:26.418 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52910 10 6452 1 2025-10-07 19:53:22.910 00:00:10.330 TCP 23.104.0.1:37228 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:54:14.976 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:54:14.622 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:54:23.282 00:00:10.364 TCP 23.104.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:54:26.634 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35970 10 6452 1 2025-10-07 19:50:39.139 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 19:55:23.689 00:00:10.367 TCP 23.104.0.1:48186 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:55:26.853 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46940 10 6452 1 2025-10-07 19:51:39.142 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 19:56:24.105 00:00:10.369 TCP 23.104.0.1:40928 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:56:27.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33882 10 6452 1 2025-10-07 19:57:24.516 00:00:10.360 TCP 23.104.0.1:41352 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:57:27.315 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38484 10 6452 1 2025-10-07 19:58:24.914 00:00:10.369 TCP 23.104.0.1:39464 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:58:27.535 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59412 10 6452 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1081, avg pps: 0, avg bpp: 318 Time window: 2025-10-07 18:56:39 - 2025-10-07 19:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0049s User: 0.0000s Wall: 0.0021s flows/second: 76565.7 Runtime: 0.0022s