Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 05:58:43.749 00:00:10.747 TCP 23.104.0.1:33016 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:59:06.976 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50366 10 6452 1 2025-10-08 05:59:26.910 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:59:27.109 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:59:44.538 00:00:10.364 TCP 23.104.0.1:37168 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:00:07.210 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58264 10 6452 1 2025-10-08 05:56:39.303 00:05:02.046 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 06:00:44.938 00:00:10.380 TCP 23.104.0.1:40916 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:01:07.421 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54594 10 6452 1 2025-10-08 05:57:39.307 00:05:02.040 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 06:01:45.352 00:00:10.376 TCP 23.104.0.1:34226 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:02:07.639 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:42182 10 6452 1 2025-10-08 06:02:45.763 00:00:10.385 TCP 23.104.0.1:42984 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:03:07.848 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:35778 10 6452 1 2025-10-08 06:03:46.185 00:00:10.360 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:04:08.070 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60958 10 6452 1 2025-10-08 06:04:26.705 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:04:27.089 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 06:04:46.582 00:00:10.365 TCP 23.104.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:05:08.239 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42066 10 6452 1 2025-10-08 06:05:46.989 00:00:10.373 TCP 23.104.0.1:59006 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:06:08.465 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45782 10 6452 1 2025-10-08 06:02:39.305 00:05:02.049 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 06:06:47.397 00:00:10.365 TCP 23.104.0.1:40430 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:07:08.638 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37028 10 6452 1 2025-10-08 06:03:39.308 00:05:02.044 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 06:07:47.802 00:00:10.373 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:08:08.858 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50168 10 6452 1 2025-10-08 06:08:48.208 00:00:10.362 TCP 23.104.0.1:53158 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:09:09.093 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35272 10 6452 1 2025-10-08 06:09:27.164 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:09:27.421 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 06:09:48.609 00:00:11.059 TCP 23.104.0.1:55720 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:10:09.305 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51730 10 6452 1 2025-10-08 06:10:49.702 00:00:10.369 TCP 23.104.0.1:36134 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:11:09.517 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41382 10 6452 1 2025-10-08 06:11:50.109 00:00:10.368 TCP 23.104.0.1:39492 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:12:09.732 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47744 10 6452 1 2025-10-08 06:08:39.306 00:05:02.050 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 06:12:50.514 00:00:10.365 TCP 23.104.0.1:59758 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:13:09.907 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47078 10 6452 1 2025-10-08 06:09:39.310 00:05:02.045 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 06:13:50.918 00:00:10.383 TCP 23.104.0.1:38420 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:14:10.120 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52504 10 6452 1 2025-10-08 06:14:27.083 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 06:14:27.308 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:14:51.336 00:00:10.441 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 15 1926 1 2025-10-08 06:15:10.334 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 12 10375 1 2025-10-08 06:15:51.812 00:00:10.362 TCP 23.104.0.1:51664 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:16:10.537 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57006 10 6452 1 2025-10-08 06:16:52.214 00:00:10.365 TCP 23.104.0.1:60024 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:17:10.765 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43896 10 6452 1 2025-10-08 06:17:52.620 00:00:10.368 TCP 23.104.0.1:52512 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:18:10.979 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50252 10 6452 1 2025-10-08 06:14:39.310 00:05:02.049 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 06:18:53.024 00:00:10.363 TCP 23.104.0.1:39174 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:19:11.219 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:47396 10 6452 1 2025-10-08 06:19:27.179 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:19:27.167 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 06:15:39.314 00:05:02.042 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 06:19:53.423 00:00:10.365 TCP 23.104.0.1:57328 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:20:11.406 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46346 10 6452 1 2025-10-08 06:20:53.834 00:00:10.343 TCP 23.104.0.1:60992 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:21:11.577 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44828 10 6452 1 2025-10-08 06:21:54.214 00:00:10.321 TCP 23.104.0.1:41588 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:22:11.793 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47818 10 6452 1 2025-10-08 06:22:54.573 00:00:10.380 TCP 23.104.0.1:35536 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:23:11.971 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39492 10 6452 1 2025-10-08 06:23:54.988 00:00:10.366 TCP 23.104.0.1:56628 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:24:12.204 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47932 10 6452 1 2025-10-08 06:24:27.202 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 06:24:27.449 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:20:39.312 00:05:02.049 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 06:24:55.391 00:00:10.439 TCP 23.104.0.1:54548 -> 1.101.0.1:3000 15 1926 1 2025-10-08 06:25:12.419 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:33712 12 10375 1 2025-10-08 06:21:39.315 00:05:02.043 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 06:25:55.875 00:00:10.368 TCP 23.104.0.1:50056 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:26:12.660 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41632 11 6504 1 2025-10-08 06:26:56.277 00:00:10.374 TCP 23.104.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:27:12.885 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44412 10 6452 1 2025-10-08 06:27:56.697 00:00:10.366 TCP 23.104.0.1:33668 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:28:13.111 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46548 10 6452 1 2025-10-08 06:28:57.113 00:00:10.328 TCP 23.104.0.1:40058 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:29:13.335 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42224 10 6452 1 2025-10-08 06:29:27.533 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 06:29:27.629 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:29:57.481 00:00:10.333 TCP 23.104.0.1:45016 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:30:13.545 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:39532 10 6452 1 2025-10-08 06:26:39.313 00:05:02.050 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 06:30:57.856 00:00:10.372 TCP 23.104.0.1:59304 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:31:13.722 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50760 10 6452 1 2025-10-08 06:27:39.316 00:05:02.044 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 06:31:58.269 00:00:10.372 TCP 23.104.0.1:43478 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:32:13.938 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:59504 10 6452 1 2025-10-08 06:32:58.676 00:00:10.364 TCP 23.104.0.1:56450 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:33:14.179 00:00:10.309 TCP 1.101.0.1:3000 -> 22.102.0.1:59880 10 6452 1 2025-10-08 06:33:59.107 00:00:10.369 TCP 23.104.0.1:44018 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:34:14.528 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52068 10 6452 1 2025-10-08 06:34:28.133 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 06:34:28.080 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:34:59.522 00:00:10.331 TCP 23.104.0.1:52398 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:35:14.739 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33580 10 6452 1 2025-10-08 06:35:59.887 00:00:10.710 TCP 23.104.0.1:55126 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:36:14.902 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:41232 10 6452 1 2025-10-08 06:32:39.314 00:05:02.049 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 06:37:00.636 00:00:10.324 TCP 23.104.0.1:40390 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:37:15.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56610 10 6452 1 2025-10-08 06:33:39.317 00:05:02.045 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 06:38:01.000 00:00:10.371 TCP 23.104.0.1:45570 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:38:15.296 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47738 10 6452 1 2025-10-08 06:39:01.409 00:00:10.370 TCP 23.104.0.1:53080 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:39:15.514 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40154 10 6452 1 2025-10-08 06:39:27.816 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 06:39:27.809 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:40:01.828 00:00:10.381 TCP 23.104.0.1:50950 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:40:15.731 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60568 10 6452 1 2025-10-08 06:41:02.249 00:00:10.342 TCP 23.104.0.1:52858 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:41:15.947 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:59254 10 6452 1 2025-10-08 06:42:02.631 00:00:10.327 TCP 23.104.0.1:47026 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:42:16.130 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60396 10 6452 1 2025-10-08 06:38:39.316 00:05:02.058 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 06:43:02.997 00:00:10.325 TCP 23.104.0.1:34146 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:43:16.347 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44280 10 6452 1 2025-10-08 06:39:39.319 00:05:02.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 06:44:03.363 00:00:10.362 TCP 23.104.0.1:35470 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:44:27.886 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:44:16.558 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-10-08 06:44:27.779 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 06:45:03.766 00:00:10.380 TCP 23.104.0.1:40904 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:45:16.776 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44062 10 6452 1 2025-10-08 06:46:04.196 00:00:10.360 TCP 23.104.0.1:54918 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:46:16.947 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:46920 10 6452 1 2025-10-08 06:47:04.594 00:00:10.326 TCP 23.104.0.1:56148 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:47:17.137 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37038 10 6452 1 2025-10-08 06:48:04.965 00:00:10.399 TCP 23.104.0.1:60810 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:48:17.350 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58880 10 6452 1 2025-10-08 06:44:39.316 00:05:02.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 06:49:05.382 00:00:10.365 TCP 23.104.0.1:50148 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:49:27.998 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 06:49:17.564 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43980 10 6452 1 2025-10-08 06:49:27.807 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:45:39.320 00:05:02.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 06:50:05.787 00:00:10.365 TCP 23.104.0.1:37332 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:50:17.780 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 10 6452 1 2025-10-08 06:51:06.192 00:00:10.361 TCP 23.104.0.1:55480 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:51:17.992 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56246 10 6452 1 2025-10-08 06:52:06.589 00:00:10.364 TCP 23.104.0.1:56436 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:52:18.211 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57538 10 6452 1 2025-10-08 06:53:06.993 00:00:10.791 TCP 23.104.0.1:49012 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:53:18.428 00:00:10.555 TCP 1.101.0.1:3000 -> 22.102.0.1:34794 10 6452 1 2025-10-08 06:54:07.826 00:00:10.387 TCP 23.104.0.1:59630 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:54:28.039 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:54:19.032 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34798 10 6452 1 2025-10-08 06:54:28.050 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 06:50:39.317 00:05:02.058 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 06:55:08.252 00:00:10.373 TCP 23.104.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:55:19.242 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48694 10 6452 1 2025-10-08 06:51:39.320 00:05:02.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 06:56:08.674 00:00:10.364 TCP 23.104.0.1:47194 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:56:19.458 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37248 10 6452 1 2025-10-08 06:57:09.101 00:00:10.367 TCP 23.104.0.1:47636 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:57:19.631 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44892 10 6452 1 2025-10-08 06:58:09.510 00:00:10.367 TCP 23.104.0.1:38978 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:58:19.846 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53396 10 6452 1 Summary: total flows: 164, total bytes: 507084, total packets: 1585, avg bps: 1093, avg pps: 0, avg bpp: 319 Time window: 2025-10-08 05:56:39 - 2025-10-08 06:58:30 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0010s Wall: 0.0024s flows/second: 68676.7 Runtime: 0.0024s