Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 06:59:09.915 00:00:10.361 TCP 23.104.0.1:50806 -> 1.101.0.1:3000 11 1507 1 2025-10-08 06:59:28.320 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 06:59:20.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51152 10 6452 1 2025-10-08 06:59:28.176 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:00:10.317 00:00:10.368 TCP 23.104.0.1:36030 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:00:20.291 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52652 10 6452 1 2025-10-08 06:56:39.318 00:05:02.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 07:01:10.725 00:00:10.325 TCP 23.104.0.1:52152 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:01:20.464 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58470 10 6452 1 2025-10-08 06:57:39.321 00:05:02.058 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 07:02:11.099 00:00:10.366 TCP 23.104.0.1:51408 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:02:20.676 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36208 10 6452 1 2025-10-08 07:03:11.515 00:00:10.369 TCP 23.104.0.1:48478 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:03:20.895 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51986 10 6452 1 2025-10-08 07:04:11.919 00:00:12.220 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:04:21.108 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39416 10 6452 1 2025-10-08 07:04:28.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:04:28.029 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 07:05:14.176 00:00:10.334 TCP 23.104.0.1:55954 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:05:21.333 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37814 10 6452 1 2025-10-08 07:06:14.549 00:00:10.741 TCP 23.104.0.1:53232 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:06:21.571 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41324 10 6452 1 2025-10-08 07:02:39.321 00:05:02.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 07:07:15.328 00:00:10.367 TCP 23.104.0.1:59576 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:07:21.740 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39868 10 6452 1 2025-10-08 07:03:39.324 00:05:02.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 07:08:15.733 00:00:10.323 TCP 23.104.0.1:37788 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:08:21.962 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53130 10 6452 1 2025-10-08 07:09:16.112 00:00:10.365 TCP 23.104.0.1:57020 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:09:28.929 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:09:28.304 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 07:09:22.143 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:37160 10 6452 1 2025-10-08 07:10:16.515 00:00:10.364 TCP 23.104.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:10:22.434 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37356 10 6452 1 2025-10-08 07:11:16.923 00:00:10.387 TCP 23.104.0.1:33788 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:11:22.652 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44784 10 6452 1 2025-10-08 07:12:17.350 00:00:10.365 TCP 23.104.0.1:41496 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:12:22.865 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38724 10 6452 1 2025-10-08 07:08:39.321 00:05:02.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 07:13:17.784 00:00:10.327 TCP 23.104.0.1:39228 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:13:23.089 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47490 11 6504 1 2025-10-08 07:09:39.325 00:05:02.057 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 07:14:28.286 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:14:28.145 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 07:14:18.148 00:00:10.365 TCP 23.104.0.1:43556 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:14:23.311 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56772 10 6452 1 2025-10-08 07:15:18.550 00:00:10.324 TCP 23.104.0.1:45532 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:15:23.528 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33656 10 6452 1 2025-10-08 07:16:18.909 00:00:10.324 TCP 23.104.0.1:57676 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:16:23.750 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43810 10 6452 1 2025-10-08 07:17:19.272 00:00:10.367 TCP 23.104.0.1:57852 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:17:23.919 00:00:10.304 TCP 1.101.0.1:3000 -> 22.102.0.1:48108 10 6452 1 2025-10-08 07:18:19.685 00:00:10.364 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:18:24.261 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33234 10 6452 1 2025-10-08 07:14:39.324 00:05:02.064 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 07:19:28.699 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:19:28.390 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 07:19:20.106 00:00:10.357 TCP 23.104.0.1:33394 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:19:24.474 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33212 10 6452 1 2025-10-08 07:15:39.328 00:05:02.059 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 07:20:20.500 00:00:10.371 TCP 23.104.0.1:54428 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:20:24.651 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33162 10 6452 1 2025-10-08 07:21:20.905 00:00:10.369 TCP 23.104.0.1:43994 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:21:24.865 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55176 10 6452 1 2025-10-08 07:22:21.313 00:00:10.331 TCP 23.104.0.1:51320 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:22:25.089 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60994 10 6452 1 2025-10-08 07:23:25.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50778 10 6452 1 2025-10-08 07:23:21.683 00:00:10.362 TCP 23.104.0.1:55478 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:24:28.460 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:24:28.547 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 07:24:22.103 00:00:10.366 TCP 23.104.0.1:60284 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:24:25.512 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53670 10 6452 1 2025-10-08 07:20:39.324 00:05:02.065 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 07:25:22.508 00:00:10.362 TCP 23.104.0.1:34154 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:25:25.684 00:00:10.478 TCP 1.101.0.1:3000 -> 22.102.0.1:39066 10 6452 1 2025-10-08 07:21:39.329 00:05:02.060 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 07:26:22.911 00:00:10.345 TCP 23.104.0.1:33874 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:26:26.197 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52986 10 6452 1 2025-10-08 07:27:23.306 00:00:10.363 TCP 23.104.0.1:54332 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:27:26.413 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-10-08 07:28:23.713 00:00:10.326 TCP 23.104.0.1:44842 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:28:26.627 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55458 10 6452 1 2025-10-08 07:29:28.986 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:29:28.925 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 07:29:24.099 00:00:10.367 TCP 23.104.0.1:34870 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:29:26.839 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39062 10 6452 1 2025-10-08 07:30:24.514 00:00:10.362 TCP 23.104.0.1:56640 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:30:27.091 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42000 10 6452 1 2025-10-08 07:26:39.326 00:05:02.065 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 07:31:24.918 00:00:10.376 TCP 23.104.0.1:53754 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:31:27.266 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59832 10 6452 1 2025-10-08 07:27:39.329 00:05:02.061 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 07:32:25.336 00:00:10.367 TCP 23.104.0.1:50424 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:32:27.482 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38056 10 6452 1 2025-10-08 07:33:25.738 00:00:10.375 TCP 23.104.0.1:57270 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:33:27.701 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42180 10 6452 1 2025-10-08 07:34:29.021 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 07:34:28.883 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:34:26.150 00:00:10.441 TCP 23.104.0.1:38470 -> 1.101.0.1:3000 15 1926 1 2025-10-08 07:34:27.875 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59096 12 10375 1 2025-10-08 07:35:26.628 00:00:10.361 TCP 23.104.0.1:42414 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:35:28.086 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49862 10 6452 1 2025-10-08 07:36:27.026 00:00:10.359 TCP 23.104.0.1:53636 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:36:28.299 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40396 10 6452 1 2025-10-08 07:32:39.328 00:05:02.068 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 07:37:28.512 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56242 10 6452 1 2025-10-08 07:37:27.420 00:00:10.832 TCP 23.104.0.1:43908 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:33:39.330 00:05:02.065 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 07:38:28.727 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58880 10 6452 1 2025-10-08 07:38:28.293 00:00:10.364 TCP 23.104.0.1:45758 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:39:28.935 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 07:39:28.567 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:39:28.696 00:00:10.364 TCP 23.104.0.1:43746 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:39:28.941 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:43304 10 6452 1 2025-10-08 07:40:29.106 00:00:10.364 TCP 23.104.0.1:59108 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:40:29.184 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37964 10 6452 1 2025-10-08 07:41:29.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60312 10 6452 1 2025-10-08 07:41:29.506 00:00:10.369 TCP 23.104.0.1:54160 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:42:29.607 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58584 10 6452 1 2025-10-08 07:42:29.915 00:00:10.323 TCP 23.104.0.1:54390 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:38:39.330 00:05:02.067 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 07:43:29.775 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58412 10 6452 1 2025-10-08 07:43:30.275 00:00:10.366 TCP 23.104.0.1:39688 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:39:39.332 00:05:02.063 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 07:44:29.019 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 07:44:28.883 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:44:30.678 00:00:10.369 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:44:29.987 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50722 10 6452 1 2025-10-08 07:45:30.214 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54998 10 6452 1 2025-10-08 07:45:31.094 00:00:10.369 TCP 23.104.0.1:59854 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:46:30.433 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 10 6452 1 2025-10-08 07:46:31.501 00:00:10.367 TCP 23.104.0.1:44662 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:47:30.652 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52534 10 6452 1 2025-10-08 07:47:31.908 00:00:10.366 TCP 23.104.0.1:59794 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:48:30.867 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58832 10 6452 1 2025-10-08 07:44:39.332 00:05:02.067 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 07:48:32.308 00:00:10.366 TCP 23.104.0.1:40828 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:49:28.950 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 07:49:29.340 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:49:31.091 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33410 10 6452 1 2025-10-08 07:49:32.713 00:00:10.360 TCP 23.104.0.1:60098 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:45:39.335 00:05:02.061 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 07:50:31.270 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-10-08 07:50:33.113 00:00:10.368 TCP 23.104.0.1:52586 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:51:31.489 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52050 10 6452 1 2025-10-08 07:51:33.520 00:00:10.366 TCP 23.104.0.1:38664 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:52:31.708 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37092 10 6452 1 2025-10-08 07:52:33.925 00:00:10.390 TCP 23.104.0.1:53222 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:53:34.346 00:00:10.378 TCP 23.104.0.1:58792 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:53:31.927 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58442 10 6452 1 2025-10-08 07:54:29.170 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 07:54:29.308 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 07:54:32.137 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51150 10 6452 1 2025-10-08 07:50:39.332 00:05:02.068 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 07:54:34.764 00:00:10.379 TCP 23.104.0.1:40120 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:51:39.335 00:05:02.062 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 07:55:32.368 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36614 10 6452 1 2025-10-08 07:55:35.181 00:00:10.331 TCP 23.104.0.1:46782 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:56:35.551 00:00:10.418 TCP 23.104.0.1:55718 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:56:32.580 00:00:10.809 TCP 1.101.0.1:3000 -> 22.102.0.1:35388 10 6452 1 2025-10-08 07:57:36.024 00:00:10.462 TCP 23.104.0.1:60104 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:57:33.426 00:00:10.754 TCP 1.101.0.1:3000 -> 22.102.0.1:49276 10 6452 1 2025-10-08 07:58:36.526 00:00:10.323 TCP 23.104.0.1:38326 -> 1.101.0.1:3000 11 1507 1 2025-10-08 07:58:34.218 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33830 10 6452 1 Summary: total flows: 164, total bytes: 502742, total packets: 1579, avg bps: 1078, avg pps: 0, avg bpp: 318 Time window: 2025-10-08 06:56:39 - 2025-10-08 07:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0009s Wall: 0.0019s flows/second: 87193.0 Runtime: 0.0019s