Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 16:58:59.552 00:00:10.325 TCP 23.104.0.1:44262 -> 1.101.0.1:3000 11 1507 1 2025-10-08 16:59:19.692 00:00:10.304 TCP 1.101.0.1:3000 -> 22.102.0.1:55692 10 6452 1 2025-10-08 16:59:40.080 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 16:59:40.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 16:59:59.916 00:00:10.376 TCP 23.104.0.1:42660 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:00:20.045 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43582 10 6452 1 2025-10-08 16:56:39.491 00:05:02.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 17:01:00.337 00:00:10.365 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:01:20.258 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59152 10 6452 1 2025-10-08 16:57:39.494 00:05:02.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 17:02:00.741 00:00:10.363 TCP 23.104.0.1:42412 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:02:20.433 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51024 10 6452 1 2025-10-08 17:03:01.141 00:00:10.370 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:03:20.642 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:33508 10 6452 1 2025-10-08 17:04:01.545 00:00:10.706 TCP 23.104.0.1:34134 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:04:20.846 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:51558 12 10375 1 2025-10-08 17:04:40.306 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:04:40.048 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:05:02.287 00:00:10.438 TCP 23.104.0.1:41708 -> 1.101.0.1:3000 15 1926 1 2025-10-08 17:05:21.120 00:00:10.399 TCP 1.101.0.1:3000 -> 22.102.0.1:53224 10 6452 1 2025-10-08 17:06:02.775 00:00:10.370 TCP 23.104.0.1:42512 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:06:21.558 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48760 10 6452 1 2025-10-08 17:02:39.493 00:05:02.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 17:07:03.181 00:00:10.363 TCP 23.104.0.1:40228 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:07:21.770 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60062 10 6452 1 2025-10-08 17:03:39.497 00:05:02.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 17:08:03.582 00:00:10.360 TCP 23.104.0.1:36638 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:08:21.978 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-10-08 17:09:03.985 00:00:10.359 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:09:22.202 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33458 10 6452 1 2025-10-08 17:09:40.411 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:09:40.406 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:10:04.387 00:00:10.333 TCP 23.104.0.1:59746 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:10:22.422 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58168 10 6452 1 2025-10-08 17:11:04.748 00:00:10.367 TCP 23.104.0.1:38926 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:11:22.639 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43066 10 6452 1 2025-10-08 17:12:05.152 00:00:10.355 TCP 23.104.0.1:56710 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:12:22.810 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36242 10 6452 1 2025-10-08 17:08:39.495 00:05:02.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 17:13:05.548 00:00:10.331 TCP 23.104.0.1:57160 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:13:23.030 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52042 10 6452 1 2025-10-08 17:09:39.499 00:05:02.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 17:14:05.916 00:00:10.379 TCP 23.104.0.1:58658 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:14:23.247 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42302 10 6452 1 2025-10-08 17:14:40.504 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:14:40.418 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:15:06.330 00:00:10.370 TCP 23.104.0.1:59394 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:15:23.452 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60594 10 6452 1 2025-10-08 17:16:06.744 00:00:10.365 TCP 23.104.0.1:48096 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:16:23.661 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54700 10 6452 1 2025-10-08 17:17:07.146 00:00:10.361 TCP 23.104.0.1:59498 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:17:23.835 00:00:10.515 TCP 1.101.0.1:3000 -> 22.102.0.1:56806 10 6452 1 2025-10-08 17:18:07.545 00:00:10.364 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:18:24.385 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 10 6452 1 2025-10-08 17:14:39.497 00:05:02.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 17:19:07.947 00:00:10.380 TCP 23.104.0.1:46582 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:19:40.871 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:15:39.499 00:05:02.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 17:19:24.602 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:40510 14 14298 1 2025-10-08 17:19:40.757 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:20:08.366 00:00:10.511 TCP 23.104.0.1:41764 -> 1.101.0.1:3000 17 2241 1 2025-10-08 17:20:24.890 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51566 10 6452 1 2025-10-08 17:21:08.918 00:00:10.428 TCP 23.104.0.1:52638 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:21:25.114 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44554 10 6452 1 2025-10-08 17:22:09.385 00:00:10.365 TCP 23.104.0.1:33516 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:22:25.336 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49306 10 6452 1 2025-10-08 17:23:09.789 00:00:10.367 TCP 23.104.0.1:47720 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:23:25.556 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-10-08 17:24:10.193 00:00:10.323 TCP 23.104.0.1:52450 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:24:25.776 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46732 10 6452 1 2025-10-08 17:24:40.413 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:24:40.837 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:20:39.500 00:05:02.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 17:25:10.559 00:00:10.375 TCP 23.104.0.1:37894 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:25:25.987 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 10 6452 1 2025-10-08 17:21:39.502 00:05:02.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 17:26:10.968 00:00:10.368 TCP 23.104.0.1:43096 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:26:26.213 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:49844 10 6452 1 2025-10-08 17:27:11.375 00:00:10.551 TCP 23.104.0.1:49276 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:27:26.396 00:00:10.717 TCP 1.101.0.1:3000 -> 22.102.0.1:51956 10 6452 1 2025-10-08 17:28:11.960 00:00:10.358 TCP 23.104.0.1:48800 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:28:27.148 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59840 10 6452 1 2025-10-08 17:29:12.361 00:00:10.770 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:29:27.371 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58940 10 6452 1 2025-10-08 17:29:40.898 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:29:40.940 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:30:13.172 00:00:10.359 TCP 23.104.0.1:39850 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:30:27.628 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50782 10 6452 1 2025-10-08 17:26:39.501 00:05:02.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 17:31:13.570 00:00:10.323 TCP 23.104.0.1:48648 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:31:27.850 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42624 10 6452 1 2025-10-08 17:27:39.504 00:05:02.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 17:32:13.928 00:00:10.389 TCP 23.104.0.1:39004 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:32:28.086 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37736 10 6452 1 2025-10-08 17:33:14.357 00:00:10.366 TCP 23.104.0.1:38672 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:33:28.314 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42872 10 6452 1 2025-10-08 17:34:14.762 00:00:10.374 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:34:40.830 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:34:28.493 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38864 10 6452 1 2025-10-08 17:34:40.972 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:35:15.176 00:00:10.360 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:35:28.703 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56262 10 6452 1 2025-10-08 17:36:15.577 00:00:10.329 TCP 23.104.0.1:55846 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:36:28.914 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60040 10 6452 1 2025-10-08 17:32:39.503 00:05:02.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 17:37:15.945 00:00:10.368 TCP 23.104.0.1:56916 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:37:29.129 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59846 10 6452 1 2025-10-08 17:33:39.504 00:05:02.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 17:38:16.353 00:00:10.366 TCP 23.104.0.1:39782 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:38:29.342 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-10-08 17:39:16.758 00:00:10.381 TCP 23.104.0.1:54318 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:39:29.567 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46302 10 6452 1 2025-10-08 17:39:41.427 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:39:40.922 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:40:17.174 00:00:10.369 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:40:29.778 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47934 10 6452 1 2025-10-08 17:41:17.582 00:00:10.365 TCP 23.104.0.1:57720 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:41:30.005 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52840 10 6452 1 2025-10-08 17:42:17.984 00:00:10.373 TCP 23.104.0.1:51674 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:42:30.219 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49318 10 6452 1 2025-10-08 17:38:39.503 00:05:02.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 17:43:18.397 00:00:10.367 TCP 23.104.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:39:39.506 00:05:02.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 17:43:30.456 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35940 10 6452 1 2025-10-08 17:44:18.803 00:00:10.373 TCP 23.104.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:44:41.208 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:44:30.667 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54000 10 6452 1 2025-10-08 17:44:41.377 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:45:19.225 00:00:10.362 TCP 23.104.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:45:30.880 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58308 10 6452 1 2025-10-08 17:46:19.630 00:00:10.373 TCP 23.104.0.1:56404 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:46:31.110 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50308 10 6452 1 2025-10-08 17:47:20.062 00:00:10.597 TCP 23.104.0.1:48820 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:47:31.317 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46294 10 6452 1 2025-10-08 17:48:20.702 00:00:10.328 TCP 23.104.0.1:34104 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:48:31.529 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:58418 10 6452 1 2025-10-08 17:44:39.506 00:05:02.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 17:49:21.103 00:00:10.325 TCP 23.104.0.1:42330 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:49:41.073 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:49:41.136 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:49:31.696 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33882 10 6452 1 2025-10-08 17:45:39.509 00:05:02.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 17:50:21.474 00:00:10.360 TCP 23.104.0.1:51250 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:50:31.905 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51572 10 6452 1 2025-10-08 17:51:21.874 00:00:10.319 TCP 23.104.0.1:44126 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:51:32.120 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35902 10 6452 1 2025-10-08 17:52:22.231 00:00:10.322 TCP 23.104.0.1:53724 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:52:32.328 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40274 10 6452 1 2025-10-08 17:53:22.593 00:00:10.366 TCP 23.104.0.1:58568 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:53:32.500 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42468 10 6452 1 2025-10-08 17:54:22.998 00:00:10.363 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:54:41.200 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:54:41.271 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:54:32.712 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53386 10 6452 1 2025-10-08 17:50:39.505 00:05:02.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 17:55:23.397 00:00:10.360 TCP 23.104.0.1:38346 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:51:39.509 00:05:02.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 17:55:32.924 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:46994 10 6452 1 2025-10-08 17:56:23.791 00:00:10.364 TCP 23.104.0.1:45730 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:56:33.125 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36304 10 6452 1 2025-10-08 17:57:24.198 00:00:10.365 TCP 23.104.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:57:33.297 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-10-08 17:58:24.599 00:00:10.367 TCP 23.104.0.1:59276 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:58:33.517 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54006 10 6452 1 Summary: total flows: 164, total bytes: 511270, total packets: 1588, avg bps: 1098, avg pps: 0, avg bpp: 321 Time window: 2025-10-08 16:56:39 - 2025-10-08 17:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0011s Wall: 0.0015s flows/second: 106349.1 Runtime: 0.0016s