Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 04:58:43.468 00:00:10.361 TCP 23.104.0.1:44380 -> 1.101.0.1:3000 11 1507 1 2025-10-09 04:59:22.565 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35666 10 6452 1 2025-10-09 04:59:43.869 00:00:10.370 TCP 23.104.0.1:49250 -> 1.101.0.1:3000 11 1507 1 2025-10-09 04:59:54.746 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 04:59:54.539 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:00:22.778 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49902 10 6452 1 2025-10-09 04:56:39.681 00:05:02.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 05:00:44.275 00:00:10.327 TCP 23.104.0.1:60842 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:01:23.005 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54380 10 6452 1 2025-10-09 04:57:39.684 00:05:02.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 05:01:44.637 00:00:10.373 TCP 23.104.0.1:51282 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:02:23.219 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48618 10 6452 1 2025-10-09 05:02:45.067 00:00:10.367 TCP 23.104.0.1:39378 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:03:23.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59854 10 6452 1 2025-10-09 05:03:45.473 00:00:10.364 TCP 23.104.0.1:39594 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:04:23.653 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41868 10 6452 1 2025-10-09 05:04:54.413 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 05:04:45.875 00:00:10.325 TCP 23.104.0.1:43042 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:04:54.795 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:05:23.872 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59308 10 6452 1 2025-10-09 05:05:46.236 00:00:10.324 TCP 23.104.0.1:57746 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:06:24.104 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41180 10 6452 1 2025-10-09 05:02:39.684 00:05:02.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 05:06:46.602 00:00:10.366 TCP 23.104.0.1:36508 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:07:24.319 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38476 10 6452 1 2025-10-09 05:03:39.686 00:05:02.181 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 05:07:47.004 00:00:10.361 TCP 23.104.0.1:56620 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:08:24.541 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-10-09 05:08:47.407 00:00:10.361 TCP 23.104.0.1:38696 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:09:24.756 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45980 10 6452 1 2025-10-09 05:09:54.821 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 05:09:54.774 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:09:47.803 00:00:10.367 TCP 23.104.0.1:57646 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:10:24.981 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:51106 10 6452 1 2025-10-09 05:10:48.210 00:00:10.367 TCP 23.104.0.1:43470 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:11:25.223 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:36644 10 6452 1 2025-10-09 05:11:48.615 00:00:10.367 TCP 23.104.0.1:39246 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:12:25.407 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38062 10 6452 1 2025-10-09 05:08:39.691 00:05:02.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 05:12:49.020 00:00:10.360 TCP 23.104.0.1:58142 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:13:25.619 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40644 10 6452 1 2025-10-09 05:09:39.689 00:05:02.181 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 05:13:49.424 00:00:10.363 TCP 23.104.0.1:40854 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:14:25.836 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45020 10 6452 1 2025-10-09 05:14:54.930 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:14:54.660 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 05:14:49.824 00:00:10.397 TCP 23.104.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:15:26.068 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33996 10 6452 1 2025-10-09 05:15:50.259 00:00:10.631 TCP 23.104.0.1:46234 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:16:26.289 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42772 10 6452 1 2025-10-09 05:16:50.929 00:00:10.376 TCP 23.104.0.1:55600 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:17:26.510 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39210 10 6452 1 2025-10-09 05:17:51.342 00:00:10.372 TCP 23.104.0.1:34790 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:18:26.732 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43614 10 6452 1 2025-10-09 05:14:39.689 00:05:02.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 05:18:51.760 00:00:10.376 TCP 23.104.0.1:58880 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:19:26.941 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57562 10 6452 1 2025-10-09 05:15:39.690 00:05:02.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 05:19:55.102 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:19:55.073 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 05:19:52.174 00:00:10.366 TCP 23.104.0.1:47134 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:20:27.181 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53746 10 6452 1 2025-10-09 05:20:52.580 00:00:10.359 TCP 23.104.0.1:37086 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:21:27.414 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54628 10 6452 1 2025-10-09 05:21:52.979 00:00:10.367 TCP 23.104.0.1:48880 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:22:27.635 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6452 1 2025-10-09 05:22:53.389 00:00:10.757 TCP 23.104.0.1:40868 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:23:27.859 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54786 10 6452 1 2025-10-09 05:23:54.186 00:00:10.363 TCP 23.104.0.1:54102 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:24:28.089 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44780 10 6452 1 2025-10-09 05:20:39.690 00:05:02.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 05:24:55.041 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 05:24:55.359 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:24:54.584 00:00:10.368 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:25:28.317 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33384 10 6452 1 2025-10-09 05:21:39.693 00:05:02.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 05:25:54.986 00:00:10.367 TCP 23.104.0.1:51820 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:26:28.524 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48708 10 6452 1 2025-10-09 05:26:55.391 00:00:10.333 TCP 23.104.0.1:51978 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:27:28.751 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47620 10 6452 1 2025-10-09 05:27:55.758 00:00:10.325 TCP 23.104.0.1:36258 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:28:28.966 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52872 10 6452 1 2025-10-09 05:28:56.121 00:00:10.359 TCP 23.104.0.1:47614 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:29:29.144 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54236 10 6452 1 2025-10-09 05:29:55.206 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 05:29:55.098 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:29:56.526 00:00:10.325 TCP 23.104.0.1:53844 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:30:29.317 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36004 10 6452 1 2025-10-09 05:26:39.691 00:05:02.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 05:30:56.887 00:00:10.378 TCP 23.104.0.1:49538 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:31:29.528 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42902 10 6452 1 2025-10-09 05:27:39.694 00:05:02.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 05:31:57.300 00:00:10.368 TCP 23.104.0.1:40240 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:32:29.737 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59008 10 6452 1 2025-10-09 05:32:57.705 00:00:10.363 TCP 23.104.0.1:37400 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:33:29.947 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46000 10 6452 1 2025-10-09 05:33:58.108 00:00:10.367 TCP 23.104.0.1:39296 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:34:30.186 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38364 10 6452 1 2025-10-09 05:34:55.140 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 05:34:55.378 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:34:58.513 00:00:10.369 TCP 23.104.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:35:30.401 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42478 10 6452 1 2025-10-09 05:35:58.920 00:00:10.387 TCP 23.104.0.1:47232 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:36:30.623 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56252 10 6452 1 2025-10-09 05:32:39.695 00:05:02.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 05:36:59.343 00:00:10.366 TCP 23.104.0.1:60216 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:37:30.836 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44604 10 6452 1 2025-10-09 05:33:39.697 00:05:02.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 05:37:59.747 00:00:10.383 TCP 23.104.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:38:31.081 00:00:11.838 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 10 6452 1 2025-10-09 05:39:00.172 00:00:10.361 TCP 23.104.0.1:53934 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:39:32.968 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:60860 10 6452 1 2025-10-09 05:39:55.536 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:39:55.411 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 05:40:00.572 00:00:10.327 TCP 23.104.0.1:50008 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:40:33.155 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56054 10 6452 1 2025-10-09 05:41:00.941 00:00:10.365 TCP 23.104.0.1:33720 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:41:33.327 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41022 10 6452 1 2025-10-09 05:42:01.346 00:00:10.358 TCP 23.104.0.1:42106 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:42:33.540 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47708 10 6452 1 2025-10-09 05:38:39.695 00:05:02.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 05:43:01.755 00:00:10.374 TCP 23.104.0.1:47004 -> 1.101.0.1:3000 12 1559 1 2025-10-09 05:39:39.698 00:05:02.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 05:43:33.762 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43044 10 6452 1 2025-10-09 05:44:02.164 00:00:10.365 TCP 23.104.0.1:54790 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:44:33.980 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:59938 10 6452 1 2025-10-09 05:44:55.702 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:44:55.398 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 05:45:02.569 00:00:10.369 TCP 23.104.0.1:60170 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:45:34.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37604 10 6452 1 2025-10-09 05:46:02.975 00:00:10.370 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:46:34.394 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51000 10 6452 1 2025-10-09 05:47:03.380 00:00:10.366 TCP 23.104.0.1:44682 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:47:34.608 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49952 10 6452 1 2025-10-09 05:48:03.788 00:00:10.364 TCP 23.104.0.1:50408 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:48:34.822 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59650 10 6452 1 2025-10-09 05:44:39.697 00:05:02.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 05:49:04.190 00:00:10.327 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:45:39.699 00:05:02.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 05:49:35.047 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47760 10 6452 1 2025-10-09 05:49:55.766 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:49:55.826 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 05:50:04.556 00:00:10.327 TCP 23.104.0.1:59122 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:50:35.276 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36982 10 6452 1 2025-10-09 05:51:04.916 00:00:10.323 TCP 23.104.0.1:51970 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:51:35.502 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54876 10 6452 1 2025-10-09 05:52:05.277 00:00:10.366 TCP 23.104.0.1:35264 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:52:35.721 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34096 10 6452 1 2025-10-09 05:53:05.679 00:00:10.332 TCP 23.104.0.1:36092 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:53:35.935 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6452 1 2025-10-09 05:54:06.059 00:00:10.392 TCP 23.104.0.1:37518 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:54:36.130 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58686 10 6452 1 2025-10-09 05:50:39.698 00:05:02.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 05:54:55.633 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 05:54:55.555 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 05:55:06.489 00:00:10.364 TCP 23.104.0.1:50876 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:51:39.701 00:05:02.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 05:55:36.336 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52984 10 6452 1 2025-10-09 05:56:06.899 00:00:10.375 TCP 23.104.0.1:50070 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:56:36.551 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52564 10 6452 1 2025-10-09 05:57:07.312 00:00:10.368 TCP 23.104.0.1:38266 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:57:36.769 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:50812 10 6452 1 2025-10-09 05:58:07.724 00:00:10.334 TCP 23.104.0.1:38072 -> 1.101.0.1:3000 11 1507 1 2025-10-09 05:58:36.958 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:49324 10 6452 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1069, avg pps: 0, avg bpp: 316 Time window: 2025-10-09 04:56:39 - 2025-10-09 05:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0021s Wall: 0.0025s flows/second: 66776.6 Runtime: 0.0025s