Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 12:58:42.831 00:00:10.641 TCP 23.104.0.1:56624 -> 1.101.0.1:3000 11 1507 1 2025-10-09 12:59:17.252 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58976 10 6452 1 2025-10-09 12:59:43.509 00:00:10.359 TCP 23.104.0.1:34218 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:00:04.286 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:00:04.217 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:00:17.468 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54642 10 6452 1 2025-10-09 12:56:39.858 00:05:02.248 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 13:00:43.906 00:00:10.371 TCP 23.104.0.1:39294 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:01:17.677 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50826 10 6452 1 2025-10-09 12:57:39.863 00:05:02.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 13:01:44.321 00:00:10.320 TCP 23.104.0.1:42746 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:02:17.844 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37576 10 6452 1 2025-10-09 13:02:44.683 00:00:10.321 TCP 23.104.0.1:34952 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:03:18.079 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42170 10 6452 1 2025-10-09 13:03:45.051 00:00:10.358 TCP 23.104.0.1:52920 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:04:18.254 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44206 10 6452 1 2025-10-09 13:04:45.446 00:00:10.356 TCP 23.104.0.1:33304 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:05:04.697 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:05:04.478 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:05:18.467 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54166 10 6452 1 2025-10-09 13:05:45.843 00:00:10.342 TCP 23.104.0.1:44860 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:06:18.686 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43494 10 6452 1 2025-10-09 13:02:39.861 00:05:02.249 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 13:06:46.224 00:00:10.381 TCP 23.104.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:07:18.894 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6452 1 2025-10-09 13:03:39.863 00:05:02.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 13:07:46.625 00:00:10.371 TCP 23.104.0.1:42928 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:08:19.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47268 10 6452 1 2025-10-09 13:08:47.027 00:00:10.363 TCP 23.104.0.1:52110 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:09:19.291 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38956 10 6452 1 2025-10-09 13:09:47.431 00:00:10.367 TCP 23.104.0.1:56908 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:10:04.493 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:10:04.323 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:10:19.499 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42346 10 6452 1 2025-10-09 13:10:47.834 00:00:10.337 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:11:19.715 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35482 10 6452 1 2025-10-09 13:11:48.210 00:00:10.321 TCP 23.104.0.1:51662 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:12:19.923 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47274 10 6452 1 2025-10-09 13:08:39.860 00:05:02.255 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 13:12:48.569 00:00:10.375 TCP 23.104.0.1:39130 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:13:20.132 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59154 10 6452 1 2025-10-09 13:09:39.864 00:05:02.249 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 13:13:48.991 00:00:10.326 TCP 23.104.0.1:43886 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:14:20.302 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56178 10 6452 1 2025-10-09 13:14:49.354 00:00:10.363 TCP 23.104.0.1:39072 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:15:04.545 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:15:04.586 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:15:20.526 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53030 10 6452 1 2025-10-09 13:15:49.761 00:00:10.383 TCP 23.104.0.1:40524 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:16:20.742 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46804 10 6452 1 2025-10-09 13:16:50.181 00:00:10.375 TCP 23.104.0.1:58556 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:17:20.957 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52964 10 6452 1 2025-10-09 13:17:50.597 00:00:10.363 TCP 23.104.0.1:47744 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:18:21.181 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52270 10 6452 1 2025-10-09 13:14:39.864 00:05:02.253 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 13:18:51.004 00:00:10.377 TCP 23.104.0.1:51898 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:19:21.395 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50866 10 6452 1 2025-10-09 13:15:39.865 00:05:02.248 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 13:20:04.744 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:19:51.436 00:00:10.371 TCP 23.104.0.1:59382 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:20:04.755 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:20:21.615 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44228 10 6452 1 2025-10-09 13:20:51.840 00:00:10.392 TCP 23.104.0.1:60782 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:21:21.827 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57914 10 6452 1 2025-10-09 13:21:52.271 00:00:13.515 TCP 23.104.0.1:40980 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:22:22.062 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47940 10 6452 1 2025-10-09 13:22:55.854 00:00:10.376 TCP 23.104.0.1:53370 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:23:22.236 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41730 10 6452 1 2025-10-09 13:23:56.268 00:00:10.528 TCP 23.104.0.1:41636 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:24:22.448 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37742 10 6452 1 2025-10-09 13:20:39.864 00:05:02.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 13:25:05.360 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:25:05.335 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:24:56.835 00:00:10.895 TCP 23.104.0.1:55098 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:25:22.661 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32816 10 6452 1 2025-10-09 13:21:39.867 00:05:02.254 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 13:25:57.773 00:00:10.370 TCP 23.104.0.1:51580 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:26:22.877 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-10-09 13:26:58.178 00:00:10.370 TCP 23.104.0.1:57932 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:27:23.099 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45914 10 6452 1 2025-10-09 13:27:58.585 00:00:10.363 TCP 23.104.0.1:57606 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:28:23.271 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39908 10 6452 1 2025-10-09 13:28:58.983 00:00:10.334 TCP 23.104.0.1:51064 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:29:23.479 00:00:10.736 TCP 1.101.0.1:3000 -> 22.102.0.1:41550 10 6452 1 2025-10-09 13:30:04.879 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:30:04.995 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:29:59.354 00:00:10.362 TCP 23.104.0.1:40044 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:30:24.255 00:00:10.754 TCP 1.101.0.1:3000 -> 22.102.0.1:42880 10 6452 1 2025-10-09 13:26:39.865 00:05:02.259 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 13:30:59.758 00:00:10.336 TCP 23.104.0.1:55526 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:31:25.073 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47290 10 6452 1 2025-10-09 13:27:39.867 00:05:02.254 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 13:32:00.132 00:00:10.363 TCP 23.104.0.1:58926 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:32:25.285 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40770 10 6452 1 2025-10-09 13:33:00.532 00:00:10.365 TCP 23.104.0.1:34972 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:33:25.499 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44128 10 6452 1 2025-10-09 13:34:00.935 00:00:10.389 TCP 23.104.0.1:49860 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:34:25.715 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-10-09 13:35:04.678 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:35:04.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:35:01.366 00:00:10.369 TCP 23.104.0.1:48294 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:35:25.888 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47596 10 6452 1 2025-10-09 13:36:01.774 00:00:10.326 TCP 23.104.0.1:38446 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:36:26.104 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58432 10 6452 1 2025-10-09 13:32:39.868 00:05:02.258 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 13:37:02.139 00:00:10.369 TCP 23.104.0.1:34446 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:37:26.318 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45042 10 6452 1 2025-10-09 13:33:39.871 00:05:02.252 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 13:38:02.548 00:00:10.325 TCP 23.104.0.1:41458 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:38:26.487 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48906 10 6452 1 2025-10-09 13:39:02.911 00:00:10.327 TCP 23.104.0.1:39426 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:39:26.661 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56974 10 6452 1 2025-10-09 13:40:04.965 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:40:04.931 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:40:03.278 00:00:10.841 TCP 23.104.0.1:54376 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:40:26.876 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 13 6584 1 2025-10-09 13:41:04.156 00:00:10.320 TCP 23.104.0.1:47532 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:41:27.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45078 10 6452 1 2025-10-09 13:42:04.521 00:00:10.329 TCP 23.104.0.1:46104 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:42:27.295 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34854 10 6452 1 2025-10-09 13:38:39.873 00:05:02.253 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 13:43:04.883 00:00:10.394 TCP 23.104.0.1:55658 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:43:27.517 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:49882 10 6452 1 2025-10-09 13:39:39.875 00:05:02.248 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 13:44:05.322 00:00:10.363 TCP 23.104.0.1:46998 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:44:27.699 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42440 10 6452 1 2025-10-09 13:45:05.445 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:45:05.038 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:45:05.736 00:00:10.329 TCP 23.104.0.1:33326 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:45:27.876 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54038 10 6452 1 2025-10-09 13:46:06.108 00:00:10.377 TCP 23.104.0.1:36574 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:46:28.103 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49174 10 6452 1 2025-10-09 13:47:06.533 00:00:10.578 TCP 23.104.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:47:28.278 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53294 10 6452 1 2025-10-09 13:48:07.148 00:00:10.595 TCP 23.104.0.1:36958 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:48:28.488 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47382 10 6452 1 2025-10-09 13:44:39.878 00:05:02.250 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 13:49:07.781 00:00:10.366 TCP 23.104.0.1:34272 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:49:28.704 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:48062 10 6452 1 2025-10-09 13:45:39.881 00:05:02.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 13:50:05.132 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:50:05.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:50:08.184 00:00:10.367 TCP 23.104.0.1:56892 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:50:28.907 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-10-09 13:51:08.596 00:00:10.331 TCP 23.104.0.1:53776 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:51:29.118 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38288 10 6452 1 2025-10-09 13:52:08.968 00:00:10.379 TCP 23.104.0.1:60500 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:52:29.330 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42980 10 6452 1 2025-10-09 13:53:09.387 00:00:10.318 TCP 23.104.0.1:36958 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:53:29.538 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53404 10 6452 1 2025-10-09 13:54:09.745 00:00:10.366 TCP 23.104.0.1:37760 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:54:29.750 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48026 10 6452 1 2025-10-09 13:50:39.881 00:05:02.250 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 13:55:05.361 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 13:55:05.387 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 13:55:10.150 00:00:10.356 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:55:29.921 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51150 10 6452 1 2025-10-09 13:51:39.883 00:05:02.246 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 13:56:10.547 00:00:11.184 TCP 23.104.0.1:58542 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:56:30.137 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:34062 10 6452 1 2025-10-09 13:57:11.767 00:00:10.369 TCP 23.104.0.1:40980 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:57:30.313 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37334 10 6452 1 2025-10-09 13:58:12.176 00:00:10.360 TCP 23.104.0.1:34358 -> 1.101.0.1:3000 11 1507 1 2025-10-09 13:58:30.521 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43596 10 6452 1 Summary: total flows: 164, total bytes: 498480, total packets: 1575, avg bps: 1071, avg pps: 0, avg bpp: 316 Time window: 2025-10-09 12:56:39 - 2025-10-09 13:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0018s Wall: 0.0021s flows/second: 77141.0 Runtime: 0.0021s