Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 02:58:45.795 00:00:10.371 TCP 23.104.0.1:35690 -> 1.101.0.1:3000 11 1507 1 2025-10-23 02:58:57.268 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58434 10 6452 1 2025-10-23 02:55:46.156 00:05:02.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 02:59:46.205 00:00:10.445 TCP 23.104.0.1:60234 -> 1.101.0.1:3000 15 1926 1 2025-10-23 02:59:57.481 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35734 12 10369 1 2025-10-23 02:56:46.154 00:05:02.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 03:00:46.686 00:00:10.363 TCP 23.104.0.1:40622 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:00:57.721 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34406 10 6452 1 2025-10-23 03:01:36.764 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:01:36.755 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:01:47.100 00:00:10.362 TCP 23.104.0.1:53278 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:01:57.890 00:00:10.316 TCP 1.101.0.1:3000 -> 22.102.0.1:34186 10 6452 1 2025-10-23 03:02:47.501 00:00:10.366 TCP 23.104.0.1:34430 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:02:58.243 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52760 10 6452 1 2025-10-23 03:03:47.907 00:00:10.326 TCP 23.104.0.1:51062 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:03:58.473 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51418 10 6452 1 2025-10-23 03:04:48.300 00:00:10.370 TCP 23.104.0.1:49068 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:04:58.654 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50424 10 6452 1 2025-10-23 03:01:46.159 00:05:02.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 03:05:48.708 00:00:10.361 TCP 23.104.0.1:40994 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:05:58.869 00:00:10.932 TCP 1.101.0.1:3000 -> 22.102.0.1:54550 11 6504 1 2025-10-23 03:06:36.753 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:06:36.866 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:02:46.156 00:05:02.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 03:06:49.110 00:00:10.374 TCP 23.104.0.1:39214 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:06:59.847 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50920 10 6452 1 2025-10-23 03:07:49.522 00:00:10.364 TCP 23.104.0.1:45224 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:08:00.085 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41950 10 6452 1 2025-10-23 03:08:49.922 00:00:10.383 TCP 23.104.0.1:46234 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:09:00.308 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57928 10 6452 1 2025-10-23 03:09:50.345 00:00:10.363 TCP 23.104.0.1:35306 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:10:00.526 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33460 10 6452 1 2025-10-23 03:10:50.747 00:00:10.366 TCP 23.104.0.1:48882 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:11:00.744 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57308 10 6452 1 2025-10-23 03:11:36.571 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:11:36.907 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:07:46.160 00:05:02.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 03:11:51.151 00:00:10.327 TCP 23.104.0.1:44396 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:12:00.929 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:40284 10 6452 1 2025-10-23 03:08:46.157 00:05:02.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 03:12:51.519 00:00:10.326 TCP 23.104.0.1:49626 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:13:01.189 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37778 10 6452 1 2025-10-23 03:13:51.887 00:00:10.377 TCP 23.104.0.1:46574 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:14:01.399 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41682 10 6452 1 2025-10-23 03:14:52.308 00:00:10.363 TCP 23.104.0.1:55622 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:15:01.627 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37154 10 6452 1 2025-10-23 03:15:52.710 00:00:10.375 TCP 23.104.0.1:57382 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:16:01.849 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51486 10 6452 1 2025-10-23 03:16:36.898 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:16:36.770 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:16:53.112 00:00:10.364 TCP 23.104.0.1:40184 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:17:02.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53584 10 6452 1 2025-10-23 03:13:46.161 00:05:02.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 03:17:53.517 00:00:10.363 TCP 23.104.0.1:47304 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:18:02.298 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54866 10 6452 1 2025-10-23 03:14:46.159 00:05:02.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 03:18:53.921 00:00:10.391 TCP 23.104.0.1:34748 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:19:02.514 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56934 10 6452 1 2025-10-23 03:19:54.352 00:00:10.363 TCP 23.104.0.1:35826 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:20:02.746 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44710 10 6452 1 2025-10-23 03:20:54.753 00:00:10.377 TCP 23.104.0.1:48322 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:21:02.920 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6452 1 2025-10-23 03:21:36.863 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:21:36.992 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:21:55.171 00:00:10.360 TCP 23.104.0.1:44642 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:22:03.163 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43190 10 6452 1 2025-10-23 03:22:55.570 00:00:10.323 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:23:03.372 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35362 10 6452 1 2025-10-23 03:19:46.163 00:05:02.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 03:23:55.936 00:00:10.378 TCP 23.104.0.1:33428 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:24:03.582 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44782 10 6452 1 2025-10-23 03:20:46.162 00:05:02.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 03:24:56.353 00:00:10.367 TCP 23.104.0.1:38874 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:25:03.796 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37068 10 6452 1 2025-10-23 03:25:56.766 00:00:10.370 TCP 23.104.0.1:39478 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:26:04.023 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37548 10 6452 1 2025-10-23 03:26:36.906 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:26:37.023 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:26:57.175 00:00:10.365 TCP 23.104.0.1:47348 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:27:04.231 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55684 10 6452 1 2025-10-23 03:27:57.581 00:00:10.325 TCP 23.104.0.1:46620 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:28:04.405 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33844 10 6452 1 2025-10-23 03:28:57.940 00:00:10.335 TCP 23.104.0.1:37486 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:29:04.610 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:39362 10 6452 1 2025-10-23 03:25:46.167 00:05:02.969 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 03:29:58.314 00:00:10.344 TCP 23.104.0.1:59508 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:30:04.794 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55712 10 6452 1 2025-10-23 03:26:46.165 00:05:02.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 03:30:58.698 00:00:10.330 TCP 23.104.0.1:34874 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:31:05.006 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53544 10 6452 1 2025-10-23 03:31:37.220 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:31:36.991 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:31:59.093 00:00:10.368 TCP 23.104.0.1:58394 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:32:05.223 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41226 10 6452 1 2025-10-23 03:32:59.497 00:00:10.367 TCP 23.104.0.1:35982 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:33:05.443 00:00:10.282 TCP 1.101.0.1:3000 -> 22.102.0.1:56736 10 6452 1 2025-10-23 03:33:59.904 00:00:10.369 TCP 23.104.0.1:53534 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:34:05.786 00:00:10.284 TCP 1.101.0.1:3000 -> 22.102.0.1:33084 10 6452 1 2025-10-23 03:35:00.312 00:00:10.325 TCP 23.104.0.1:60298 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:35:06.107 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35108 10 6452 1 2025-10-23 03:31:46.168 00:05:02.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 03:36:00.674 00:00:10.361 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:36:06.327 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54138 10 6452 1 2025-10-23 03:36:37.413 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:36:37.169 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:32:46.164 00:05:02.974 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 03:37:01.110 00:00:10.362 TCP 23.104.0.1:52844 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:37:06.548 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42624 10 6452 1 2025-10-23 03:38:01.515 00:00:10.365 TCP 23.104.0.1:56488 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:38:06.759 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56744 10 6452 1 2025-10-23 03:39:01.925 00:00:10.387 TCP 23.104.0.1:51322 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:39:06.935 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:32974 10 6452 1 2025-10-23 03:40:02.355 00:00:10.371 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:40:07.179 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-10-23 03:41:02.755 00:00:10.389 TCP 23.104.0.1:60384 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:41:07.394 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47696 10 6452 1 2025-10-23 03:41:38.470 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:41:38.517 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:37:46.167 00:05:02.969 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 03:42:03.182 00:00:11.043 TCP 23.104.0.1:43300 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:42:07.562 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60306 10 6452 1 2025-10-23 03:38:46.166 00:05:02.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 03:43:04.270 00:00:10.366 TCP 23.104.0.1:43912 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:43:07.771 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39546 10 6452 1 2025-10-23 03:44:04.672 00:00:10.326 TCP 23.104.0.1:60618 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:44:07.993 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40712 10 6452 1 2025-10-23 03:45:05.035 00:00:10.322 TCP 23.104.0.1:40610 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:45:08.222 00:00:10.258 TCP 1.101.0.1:3000 -> 22.102.0.1:54276 10 6452 1 2025-10-23 03:46:05.399 00:00:10.363 TCP 23.104.0.1:58328 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:46:08.520 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52098 10 6452 1 2025-10-23 03:46:37.391 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:46:37.453 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:47:05.804 00:00:10.362 TCP 23.104.0.1:44878 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:47:08.744 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40894 10 6452 1 2025-10-23 03:43:46.170 00:05:02.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 03:48:06.202 00:00:10.366 TCP 23.104.0.1:54012 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:48:08.920 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55092 10 6452 1 2025-10-23 03:44:46.167 00:05:02.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 03:49:06.609 00:00:10.369 TCP 23.104.0.1:51524 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:49:09.150 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49190 10 6452 1 2025-10-23 03:50:07.018 00:00:10.435 TCP 23.104.0.1:49580 -> 1.101.0.1:3000 15 1926 1 2025-10-23 03:50:09.369 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:45090 12 10375 1 2025-10-23 03:51:09.636 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35766 10 6452 1 2025-10-23 03:51:07.489 00:00:10.375 TCP 23.104.0.1:34534 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:51:37.437 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:51:37.624 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:52:07.899 00:00:10.371 TCP 23.104.0.1:54296 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:52:09.847 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48034 10 6452 1 2025-10-23 03:53:08.307 00:00:10.368 TCP 23.104.0.1:49350 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:53:10.075 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45484 10 6452 1 2025-10-23 03:49:46.172 00:05:02.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 03:54:08.718 00:00:10.329 TCP 23.104.0.1:39426 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:54:10.286 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49710 10 6452 1 2025-10-23 03:50:46.169 00:05:02.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 03:55:09.102 00:00:10.378 TCP 23.104.0.1:47852 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:55:10.457 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48164 10 6452 1 2025-10-23 03:56:10.638 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:58912 10 6452 1 2025-10-23 03:56:09.528 00:00:10.385 TCP 23.104.0.1:36846 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:56:37.699 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 03:56:37.752 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 03:57:09.973 00:00:10.370 TCP 23.104.0.1:45984 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:57:10.933 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36110 10 6452 1 2025-10-23 03:58:10.386 00:00:10.366 TCP 23.104.0.1:55014 -> 1.101.0.1:3000 11 1507 1 2025-10-23 03:58:11.178 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49624 10 6452 1 Summary: total flows: 164, total bytes: 507078, total packets: 1585, avg bps: 1080, avg pps: 0, avg bpp: 319 Time window: 2025-10-23 02:55:46 - 2025-10-23 03:58:21 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0011s Wall: 0.0018s flows/second: 92867.0 Runtime: 0.0018s