Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 08:58:54.110 00:00:10.365 TCP 23.104.0.1:51658 -> 1.101.0.1:3000 11 1507 1 2025-10-28 08:59:08.509 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 08:59:08.494 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 08:59:15.621 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52044 10 6452 1 2025-10-28 08:55:48.592 00:05:03.280 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 08:59:54.516 00:00:10.368 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:00:15.852 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34342 10 6452 1 2025-10-28 08:56:48.590 00:05:03.286 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 09:00:54.922 00:00:10.381 TCP 23.104.0.1:39942 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:01:16.082 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52880 10 6452 1 2025-10-28 09:01:55.340 00:00:10.363 TCP 23.104.0.1:48358 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:02:16.295 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37974 10 6452 1 2025-10-28 09:02:55.745 00:00:10.368 TCP 23.104.0.1:45432 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:03:16.523 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52062 10 6452 1 2025-10-28 09:03:56.148 00:00:10.374 TCP 23.104.0.1:40600 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:04:08.753 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:04:08.717 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:04:16.735 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55126 10 6452 1 2025-10-28 09:04:56.557 00:00:10.371 TCP 23.104.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:05:16.952 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:43942 10 6452 1 2025-10-28 09:01:48.592 00:05:03.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 09:05:56.967 00:00:10.330 TCP 23.104.0.1:56988 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:06:17.159 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33928 10 6452 1 2025-10-28 09:02:48.591 00:05:03.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 09:06:57.340 00:00:10.384 TCP 23.104.0.1:34266 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:07:17.372 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39926 10 6452 1 2025-10-28 09:07:57.771 00:00:10.366 TCP 23.104.0.1:43142 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:08:17.591 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51786 10 6452 1 2025-10-28 09:09:08.615 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:09:08.654 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:08:58.176 00:00:15.879 TCP 23.104.0.1:34186 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:09:17.804 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6452 1 2025-10-28 09:10:04.114 00:00:10.362 TCP 23.104.0.1:58498 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:10:18.029 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49398 10 6452 1 2025-10-28 09:11:04.525 00:00:10.362 TCP 23.104.0.1:57720 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:11:18.259 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-10-28 09:07:48.593 00:05:03.285 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 09:12:04.926 00:00:10.772 TCP 23.104.0.1:32920 -> 1.101.0.1:3000 15 1926 1 2025-10-28 09:12:18.486 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:42852 12 10369 1 2025-10-28 09:08:48.593 00:05:03.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 09:13:05.734 00:00:10.362 TCP 23.104.0.1:60526 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:13:18.724 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47700 10 6452 1 2025-10-28 09:14:08.849 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:14:08.856 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:14:06.132 00:00:10.321 TCP 23.104.0.1:49784 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:14:18.894 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58862 10 6452 1 2025-10-28 09:15:06.490 00:00:10.364 TCP 23.104.0.1:41176 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:15:19.078 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35992 10 6452 1 2025-10-28 09:16:06.889 00:00:10.375 TCP 23.104.0.1:38568 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:16:19.300 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47140 10 6452 1 2025-10-28 09:17:07.304 00:00:10.368 TCP 23.104.0.1:36108 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:17:19.533 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38352 10 6452 1 2025-10-28 09:13:48.597 00:05:03.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 09:18:07.706 00:00:10.364 TCP 23.104.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:18:19.756 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40376 10 6452 1 2025-10-28 09:14:48.596 00:05:03.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 09:19:09.013 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:19:09.009 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:19:08.115 00:00:10.358 TCP 23.104.0.1:44134 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:19:19.971 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:59116 10 6452 1 2025-10-28 09:20:08.514 00:00:10.366 TCP 23.104.0.1:43216 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:20:20.218 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59922 10 6452 1 2025-10-28 09:21:08.923 00:00:10.382 TCP 23.104.0.1:50894 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:21:20.437 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39496 10 6452 1 2025-10-28 09:22:09.347 00:00:10.374 TCP 23.104.0.1:36840 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:22:20.654 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46688 10 6452 1 2025-10-28 09:23:09.759 00:00:10.378 TCP 23.104.0.1:43876 -> 1.101.0.1:3000 12 1559 1 2025-10-28 09:23:20.870 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37452 10 6452 1 2025-10-28 09:19:48.600 00:05:03.280 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 09:24:09.136 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:24:08.891 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:24:10.171 00:00:10.368 TCP 23.104.0.1:54610 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:24:21.097 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55742 10 6452 1 2025-10-28 09:20:48.597 00:05:03.286 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 09:25:10.575 00:00:10.365 TCP 23.104.0.1:40024 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:25:21.304 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46912 10 6452 1 2025-10-28 09:26:10.982 00:00:10.373 TCP 23.104.0.1:56464 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:26:21.518 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45656 10 6452 1 2025-10-28 09:27:11.384 00:00:10.437 TCP 23.104.0.1:53042 -> 1.101.0.1:3000 15 1926 1 2025-10-28 09:27:21.748 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:37464 12 10375 1 2025-10-28 09:28:11.870 00:00:10.396 TCP 23.104.0.1:57042 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:28:21.940 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:34500 10 6452 1 2025-10-28 09:29:09.012 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:29:09.013 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:29:12.312 00:00:10.371 TCP 23.104.0.1:33580 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:29:22.189 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:59926 10 6452 1 2025-10-28 09:25:48.602 00:05:03.281 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 09:30:12.721 00:00:10.372 TCP 23.104.0.1:60020 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:30:22.384 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37332 10 6452 1 2025-10-28 09:26:48.600 00:05:03.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 09:31:13.132 00:00:10.364 TCP 23.104.0.1:34366 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:31:22.601 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56146 10 6452 1 2025-10-28 09:32:13.540 00:00:10.362 TCP 23.104.0.1:59190 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:32:22.822 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:59400 12 6556 1 2025-10-28 09:33:13.941 00:00:10.371 TCP 23.104.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:33:23.090 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54188 10 6452 1 2025-10-28 09:34:09.286 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:34:09.278 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:34:14.349 00:00:10.371 TCP 23.104.0.1:39020 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:34:23.327 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60984 10 6452 1 2025-10-28 09:35:14.758 00:00:10.336 TCP 23.104.0.1:50306 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:35:23.550 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36900 10 6452 1 2025-10-28 09:31:48.602 00:05:03.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 09:36:15.131 00:00:10.366 TCP 23.104.0.1:54336 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:36:23.728 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51012 10 6452 1 2025-10-28 09:32:48.601 00:05:03.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 09:37:15.541 00:00:10.379 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:37:23.944 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:60696 10 6452 1 2025-10-28 09:38:15.970 00:00:10.377 TCP 23.104.0.1:52846 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:38:24.190 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60794 10 6452 1 2025-10-28 09:39:09.434 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:39:09.260 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:39:16.388 00:00:10.362 TCP 23.104.0.1:41916 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:39:24.415 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35048 10 6452 1 2025-10-28 09:40:16.797 00:00:10.374 TCP 23.104.0.1:58380 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:40:24.636 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:45140 10 6452 1 2025-10-28 09:41:17.208 00:00:10.367 TCP 23.104.0.1:39332 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:41:24.820 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:37754 10 6452 1 2025-10-28 09:37:48.603 00:05:03.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 09:42:17.611 00:00:10.562 TCP 23.104.0.1:51598 -> 1.101.0.1:3000 15 1926 1 2025-10-28 09:42:25.006 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:50726 12 10369 1 2025-10-28 09:38:48.601 00:05:03.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 09:43:18.228 00:00:10.322 TCP 23.104.0.1:44016 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:43:25.251 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60866 10 6452 1 2025-10-28 09:44:09.438 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:44:09.436 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:44:18.593 00:00:10.326 TCP 23.104.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:44:25.464 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42352 10 6452 1 2025-10-28 09:45:18.956 00:00:10.365 TCP 23.104.0.1:40476 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:45:25.686 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58436 10 6452 1 2025-10-28 09:46:19.361 00:00:10.318 TCP 23.104.0.1:56648 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:46:25.914 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:41662 10 6452 1 2025-10-28 09:47:19.721 00:00:10.366 TCP 23.104.0.1:40036 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:47:26.164 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55132 10 6452 1 2025-10-28 09:43:48.604 00:05:03.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 09:48:20.126 00:00:16.097 TCP 23.104.0.1:36190 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:48:26.380 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:33970 10 6452 1 2025-10-28 09:44:48.602 00:05:03.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 09:49:09.554 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:49:09.576 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:49:26.644 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41568 10 6452 1 2025-10-28 09:49:26.290 00:00:10.361 TCP 23.104.0.1:59982 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:50:26.687 00:00:10.341 TCP 23.104.0.1:49280 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:50:26.869 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:54870 10 6452 1 2025-10-28 09:51:27.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59074 10 6452 1 2025-10-28 09:51:27.073 00:00:10.324 TCP 23.104.0.1:58724 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:52:27.438 00:00:10.365 TCP 23.104.0.1:59796 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:52:27.325 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54486 10 6452 1 2025-10-28 09:53:27.842 00:00:10.393 TCP 23.104.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:53:27.541 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60132 10 6452 1 2025-10-28 09:49:48.605 00:05:03.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 09:54:09.727 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:54:09.638 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:54:28.271 00:00:10.367 TCP 23.104.0.1:50488 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:54:27.754 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56074 10 6452 1 2025-10-28 09:50:48.603 00:05:03.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 09:55:28.676 00:00:10.376 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:55:27.979 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-10-28 09:56:28.229 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:52780 10 6452 1 2025-10-28 09:56:29.105 00:00:10.381 TCP 23.104.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:57:29.521 00:00:10.362 TCP 23.104.0.1:58852 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:57:28.461 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55096 10 6452 1 2025-10-28 09:58:29.926 00:00:10.384 TCP 23.104.0.1:36142 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:58:28.680 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:45028 10 6452 1 Summary: total flows: 164, total bytes: 511518, total packets: 1593, avg bps: 1084, avg pps: 0, avg bpp: 321 Time window: 2025-10-28 08:55:48 - 2025-10-28 09:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0010s User: 0.0031s Wall: 0.0017s flows/second: 94357.5 Runtime: 0.0018s