Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 11:58:55.211 00:00:10.372 TCP 23.104.0.1:59940 -> 1.101.0.1:3000 11 1507 1 2025-10-27 11:59:16.306 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57132 10 6452 1 2025-10-27 11:55:48.134 00:05:03.278 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 11:59:55.624 00:00:10.321 TCP 23.104.0.1:35534 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:00:16.522 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43962 10 6452 1 2025-10-27 11:56:48.134 00:05:03.282 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 12:00:55.986 00:00:10.362 TCP 23.104.0.1:49468 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:01:16.729 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:55134 12 10375 1 2025-10-27 12:01:56.388 00:00:10.440 TCP 23.104.0.1:50052 -> 1.101.0.1:3000 15 1926 1 2025-10-27 12:02:16.973 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57710 10 6452 1 2025-10-27 12:02:56.859 00:00:10.389 TCP 23.104.0.1:39158 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:03:17.218 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52954 10 6452 1 2025-10-27 12:03:43.305 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:03:43.321 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 12:03:57.281 00:00:10.371 TCP 23.104.0.1:41544 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:04:17.434 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54478 10 6452 1 2025-10-27 12:04:57.684 00:00:10.374 TCP 23.104.0.1:45864 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:05:17.606 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33822 10 6452 1 2025-10-27 12:01:48.135 00:05:03.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 12:05:58.108 00:00:10.368 TCP 23.104.0.1:48790 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:06:17.820 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37880 10 6452 1 2025-10-27 12:02:48.133 00:05:03.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 12:06:58.512 00:00:10.328 TCP 23.104.0.1:37158 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:07:18.076 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34984 10 6452 1 2025-10-27 12:07:58.872 00:00:10.366 TCP 23.104.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:08:18.247 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35862 10 6452 1 2025-10-27 12:08:43.809 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 12:08:43.361 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:08:59.279 00:00:10.368 TCP 23.104.0.1:42908 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:09:18.419 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54662 10 6452 1 2025-10-27 12:09:59.682 00:00:10.369 TCP 23.104.0.1:44696 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:10:18.587 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50682 10 6452 1 2025-10-27 12:11:00.097 00:00:10.378 TCP 23.104.0.1:44278 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:11:18.762 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51556 10 6452 1 2025-10-27 12:07:48.137 00:05:03.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 12:12:00.529 00:00:10.365 TCP 23.104.0.1:45644 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:12:18.973 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60166 10 6452 1 2025-10-27 12:08:48.135 00:05:03.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 12:13:00.935 00:00:10.374 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:13:19.211 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37086 10 6452 1 2025-10-27 12:13:43.526 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:13:43.610 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 12:14:01.354 00:00:10.324 TCP 23.104.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:14:19.443 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:45048 10 6452 1 2025-10-27 12:15:01.716 00:00:10.377 TCP 23.104.0.1:33194 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:15:19.684 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59860 10 6452 1 2025-10-27 12:16:02.134 00:00:10.332 TCP 23.104.0.1:37138 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:16:19.924 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-10-27 12:17:02.502 00:00:10.372 TCP 23.104.0.1:58006 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:17:20.122 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50730 10 6452 1 2025-10-27 12:13:48.139 00:05:03.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 12:18:02.915 00:00:10.369 TCP 23.104.0.1:38242 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:18:20.332 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36932 10 6452 1 2025-10-27 12:18:43.439 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 12:18:43.781 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:14:48.137 00:05:03.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 12:19:03.322 00:00:10.373 TCP 23.104.0.1:46818 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:19:20.547 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55374 10 6452 1 2025-10-27 12:20:03.728 00:00:11.141 TCP 23.104.0.1:37890 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:20:20.758 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6452 1 2025-10-27 12:21:04.909 00:00:10.328 TCP 23.104.0.1:55702 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:21:20.970 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43898 10 6452 1 2025-10-27 12:22:05.276 00:00:10.368 TCP 23.104.0.1:41488 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:22:21.194 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37256 10 6452 1 2025-10-27 12:23:05.685 00:00:10.365 TCP 23.104.0.1:48362 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:23:21.416 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44844 10 6452 1 2025-10-27 12:23:43.851 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 12:23:43.779 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:19:48.140 00:05:03.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 12:24:06.109 00:00:10.320 TCP 23.104.0.1:38188 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:24:21.632 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58462 10 6452 1 2025-10-27 12:20:48.137 00:05:03.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 12:25:06.471 00:00:10.414 TCP 23.104.0.1:55552 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:25:21.855 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35130 10 6452 1 2025-10-27 12:26:06.926 00:00:10.372 TCP 23.104.0.1:48722 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:26:22.088 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58604 10 6452 1 2025-10-27 12:27:07.341 00:00:10.367 TCP 23.104.0.1:48560 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:27:22.304 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35742 10 6452 1 2025-10-27 12:28:07.750 00:00:10.324 TCP 23.104.0.1:39984 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:28:22.514 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6452 1 2025-10-27 12:28:43.834 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:28:43.675 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 12:29:08.111 00:00:10.375 TCP 23.104.0.1:57872 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:29:22.738 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 10 6452 1 2025-10-27 12:25:48.140 00:05:03.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 12:30:08.520 00:00:10.370 TCP 23.104.0.1:49702 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:30:22.962 00:00:11.866 TCP 1.101.0.1:3000 -> 22.102.0.1:44198 10 6452 1 2025-10-27 12:26:48.138 00:05:03.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 12:31:08.934 00:00:10.377 TCP 23.104.0.1:58724 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:31:24.868 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59894 10 6452 1 2025-10-27 12:32:09.347 00:00:10.362 TCP 23.104.0.1:54604 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:32:25.065 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52688 10 6452 1 2025-10-27 12:33:09.745 00:00:10.369 TCP 23.104.0.1:48106 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:33:25.280 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44766 10 6452 1 2025-10-27 12:33:43.929 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 12:33:44.052 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:34:10.144 00:00:10.365 TCP 23.104.0.1:52696 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:34:25.493 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60872 10 6452 1 2025-10-27 12:35:10.552 00:00:10.372 TCP 23.104.0.1:49216 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:35:25.710 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44948 10 6452 1 2025-10-27 12:31:48.143 00:05:03.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 12:36:10.961 00:00:10.366 TCP 23.104.0.1:46714 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:36:25.927 00:00:10.782 TCP 1.101.0.1:3000 -> 22.102.0.1:41806 10 6452 1 2025-10-27 12:32:48.141 00:05:03.295 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 12:37:11.367 00:00:10.322 TCP 23.104.0.1:50172 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:37:26.752 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58498 10 6452 1 2025-10-27 12:38:11.729 00:00:10.365 TCP 23.104.0.1:32860 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:38:26.974 00:00:10.594 TCP 1.101.0.1:3000 -> 22.102.0.1:57016 10 6452 1 2025-10-27 12:38:44.039 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 12:38:43.855 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:39:12.131 00:00:10.328 TCP 23.104.0.1:57280 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:39:27.607 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44520 10 6452 1 2025-10-27 12:40:12.497 00:00:10.903 TCP 23.104.0.1:43704 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:40:27.825 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40412 10 6452 1 2025-10-27 12:41:13.437 00:00:10.364 TCP 23.104.0.1:51794 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:41:28.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44038 10 6452 1 2025-10-27 12:37:48.147 00:05:03.288 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 12:42:13.842 00:00:10.404 TCP 23.104.0.1:57854 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:42:28.249 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55876 10 6452 1 2025-10-27 12:38:48.145 00:05:03.292 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 12:43:14.280 00:00:10.330 TCP 23.104.0.1:32790 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:43:28.452 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58322 10 6452 1 2025-10-27 12:43:43.999 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:43:44.118 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 12:44:14.650 00:00:10.368 TCP 23.104.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:44:28.666 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49144 10 6452 1 2025-10-27 12:45:15.065 00:00:10.364 TCP 23.104.0.1:34208 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:45:28.900 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:33670 10 6452 1 2025-10-27 12:46:15.465 00:00:10.364 TCP 23.104.0.1:34432 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:46:29.085 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57382 10 6452 1 2025-10-27 12:47:15.868 00:00:10.367 TCP 23.104.0.1:39018 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:47:29.258 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45878 10 6452 1 2025-10-27 12:43:48.148 00:05:03.287 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 12:48:16.271 00:00:10.367 TCP 23.104.0.1:52920 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:48:29.479 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53100 10 6452 1 2025-10-27 12:48:44.205 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 12:48:44.273 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:44:48.146 00:05:03.292 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 12:49:16.674 00:00:10.370 TCP 23.104.0.1:39546 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:49:29.703 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60066 10 6452 1 2025-10-27 12:50:17.103 00:00:10.574 TCP 23.104.0.1:40044 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:50:29.932 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:46504 10 6452 1 2025-10-27 12:51:17.720 00:00:10.376 TCP 23.104.0.1:50200 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:51:30.130 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49718 10 6452 1 2025-10-27 12:52:18.135 00:00:10.360 TCP 23.104.0.1:53102 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:52:30.347 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45016 10 6452 1 2025-10-27 12:53:18.534 00:00:10.363 TCP 23.104.0.1:36408 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:53:30.559 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6452 1 2025-10-27 12:53:44.388 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 12:53:44.258 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:49:48.148 00:05:03.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 12:54:18.934 00:00:10.346 TCP 23.104.0.1:42144 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:54:30.733 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37956 10 6452 1 2025-10-27 12:50:48.147 00:05:03.295 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 12:55:19.312 00:00:10.369 TCP 23.104.0.1:58188 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:55:30.945 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49564 10 6452 1 2025-10-27 12:56:19.722 00:00:10.369 TCP 23.104.0.1:38224 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:56:31.156 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60154 10 6452 1 2025-10-27 12:57:20.129 00:00:11.145 TCP 23.104.0.1:59972 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:57:31.368 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42330 10 6452 1 2025-10-27 12:58:21.340 00:00:10.364 TCP 23.104.0.1:46496 -> 1.101.0.1:3000 11 1507 1 2025-10-27 12:58:31.580 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54696 10 6452 1 2025-10-27 12:58:44.479 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 12:58:44.298 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1064, avg pps: 0, avg bpp: 318 Time window: 2025-10-27 11:55:48 - 2025-10-27 12:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0015s Wall: 0.0032s flows/second: 50821.3 Runtime: 0.0032s