Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 07:58:54.707 00:00:10.363 TCP 23.104.0.1:39242 -> 1.101.0.1:3000 11 1507 1 2025-10-29 07:59:36.094 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 07:59:36.090 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 07:59:26.873 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42472 10 6452 1 2025-10-29 07:55:49.004 00:05:03.372 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 07:59:55.114 00:00:10.373 TCP 23.104.0.1:39624 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:00:27.071 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47186 10 6452 1 2025-10-29 07:55:52.377 00:05:56.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 08:00:55.523 00:00:10.323 TCP 23.104.0.1:49148 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:01:27.280 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57262 10 6452 1 2025-10-29 08:01:55.887 00:00:10.385 TCP 23.104.0.1:35822 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:02:27.488 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-10-29 08:02:56.307 00:00:10.328 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:03:27.658 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39760 10 6452 1 2025-10-29 08:03:56.671 00:00:10.370 TCP 23.104.0.1:36508 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:04:36.204 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 08:04:35.969 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 08:04:27.830 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56682 10 6452 1 2025-10-29 08:04:57.102 00:00:10.361 TCP 23.104.0.1:35570 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:05:28.069 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38702 10 6452 1 2025-10-29 08:01:49.034 00:05:03.343 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 08:05:57.505 00:00:10.367 TCP 23.104.0.1:44456 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:06:28.280 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59442 10 6452 1 2025-10-29 08:01:52.381 00:05:56.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 08:06:57.903 00:00:10.373 TCP 23.104.0.1:33560 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:07:28.498 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52270 10 6452 1 2025-10-29 08:07:58.314 00:00:10.367 TCP 23.104.0.1:41412 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:08:28.711 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49690 10 6452 1 2025-10-29 08:08:58.721 00:00:10.372 TCP 23.104.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:09:36.417 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 08:09:36.429 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 08:09:28.921 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:58706 10 6452 1 2025-10-29 08:09:59.130 00:00:10.329 TCP 23.104.0.1:37778 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:10:29.106 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52326 10 6452 1 2025-10-29 08:10:59.495 00:00:10.364 TCP 23.104.0.1:53456 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:11:29.327 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60942 10 6452 1 2025-10-29 08:07:49.036 00:05:03.346 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 08:11:59.897 00:00:10.372 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:12:29.535 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:35776 12 10369 1 2025-10-29 08:07:52.379 00:05:56.656 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 08:13:00.301 00:00:10.452 TCP 23.104.0.1:35182 -> 1.101.0.1:3000 15 1926 1 2025-10-29 08:13:29.805 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-10-29 08:14:00.794 00:00:10.347 TCP 23.104.0.1:57348 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:14:36.597 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 08:14:36.662 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 08:14:30.025 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35638 10 6452 1 2025-10-29 08:15:01.178 00:00:10.375 TCP 23.104.0.1:54126 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:15:30.233 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36124 10 6452 1 2025-10-29 08:16:01.590 00:00:10.369 TCP 23.104.0.1:54404 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:16:30.412 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41652 10 6452 1 2025-10-29 08:17:01.992 00:00:10.330 TCP 23.104.0.1:40646 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:17:30.631 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:39326 12 10375 1 2025-10-29 08:13:49.039 00:05:03.344 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 08:18:02.366 00:00:10.437 TCP 23.104.0.1:43460 -> 1.101.0.1:3000 15 1926 1 2025-10-29 08:18:30.826 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49970 10 6452 1 2025-10-29 08:13:52.383 00:05:56.654 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 08:19:02.844 00:00:10.388 TCP 23.104.0.1:54796 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:19:36.646 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 08:19:36.459 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 08:19:31.065 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53894 10 6452 1 2025-10-29 08:20:03.270 00:00:10.369 TCP 23.104.0.1:56320 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:20:31.279 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58210 10 6452 1 2025-10-29 08:21:03.683 00:00:10.367 TCP 23.104.0.1:39428 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:21:31.494 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 10 6452 1 2025-10-29 08:22:04.107 00:00:10.366 TCP 23.104.0.1:60308 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:22:31.710 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54070 10 6452 1 2025-10-29 08:23:04.513 00:00:10.368 TCP 23.104.0.1:58230 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:23:31.881 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:33266 10 6452 1 2025-10-29 08:19:49.039 00:05:03.344 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 08:24:04.922 00:00:10.435 TCP 23.104.0.1:55454 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:24:36.618 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 08:24:36.717 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 08:24:32.123 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33146 10 6452 1 2025-10-29 08:19:52.384 00:05:56.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 08:25:05.394 00:00:10.367 TCP 23.104.0.1:43992 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:25:32.293 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43886 10 6452 1 2025-10-29 08:26:05.800 00:00:10.361 TCP 23.104.0.1:60478 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:26:32.506 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40890 10 6452 1 2025-10-29 08:27:06.201 00:00:10.365 TCP 23.104.0.1:51430 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:27:32.721 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:41272 12 10369 1 2025-10-29 08:28:06.602 00:00:10.443 TCP 23.104.0.1:37954 -> 1.101.0.1:3000 15 1926 1 2025-10-29 08:28:32.999 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47586 10 6452 1 2025-10-29 08:29:07.102 00:00:11.394 TCP 23.104.0.1:49752 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:29:36.891 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 08:29:36.782 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 08:29:33.219 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42326 10 6452 1 2025-10-29 08:25:49.040 00:05:03.344 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 08:30:08.536 00:00:10.322 TCP 23.104.0.1:39066 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:30:33.429 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46790 10 6452 1 2025-10-29 08:25:52.386 00:05:56.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 08:31:08.897 00:00:10.724 TCP 23.104.0.1:37006 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:31:33.601 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58722 10 6452 1 2025-10-29 08:32:09.663 00:00:10.372 TCP 23.104.0.1:34744 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:32:33.812 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57078 12 10584 1 2025-10-29 08:33:10.098 00:00:10.400 TCP 23.104.0.1:39264 -> 1.101.0.1:3000 15 1926 1 2025-10-29 08:33:34.077 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36904 10 6661 1 2025-10-29 08:34:10.538 00:00:10.366 TCP 23.104.0.1:32850 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:34:36.933 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 08:34:36.934 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 08:34:34.296 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40006 11 6701 1 2025-10-29 08:35:10.947 00:00:10.383 TCP 23.104.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:35:34.510 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59754 10 6661 1 2025-10-29 08:31:49.044 00:05:03.342 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 08:36:11.366 00:00:10.362 TCP 23.104.0.1:33276 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:36:34.727 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58848 10 6661 1 2025-10-29 08:31:52.391 00:05:56.657 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 08:37:11.763 00:00:10.375 TCP 23.104.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:37:34.939 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:41100 10 6661 1 2025-10-29 08:38:12.182 00:00:10.359 TCP 23.104.0.1:34488 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:38:35.131 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6661 1 2025-10-29 08:39:12.587 00:00:10.364 TCP 23.104.0.1:52832 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:39:36.623 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 08:39:36.897 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 08:39:35.344 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6661 1 2025-10-29 08:40:12.997 00:00:10.387 TCP 23.104.0.1:51476 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:40:35.558 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54672 10 6661 1 2025-10-29 08:41:13.462 00:00:10.360 TCP 23.104.0.1:40186 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:41:35.729 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51300 10 6661 1 2025-10-29 08:37:49.050 00:05:03.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 08:42:13.860 00:00:10.369 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:42:35.903 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36376 10 6661 1 2025-10-29 08:37:52.389 00:05:56.659 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 08:43:14.270 00:00:10.364 TCP 23.104.0.1:59316 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:43:36.087 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53976 10 6661 1 2025-10-29 08:44:14.672 00:00:10.362 TCP 23.104.0.1:53742 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:44:37.101 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 08:44:37.056 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 08:44:36.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59454 10 6661 1 2025-10-29 08:45:15.100 00:00:10.362 TCP 23.104.0.1:37492 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:45:36.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38916 10 6661 1 2025-10-29 08:46:15.503 00:00:10.364 TCP 23.104.0.1:39788 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:46:36.735 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46104 10 6661 1 2025-10-29 08:47:15.906 00:00:10.363 TCP 23.104.0.1:42004 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:47:36.954 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:44104 10 6661 1 2025-10-29 08:43:49.051 00:05:03.341 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 08:48:16.308 00:00:10.361 TCP 23.104.0.1:54180 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:48:37.154 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6661 1 2025-10-29 08:43:52.393 00:05:56.656 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 08:49:16.713 00:00:10.365 TCP 23.104.0.1:43868 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:49:37.414 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 08:49:37.406 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 08:49:37.393 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:40546 10 6661 1 2025-10-29 08:50:17.112 00:00:10.374 TCP 23.104.0.1:48572 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:50:37.576 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6661 1 2025-10-29 08:51:17.526 00:00:10.360 TCP 23.104.0.1:48288 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:51:37.751 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52790 10 6661 1 2025-10-29 08:52:17.933 00:00:10.344 TCP 23.104.0.1:58548 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:52:37.971 00:00:10.273 TCP 1.101.0.1:3000 -> 22.102.0.1:32914 14 6869 1 2025-10-29 08:53:18.314 00:00:10.323 TCP 23.104.0.1:55402 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:53:38.288 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54374 10 6661 1 2025-10-29 08:49:49.052 00:05:03.342 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 08:54:18.678 00:00:10.371 TCP 23.104.0.1:40442 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:54:37.391 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 08:54:37.099 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 08:49:52.395 00:05:56.657 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 08:54:38.502 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43102 10 6661 1 2025-10-29 08:55:19.099 00:00:10.363 TCP 23.104.0.1:46446 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:55:38.717 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53598 10 6661 1 2025-10-29 08:56:19.499 00:00:10.369 TCP 23.104.0.1:34152 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:56:38.930 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:45000 10 6661 1 2025-10-29 08:57:19.905 00:00:10.446 TCP 23.104.0.1:46560 -> 1.101.0.1:3000 15 1926 1 2025-10-29 08:57:39.117 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:56188 12 10375 1 2025-10-29 08:58:20.392 00:00:10.365 TCP 23.104.0.1:46666 -> 1.101.0.1:3000 11 1507 1 2025-10-29 08:58:39.309 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44716 10 6452 1 Summary: total flows: 164, total bytes: 525519, total packets: 1607, avg bps: 1112, avg pps: 0, avg bpp: 327 Time window: 2025-10-29 07:55:49 - 2025-10-29 08:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0010s Wall: 0.0020s flows/second: 81801.1 Runtime: 0.0020s