Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 07:58:53.595 00:00:10.327 TCP 23.104.0.1:47484 -> 1.101.0.1:3000 11 1507 1 2025-10-30 07:59:10.688 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35920 10 6452 1 2025-10-30 07:55:49.479 00:05:03.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 08:00:05.278 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:00:05.164 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 07:59:53.959 00:00:10.370 TCP 23.104.0.1:36818 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:00:10.897 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:41578 10 6452 1 2025-10-30 07:55:52.859 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 08:00:54.363 00:00:10.367 TCP 23.104.0.1:60512 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:01:11.144 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54700 10 6452 1 2025-10-30 08:01:54.770 00:00:10.336 TCP 23.104.0.1:47438 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:02:11.356 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34082 10 6452 1 2025-10-30 08:02:55.147 00:00:10.364 TCP 23.104.0.1:33948 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:03:11.576 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48068 10 6452 1 2025-10-30 08:03:55.548 00:00:10.364 TCP 23.104.0.1:60818 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:04:11.799 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38438 10 6452 1 2025-10-30 08:05:05.175 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 08:04:55.953 00:00:10.368 TCP 23.104.0.1:50508 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:05:05.169 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:05:12.021 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55548 10 6452 1 2025-10-30 08:01:49.481 00:05:03.379 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 08:05:56.355 00:00:10.330 TCP 23.104.0.1:41320 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:06:12.248 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46128 10 6452 1 2025-10-30 08:01:52.860 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 08:06:56.720 00:00:10.430 TCP 23.104.0.1:55452 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:07:12.467 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60034 10 6452 1 2025-10-30 08:07:57.190 00:00:10.366 TCP 23.104.0.1:58880 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:08:12.641 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51026 10 6452 1 2025-10-30 08:08:57.593 00:00:10.360 TCP 23.104.0.1:43616 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:09:12.860 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38188 10 6452 1 2025-10-30 08:10:05.129 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:10:05.188 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 08:09:58.047 00:00:10.397 TCP 23.104.0.1:49822 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:10:13.091 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45720 10 6452 1 2025-10-30 08:10:58.493 00:00:10.328 TCP 23.104.0.1:52026 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:11:13.310 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44446 10 6452 1 2025-10-30 08:07:49.481 00:05:03.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 08:11:58.862 00:00:10.370 TCP 23.104.0.1:47120 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:12:13.519 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34054 10 6452 1 2025-10-30 08:07:52.862 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 08:12:59.268 00:00:10.332 TCP 23.104.0.1:39110 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:13:13.729 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38064 10 6452 1 2025-10-30 08:13:59.639 00:00:10.365 TCP 23.104.0.1:37032 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:14:13.947 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:50376 10 6452 1 2025-10-30 08:15:05.415 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:15:05.408 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 08:15:00.069 00:00:10.368 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:15:14.200 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42472 10 6452 1 2025-10-30 08:16:00.474 00:00:10.366 TCP 23.104.0.1:43732 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:16:14.419 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45590 10 6452 1 2025-10-30 08:17:00.879 00:00:10.383 TCP 23.104.0.1:38922 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:17:14.641 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45408 10 6452 1 2025-10-30 08:13:49.482 00:05:03.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 08:18:01.308 00:00:10.367 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:18:14.865 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:59164 10 6452 1 2025-10-30 08:13:52.863 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 08:19:01.711 00:00:10.364 TCP 23.104.0.1:37252 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:19:15.108 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:58414 10 6452 1 2025-10-30 08:20:05.259 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:20:05.288 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 08:20:02.116 00:00:10.362 TCP 23.104.0.1:35780 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:20:15.381 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 10 6452 1 2025-10-30 08:21:02.514 00:00:10.367 TCP 23.104.0.1:36582 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:21:15.556 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33422 10 6452 1 2025-10-30 08:22:02.920 00:00:10.390 TCP 23.104.0.1:45810 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:22:15.772 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33418 10 6452 1 2025-10-30 08:23:03.352 00:00:10.317 TCP 23.104.0.1:42812 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:23:15.989 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:50678 11 6504 1 2025-10-30 08:19:49.485 00:05:03.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 08:24:03.711 00:00:10.368 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:24:16.279 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45934 10 6452 1 2025-10-30 08:19:52.865 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 08:25:05.609 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:25:05.653 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 08:25:04.116 00:00:10.326 TCP 23.104.0.1:58864 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:25:16.509 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60962 10 6452 1 2025-10-30 08:26:04.481 00:00:10.326 TCP 23.104.0.1:43780 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:26:16.724 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 10 6452 1 2025-10-30 08:27:04.846 00:00:10.387 TCP 23.104.0.1:57086 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:27:16.939 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44694 10 6452 1 2025-10-30 08:28:05.277 00:00:10.923 TCP 23.104.0.1:38054 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:28:17.171 00:00:14.631 TCP 1.101.0.1:3000 -> 22.102.0.1:57736 10 6452 1 2025-10-30 08:29:06.240 00:00:10.365 TCP 23.104.0.1:49850 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:29:21.856 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50416 10 6452 1 2025-10-30 08:25:49.486 00:05:03.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 08:30:05.645 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 08:30:05.799 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:30:06.648 00:00:10.371 TCP 23.104.0.1:48664 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:30:22.082 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 10 6452 1 2025-10-30 08:25:52.868 00:05:56.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 08:31:07.063 00:00:21.299 TCP 23.104.0.1:48236 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:31:22.304 00:00:12.125 TCP 1.101.0.1:3000 -> 22.102.0.1:42894 10 6452 1 2025-10-30 08:32:18.404 00:00:10.362 TCP 23.104.0.1:46046 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:32:24.470 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60438 10 6452 1 2025-10-30 08:33:18.807 00:00:10.328 TCP 23.104.0.1:45958 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:33:24.675 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32812 10 6452 1 2025-10-30 08:34:19.174 00:00:10.971 TCP 23.104.0.1:49370 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:34:24.892 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47816 10 6452 1 2025-10-30 08:35:06.084 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 08:35:06.053 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:35:20.187 00:00:10.364 TCP 23.104.0.1:59120 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:35:25.109 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44538 10 6452 1 2025-10-30 08:31:49.487 00:05:03.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 08:36:20.590 00:00:10.363 TCP 23.104.0.1:49028 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:36:25.333 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34132 10 6452 1 2025-10-30 08:31:52.869 00:05:56.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 08:37:20.989 00:00:10.670 TCP 23.104.0.1:44678 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:37:25.555 00:00:10.744 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-10-30 08:38:26.347 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37556 10 6452 1 2025-10-30 08:38:21.701 00:00:10.328 TCP 23.104.0.1:59604 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:39:22.093 00:00:10.361 TCP 23.104.0.1:60028 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:39:26.566 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:55056 10 6452 1 2025-10-30 08:40:05.936 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:40:05.766 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 08:40:22.501 00:00:10.364 TCP 23.104.0.1:56814 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:40:26.752 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47666 10 6452 1 2025-10-30 08:41:22.901 00:00:10.367 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:41:26.971 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60894 10 6452 1 2025-10-30 08:37:49.491 00:05:03.377 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 08:42:23.305 00:00:10.362 TCP 23.104.0.1:57358 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:42:27.192 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:57674 10 6452 1 2025-10-30 08:37:52.870 00:05:56.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 08:43:23.708 00:00:11.028 TCP 23.104.0.1:47214 -> 1.101.0.1:3000 15 1926 1 2025-10-30 08:43:27.383 00:00:19.936 TCP 1.101.0.1:3000 -> 22.102.0.1:32828 12 10375 1 2025-10-30 08:44:24.808 00:00:10.331 TCP 23.104.0.1:56120 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:44:37.357 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33912 10 6452 1 2025-10-30 08:45:05.949 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:45:05.909 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 08:45:25.177 00:00:10.361 TCP 23.104.0.1:52126 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:45:37.575 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59786 10 6452 1 2025-10-30 08:46:25.576 00:00:10.325 TCP 23.104.0.1:40856 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:46:37.793 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52100 10 6452 1 2025-10-30 08:47:25.939 00:00:10.340 TCP 23.104.0.1:51000 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:47:38.007 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37138 10 6452 1 2025-10-30 08:43:49.492 00:05:03.376 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 08:48:26.317 00:00:10.324 TCP 23.104.0.1:37902 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:48:38.222 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58660 10 6452 1 2025-10-30 08:43:52.870 00:05:56.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 08:49:26.679 00:00:10.367 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:49:38.452 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-10-30 08:50:06.124 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:50:06.001 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 08:50:27.106 00:00:10.375 TCP 23.104.0.1:41044 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:50:38.672 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34204 10 6452 1 2025-10-30 08:51:27.520 00:00:10.367 TCP 23.104.0.1:44838 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:51:38.894 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46270 10 6452 1 2025-10-30 08:52:27.923 00:00:10.409 TCP 23.104.0.1:50698 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:52:39.117 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57876 10 6452 1 2025-10-30 08:53:28.363 00:00:10.367 TCP 23.104.0.1:46246 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:53:39.338 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45412 10 6452 1 2025-10-30 08:49:49.492 00:05:03.385 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 08:54:28.769 00:00:10.376 TCP 23.104.0.1:49688 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:54:39.554 00:00:10.272 TCP 1.101.0.1:3000 -> 22.102.0.1:49690 10 6452 1 2025-10-30 08:49:52.875 00:05:56.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 08:55:06.005 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 08:55:06.289 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 08:55:29.186 00:00:10.325 TCP 23.104.0.1:45176 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:55:39.860 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35598 10 6452 1 2025-10-30 08:56:29.545 00:00:10.374 TCP 23.104.0.1:49710 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:56:40.083 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:57968 10 6452 1 2025-10-30 08:57:29.965 00:00:10.382 TCP 23.104.0.1:60674 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:57:40.266 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46184 10 6452 1 2025-10-30 08:58:30.379 00:00:10.360 TCP 23.104.0.1:37920 -> 1.101.0.1:3000 11 1507 1 2025-10-30 08:58:40.484 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39312 10 6452 1 Summary: total flows: 164, total bytes: 502742, total packets: 1579, avg bps: 1063, avg pps: 0, avg bpp: 318 Time window: 2025-10-30 07:55:49 - 2025-10-30 08:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0009s Wall: 0.0026s flows/second: 63199.7 Runtime: 0.0026s