Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 09:58:56.496 00:00:10.358 TCP 23.104.0.1:35692 -> 1.101.0.1:3000 11 1507 1 2025-10-30 09:59:04.945 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39764 10 6452 1 2025-10-30 09:55:49.512 00:05:03.383 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 10:00:07.514 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:00:07.462 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 09:59:56.895 00:00:10.383 TCP 23.104.0.1:43484 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:00:05.172 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58792 10 6452 1 2025-10-30 09:55:52.897 00:05:56.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 10:00:57.307 00:00:10.366 TCP 23.104.0.1:42436 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:01:05.347 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 10 6452 1 2025-10-30 10:01:57.715 00:00:10.376 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:02:05.559 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60390 10 6452 1 2025-10-30 10:02:58.128 00:00:10.366 TCP 23.104.0.1:46250 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:03:05.769 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47266 10 6452 1 2025-10-30 10:03:58.532 00:00:10.364 TCP 23.104.0.1:37242 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:04:05.985 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:32768 10 6452 1 2025-10-30 10:05:07.570 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 10:04:58.937 00:00:10.372 TCP 23.104.0.1:35306 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:05:07.587 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:05:06.164 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33212 10 6452 1 2025-10-30 10:01:49.514 00:05:03.383 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 10:05:59.348 00:00:10.574 TCP 23.104.0.1:57890 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:06:06.377 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 10 6452 1 2025-10-30 10:01:52.898 00:05:56.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 10:06:59.967 00:00:10.895 TCP 23.104.0.1:52316 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:07:06.586 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54288 10 6452 1 2025-10-30 10:08:00.910 00:00:10.365 TCP 23.104.0.1:53942 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:08:06.806 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40308 10 6452 1 2025-10-30 10:09:01.314 00:00:10.372 TCP 23.104.0.1:36510 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:09:06.979 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-10-30 10:10:07.686 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 10:10:07.678 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:10:01.727 00:00:10.338 TCP 23.104.0.1:42766 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:10:07.207 00:00:10.407 TCP 1.101.0.1:3000 -> 22.102.0.1:60448 10 6452 1 2025-10-30 10:11:02.109 00:00:10.366 TCP 23.104.0.1:35726 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:11:07.657 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56536 10 6452 1 2025-10-30 10:07:49.515 00:05:03.383 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 10:12:02.513 00:00:10.366 TCP 23.104.0.1:49422 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:12:07.894 00:00:11.219 TCP 1.101.0.1:3000 -> 22.102.0.1:59132 11 6504 1 2025-10-30 10:07:52.900 00:05:56.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 10:13:02.918 00:00:10.362 TCP 23.104.0.1:36762 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:13:09.154 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43904 10 6452 1 2025-10-30 10:14:03.314 00:00:10.360 TCP 23.104.0.1:33072 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:14:09.335 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45464 10 6452 1 2025-10-30 10:15:07.675 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:15:07.742 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 10:15:03.714 00:00:10.322 TCP 23.104.0.1:59174 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:15:09.555 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48224 10 6452 1 2025-10-30 10:16:04.098 00:00:10.366 TCP 23.104.0.1:56538 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:16:09.798 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56994 10 6452 1 2025-10-30 10:17:04.499 00:00:10.367 TCP 23.104.0.1:42532 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:17:10.028 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37540 10 6452 1 2025-10-30 10:13:49.517 00:05:03.382 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 10:18:04.903 00:00:10.368 TCP 23.104.0.1:39522 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:18:10.249 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36658 10 6452 1 2025-10-30 10:13:52.901 00:05:56.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 10:19:05.310 00:00:10.323 TCP 23.104.0.1:45916 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:19:10.483 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-10-30 10:20:07.931 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 10:20:07.942 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:20:05.675 00:00:10.358 TCP 23.104.0.1:60982 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:20:10.701 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-10-30 10:21:06.099 00:00:10.363 TCP 23.104.0.1:35208 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:21:10.920 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:33348 10 6452 1 2025-10-30 10:22:06.502 00:00:10.364 TCP 23.104.0.1:57334 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:22:11.166 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47868 10 6452 1 2025-10-30 10:23:11.380 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58588 10 6452 1 2025-10-30 10:23:06.903 00:00:10.369 TCP 23.104.0.1:42206 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:19:49.517 00:05:03.384 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 10:24:11.606 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42840 10 6452 1 2025-10-30 10:24:07.307 00:00:10.362 TCP 23.104.0.1:44472 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:19:52.901 00:05:56.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 10:25:08.283 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:25:08.147 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 10:25:07.707 00:00:10.370 TCP 23.104.0.1:38656 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:25:11.823 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43388 10 6452 1 2025-10-30 10:26:08.113 00:00:10.367 TCP 23.104.0.1:41176 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:26:12.069 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60452 10 6452 1 2025-10-30 10:27:08.519 00:00:10.367 TCP 23.104.0.1:48986 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:27:12.248 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43068 10 6452 1 2025-10-30 10:28:08.923 00:00:10.465 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 15 1926 1 2025-10-30 10:28:12.473 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:46474 12 10375 1 2025-10-30 10:29:09.423 00:00:10.371 TCP 23.104.0.1:59580 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:29:12.716 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48802 10 6452 1 2025-10-30 10:25:49.518 00:05:03.384 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 10:30:08.173 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:30:08.022 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 10:30:09.829 00:00:10.351 TCP 23.104.0.1:47220 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:30:12.895 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60802 10 6452 1 2025-10-30 10:25:52.905 00:05:56.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 10:31:10.218 00:00:10.366 TCP 23.104.0.1:56850 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:31:13.113 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:52806 10 6452 1 2025-10-30 10:32:10.624 00:00:10.363 TCP 23.104.0.1:41390 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:32:13.294 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44588 10 6452 1 2025-10-30 10:33:11.026 00:00:10.326 TCP 23.104.0.1:50858 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:33:13.511 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38556 10 6452 1 2025-10-30 10:34:11.387 00:00:10.323 TCP 23.104.0.1:52908 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:34:13.735 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45692 10 6452 1 2025-10-30 10:35:08.172 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:35:08.089 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 10:35:11.750 00:00:10.332 TCP 23.104.0.1:46316 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:35:13.959 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:42554 10 6452 1 2025-10-30 10:31:49.521 00:05:03.386 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 10:36:14.155 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40016 10 6452 1 2025-10-30 10:36:12.113 00:00:10.362 TCP 23.104.0.1:32902 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:31:52.906 00:05:56.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 10:37:12.512 00:00:10.371 TCP 23.104.0.1:60088 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:37:14.337 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44498 10 6452 1 2025-10-30 10:38:12.921 00:00:10.395 TCP 23.104.0.1:40484 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:38:14.554 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44572 10 6452 1 2025-10-30 10:39:14.776 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39030 10 6452 1 2025-10-30 10:39:13.356 00:00:10.324 TCP 23.104.0.1:49112 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:40:08.245 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 10:40:08.431 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:40:13.716 00:00:10.371 TCP 23.104.0.1:49076 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:40:14.992 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51640 10 6452 1 2025-10-30 10:41:15.217 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48158 10 6452 1 2025-10-30 10:41:14.128 00:00:10.372 TCP 23.104.0.1:48482 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:37:49.521 00:05:03.385 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 10:42:14.536 00:00:10.364 TCP 23.104.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:42:15.436 00:00:10.642 TCP 1.101.0.1:3000 -> 22.102.0.1:58118 10 6452 1 2025-10-30 10:37:52.910 00:05:56.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 10:43:16.114 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55402 10 6452 1 2025-10-30 10:43:14.939 00:00:10.373 TCP 23.104.0.1:33054 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:44:15.380 00:00:10.352 TCP 23.104.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:44:16.326 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41324 10 6452 1 2025-10-30 10:45:08.197 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 10:45:08.530 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:45:15.798 00:00:10.760 TCP 23.104.0.1:39464 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:45:16.552 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40610 10 6452 1 2025-10-30 10:46:16.591 00:00:10.328 TCP 23.104.0.1:44254 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:46:16.779 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56848 10 6452 1 2025-10-30 10:47:16.957 00:00:10.367 TCP 23.104.0.1:40144 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:47:17.003 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57734 10 6452 1 2025-10-30 10:43:49.521 00:05:03.387 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 10:48:17.214 00:00:22.932 TCP 1.101.0.1:3000 -> 22.102.0.1:57394 10 6452 1 2025-10-30 10:48:17.356 00:00:22.888 TCP 23.104.0.1:39920 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:43:52.909 00:05:56.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 10:49:30.206 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43124 10 6452 1 2025-10-30 10:49:30.319 00:00:10.361 TCP 23.104.0.1:35926 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:50:08.572 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 10:50:08.455 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:50:30.724 00:00:10.369 TCP 23.104.0.1:50168 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:50:30.425 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41210 10 6452 1 2025-10-30 10:51:30.607 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38480 10 6452 1 2025-10-30 10:51:31.135 00:00:10.365 TCP 23.104.0.1:35072 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:52:31.536 00:00:10.328 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:52:30.820 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44928 10 6452 1 2025-10-30 10:53:31.070 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57018 10 6452 1 2025-10-30 10:53:31.905 00:00:10.371 TCP 23.104.0.1:43282 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:49:49.526 00:05:03.387 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 10:54:31.276 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40552 10 6452 1 2025-10-30 10:54:32.314 00:00:10.360 TCP 23.104.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:49:52.912 00:05:56.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 10:55:08.349 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 10:55:08.259 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 10:55:31.494 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6452 1 2025-10-30 10:55:32.712 00:00:10.396 TCP 23.104.0.1:38940 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:56:31.710 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54834 10 6452 1 2025-10-30 10:56:33.148 00:00:10.368 TCP 23.104.0.1:35504 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:57:33.556 00:00:10.369 TCP 23.104.0.1:46920 -> 1.101.0.1:3000 11 1507 1 2025-10-30 10:57:31.921 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33950 10 6452 1 2025-10-30 10:58:32.129 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33854 10 6452 1 2025-10-30 10:58:33.962 00:00:10.324 TCP 23.104.0.1:58856 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502742, total packets: 1579, avg bps: 1065, avg pps: 0, avg bpp: 318 Time window: 2025-10-30 09:55:49 - 2025-10-30 10:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0018s Wall: 0.0028s flows/second: 58591.6 Runtime: 0.0028s