Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 03:58:42.010 00:00:10.474 TCP 23.104.0.1:32976 -> 1.101.0.1:3000 11 1507 1 2025-10-26 03:59:25.811 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43044 10 6452 1 2025-10-26 03:55:47.518 00:05:03.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 03:59:42.527 00:00:10.363 TCP 23.104.0.1:42216 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:00:26.043 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43464 10 6452 1 2025-10-26 03:56:47.514 00:05:03.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 04:00:42.928 00:00:10.371 TCP 23.104.0.1:34112 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:01:26.252 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34786 10 6452 1 2025-10-26 04:01:43.337 00:00:10.374 TCP 23.104.0.1:44936 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:02:26.465 00:00:10.814 TCP 1.101.0.1:3000 -> 22.102.0.1:60788 10 6452 1 2025-10-26 04:02:43.750 00:00:10.362 TCP 23.104.0.1:45600 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:03:04.966 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:03:04.904 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:03:27.319 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39718 10 6452 1 2025-10-26 04:03:44.149 00:00:10.370 TCP 23.104.0.1:40638 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:04:27.500 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34872 10 6452 1 2025-10-26 04:04:44.555 00:00:10.365 TCP 23.104.0.1:52220 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:05:27.719 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39258 10 6452 1 2025-10-26 04:01:47.517 00:05:03.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 04:05:44.962 00:00:10.998 TCP 23.104.0.1:47572 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:06:27.935 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:60998 10 6452 1 2025-10-26 04:02:47.514 00:05:03.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 04:06:46.002 00:00:10.358 TCP 23.104.0.1:34466 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:07:28.130 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55340 10 6452 1 2025-10-26 04:07:46.400 00:00:10.326 TCP 23.104.0.1:50896 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:08:05.330 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:08:04.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:08:28.307 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:59406 10 6452 1 2025-10-26 04:08:46.767 00:00:10.374 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:09:28.544 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43812 10 6452 1 2025-10-26 04:09:47.183 00:00:10.320 TCP 23.104.0.1:33634 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:10:28.761 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52230 10 6452 1 2025-10-26 04:10:47.543 00:00:10.322 TCP 23.104.0.1:58528 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:11:28.982 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40048 10 6452 1 2025-10-26 04:07:47.519 00:05:03.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 04:11:47.904 00:00:10.367 TCP 23.104.0.1:40012 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:12:29.216 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:41404 10 6452 1 2025-10-26 04:08:47.516 00:05:03.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 04:12:48.317 00:00:10.365 TCP 23.104.0.1:38344 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:13:04.972 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:13:04.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:13:29.479 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32940 10 6452 1 2025-10-26 04:13:48.720 00:00:10.370 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:14:29.690 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6452 1 2025-10-26 04:14:49.128 00:00:10.363 TCP 23.104.0.1:58768 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:15:29.906 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:39186 10 6452 1 2025-10-26 04:15:49.530 00:00:10.363 TCP 23.104.0.1:46304 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:16:30.095 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35378 10 6452 1 2025-10-26 04:16:49.941 00:00:10.379 TCP 23.104.0.1:35548 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:17:30.310 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37664 10 6452 1 2025-10-26 04:13:47.519 00:05:03.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 04:17:50.364 00:00:10.365 TCP 23.104.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:18:05.221 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:18:05.006 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:18:30.532 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44342 10 6452 1 2025-10-26 04:14:47.517 00:05:03.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 04:18:50.772 00:00:10.330 TCP 23.104.0.1:60994 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:19:30.751 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48864 10 6452 1 2025-10-26 04:19:51.141 00:00:10.366 TCP 23.104.0.1:54058 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:20:30.964 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42030 10 6452 1 2025-10-26 04:20:51.543 00:00:10.361 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:21:31.141 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56488 10 6452 1 2025-10-26 04:21:51.943 00:00:10.375 TCP 23.104.0.1:37680 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:22:31.358 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51094 10 6452 1 2025-10-26 04:23:05.080 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:22:52.357 00:00:10.364 TCP 23.104.0.1:32924 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:23:05.196 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:23:31.579 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52926 10 6452 1 2025-10-26 04:19:47.520 00:05:03.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 04:23:52.757 00:00:10.801 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:24:31.761 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53598 10 6452 1 2025-10-26 04:20:47.520 00:05:03.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 04:24:53.599 00:00:10.323 TCP 23.104.0.1:56188 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:25:31.973 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-10-26 04:25:53.966 00:00:10.376 TCP 23.104.0.1:48352 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:26:32.220 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36852 10 6452 1 2025-10-26 04:26:54.382 00:00:10.364 TCP 23.104.0.1:35344 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:27:32.436 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53964 10 6452 1 2025-10-26 04:28:05.381 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:27:54.786 00:00:10.350 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:28:05.323 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:28:32.666 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41466 10 6452 1 2025-10-26 04:28:55.190 00:00:10.373 TCP 23.104.0.1:39214 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:29:32.885 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53338 10 6452 1 2025-10-26 04:25:47.522 00:05:03.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 04:29:55.602 00:00:10.366 TCP 23.104.0.1:32814 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:30:33.104 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58732 10 6452 1 2025-10-26 04:26:47.520 00:05:03.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 04:30:56.004 00:00:10.363 TCP 23.104.0.1:46468 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:31:33.333 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:33190 10 6452 1 2025-10-26 04:31:56.406 00:00:10.365 TCP 23.104.0.1:54122 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:32:33.520 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33632 10 6452 1 2025-10-26 04:33:05.489 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:33:05.512 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:32:56.817 00:00:10.363 TCP 23.104.0.1:43954 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:33:33.732 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36660 10 6452 1 2025-10-26 04:33:57.222 00:00:10.371 TCP 23.104.0.1:60910 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:34:33.952 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55798 12 6556 1 2025-10-26 04:34:57.627 00:00:10.364 TCP 23.104.0.1:52626 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:35:34.192 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46436 10 6452 1 2025-10-26 04:31:47.523 00:05:03.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 04:35:58.031 00:00:10.366 TCP 23.104.0.1:60808 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:36:34.412 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53298 10 6452 1 2025-10-26 04:32:47.520 00:05:03.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 04:36:58.443 00:00:10.332 TCP 23.104.0.1:52954 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:37:34.590 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50478 10 6452 1 2025-10-26 04:38:05.743 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:38:05.578 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:37:58.808 00:00:10.370 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:38:34.812 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50026 10 6452 1 2025-10-26 04:38:59.210 00:00:10.362 TCP 23.104.0.1:40918 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:39:35.068 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:58332 10 6452 1 2025-10-26 04:39:59.607 00:00:10.827 TCP 23.104.0.1:36562 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:40:35.245 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40262 10 6452 1 2025-10-26 04:41:00.472 00:00:10.364 TCP 23.104.0.1:49350 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:41:35.462 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47598 10 6452 1 2025-10-26 04:37:47.522 00:05:03.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 04:42:00.871 00:00:10.326 TCP 23.104.0.1:57608 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:42:35.682 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57970 10 6452 1 2025-10-26 04:38:47.522 00:05:03.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 04:43:05.572 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:43:05.836 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:43:01.237 00:00:10.373 TCP 23.104.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:43:35.906 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42262 10 6452 1 2025-10-26 04:44:01.648 00:00:10.364 TCP 23.104.0.1:55500 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:44:36.122 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50514 10 6452 1 2025-10-26 04:45:02.052 00:00:10.364 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:45:36.347 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6452 1 2025-10-26 04:46:02.453 00:00:10.358 TCP 23.104.0.1:44552 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:46:36.566 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49090 10 6452 1 2025-10-26 04:47:02.850 00:00:10.383 TCP 23.104.0.1:58004 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:47:36.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44672 10 6452 1 2025-10-26 04:43:47.525 00:05:03.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 04:48:05.759 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:48:05.637 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:48:03.269 00:00:10.364 TCP 23.104.0.1:57906 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:48:37.002 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45014 10 6452 1 2025-10-26 04:44:47.522 00:05:03.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 04:49:03.672 00:00:10.361 TCP 23.104.0.1:45740 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:49:37.216 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43438 10 6452 1 2025-10-26 04:50:04.096 00:00:10.362 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:50:37.426 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37374 10 6452 1 2025-10-26 04:51:04.500 00:00:10.381 TCP 23.104.0.1:33990 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:51:37.645 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50472 10 6452 1 2025-10-26 04:52:04.916 00:00:10.371 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:52:37.864 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44268 10 6452 1 2025-10-26 04:53:05.772 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:53:06.013 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:53:05.315 00:00:10.367 TCP 23.104.0.1:44478 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:53:38.089 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52814 10 6452 1 2025-10-26 04:49:47.525 00:05:03.169 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 04:54:05.715 00:00:10.378 TCP 23.104.0.1:58694 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:54:38.302 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38000 10 6452 1 2025-10-26 04:50:47.522 00:05:03.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 04:55:06.134 00:00:10.337 TCP 23.104.0.1:44290 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:55:38.527 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54078 10 6452 1 2025-10-26 04:56:06.512 00:00:10.372 TCP 23.104.0.1:59312 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:56:38.749 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-10-26 04:57:06.925 00:00:10.384 TCP 23.104.0.1:53132 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:57:38.981 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:55554 10 6452 1 2025-10-26 04:58:05.652 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 04:58:05.618 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 04:58:07.349 00:00:10.361 TCP 23.104.0.1:51558 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:58:39.226 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40634 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1054, avg pps: 0, avg bpp: 316 Time window: 2025-10-26 03:55:47 - 2025-10-26 04:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0061s User: 0.0000s Wall: 0.0026s flows/second: 63054.9 Runtime: 0.0026s