Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 04:59:07.749 00:00:10.383 TCP 23.104.0.1:49562 -> 1.101.0.1:3000 11 1507 1 2025-10-26 04:55:47.527 00:05:03.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 04:59:39.449 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40072 10 6452 1 2025-10-26 05:00:08.172 00:00:10.362 TCP 23.104.0.1:41254 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:00:39.665 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32784 10 6452 1 2025-10-26 04:56:47.525 00:05:03.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 05:01:08.572 00:00:10.363 TCP 23.104.0.1:55940 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:01:39.889 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42238 10 6452 1 2025-10-26 05:02:08.972 00:00:10.332 TCP 23.104.0.1:55536 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:02:40.116 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35238 10 6452 1 2025-10-26 05:03:05.854 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:03:05.987 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:03:09.343 00:00:10.366 TCP 23.104.0.1:34398 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:03:40.287 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-10-26 05:04:09.749 00:00:10.387 TCP 23.104.0.1:54628 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:04:40.498 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37682 10 6452 1 2025-10-26 05:05:10.172 00:00:10.365 TCP 23.104.0.1:45560 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:01:47.529 00:05:03.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 05:05:40.710 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40360 10 6452 1 2025-10-26 05:06:10.578 00:00:10.359 TCP 23.104.0.1:53492 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:06:40.940 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47968 10 6452 1 2025-10-26 05:02:47.528 00:05:03.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 05:07:10.985 00:00:10.370 TCP 23.104.0.1:50338 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:07:41.178 00:00:10.737 TCP 1.101.0.1:3000 -> 22.102.0.1:46394 10 6452 1 2025-10-26 05:08:05.799 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:08:06.079 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:08:11.397 00:00:10.361 TCP 23.104.0.1:54894 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:08:41.954 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35178 10 6452 1 2025-10-26 05:09:11.795 00:00:10.363 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:09:42.182 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60026 10 6452 1 2025-10-26 05:10:12.199 00:00:10.359 TCP 23.104.0.1:48102 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:10:42.394 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:45452 14 14298 1 2025-10-26 05:11:12.597 00:00:10.472 TCP 23.104.0.1:39236 -> 1.101.0.1:3000 17 2241 1 2025-10-26 05:07:47.532 00:05:03.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 05:11:42.670 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:47692 10 6452 1 2025-10-26 05:12:13.112 00:00:10.369 TCP 23.104.0.1:50406 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:08:47.531 00:05:03.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 05:12:42.877 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39008 10 6452 1 2025-10-26 05:13:06.160 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:13:06.331 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:13:13.515 00:00:10.367 TCP 23.104.0.1:51876 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:13:43.100 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41146 10 6452 1 2025-10-26 05:14:13.922 00:00:10.386 TCP 23.104.0.1:46874 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:14:43.316 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41978 10 6452 1 2025-10-26 05:15:14.344 00:00:10.322 TCP 23.104.0.1:46872 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:15:43.487 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:54254 12 10369 1 2025-10-26 05:16:14.703 00:00:10.442 TCP 23.104.0.1:49084 -> 1.101.0.1:3000 15 1926 1 2025-10-26 05:16:43.730 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42706 10 6452 1 2025-10-26 05:17:15.182 00:00:10.365 TCP 23.104.0.1:42606 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:13:47.534 00:05:03.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 05:17:43.944 00:00:17.611 TCP 1.101.0.1:3000 -> 22.102.0.1:33950 10 6452 1 2025-10-26 05:18:06.811 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:18:06.519 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:18:15.581 00:00:10.329 TCP 23.104.0.1:40860 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:14:47.531 00:05:03.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 05:18:51.598 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42104 10 6452 1 2025-10-26 05:19:15.946 00:00:10.333 TCP 23.104.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:19:51.820 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50576 10 6452 1 2025-10-26 05:20:16.315 00:00:10.360 TCP 23.104.0.1:42770 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:20:52.048 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45512 10 6452 1 2025-10-26 05:21:16.717 00:00:10.365 TCP 23.104.0.1:58054 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:21:52.263 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47170 10 6452 1 2025-10-26 05:22:17.121 00:00:10.363 TCP 23.104.0.1:35882 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:22:52.448 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6452 1 2025-10-26 05:23:06.378 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:23:06.636 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:23:17.533 00:00:10.366 TCP 23.104.0.1:35812 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:19:47.534 00:05:03.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 05:23:52.661 00:00:10.285 TCP 1.101.0.1:3000 -> 22.102.0.1:60156 10 6452 1 2025-10-26 05:24:17.938 00:00:10.372 TCP 23.104.0.1:53206 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:20:47.532 00:05:03.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 05:24:52.986 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39364 10 6452 1 2025-10-26 05:25:18.351 00:00:10.362 TCP 23.104.0.1:36328 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:25:53.216 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54492 10 6452 1 2025-10-26 05:26:18.753 00:00:10.375 TCP 23.104.0.1:36290 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:26:53.432 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51602 10 6452 1 2025-10-26 05:27:19.170 00:00:11.261 TCP 23.104.0.1:48870 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:28:06.534 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:27:53.647 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60526 10 6452 1 2025-10-26 05:28:06.643 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:28:20.479 00:00:10.320 TCP 23.104.0.1:58470 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:28:53.858 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34984 10 6452 1 2025-10-26 05:29:20.840 00:00:10.390 TCP 23.104.0.1:58646 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:25:47.536 00:05:03.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 05:29:54.092 00:00:26.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6452 1 2025-10-26 05:30:21.268 00:00:10.366 TCP 23.104.0.1:49688 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:26:47.536 00:05:03.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 05:31:10.272 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33926 10 6452 1 2025-10-26 05:31:21.673 00:00:10.363 TCP 23.104.0.1:35926 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:32:10.479 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33760 10 6452 1 2025-10-26 05:32:22.106 00:00:10.368 TCP 23.104.0.1:47638 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:33:06.643 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:33:06.712 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:33:10.696 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42340 10 6452 1 2025-10-26 05:33:22.514 00:00:10.363 TCP 23.104.0.1:37692 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:34:10.916 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34570 10 6452 1 2025-10-26 05:34:22.915 00:00:10.362 TCP 23.104.0.1:45986 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:35:11.144 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 10 6452 1 2025-10-26 05:35:23.314 00:00:10.418 TCP 23.104.0.1:40722 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:31:47.539 00:05:03.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 05:36:11.360 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38640 10 6452 1 2025-10-26 05:36:23.774 00:00:10.368 TCP 23.104.0.1:32836 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:32:47.535 00:05:03.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 05:37:11.573 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:51342 10 6452 1 2025-10-26 05:37:24.178 00:00:10.377 TCP 23.104.0.1:41302 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:38:06.852 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:38:06.665 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:38:11.756 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56938 10 6452 1 2025-10-26 05:38:24.590 00:00:10.367 TCP 23.104.0.1:57854 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:39:11.974 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49732 10 6452 1 2025-10-26 05:39:24.996 00:00:10.362 TCP 23.104.0.1:53430 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:40:12.200 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55638 10 6452 1 2025-10-26 05:40:25.407 00:00:10.371 TCP 23.104.0.1:39668 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:41:12.412 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59768 10 6452 1 2025-10-26 05:41:25.818 00:00:10.327 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:37:47.539 00:05:03.169 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 05:42:12.618 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53804 10 6452 1 2025-10-26 05:42:26.182 00:00:10.328 TCP 23.104.0.1:52780 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:38:47.536 00:05:03.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 05:43:06.861 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:43:07.009 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:43:12.827 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49990 10 6452 1 2025-10-26 05:43:26.545 00:00:10.367 TCP 23.104.0.1:41372 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:44:13.074 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59880 10 6452 1 2025-10-26 05:44:26.955 00:00:10.370 TCP 23.104.0.1:47238 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:45:13.308 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60964 10 6452 1 2025-10-26 05:45:27.363 00:00:10.365 TCP 23.104.0.1:47920 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:46:13.541 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:41432 12 10375 1 2025-10-26 05:46:27.764 00:00:11.050 TCP 23.104.0.1:58070 -> 1.101.0.1:3000 15 1926 1 2025-10-26 05:47:13.796 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:44784 10 6452 1 2025-10-26 05:47:28.854 00:00:10.382 TCP 23.104.0.1:46738 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:43:47.540 00:05:03.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 05:48:06.968 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:48:07.001 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:48:13.977 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54920 10 6452 1 2025-10-26 05:48:29.272 00:00:10.367 TCP 23.104.0.1:44330 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:44:47.538 00:05:03.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 05:49:14.214 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49330 10 6452 1 2025-10-26 05:49:29.685 00:00:10.369 TCP 23.104.0.1:59590 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:50:14.424 00:00:10.651 TCP 1.101.0.1:3000 -> 22.102.0.1:32778 10 6452 1 2025-10-26 05:50:30.106 00:00:10.364 TCP 23.104.0.1:40416 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:51:15.114 00:00:10.623 TCP 1.101.0.1:3000 -> 22.102.0.1:34920 10 6452 1 2025-10-26 05:51:30.510 00:00:10.365 TCP 23.104.0.1:34884 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:52:15.780 00:00:10.695 TCP 1.101.0.1:3000 -> 22.102.0.1:44928 10 6452 1 2025-10-26 05:52:30.915 00:00:18.099 TCP 23.104.0.1:41496 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:53:07.032 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:53:07.033 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:53:16.514 00:00:10.552 TCP 1.101.0.1:3000 -> 22.102.0.1:56406 10 6452 1 2025-10-26 05:53:39.060 00:00:10.360 TCP 23.104.0.1:39456 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:49:47.542 00:05:03.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 05:54:17.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56404 10 6452 1 2025-10-26 05:54:39.464 00:00:10.329 TCP 23.104.0.1:49170 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:50:47.539 00:05:03.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 05:55:17.316 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41008 10 6452 1 2025-10-26 05:55:39.828 00:00:10.384 TCP 23.104.0.1:42164 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:56:17.538 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-10-26 05:56:40.252 00:00:10.852 TCP 23.104.0.1:55804 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:57:17.758 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48986 10 6452 1 2025-10-26 05:57:41.139 00:00:10.326 TCP 23.104.0.1:55834 -> 1.101.0.1:3000 11 1507 1 2025-10-26 05:58:07.158 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 05:58:06.986 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 05:58:17.981 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:58520 10 6452 1 2025-10-26 05:58:41.503 00:00:10.323 TCP 23.104.0.1:48804 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 509154, total packets: 1584, avg bps: 1076, avg pps: 0, avg bpp: 321 Time window: 2025-10-26 04:55:47 - 2025-10-26 05:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0017s Wall: 0.0019s flows/second: 84550.0 Runtime: 0.0019s