Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 07:58:49.124 00:00:10.335 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-10-26 07:58:59.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40076 10 6452 1 2025-10-26 07:55:47.585 00:05:03.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 07:59:49.496 00:00:10.366 TCP 23.104.0.1:47758 -> 1.101.0.1:3000 11 1507 1 2025-10-26 07:59:59.429 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47392 10 6452 1 2025-10-26 07:56:47.581 00:05:03.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 08:00:49.906 00:00:10.440 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 15 1926 1 2025-10-26 08:00:59.645 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:38154 12 10369 1 2025-10-26 08:01:50.391 00:00:10.373 TCP 23.104.0.1:58768 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:01:59.888 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55644 10 6452 1 2025-10-26 08:02:50.831 00:00:10.401 TCP 23.104.0.1:50574 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:03:00.109 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35882 10 6452 1 2025-10-26 08:03:09.402 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:03:09.681 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:03:51.271 00:00:10.632 TCP 23.104.0.1:36766 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:04:00.275 00:00:10.748 TCP 1.101.0.1:3000 -> 22.102.0.1:55400 10 6452 1 2025-10-26 08:04:51.942 00:00:10.339 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:05:01.077 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54432 10 6452 1 2025-10-26 08:01:47.586 00:05:03.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 08:05:52.318 00:00:10.371 TCP 23.104.0.1:60770 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:06:01.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52822 10 6452 1 2025-10-26 08:02:47.584 00:05:03.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 08:06:52.722 00:00:10.365 TCP 23.104.0.1:48710 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:07:01.507 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33392 10 6452 1 2025-10-26 08:07:53.129 00:00:10.320 TCP 23.104.0.1:47040 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:08:01.731 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38270 10 6452 1 2025-10-26 08:08:11.128 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:08:11.070 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:08:53.491 00:00:10.366 TCP 23.104.0.1:47986 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:09:01.903 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6452 1 2025-10-26 08:09:53.895 00:00:10.378 TCP 23.104.0.1:51532 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:10:02.089 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44086 10 6452 1 2025-10-26 08:10:54.312 00:00:10.361 TCP 23.104.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:11:02.307 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53400 10 6452 1 2025-10-26 08:07:47.592 00:05:03.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 08:11:54.711 00:00:10.384 TCP 23.104.0.1:50926 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:12:02.521 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36180 10 6452 1 2025-10-26 08:08:47.590 00:05:03.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 08:12:55.135 00:00:10.323 TCP 23.104.0.1:37934 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:13:09.824 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:13:09.761 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:13:02.737 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60222 10 6452 1 2025-10-26 08:13:55.535 00:00:10.392 TCP 23.104.0.1:56112 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:14:02.951 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 12 6556 1 2025-10-26 08:14:55.979 00:00:10.333 TCP 23.104.0.1:38278 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:15:03.183 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44016 10 6452 1 2025-10-26 08:15:56.356 00:00:10.365 TCP 23.104.0.1:57058 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:16:03.387 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33178 10 6452 1 2025-10-26 08:16:56.760 00:00:10.368 TCP 23.104.0.1:55794 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:17:03.598 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 10 6452 1 2025-10-26 08:13:47.593 00:05:03.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 08:18:10.007 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:17:57.174 00:00:10.364 TCP 23.104.0.1:51122 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:18:09.789 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:18:03.769 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42474 10 6452 1 2025-10-26 08:14:47.590 00:05:03.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 08:18:57.585 00:00:10.364 TCP 23.104.0.1:46342 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:19:03.989 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:48828 10 6452 1 2025-10-26 08:19:57.988 00:00:10.371 TCP 23.104.0.1:52982 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:20:04.248 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54658 10 6452 1 2025-10-26 08:20:58.394 00:00:10.371 TCP 23.104.0.1:48498 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:21:04.429 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47174 10 6452 1 2025-10-26 08:21:58.806 00:00:10.365 TCP 23.104.0.1:38358 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:22:04.649 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35094 10 6452 1 2025-10-26 08:23:10.043 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:22:59.211 00:00:10.369 TCP 23.104.0.1:54818 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:23:09.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:23:04.828 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58902 10 6452 1 2025-10-26 08:19:47.595 00:05:03.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 08:23:59.612 00:00:10.363 TCP 23.104.0.1:43504 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:24:05.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37844 10 6452 1 2025-10-26 08:20:47.594 00:05:03.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 08:25:00.010 00:00:10.363 TCP 23.104.0.1:57130 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:25:05.296 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37958 10 6452 1 2025-10-26 08:26:00.413 00:00:10.515 TCP 23.104.0.1:46722 -> 1.101.0.1:3000 17 2241 1 2025-10-26 08:26:05.512 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:49576 14 14286 1 2025-10-26 08:27:00.968 00:00:10.372 TCP 23.104.0.1:43516 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:27:05.788 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33760 10 6452 1 2025-10-26 08:28:09.808 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:28:06.002 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46078 10 6452 1 2025-10-26 08:28:09.917 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:28:01.377 00:00:10.964 TCP 23.104.0.1:54908 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:29:02.391 00:00:10.363 TCP 23.104.0.1:43334 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:29:06.231 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37964 10 6452 1 2025-10-26 08:25:47.596 00:05:03.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 08:30:06.402 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36144 10 6452 1 2025-10-26 08:30:02.794 00:00:10.367 TCP 23.104.0.1:33684 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:26:47.594 00:05:03.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 08:31:03.198 00:00:10.368 TCP 23.104.0.1:45538 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:31:06.618 00:00:10.542 TCP 1.101.0.1:3000 -> 22.102.0.1:41660 10 6452 1 2025-10-26 08:32:03.602 00:00:10.368 TCP 23.104.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:32:07.197 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38022 10 6452 1 2025-10-26 08:33:10.263 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:33:10.181 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:33:04.009 00:00:10.322 TCP 23.104.0.1:50918 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:33:07.418 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50480 10 6452 1 2025-10-26 08:34:04.369 00:00:10.325 TCP 23.104.0.1:33824 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:34:07.639 00:00:11.012 TCP 1.101.0.1:3000 -> 22.102.0.1:51352 10 6452 1 2025-10-26 08:35:04.729 00:00:10.372 TCP 23.104.0.1:54894 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:35:08.689 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:56890 10 6452 1 2025-10-26 08:31:47.597 00:05:03.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 08:36:05.144 00:00:11.512 TCP 23.104.0.1:40826 -> 1.101.0.1:3000 15 1926 1 2025-10-26 08:36:08.955 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:55368 14 10688 1 2025-10-26 08:32:47.594 00:05:03.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 08:37:09.218 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58438 10 6661 1 2025-10-26 08:37:06.689 00:00:10.368 TCP 23.104.0.1:51392 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:38:10.215 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:38:10.257 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:38:07.100 00:00:10.368 TCP 23.104.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:38:09.443 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41434 10 6661 1 2025-10-26 08:39:09.669 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52758 10 6661 1 2025-10-26 08:39:07.504 00:00:10.363 TCP 23.104.0.1:34342 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:40:09.882 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45090 10 6661 1 2025-10-26 08:40:07.905 00:00:10.329 TCP 23.104.0.1:39568 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:41:10.111 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40876 10 6661 1 2025-10-26 08:41:08.269 00:00:10.320 TCP 23.104.0.1:47072 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:37:47.599 00:05:03.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 08:42:10.329 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53430 10 6661 1 2025-10-26 08:42:08.626 00:00:10.364 TCP 23.104.0.1:35504 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:38:47.596 00:05:03.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 08:43:10.191 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:43:10.441 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:43:09.027 00:00:10.367 TCP 23.104.0.1:54252 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:43:10.551 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59630 10 6661 1 2025-10-26 08:44:09.430 00:00:10.364 TCP 23.104.0.1:56358 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:44:10.771 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51662 10 6661 1 2025-10-26 08:45:11.003 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40918 10 6661 1 2025-10-26 08:45:09.831 00:00:10.389 TCP 23.104.0.1:37702 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:46:10.253 00:00:10.326 TCP 23.104.0.1:35846 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:46:11.221 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53874 10 6661 1 2025-10-26 08:47:10.616 00:00:10.368 TCP 23.104.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:47:11.449 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39542 10 6661 1 2025-10-26 08:43:47.602 00:05:03.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 08:48:10.412 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:48:10.586 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:48:11.019 00:00:10.364 TCP 23.104.0.1:47658 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:48:11.664 00:00:10.732 TCP 1.101.0.1:3000 -> 22.102.0.1:57274 10 6661 1 2025-10-26 08:44:47.598 00:05:03.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 08:49:11.417 00:00:10.328 TCP 23.104.0.1:46472 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:49:12.434 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57570 10 6661 1 2025-10-26 08:50:11.780 00:00:10.319 TCP 23.104.0.1:54564 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:50:12.665 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35900 10 6661 1 2025-10-26 08:51:12.838 00:00:10.868 TCP 1.101.0.1:3000 -> 22.102.0.1:54308 10 6661 1 2025-10-26 08:51:12.138 00:00:11.640 TCP 23.104.0.1:43122 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:52:13.827 00:00:10.378 TCP 23.104.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:52:13.754 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44100 10 6661 1 2025-10-26 08:53:10.481 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:53:10.670 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:53:13.974 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:33880 10 6661 1 2025-10-26 08:53:14.245 00:00:10.363 TCP 23.104.0.1:42736 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:49:47.601 00:05:03.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 08:54:14.218 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36894 10 6661 1 2025-10-26 08:54:14.649 00:00:10.362 TCP 23.104.0.1:44872 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:50:47.600 00:05:03.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 08:55:15.059 00:00:10.360 TCP 23.104.0.1:51274 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:55:14.398 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34394 10 6661 1 2025-10-26 08:56:15.457 00:00:10.369 TCP 23.104.0.1:32978 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:56:14.608 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55588 10 6661 1 2025-10-26 08:57:14.818 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60698 10 6661 1 2025-10-26 08:57:15.862 00:00:10.367 TCP 23.104.0.1:55580 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:58:10.780 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 08:58:10.683 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 08:58:16.269 00:00:10.358 TCP 23.104.0.1:38556 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:58:15.038 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33028 10 6661 1 Summary: total flows: 164, total bytes: 520609, total packets: 1598, avg bps: 1107, avg pps: 0, avg bpp: 325 Time window: 2025-10-26 07:55:47 - 2025-10-26 08:58:26 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0023s Wall: 0.0026s flows/second: 63809.4 Runtime: 0.0026s