Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 16:59:00.767 00:00:10.369 TCP 23.104.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-10-26 16:59:20.546 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51072 10 6452 1 2025-10-26 16:55:47.764 00:05:03.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 17:00:01.174 00:00:10.374 TCP 23.104.0.1:58520 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:00:20.759 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34450 10 6452 1 2025-10-26 16:56:47.762 00:05:03.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 17:01:01.586 00:00:10.858 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:01:20.971 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45270 10 6452 1 2025-10-26 17:02:02.486 00:00:10.364 TCP 23.104.0.1:56286 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:02:21.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54406 10 6452 1 2025-10-26 17:03:02.891 00:00:10.364 TCP 23.104.0.1:44424 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:03:20.432 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:03:20.494 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:03:21.428 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54994 10 6452 1 2025-10-26 17:04:03.295 00:00:10.324 TCP 23.104.0.1:35794 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:04:21.653 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49570 10 6452 1 2025-10-26 17:05:03.658 00:00:10.362 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:05:21.868 00:00:16.477 TCP 1.101.0.1:3000 -> 22.102.0.1:36710 10 6452 1 2025-10-26 17:01:47.764 00:05:03.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 17:06:04.068 00:00:10.319 TCP 23.104.0.1:46514 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:06:28.401 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43568 10 6452 1 2025-10-26 17:02:47.761 00:05:03.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 17:07:04.427 00:00:10.381 TCP 23.104.0.1:47952 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:07:28.619 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54546 10 6452 1 2025-10-26 17:08:04.854 00:00:10.384 TCP 23.104.0.1:54860 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:08:20.409 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:08:20.426 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:08:28.838 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54980 10 6452 1 2025-10-26 17:09:05.282 00:00:10.368 TCP 23.104.0.1:44020 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:09:29.091 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:46406 10 6452 1 2025-10-26 17:10:05.695 00:00:10.370 TCP 23.104.0.1:39890 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:10:29.271 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37156 10 6452 1 2025-10-26 17:11:06.110 00:00:10.369 TCP 23.104.0.1:57550 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:11:29.482 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60712 10 6452 1 2025-10-26 17:07:47.766 00:05:03.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 17:12:06.516 00:00:10.369 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:12:29.695 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38964 10 6452 1 2025-10-26 17:08:47.763 00:05:03.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 17:13:20.615 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:13:06.924 00:00:10.378 TCP 23.104.0.1:41818 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:13:20.804 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:13:29.914 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50154 10 6452 1 2025-10-26 17:14:07.338 00:00:10.366 TCP 23.104.0.1:38500 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:14:30.134 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46302 10 6452 1 2025-10-26 17:15:07.735 00:00:10.367 TCP 23.104.0.1:45992 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:15:30.313 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36848 10 6452 1 2025-10-26 17:16:08.139 00:00:10.365 TCP 23.104.0.1:46636 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:16:30.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38058 10 6452 1 2025-10-26 17:17:08.539 00:00:10.362 TCP 23.104.0.1:58772 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:17:30.737 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42102 10 6452 1 2025-10-26 17:13:47.769 00:05:03.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 17:18:20.636 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:18:20.954 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:18:08.941 00:00:10.367 TCP 23.104.0.1:35890 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:18:30.950 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:47876 10 6452 1 2025-10-26 17:14:47.767 00:05:03.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 17:19:09.344 00:00:10.365 TCP 23.104.0.1:42646 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:19:31.183 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41900 10 6452 1 2025-10-26 17:20:09.750 00:00:10.341 TCP 23.104.0.1:48956 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:20:31.405 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:60746 13 6608 1 2025-10-26 17:21:10.122 00:00:10.359 TCP 23.104.0.1:54178 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:21:31.672 00:00:10.596 TCP 1.101.0.1:3000 -> 22.102.0.1:40120 10 6452 1 2025-10-26 17:22:10.522 00:00:10.323 TCP 23.104.0.1:56604 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:22:32.307 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51122 10 6452 1 2025-10-26 17:23:20.853 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:23:10.885 00:00:10.330 TCP 23.104.0.1:59604 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:23:20.944 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:23:32.526 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32922 10 6452 1 2025-10-26 17:19:47.770 00:05:03.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 17:24:11.251 00:00:10.425 TCP 23.104.0.1:56116 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:24:32.748 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33890 10 6452 1 2025-10-26 17:20:47.767 00:05:03.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 17:25:11.714 00:00:10.330 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:25:32.962 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42886 10 6452 1 2025-10-26 17:26:12.097 00:00:10.385 TCP 23.104.0.1:46394 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:26:33.185 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42528 10 6452 1 2025-10-26 17:27:12.529 00:00:10.371 TCP 23.104.0.1:34830 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:27:33.402 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50170 10 6452 1 2025-10-26 17:28:20.814 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:28:20.998 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:28:12.937 00:00:10.349 TCP 23.104.0.1:59450 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:28:33.624 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48104 10 6452 1 2025-10-26 17:29:13.326 00:00:10.364 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:29:33.834 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33434 10 6452 1 2025-10-26 17:25:47.771 00:05:03.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 17:30:13.731 00:00:10.389 TCP 23.104.0.1:52776 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:26:47.769 00:05:03.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 17:30:34.086 00:00:18.084 TCP 1.101.0.1:3000 -> 22.102.0.1:41146 10 6452 1 2025-10-26 17:31:14.157 00:00:10.431 TCP 23.104.0.1:44748 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:31:42.208 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33288 10 6452 1 2025-10-26 17:32:14.633 00:00:10.367 TCP 23.104.0.1:43728 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:32:42.427 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36018 10 6452 1 2025-10-26 17:33:20.787 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:33:20.829 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:33:15.033 00:00:10.607 TCP 23.104.0.1:54240 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:33:42.654 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41316 10 6452 1 2025-10-26 17:34:15.674 00:00:10.375 TCP 23.104.0.1:55180 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:34:42.830 00:00:11.935 TCP 1.101.0.1:3000 -> 22.102.0.1:57836 10 6452 1 2025-10-26 17:35:16.099 00:00:10.357 TCP 23.104.0.1:43598 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:31:47.777 00:05:03.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 17:35:44.803 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55496 10 6452 1 2025-10-26 17:36:16.496 00:00:10.366 TCP 23.104.0.1:39646 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:32:47.776 00:05:03.196 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 17:36:45.028 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59948 10 6452 1 2025-10-26 17:37:16.899 00:00:10.373 TCP 23.104.0.1:57260 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:37:45.252 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42748 10 6452 1 2025-10-26 17:38:21.175 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:38:20.978 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:38:17.323 00:00:10.363 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:38:45.475 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41488 10 6452 1 2025-10-26 17:39:17.725 00:00:10.370 TCP 23.104.0.1:56126 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:39:45.691 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59590 10 6452 1 2025-10-26 17:40:18.135 00:00:10.364 TCP 23.104.0.1:59194 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:40:45.913 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52946 10 6452 1 2025-10-26 17:41:18.536 00:00:10.360 TCP 23.104.0.1:37864 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:37:47.779 00:05:03.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 17:41:46.131 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-10-26 17:42:18.935 00:00:10.377 TCP 23.104.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:38:47.777 00:05:03.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 17:42:46.307 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60026 10 6452 1 2025-10-26 17:43:20.976 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:43:21.173 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:43:19.352 00:00:10.329 TCP 23.104.0.1:44080 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:43:46.485 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51586 10 6452 1 2025-10-26 17:44:19.718 00:00:10.380 TCP 23.104.0.1:56246 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:44:46.699 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51520 10 6452 1 2025-10-26 17:45:20.136 00:00:10.359 TCP 23.104.0.1:46218 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:45:46.923 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39370 10 6452 1 2025-10-26 17:46:20.533 00:00:10.398 TCP 23.104.0.1:56368 -> 1.101.0.1:3000 15 1926 1 2025-10-26 17:46:47.159 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:54204 12 10375 1 2025-10-26 17:47:20.973 00:00:10.368 TCP 23.104.0.1:47038 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:43:47.781 00:05:03.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 17:47:47.406 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57574 10 6452 1 2025-10-26 17:48:21.262 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:48:21.033 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:48:21.378 00:00:10.361 TCP 23.104.0.1:36576 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:44:47.778 00:05:03.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 17:48:47.620 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50798 10 6452 1 2025-10-26 17:49:21.779 00:00:10.368 TCP 23.104.0.1:34594 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:49:47.831 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40788 10 6452 1 2025-10-26 17:50:22.195 00:00:10.364 TCP 23.104.0.1:40266 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:50:48.079 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55082 10 6452 1 2025-10-26 17:51:22.597 00:00:10.366 TCP 23.104.0.1:40468 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:51:48.291 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53980 10 6452 1 2025-10-26 17:52:23.006 00:00:10.320 TCP 23.104.0.1:46536 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:52:48.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60428 10 6452 1 2025-10-26 17:53:21.619 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:53:21.760 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:53:23.367 00:00:10.361 TCP 23.104.0.1:45024 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:49:47.782 00:05:03.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 17:53:48.732 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51978 10 6452 1 2025-10-26 17:54:23.764 00:00:10.380 TCP 23.104.0.1:49948 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:50:47.779 00:05:03.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 17:54:48.949 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47086 10 6452 1 2025-10-26 17:55:24.178 00:00:10.328 TCP 23.104.0.1:60984 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:55:49.183 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55264 10 6452 1 2025-10-26 17:56:24.544 00:00:10.468 TCP 23.104.0.1:60098 -> 1.101.0.1:3000 15 1926 1 2025-10-26 17:56:49.355 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59084 12 10375 1 2025-10-26 17:57:25.060 00:00:10.364 TCP 23.104.0.1:50354 -> 1.101.0.1:3000 11 1507 1 2025-10-26 17:57:49.596 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54256 10 6452 1 2025-10-26 17:58:21.572 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 17:58:21.631 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 17:58:25.478 00:00:10.365 TCP 23.104.0.1:41480 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500736, total packets: 1577, avg bps: 1063, avg pps: 0, avg bpp: 317 Time window: 2025-10-26 16:55:47 - 2025-10-26 17:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0018s Wall: 0.0020s flows/second: 82231.4 Runtime: 0.0020s