Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 18:58:54.963 00:00:10.364 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-10-26 18:59:04.291 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34478 10 6452 1 2025-10-26 18:55:47.804 00:05:03.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 18:59:55.365 00:00:10.365 TCP 23.104.0.1:35028 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:00:04.509 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42628 10 6452 1 2025-10-26 18:56:47.803 00:05:03.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 19:00:55.771 00:00:10.373 TCP 23.104.0.1:38302 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:01:04.719 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54230 10 6452 1 2025-10-26 19:01:56.182 00:00:10.325 TCP 23.104.0.1:50446 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:02:04.928 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39042 10 6452 1 2025-10-26 19:02:56.546 00:00:10.364 TCP 23.104.0.1:33558 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:03:05.167 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47172 10 6452 1 2025-10-26 19:03:22.688 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:03:22.857 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:03:56.948 00:00:10.369 TCP 23.104.0.1:46318 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:04:05.380 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43720 10 6452 1 2025-10-26 19:04:57.355 00:00:10.364 TCP 23.104.0.1:57616 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:05:05.591 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50080 10 6452 1 2025-10-26 19:01:47.808 00:05:03.231 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 19:05:57.756 00:00:10.383 TCP 23.104.0.1:34926 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:06:05.809 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33464 10 6452 1 2025-10-26 19:02:47.804 00:05:03.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 19:06:58.181 00:00:10.362 TCP 23.104.0.1:36360 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:07:06.037 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33754 10 6452 1 2025-10-26 19:07:58.580 00:00:10.364 TCP 23.104.0.1:41460 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:08:06.249 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58146 10 6452 1 2025-10-26 19:08:22.780 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:08:23.340 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:08:58.983 00:00:10.373 TCP 23.104.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:09:06.457 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40732 10 6452 1 2025-10-26 19:09:59.389 00:00:10.362 TCP 23.104.0.1:34062 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:10:06.672 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55660 10 6452 1 2025-10-26 19:10:59.787 00:00:10.402 TCP 23.104.0.1:35188 -> 1.101.0.1:3000 15 1926 1 2025-10-26 19:11:06.843 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:41314 12 10369 1 2025-10-26 19:07:47.807 00:05:03.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 19:12:00.228 00:00:10.361 TCP 23.104.0.1:58572 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:12:07.094 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48962 10 6452 1 2025-10-26 19:08:47.805 00:05:03.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 19:13:00.628 00:00:10.362 TCP 23.104.0.1:48510 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:13:07.309 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40264 10 6452 1 2025-10-26 19:13:23.182 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:13:23.150 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:14:01.031 00:00:10.368 TCP 23.104.0.1:39720 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:14:07.478 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58408 10 6452 1 2025-10-26 19:15:01.439 00:00:10.372 TCP 23.104.0.1:46542 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:15:07.693 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32792 10 6452 1 2025-10-26 19:16:01.848 00:00:10.382 TCP 23.104.0.1:47260 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:16:07.862 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41292 10 6452 1 2025-10-26 19:17:02.270 00:00:10.367 TCP 23.104.0.1:46158 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:17:08.087 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:46522 10 6452 1 2025-10-26 19:13:47.809 00:05:03.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 19:18:02.672 00:00:10.373 TCP 23.104.0.1:49424 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:18:08.281 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35720 10 6452 1 2025-10-26 19:18:22.985 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:18:23.186 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:14:47.805 00:05:03.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 19:19:03.109 00:00:14.771 TCP 23.104.0.1:51606 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:19:08.500 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:36436 10 6452 1 2025-10-26 19:20:07.929 00:00:10.352 TCP 23.104.0.1:47494 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:20:08.752 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55440 10 6452 1 2025-10-26 19:21:08.317 00:00:10.363 TCP 23.104.0.1:58514 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:21:08.970 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47370 10 6452 1 2025-10-26 19:22:08.714 00:00:10.376 TCP 23.104.0.1:43960 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:22:09.195 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60866 10 6452 1 2025-10-26 19:23:09.127 00:00:10.321 TCP 23.104.0.1:39016 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:23:09.403 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60542 10 6452 1 2025-10-26 19:23:23.257 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:23:23.227 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:19:47.811 00:05:03.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 19:24:09.618 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40616 10 6452 1 2025-10-26 19:24:09.486 00:00:10.324 TCP 23.104.0.1:34424 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:20:47.808 00:05:03.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 19:25:09.795 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50944 10 6452 1 2025-10-26 19:25:09.853 00:00:10.380 TCP 23.104.0.1:60140 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:26:10.268 00:00:10.334 TCP 23.104.0.1:34522 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:26:10.001 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51350 10 6452 1 2025-10-26 19:27:10.642 00:00:10.364 TCP 23.104.0.1:59824 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:27:10.215 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58260 10 6452 1 2025-10-26 19:28:10.391 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41850 10 6452 1 2025-10-26 19:28:11.049 00:00:10.328 TCP 23.104.0.1:55066 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:28:23.610 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:28:23.417 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:29:11.414 00:00:10.322 TCP 23.104.0.1:33860 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:29:10.606 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46320 10 6452 1 2025-10-26 19:25:47.812 00:05:03.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 19:30:11.772 00:00:10.371 TCP 23.104.0.1:55116 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:26:47.809 00:05:03.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 19:30:10.782 00:01:10.591 TCP 1.101.0.1:3000 -> 22.102.0.1:57856 20 12904 1 2025-10-26 19:31:12.184 00:00:10.367 TCP 23.104.0.1:49084 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:32:11.412 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40640 10 6452 1 2025-10-26 19:32:12.587 00:00:10.363 TCP 23.104.0.1:36608 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:33:11.626 00:00:10.287 TCP 1.101.0.1:3000 -> 22.102.0.1:50298 10 6452 1 2025-10-26 19:33:23.163 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:33:23.128 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:33:12.988 00:00:10.364 TCP 23.104.0.1:43144 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:34:11.951 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35010 10 6452 1 2025-10-26 19:34:13.394 00:00:10.382 TCP 23.104.0.1:50468 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:35:13.812 00:00:10.360 TCP 23.104.0.1:37142 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:35:12.177 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35020 10 6452 1 2025-10-26 19:31:47.812 00:05:03.234 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 19:36:12.392 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58204 10 6452 1 2025-10-26 19:36:14.211 00:00:10.367 TCP 23.104.0.1:60470 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:32:47.810 00:05:03.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 19:37:14.618 00:00:10.365 TCP 23.104.0.1:41870 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:37:12.605 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48008 10 6452 1 2025-10-26 19:38:23.731 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:38:15.022 00:00:10.439 TCP 23.104.0.1:57328 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:38:12.818 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56312 10 6452 1 2025-10-26 19:38:23.549 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:39:13.100 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52730 10 6452 1 2025-10-26 19:39:15.502 00:00:10.375 TCP 23.104.0.1:42468 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:40:13.314 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44596 10 6452 1 2025-10-26 19:40:15.912 00:00:10.369 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:41:16.333 00:00:10.365 TCP 23.104.0.1:33530 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:41:13.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49244 10 6452 1 2025-10-26 19:37:47.814 00:05:03.234 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 19:42:13.755 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57870 10 6452 1 2025-10-26 19:42:16.737 00:00:10.370 TCP 23.104.0.1:58272 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:38:47.812 00:05:03.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 19:43:23.573 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:43:23.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:43:17.144 00:00:20.205 TCP 23.104.0.1:60934 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:43:13.960 00:00:23.300 TCP 1.101.0.1:3000 -> 22.102.0.1:57930 12 6556 1 2025-10-26 19:44:27.411 00:00:10.361 TCP 23.104.0.1:57662 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:44:27.313 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59472 10 6452 1 2025-10-26 19:45:27.812 00:00:10.336 TCP 23.104.0.1:45322 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:45:27.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35358 10 6452 1 2025-10-26 19:46:27.756 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37448 10 6452 1 2025-10-26 19:46:28.187 00:00:10.369 TCP 23.104.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:47:28.595 00:00:10.367 TCP 23.104.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:47:27.935 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45040 10 6452 1 2025-10-26 19:43:47.816 00:05:03.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 19:48:23.627 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:48:23.659 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:48:29.001 00:00:10.363 TCP 23.104.0.1:42130 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:48:28.172 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48570 12 6556 1 2025-10-26 19:44:47.812 00:05:03.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 19:49:28.384 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38810 10 6452 1 2025-10-26 19:49:29.400 00:00:10.327 TCP 23.104.0.1:38450 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:50:29.767 00:00:10.375 TCP 23.104.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:50:28.598 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49620 10 6452 1 2025-10-26 19:51:30.179 00:00:10.366 TCP 23.104.0.1:35498 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:51:28.813 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44376 10 6452 1 2025-10-26 19:52:30.587 00:00:10.323 TCP 23.104.0.1:36452 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:52:29.052 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51254 10 6452 1 2025-10-26 19:53:23.635 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:53:23.751 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:53:29.266 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46060 10 6452 1 2025-10-26 19:53:30.948 00:00:10.370 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:49:47.816 00:05:03.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 19:54:29.472 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48342 10 6452 1 2025-10-26 19:54:31.357 00:00:10.328 TCP 23.104.0.1:51884 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:50:47.815 00:05:03.243 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 19:55:29.686 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:50652 10 6452 1 2025-10-26 19:55:31.724 00:00:10.368 TCP 23.104.0.1:38512 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:56:29.850 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47956 10 6452 1 2025-10-26 19:56:32.133 00:00:10.363 TCP 23.104.0.1:60194 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:57:30.088 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44704 10 6452 1 2025-10-26 19:57:32.534 00:00:10.358 TCP 23.104.0.1:57632 -> 1.101.0.1:3000 11 1507 1 2025-10-26 19:58:23.846 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 19:58:23.985 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 19:58:30.266 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42924 10 6452 1 2025-10-26 19:58:32.931 00:00:10.384 TCP 23.104.0.1:53420 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 502892, total packets: 1582, avg bps: 1065, avg pps: 0, avg bpp: 317 Time window: 2025-10-26 18:55:47 - 2025-10-26 19:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0030s Wall: 0.0022s flows/second: 74054.5 Runtime: 0.0022s