Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 06:58:42.057 00:00:10.364 TCP 23.104.0.1:52540 -> 1.101.0.1:3000 11 1507 1 2025-10-27 06:58:49.423 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2025-10-27 06:59:42.456 00:00:10.362 TCP 23.104.0.1:38602 -> 1.101.0.1:3000 11 1507 1 2025-10-27 06:55:48.061 00:05:03.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 06:59:49.642 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49742 10 6452 1 2025-10-27 06:56:48.060 00:05:03.243 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 07:00:42.854 00:00:10.386 TCP 23.104.0.1:60900 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:00:49.859 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57392 10 6452 1 2025-10-27 07:01:43.281 00:00:10.368 TCP 23.104.0.1:56128 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:01:50.082 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49588 10 6452 1 2025-10-27 07:02:43.684 00:00:10.370 TCP 23.104.0.1:36874 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:02:50.294 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46386 10 6452 1 2025-10-27 07:03:37.202 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 07:03:37.284 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:03:44.105 00:00:10.367 TCP 23.104.0.1:56542 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:03:50.519 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38300 10 6452 1 2025-10-27 07:04:44.507 00:00:10.327 TCP 23.104.0.1:54030 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:04:50.732 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52212 10 6452 1 2025-10-27 07:01:48.064 00:05:03.236 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 07:05:44.872 00:00:10.363 TCP 23.104.0.1:51982 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:05:50.939 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46932 10 6452 1 2025-10-27 07:02:48.062 00:05:03.243 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 07:06:45.276 00:00:10.364 TCP 23.104.0.1:50484 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:06:51.182 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49634 10 6452 1 2025-10-27 07:07:45.679 00:00:10.372 TCP 23.104.0.1:47500 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:07:51.396 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48448 10 6452 1 2025-10-27 07:08:37.431 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 07:08:37.362 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:08:46.102 00:00:10.328 TCP 23.104.0.1:38248 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:08:51.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 10 6452 1 2025-10-27 07:09:46.466 00:00:10.364 TCP 23.104.0.1:47760 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:09:51.836 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49462 10 6452 1 2025-10-27 07:10:46.876 00:00:10.365 TCP 23.104.0.1:38120 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:10:52.087 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56174 10 6452 1 2025-10-27 07:07:48.065 00:05:03.238 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 07:11:47.278 00:00:10.364 TCP 23.104.0.1:39848 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:11:52.312 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46182 10 6452 1 2025-10-27 07:08:48.064 00:05:03.243 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 07:12:47.685 00:00:10.372 TCP 23.104.0.1:36194 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:12:52.523 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56470 10 6452 1 2025-10-27 07:13:37.529 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 07:13:37.484 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:13:48.098 00:00:10.366 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:13:52.742 00:00:10.729 TCP 1.101.0.1:3000 -> 22.102.0.1:57338 10 6452 1 2025-10-27 07:14:48.507 00:00:10.368 TCP 23.104.0.1:42816 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:14:53.513 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35422 10 6452 1 2025-10-27 07:15:48.904 00:00:10.539 TCP 23.104.0.1:46396 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:15:53.738 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45000 10 6452 1 2025-10-27 07:16:49.499 00:00:10.330 TCP 23.104.0.1:50934 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:16:53.951 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39184 12 6556 1 2025-10-27 07:13:48.066 00:05:03.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 07:17:49.864 00:00:10.373 TCP 23.104.0.1:34584 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:17:54.187 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:41162 10 6452 1 2025-10-27 07:18:37.734 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:18:37.781 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 07:14:48.064 00:05:03.244 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 07:18:50.280 00:00:10.362 TCP 23.104.0.1:50754 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:18:54.444 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48514 10 6452 1 2025-10-27 07:19:50.681 00:00:10.370 TCP 23.104.0.1:38400 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:19:54.653 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48174 10 6452 1 2025-10-27 07:20:54.865 00:00:15.334 TCP 1.101.0.1:3000 -> 22.102.0.1:59584 10 6452 1 2025-10-27 07:20:51.103 00:00:19.193 TCP 23.104.0.1:36468 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:22:00.282 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42066 10 6452 1 2025-10-27 07:22:00.356 00:00:10.362 TCP 23.104.0.1:34912 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:23:00.757 00:00:10.339 TCP 23.104.0.1:43218 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:23:00.496 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60572 10 6452 1 2025-10-27 07:23:37.911 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:23:37.826 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 07:19:48.069 00:05:03.240 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 07:24:00.710 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33556 10 6452 1 2025-10-27 07:24:01.136 00:00:10.368 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:20:48.065 00:05:03.245 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 07:25:00.876 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44000 10 6452 1 2025-10-27 07:25:01.544 00:00:10.367 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:26:01.099 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38904 10 6452 1 2025-10-27 07:26:01.949 00:00:10.367 TCP 23.104.0.1:33712 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:27:01.325 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43276 10 6452 1 2025-10-27 07:27:02.354 00:00:10.324 TCP 23.104.0.1:59234 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:28:01.540 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50540 10 6452 1 2025-10-27 07:28:02.714 00:00:10.335 TCP 23.104.0.1:53178 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:28:37.576 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 07:28:37.721 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:29:01.763 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48466 10 6452 1 2025-10-27 07:29:03.105 00:00:10.366 TCP 23.104.0.1:40318 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:25:48.068 00:05:03.240 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 07:30:03.514 00:00:10.327 TCP 23.104.0.1:50670 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:30:01.941 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:57962 10 6452 1 2025-10-27 07:26:48.066 00:05:03.251 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 07:31:03.877 00:00:10.374 TCP 23.104.0.1:40126 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:31:02.184 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55382 10 6452 1 2025-10-27 07:32:02.408 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38782 10 6452 1 2025-10-27 07:32:04.293 00:00:10.365 TCP 23.104.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:33:04.696 00:00:10.325 TCP 23.104.0.1:60600 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:33:02.643 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33118 10 6452 1 2025-10-27 07:33:37.767 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:33:38.010 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 07:34:02.850 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57016 10 6452 1 2025-10-27 07:34:05.075 00:00:10.363 TCP 23.104.0.1:59188 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:35:05.478 00:00:10.359 TCP 23.104.0.1:51012 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:35:03.081 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48122 10 6452 1 2025-10-27 07:31:48.070 00:05:03.245 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 07:36:03.294 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42746 10 6452 1 2025-10-27 07:36:05.875 00:00:10.389 TCP 23.104.0.1:46786 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:32:48.068 00:05:03.250 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 07:37:03.509 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58152 10 6452 1 2025-10-27 07:37:06.301 00:00:10.364 TCP 23.104.0.1:46598 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:38:03.724 00:00:10.406 TCP 1.101.0.1:3000 -> 22.102.0.1:51334 10 6452 1 2025-10-27 07:38:06.704 00:00:10.363 TCP 23.104.0.1:41876 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:38:37.997 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 07:38:37.953 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:39:04.166 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58468 10 6452 1 2025-10-27 07:39:07.111 00:00:10.366 TCP 23.104.0.1:48568 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:40:04.376 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54814 12 6556 1 2025-10-27 07:40:07.517 00:00:10.368 TCP 23.104.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:41:04.595 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57212 10 6452 1 2025-10-27 07:41:07.924 00:00:10.386 TCP 23.104.0.1:51082 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:37:48.072 00:05:03.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 07:42:04.818 00:00:10.250 TCP 1.101.0.1:3000 -> 22.102.0.1:49530 13 6608 1 2025-10-27 07:42:08.344 00:00:10.360 TCP 23.104.0.1:48358 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:38:48.070 00:05:03.250 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 07:43:05.125 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58156 10 6452 1 2025-10-27 07:43:08.745 00:00:10.363 TCP 23.104.0.1:57746 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:43:38.641 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 07:43:38.480 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:44:05.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54228 10 6452 1 2025-10-27 07:44:09.147 00:00:10.365 TCP 23.104.0.1:36594 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:45:05.515 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39174 10 6452 1 2025-10-27 07:45:09.551 00:00:10.371 TCP 23.104.0.1:54000 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:46:05.728 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43306 10 6452 1 2025-10-27 07:46:09.963 00:00:10.374 TCP 23.104.0.1:44394 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:47:05.946 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39074 10 6452 1 2025-10-27 07:47:10.372 00:00:10.367 TCP 23.104.0.1:35196 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:43:48.074 00:05:03.255 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 07:48:06.188 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54122 10 6452 1 2025-10-27 07:48:10.777 00:00:10.368 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:48:37.921 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:48:38.231 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 07:44:48.071 00:05:03.260 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 07:49:06.403 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 10 6452 1 2025-10-27 07:49:11.193 00:00:10.380 TCP 23.104.0.1:58098 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:50:06.614 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60814 10 6452 1 2025-10-27 07:50:11.611 00:00:10.327 TCP 23.104.0.1:48224 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:51:06.831 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44862 10 6452 1 2025-10-27 07:51:11.972 00:00:10.669 TCP 23.104.0.1:49464 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:52:07.005 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36014 10 6452 1 2025-10-27 07:52:12.678 00:00:10.325 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:53:07.231 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6452 1 2025-10-27 07:53:13.059 00:00:10.369 TCP 23.104.0.1:57868 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:53:38.183 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 07:53:38.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:49:48.075 00:05:03.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 07:54:07.451 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36928 10 6452 1 2025-10-27 07:54:13.464 00:00:10.359 TCP 23.104.0.1:42438 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:50:48.074 00:05:03.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 07:55:07.674 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57290 10 6452 1 2025-10-27 07:55:13.860 00:00:10.374 TCP 23.104.0.1:35650 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:56:07.893 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43754 10 6452 1 2025-10-27 07:56:14.277 00:00:10.320 TCP 23.104.0.1:43524 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:57:08.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46724 10 6452 1 2025-10-27 07:57:14.637 00:00:10.368 TCP 23.104.0.1:49136 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:58:08.329 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:46960 10 6452 1 2025-10-27 07:58:15.050 00:00:10.368 TCP 23.104.0.1:38830 -> 1.101.0.1:3000 11 1507 1 2025-10-27 07:58:38.297 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 07:58:38.524 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 164, total bytes: 498712, total packets: 1579, avg bps: 1058, avg pps: 0, avg bpp: 315 Time window: 2025-10-27 06:55:48 - 2025-10-27 07:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0020s Wall: 0.0020s flows/second: 80954.0 Runtime: 0.0020s