Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 19:58:52.826 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 19:58:52.935 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 19:59:04.616 00:00:10.364 TCP 23.104.0.1:58226 -> 1.101.0.1:3000 11 1507 1 2025-10-27 19:59:22.486 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49916 10 6452 1 2025-10-27 19:55:48.288 00:05:03.324 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 20:00:05.026 00:00:10.373 TCP 23.104.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:00:22.715 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59560 10 6452 1 2025-10-27 19:56:48.285 00:05:03.328 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 20:01:05.439 00:00:10.368 TCP 23.104.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:01:22.932 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:43306 10 6452 1 2025-10-27 20:02:05.845 00:00:10.381 TCP 23.104.0.1:52722 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:02:23.171 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52804 10 6452 1 2025-10-27 20:03:06.268 00:00:10.360 TCP 23.104.0.1:39592 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:03:23.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55392 10 6452 1 2025-10-27 20:03:52.945 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 20:03:52.902 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 20:04:06.666 00:00:10.366 TCP 23.104.0.1:35194 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:04:23.603 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40000 10 6452 1 2025-10-27 20:05:07.102 00:00:10.368 TCP 23.104.0.1:46104 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:05:23.823 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37480 10 6452 1 2025-10-27 20:01:48.289 00:05:03.323 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 20:06:07.510 00:00:10.376 TCP 23.104.0.1:46746 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:06:24.060 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34616 10 6452 1 2025-10-27 20:02:48.288 00:05:03.329 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 20:07:07.921 00:00:10.385 TCP 23.104.0.1:56710 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:07:24.276 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45558 10 6452 1 2025-10-27 20:08:08.348 00:00:10.326 TCP 23.104.0.1:51924 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:08:24.501 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56490 10 6452 1 2025-10-27 20:08:53.015 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 20:08:52.974 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 20:09:08.717 00:00:10.379 TCP 23.104.0.1:43112 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:09:24.708 00:00:10.527 TCP 1.101.0.1:3000 -> 22.102.0.1:43794 10 6452 1 2025-10-27 20:10:09.135 00:00:10.331 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:10:25.270 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60942 10 6452 1 2025-10-27 20:11:09.505 00:00:10.363 TCP 23.104.0.1:48356 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:11:25.445 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55186 10 6452 1 2025-10-27 20:07:48.291 00:05:03.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 20:12:09.905 00:00:10.376 TCP 23.104.0.1:60472 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:12:25.670 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:43476 10 6452 1 2025-10-27 20:08:48.289 00:05:03.328 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 20:13:10.313 00:00:10.797 TCP 23.104.0.1:54638 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:13:25.921 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54862 10 6452 1 2025-10-27 20:13:53.032 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 20:13:53.393 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 20:14:11.150 00:00:10.365 TCP 23.104.0.1:49250 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:14:26.161 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34048 10 6452 1 2025-10-27 20:15:11.550 00:00:10.364 TCP 23.104.0.1:45816 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:15:26.376 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36066 10 6452 1 2025-10-27 20:16:11.955 00:00:22.705 TCP 23.104.0.1:55940 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:16:26.588 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42048 12 10584 1 2025-10-27 20:17:26.823 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38606 10 6661 1 2025-10-27 20:17:24.707 00:00:10.444 TCP 23.104.0.1:38644 -> 1.101.0.1:3000 15 1926 1 2025-10-27 20:13:48.293 00:05:03.322 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 20:18:25.188 00:00:10.357 TCP 23.104.0.1:35718 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:18:27.057 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59030 10 6661 1 2025-10-27 20:14:48.290 00:05:03.329 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 20:18:53.093 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 20:18:53.357 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 20:19:25.587 00:00:10.372 TCP 23.104.0.1:49016 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:19:27.233 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37460 10 6661 1 2025-10-27 20:20:25.997 00:00:10.362 TCP 23.104.0.1:55192 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:20:27.451 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35158 10 6661 1 2025-10-27 20:21:26.403 00:00:10.317 TCP 23.104.0.1:55936 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:21:27.673 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48138 10 6661 1 2025-10-27 20:22:26.760 00:00:10.377 TCP 23.104.0.1:51726 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:22:27.896 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46428 10 6661 1 2025-10-27 20:23:28.122 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55908 10 6661 1 2025-10-27 20:23:27.183 00:00:10.358 TCP 23.104.0.1:56072 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:19:48.295 00:05:03.323 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 20:23:53.320 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 20:23:53.398 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 20:24:28.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60662 10 6661 1 2025-10-27 20:24:27.580 00:00:10.364 TCP 23.104.0.1:45482 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:20:48.293 00:05:03.327 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 20:25:28.514 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37834 10 6661 1 2025-10-27 20:25:27.982 00:00:10.324 TCP 23.104.0.1:49916 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:26:28.741 00:00:10.282 TCP 1.101.0.1:3000 -> 22.102.0.1:35674 10 6661 1 2025-10-27 20:26:28.346 00:00:10.792 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:27:29.084 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:51020 11 6713 1 2025-10-27 20:27:29.175 00:00:10.365 TCP 23.104.0.1:36044 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:28:29.361 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38766 10 6661 1 2025-10-27 20:28:29.585 00:00:10.327 TCP 23.104.0.1:34912 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:28:53.316 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 20:28:53.161 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 20:29:29.586 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56142 10 6661 1 2025-10-27 20:29:29.952 00:00:10.375 TCP 23.104.0.1:59444 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:25:48.296 00:05:03.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 20:30:29.812 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:58000 10 6661 1 2025-10-27 20:30:30.364 00:00:10.366 TCP 23.104.0.1:47664 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:26:48.295 00:05:03.332 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 20:31:30.771 00:00:10.369 TCP 23.104.0.1:39998 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:31:29.995 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60760 10 6661 1 2025-10-27 20:32:30.211 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:44138 10 6661 1 2025-10-27 20:32:31.179 00:00:10.325 TCP 23.104.0.1:47570 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:33:30.394 00:00:10.861 TCP 1.101.0.1:3000 -> 22.102.0.1:50156 10 6661 1 2025-10-27 20:33:31.543 00:00:10.355 TCP 23.104.0.1:47844 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:33:54.463 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 20:33:54.246 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 20:34:31.305 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40726 10 6661 1 2025-10-27 20:34:31.950 00:00:10.363 TCP 23.104.0.1:39724 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:35:31.525 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54950 10 6661 1 2025-10-27 20:35:32.353 00:00:10.325 TCP 23.104.0.1:32888 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:31:48.299 00:05:03.330 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 20:36:31.738 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39056 10 6661 1 2025-10-27 20:36:32.712 00:00:10.376 TCP 23.104.0.1:36220 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:32:48.295 00:05:03.334 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 20:37:33.125 00:00:10.367 TCP 23.104.0.1:59086 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:37:31.949 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37590 12 6765 1 2025-10-27 20:38:32.189 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45236 10 6661 1 2025-10-27 20:38:33.527 00:00:10.367 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:38:53.724 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 20:38:53.652 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 20:39:32.366 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35368 10 6661 1 2025-10-27 20:39:33.931 00:00:10.381 TCP 23.104.0.1:33830 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:40:32.570 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39494 10 6661 1 2025-10-27 20:40:34.347 00:00:10.326 TCP 23.104.0.1:35510 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:41:32.790 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38818 10 6661 1 2025-10-27 20:41:34.711 00:00:10.368 TCP 23.104.0.1:50314 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:37:48.299 00:05:03.330 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 20:42:35.113 00:00:10.365 TCP 23.104.0.1:47556 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:42:33.010 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49660 10 6661 1 2025-10-27 20:38:48.296 00:05:03.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 20:43:35.514 00:00:10.365 TCP 23.104.0.1:50898 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:43:33.228 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57944 10 6661 1 2025-10-27 20:43:53.750 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 20:43:53.739 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 20:44:33.400 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35156 10 6661 1 2025-10-27 20:44:35.920 00:00:10.375 TCP 23.104.0.1:47738 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:45:36.334 00:00:10.366 TCP 23.104.0.1:40292 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:45:33.575 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58248 10 6661 1 2025-10-27 20:46:33.785 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49704 10 6661 1 2025-10-27 20:46:36.740 00:00:10.367 TCP 23.104.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:47:34.000 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 10 6661 1 2025-10-27 20:47:37.143 00:00:10.369 TCP 23.104.0.1:60074 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:43:48.300 00:05:03.330 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 20:48:34.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45328 10 6661 1 2025-10-27 20:48:37.547 00:00:10.369 TCP 23.104.0.1:54556 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:48:53.930 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 20:44:48.298 00:05:03.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 20:48:54.077 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 20:49:34.433 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58664 10 6661 1 2025-10-27 20:49:37.954 00:00:10.329 TCP 23.104.0.1:35756 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:50:34.600 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58088 10 6661 1 2025-10-27 20:50:38.317 00:00:10.322 TCP 23.104.0.1:53686 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:51:34.774 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45424 10 6661 1 2025-10-27 20:51:38.677 00:00:10.558 TCP 23.104.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:52:34.991 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60500 10 6661 1 2025-10-27 20:52:39.271 00:00:10.329 TCP 23.104.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:53:35.208 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36972 10 6661 1 2025-10-27 20:53:53.796 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 20:53:39.640 00:00:10.374 TCP 23.104.0.1:55632 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:53:54.084 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 20:49:48.301 00:05:03.332 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 20:54:35.422 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39368 10 6661 1 2025-10-27 20:54:40.123 00:00:10.365 TCP 23.104.0.1:33622 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:50:48.300 00:05:03.336 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 20:55:35.592 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40340 10 6661 1 2025-10-27 20:55:40.530 00:00:10.364 TCP 23.104.0.1:48162 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:56:35.808 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:34026 10 6661 1 2025-10-27 20:56:40.934 00:00:10.378 TCP 23.104.0.1:40426 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:57:35.974 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:41108 10 6661 1 2025-10-27 20:57:41.348 00:00:10.367 TCP 23.104.0.1:34278 -> 1.101.0.1:3000 11 1507 1 2025-10-27 20:58:36.164 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43548 10 6661 1 Summary: total flows: 163, total bytes: 510326, total packets: 1570, avg bps: 1080, avg pps: 0, avg bpp: 325 Time window: 2025-10-27 19:55:48 - 2025-10-27 20:58:46 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0019s Wall: 0.0021s flows/second: 76277.1 Runtime: 0.0022s