Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 04:59:04.932 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:59:04.746 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:59:02.084 00:00:10.363 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:59:15.351 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45436 10 6452 1 2025-10-28 04:55:48.490 00:05:03.323 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 05:00:02.488 00:00:10.325 TCP 23.104.0.1:59742 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:00:15.572 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58244 10 6452 1 2025-10-28 04:56:48.486 00:05:03.329 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 05:01:02.852 00:00:10.376 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:01:15.780 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45558 10 6452 1 2025-10-28 05:02:03.268 00:00:10.323 TCP 23.104.0.1:46728 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:02:15.993 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60464 10 6452 1 2025-10-28 05:03:03.629 00:00:10.363 TCP 23.104.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:03:16.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49964 10 6452 1 2025-10-28 05:04:03.755 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:04:03.786 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:04:04.028 00:00:10.323 TCP 23.104.0.1:35800 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:04:16.430 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39314 10 6452 1 2025-10-28 05:05:04.389 00:00:10.366 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:05:16.657 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41104 10 6452 1 2025-10-28 05:01:48.490 00:05:03.325 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 05:06:04.791 00:00:10.371 TCP 23.104.0.1:34632 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:06:16.879 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55140 10 6452 1 2025-10-28 05:02:48.488 00:05:03.333 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 05:07:05.197 00:00:10.332 TCP 23.104.0.1:36144 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:07:17.102 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37268 10 6452 1 2025-10-28 05:08:05.567 00:00:10.375 TCP 23.104.0.1:57028 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:08:17.309 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42996 10 6452 1 2025-10-28 05:09:04.199 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:09:04.034 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:09:05.970 00:00:10.382 TCP 23.104.0.1:38846 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:09:17.525 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55880 10 6452 1 2025-10-28 05:10:06.388 00:00:10.452 TCP 23.104.0.1:60778 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:10:17.735 00:00:10.778 TCP 1.101.0.1:3000 -> 22.102.0.1:37308 10 6452 1 2025-10-28 05:11:06.877 00:00:10.365 TCP 23.104.0.1:50166 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:11:18.543 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-10-28 05:07:48.490 00:05:03.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 05:12:07.284 00:00:10.368 TCP 23.104.0.1:56508 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:12:18.756 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45384 10 6452 1 2025-10-28 05:08:48.488 00:05:03.333 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 05:13:07.688 00:00:10.364 TCP 23.104.0.1:43534 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:13:18.975 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:35524 10 6452 1 2025-10-28 05:14:03.859 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:14:04.186 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:14:08.106 00:00:10.372 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:14:19.171 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50122 10 6452 1 2025-10-28 05:15:08.516 00:00:10.336 TCP 23.104.0.1:50538 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:15:19.387 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55852 10 6452 1 2025-10-28 05:16:08.896 00:00:10.348 TCP 23.104.0.1:44566 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:16:19.566 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60454 10 6452 1 2025-10-28 05:17:19.776 00:00:10.568 TCP 1.101.0.1:3000 -> 22.102.0.1:55866 10 6452 1 2025-10-28 05:17:09.297 00:00:18.733 TCP 23.104.0.1:52700 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:13:48.492 00:05:03.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 05:18:20.388 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42100 10 6452 1 2025-10-28 05:18:18.104 00:00:10.361 TCP 23.104.0.1:54818 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:14:48.491 00:05:03.332 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 05:19:04.086 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:19:04.158 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:19:18.507 00:00:10.321 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:19:20.631 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56272 10 6452 1 2025-10-28 05:20:20.803 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38002 10 6452 1 2025-10-28 05:20:18.868 00:00:10.365 TCP 23.104.0.1:40774 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:21:19.275 00:00:11.314 TCP 23.104.0.1:41768 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:21:21.024 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45802 10 6452 1 2025-10-28 05:22:20.628 00:00:10.367 TCP 23.104.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:22:21.234 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46756 10 6452 1 2025-10-28 05:23:21.447 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34282 10 6452 1 2025-10-28 05:23:21.035 00:00:10.362 TCP 23.104.0.1:56114 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:19:48.494 00:05:03.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 05:24:04.554 00:00:00.115 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:24:04.034 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:24:21.431 00:00:10.325 TCP 23.104.0.1:45644 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:24:21.664 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34292 10 6452 1 2025-10-28 05:20:48.493 00:05:03.331 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 05:25:21.787 00:00:10.371 TCP 23.104.0.1:52420 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:25:21.877 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55878 10 6452 1 2025-10-28 05:26:22.100 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36076 10 6452 1 2025-10-28 05:26:22.198 00:00:10.369 TCP 23.104.0.1:56498 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:27:22.602 00:00:10.364 TCP 23.104.0.1:43146 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:27:22.275 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59214 10 6452 1 2025-10-28 05:28:22.483 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54772 10 6452 1 2025-10-28 05:28:23.005 00:00:10.357 TCP 23.104.0.1:48258 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:29:04.278 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:29:04.047 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:29:23.401 00:00:10.324 TCP 23.104.0.1:47664 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:29:22.700 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36492 10 6452 1 2025-10-28 05:25:48.496 00:05:03.327 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 05:30:22.870 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43610 10 6452 1 2025-10-28 05:30:23.765 00:00:10.330 TCP 23.104.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:26:48.493 00:05:03.332 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 05:31:23.069 00:00:11.532 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-10-28 05:31:24.133 00:00:10.573 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:32:24.641 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56916 10 6452 1 2025-10-28 05:32:24.743 00:00:10.364 TCP 23.104.0.1:57630 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:33:24.839 00:00:12.284 TCP 1.101.0.1:3000 -> 22.102.0.1:49350 11 6504 1 2025-10-28 05:33:25.142 00:00:12.103 TCP 23.104.0.1:56254 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:34:04.581 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:34:04.514 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:34:27.163 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60590 10 6452 1 2025-10-28 05:34:27.312 00:00:10.322 TCP 23.104.0.1:59072 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:35:27.337 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42296 10 6452 1 2025-10-28 05:35:27.673 00:00:10.325 TCP 23.104.0.1:50152 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:31:48.500 00:05:03.324 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 05:36:28.033 00:00:10.367 TCP 23.104.0.1:35860 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:36:27.555 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60544 10 6452 1 2025-10-28 05:32:48.497 00:05:03.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 05:37:28.437 00:00:10.344 TCP 23.104.0.1:41232 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:37:27.773 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38232 10 6452 1 2025-10-28 05:38:28.814 00:00:10.370 TCP 23.104.0.1:50280 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:38:27.984 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51492 10 6452 1 2025-10-28 05:39:04.528 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:39:04.529 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:39:28.224 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:53920 10 6452 1 2025-10-28 05:39:29.215 00:00:10.331 TCP 23.104.0.1:54244 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:40:28.483 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35560 10 6452 1 2025-10-28 05:40:29.577 00:00:10.378 TCP 23.104.0.1:35990 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:41:28.698 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-10-28 05:41:29.995 00:00:10.369 TCP 23.104.0.1:37444 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:37:48.500 00:05:03.329 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 05:42:30.397 00:00:10.374 TCP 23.104.0.1:56032 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:42:28.929 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49644 10 6452 1 2025-10-28 05:38:48.498 00:05:03.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 05:43:30.808 00:00:10.368 TCP 23.104.0.1:44166 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:43:29.168 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50084 10 6452 1 2025-10-28 05:44:04.770 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:44:04.707 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:44:29.383 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46572 10 6452 1 2025-10-28 05:44:31.218 00:00:10.329 TCP 23.104.0.1:45544 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:45:29.600 00:00:10.256 TCP 1.101.0.1:3000 -> 22.102.0.1:57842 10 6452 1 2025-10-28 05:45:31.584 00:00:10.945 TCP 23.104.0.1:39490 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:46:29.895 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40582 10 6452 1 2025-10-28 05:46:32.565 00:00:10.364 TCP 23.104.0.1:35432 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:47:30.114 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56364 10 6452 1 2025-10-28 05:47:32.969 00:00:10.369 TCP 23.104.0.1:51314 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:43:48.503 00:05:03.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 05:48:30.327 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33942 10 6452 1 2025-10-28 05:48:33.376 00:00:10.371 TCP 23.104.0.1:42936 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:44:48.500 00:05:03.333 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 05:49:04.622 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:49:04.676 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:49:30.549 00:00:10.839 TCP 1.101.0.1:3000 -> 22.102.0.1:49806 10 6452 1 2025-10-28 05:49:33.784 00:00:10.326 TCP 23.104.0.1:38538 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:50:31.433 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33252 10 6452 1 2025-10-28 05:50:34.147 00:00:10.369 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:51:31.604 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38042 10 6452 1 2025-10-28 05:51:34.554 00:00:10.364 TCP 23.104.0.1:54964 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:52:31.812 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55002 10 6452 1 2025-10-28 05:52:34.950 00:00:10.369 TCP 23.104.0.1:48214 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:53:32.037 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43164 10 6452 1 2025-10-28 05:53:35.355 00:00:10.322 TCP 23.104.0.1:51638 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:49:48.509 00:05:03.323 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 05:54:04.818 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:54:04.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:54:35.716 00:00:10.377 TCP 23.104.0.1:46002 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:54:32.216 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56832 10 6452 1 2025-10-28 05:50:48.507 00:05:03.328 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 05:55:32.432 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40212 10 6452 1 2025-10-28 05:55:36.131 00:00:10.367 TCP 23.104.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:56:32.605 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52108 10 6452 1 2025-10-28 05:56:36.539 00:00:10.365 TCP 23.104.0.1:36768 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:57:32.819 00:00:10.502 TCP 1.101.0.1:3000 -> 22.102.0.1:50676 10 6452 1 2025-10-28 05:57:36.946 00:00:10.342 TCP 23.104.0.1:37738 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:58:33.356 00:00:12.349 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 10 6452 1 2025-10-28 05:58:37.324 00:00:10.323 TCP 23.104.0.1:37406 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1055, avg pps: 0, avg bpp: 316 Time window: 2025-10-28 04:55:48 - 2025-10-28 05:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0010s Wall: 0.0014s flows/second: 116547.9 Runtime: 0.0014s