Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 10:59:03.992 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 10:59:03.995 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 10:59:00.226 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37878 10 6452 1 2025-10-07 10:59:27.189 00:00:10.369 TCP 23.104.0.1:37106 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:00:00.452 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35416 10 6452 1 2025-10-07 11:00:27.597 00:00:10.322 TCP 23.104.0.1:41968 -> 1.101.0.1:3000 11 1507 1 2025-10-07 10:56:38.969 00:05:01.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 11:01:00.691 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59538 10 6452 1 2025-10-07 10:57:38.971 00:05:01.985 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 11:01:27.960 00:00:10.365 TCP 23.104.0.1:59432 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:02:00.906 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:60360 10 6452 1 2025-10-07 11:02:28.361 00:00:10.363 TCP 23.104.0.1:41322 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:03:01.169 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60564 10 6452 1 2025-10-07 11:03:28.765 00:00:10.369 TCP 23.104.0.1:56662 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:04:04.404 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:04:04.336 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:04:01.377 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39102 10 6452 1 2025-10-07 11:04:29.172 00:00:10.324 TCP 23.104.0.1:53424 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:05:01.596 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54250 10 6452 1 2025-10-07 11:05:29.539 00:00:10.899 TCP 23.104.0.1:55738 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:06:01.814 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42880 10 6452 1 2025-10-07 11:02:38.970 00:05:01.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 11:06:30.474 00:00:10.366 TCP 23.104.0.1:45494 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:07:02.039 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60420 10 6452 1 2025-10-07 11:07:30.873 00:00:10.371 TCP 23.104.0.1:38480 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:03:38.972 00:05:01.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 11:08:02.211 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-10-07 11:08:31.279 00:00:10.372 TCP 23.104.0.1:60636 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:09:04.295 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:09:04.404 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:09:02.429 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34574 10 6452 1 2025-10-07 11:09:31.687 00:00:10.366 TCP 23.104.0.1:44300 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:10:02.657 00:00:10.909 TCP 1.101.0.1:3000 -> 22.102.0.1:42824 10 6452 1 2025-10-07 11:10:32.107 00:00:10.318 TCP 23.104.0.1:33624 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:11:03.604 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37644 10 6452 1 2025-10-07 11:11:32.464 00:00:10.369 TCP 23.104.0.1:45836 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:12:03.810 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2025-10-07 11:08:38.976 00:05:01.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 11:12:32.871 00:00:10.372 TCP 23.104.0.1:33016 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:13:04.039 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36942 10 6452 1 2025-10-07 11:09:38.977 00:05:01.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 11:13:33.282 00:00:10.364 TCP 23.104.0.1:53472 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:14:04.460 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:14:04.520 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:14:04.250 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52030 10 6452 1 2025-10-07 11:14:33.685 00:00:10.369 TCP 23.104.0.1:36612 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:15:04.456 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-10-07 11:15:34.116 00:00:10.365 TCP 23.104.0.1:34830 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:16:04.628 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32876 10 6452 1 2025-10-07 11:16:34.522 00:00:10.364 TCP 23.104.0.1:38170 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:17:04.836 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59414 10 6452 1 2025-10-07 11:17:34.930 00:00:10.458 TCP 23.104.0.1:50692 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:18:05.078 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39462 10 6452 1 2025-10-07 11:14:38.976 00:05:01.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 11:18:35.416 00:00:10.327 TCP 23.104.0.1:59798 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:19:05.078 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:19:04.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:19:05.296 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:37560 10 6452 1 2025-10-07 11:15:38.978 00:05:01.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 11:19:35.783 00:00:10.371 TCP 23.104.0.1:36004 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:20:05.487 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56000 10 6452 1 2025-10-07 11:20:36.195 00:00:10.371 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:21:05.738 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60740 10 6452 1 2025-10-07 11:21:36.610 00:00:10.366 TCP 23.104.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:22:05.958 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:39432 10 6452 1 2025-10-07 11:22:37.019 00:00:10.362 TCP 23.104.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:23:06.155 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46672 10 6452 1 2025-10-07 11:23:37.420 00:00:10.328 TCP 23.104.0.1:39424 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:24:04.885 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:24:04.684 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:24:06.330 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38862 10 6452 1 2025-10-07 11:20:38.976 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 11:24:37.821 00:00:10.326 TCP 23.104.0.1:50266 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:25:06.543 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38446 10 6452 1 2025-10-07 11:21:38.979 00:05:01.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 11:25:38.192 00:00:10.369 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:26:06.722 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57928 10 6452 1 2025-10-07 11:26:38.601 00:00:10.365 TCP 23.104.0.1:47942 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:27:06.945 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54234 10 6452 1 2025-10-07 11:27:39.023 00:00:10.362 TCP 23.104.0.1:49820 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:28:07.171 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33656 10 6452 1 2025-10-07 11:28:39.423 00:00:10.370 TCP 23.104.0.1:47652 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:29:04.771 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:29:04.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:29:07.344 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55562 10 6452 1 2025-10-07 11:29:39.837 00:00:10.346 TCP 23.104.0.1:58104 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:30:07.552 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42750 10 6452 1 2025-10-07 11:26:38.980 00:05:01.984 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 11:30:40.219 00:00:10.372 TCP 23.104.0.1:56316 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:31:07.763 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58324 10 6452 1 2025-10-07 11:27:38.982 00:05:01.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 11:31:40.630 00:00:10.368 TCP 23.104.0.1:44976 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:32:07.974 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38034 10 6452 1 2025-10-07 11:32:41.036 00:00:10.364 TCP 23.104.0.1:45602 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:33:08.201 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39974 10 6452 1 2025-10-07 11:33:41.438 00:00:10.369 TCP 23.104.0.1:33278 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:34:04.850 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:34:04.510 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:34:08.403 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39984 10 6452 1 2025-10-07 11:34:41.839 00:00:10.349 TCP 23.104.0.1:54978 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:35:08.579 00:00:10.515 TCP 1.101.0.1:3000 -> 22.102.0.1:34330 10 6452 1 2025-10-07 11:35:42.229 00:00:10.321 TCP 23.104.0.1:41776 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:36:09.135 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52120 10 6452 1 2025-10-07 11:32:38.982 00:05:01.984 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 11:36:42.590 00:00:10.363 TCP 23.104.0.1:59284 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:37:09.345 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59598 10 6452 1 2025-10-07 11:33:38.985 00:05:01.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 11:37:42.989 00:00:10.365 TCP 23.104.0.1:40930 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:38:09.557 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48992 10 6452 1 2025-10-07 11:38:43.393 00:00:10.359 TCP 23.104.0.1:50816 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:39:04.930 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:39:04.993 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:39:09.729 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41428 10 6452 1 2025-10-07 11:39:43.792 00:00:10.362 TCP 23.104.0.1:58214 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:40:09.944 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41382 10 6452 1 2025-10-07 11:40:44.193 00:00:10.357 TCP 23.104.0.1:54428 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:41:10.176 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39680 10 6452 1 2025-10-07 11:41:44.588 00:00:10.366 TCP 23.104.0.1:50742 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:42:10.391 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55542 10 6452 1 2025-10-07 11:38:38.981 00:05:01.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 11:42:44.993 00:00:10.375 TCP 23.104.0.1:46986 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:43:10.600 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52644 10 6452 1 2025-10-07 11:39:38.985 00:05:01.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 11:43:45.399 00:00:10.364 TCP 23.104.0.1:57310 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:44:04.954 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:44:04.859 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:44:10.809 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54340 10 6452 1 2025-10-07 11:44:45.800 00:00:10.334 TCP 23.104.0.1:37350 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:45:11.025 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50718 10 6452 1 2025-10-07 11:45:46.174 00:00:10.368 TCP 23.104.0.1:36676 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:46:11.249 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49116 10 6452 1 2025-10-07 11:46:46.580 00:00:10.367 TCP 23.104.0.1:57948 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:47:11.468 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58330 10 6452 1 2025-10-07 11:47:46.989 00:00:10.364 TCP 23.104.0.1:54966 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:48:11.643 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60768 10 6452 1 2025-10-07 11:44:38.982 00:05:01.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 11:48:47.393 00:00:10.367 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:49:04.861 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:49:05.116 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:49:11.858 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47800 10 6452 1 2025-10-07 11:45:38.987 00:05:01.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 11:49:47.796 00:00:10.366 TCP 23.104.0.1:41960 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:50:12.088 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37332 10 6452 1 2025-10-07 11:50:48.199 00:00:10.326 TCP 23.104.0.1:56392 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:51:12.261 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39254 10 6452 1 2025-10-07 11:51:48.562 00:00:10.375 TCP 23.104.0.1:35602 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:52:12.475 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:49122 10 6452 1 2025-10-07 11:52:48.980 00:00:10.379 TCP 23.104.0.1:50222 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:53:12.643 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59246 10 6452 1 2025-10-07 11:53:49.442 00:00:10.323 TCP 23.104.0.1:46690 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:54:05.162 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:54:04.998 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:54:12.816 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52688 10 6452 1 2025-10-07 11:50:38.985 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 11:54:49.802 00:00:10.333 TCP 23.104.0.1:33786 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:55:13.030 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38856 10 6452 1 2025-10-07 11:51:38.986 00:05:01.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 11:55:50.170 00:00:10.367 TCP 23.104.0.1:33334 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:56:13.247 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60884 10 6452 1 2025-10-07 11:56:50.578 00:00:10.366 TCP 23.104.0.1:35692 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:57:13.454 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48558 10 6452 1 2025-10-07 11:57:50.981 00:00:10.373 TCP 23.104.0.1:54606 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:58:13.629 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35436 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1072, avg pps: 0, avg bpp: 318 Time window: 2025-10-07 10:56:38 - 2025-10-07 11:58:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0016s Wall: 0.0024s flows/second: 68807.5 Runtime: 0.0024s