Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 19:59:14.697 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 19:59:14.826 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 19:59:25.315 00:00:10.388 TCP 23.104.0.1:40472 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:59:27.753 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42130 10 6452 1 2025-10-07 20:00:25.742 00:00:10.370 TCP 23.104.0.1:47674 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:00:27.967 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:60232 10 6452 1 2025-10-07 19:56:39.140 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 20:01:28.157 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6452 1 2025-10-07 20:01:26.146 00:00:10.362 TCP 23.104.0.1:54904 -> 1.101.0.1:3000 11 1507 1 2025-10-07 19:57:39.143 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 20:02:26.548 00:00:10.328 TCP 23.104.0.1:43204 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:02:28.381 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56238 10 6452 1 2025-10-07 20:03:28.597 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42150 10 6452 1 2025-10-07 20:03:26.912 00:00:10.328 TCP 23.104.0.1:58422 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:04:14.606 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:04:14.754 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:04:27.277 00:00:10.368 TCP 23.104.0.1:53594 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:04:28.812 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35722 10 6452 1 2025-10-07 20:05:28.989 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38802 10 6452 1 2025-10-07 20:05:27.684 00:00:10.363 TCP 23.104.0.1:33716 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:06:28.103 00:00:10.376 TCP 23.104.0.1:42866 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:02:39.144 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 20:06:29.219 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59948 10 6452 1 2025-10-07 20:07:29.428 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44732 10 6452 1 2025-10-07 20:07:28.518 00:00:10.366 TCP 23.104.0.1:34714 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:03:39.145 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 20:08:28.921 00:00:10.388 TCP 23.104.0.1:49324 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:08:29.644 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55602 10 6452 1 2025-10-07 20:09:15.165 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:09:14.957 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:09:29.350 00:00:10.602 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:09:29.856 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54838 10 6452 1 2025-10-07 20:10:29.989 00:00:10.366 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:10:30.079 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49412 10 6452 1 2025-10-07 20:11:30.292 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35256 10 6452 1 2025-10-07 20:11:30.399 00:00:10.389 TCP 23.104.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:12:30.836 00:00:10.395 TCP 23.104.0.1:46106 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:12:30.483 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45486 10 6452 1 2025-10-07 20:08:39.145 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 20:09:39.147 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 20:13:31.270 00:00:10.332 TCP 23.104.0.1:46882 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:13:30.698 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39470 10 6452 1 2025-10-07 20:14:15.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:14:15.500 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:14:30.921 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33530 10 6452 1 2025-10-07 20:14:31.636 00:00:10.366 TCP 23.104.0.1:50024 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:15:31.133 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58058 10 6452 1 2025-10-07 20:15:32.049 00:00:10.360 TCP 23.104.0.1:43686 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:16:31.349 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48398 10 6452 1 2025-10-07 20:16:32.445 00:00:10.329 TCP 23.104.0.1:52658 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:17:31.556 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46640 10 6452 1 2025-10-07 20:17:32.815 00:00:10.366 TCP 23.104.0.1:58992 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:18:31.781 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50988 10 6452 1 2025-10-07 20:14:39.145 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 20:18:33.217 00:00:10.362 TCP 23.104.0.1:45762 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:19:15.216 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:19:15.395 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:19:31.951 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56398 10 6452 1 2025-10-07 20:15:39.147 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 20:19:33.617 00:00:10.363 TCP 23.104.0.1:51428 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:20:32.193 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39488 10 6452 1 2025-10-07 20:20:34.019 00:00:10.369 TCP 23.104.0.1:41196 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:21:34.431 00:00:10.366 TCP 23.104.0.1:39684 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:21:32.404 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48832 10 6452 1 2025-10-07 20:22:34.835 00:00:10.366 TCP 23.104.0.1:38746 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:22:32.615 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47058 10 6452 1 2025-10-07 20:23:32.826 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42508 10 6452 1 2025-10-07 20:23:35.239 00:00:10.973 TCP 23.104.0.1:36748 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:24:15.367 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:24:15.616 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:20:39.146 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 20:24:33.069 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36356 10 6452 1 2025-10-07 20:24:36.252 00:00:11.075 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:21:39.145 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 20:25:33.242 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57994 10 6452 1 2025-10-07 20:25:37.370 00:00:10.370 TCP 23.104.0.1:49956 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:26:33.458 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59690 10 6452 1 2025-10-07 20:26:37.773 00:00:10.341 TCP 23.104.0.1:43136 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:27:33.687 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43882 10 6452 1 2025-10-07 20:27:38.142 00:00:10.370 TCP 23.104.0.1:59150 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:28:33.908 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:45122 10 6452 1 2025-10-07 20:28:38.550 00:00:10.364 TCP 23.104.0.1:36286 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:29:15.541 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:29:15.594 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:29:34.104 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59972 10 6452 1 2025-10-07 20:29:38.956 00:00:10.366 TCP 23.104.0.1:55244 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:26:39.146 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 20:30:34.281 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54058 10 6452 1 2025-10-07 20:30:39.362 00:00:10.360 TCP 23.104.0.1:49522 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:27:39.147 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 20:31:34.505 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42608 10 6452 1 2025-10-07 20:31:39.761 00:00:10.386 TCP 23.104.0.1:59700 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:32:34.673 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:39380 10 6452 1 2025-10-07 20:32:40.180 00:00:10.325 TCP 23.104.0.1:49920 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:33:34.860 00:00:10.620 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6452 1 2025-10-07 20:33:40.539 00:00:10.344 TCP 23.104.0.1:33922 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:34:15.568 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:34:15.574 00:00:00.014 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:34:35.519 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36698 10 6452 1 2025-10-07 20:34:40.924 00:00:10.386 TCP 23.104.0.1:33716 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:35:35.731 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56932 10 6452 1 2025-10-07 20:35:41.347 00:00:10.365 TCP 23.104.0.1:40914 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:32:39.145 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 20:36:35.942 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55024 10 6452 1 2025-10-07 20:36:41.750 00:00:10.387 TCP 23.104.0.1:36402 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:37:36.183 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35162 10 6452 1 2025-10-07 20:33:39.148 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 20:37:42.178 00:00:10.366 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:38:36.409 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47288 10 6452 1 2025-10-07 20:38:42.582 00:00:10.365 TCP 23.104.0.1:53110 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:39:15.536 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:39:15.888 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:39:36.627 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39206 10 6452 1 2025-10-07 20:39:42.983 00:00:10.374 TCP 23.104.0.1:43716 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:40:36.844 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33036 10 6452 1 2025-10-07 20:40:43.392 00:00:10.367 TCP 23.104.0.1:51462 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:41:37.039 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44028 10 6452 1 2025-10-07 20:41:43.795 00:00:10.327 TCP 23.104.0.1:37976 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:38:39.148 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 20:42:37.252 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40878 10 6452 1 2025-10-07 20:42:44.160 00:00:10.322 TCP 23.104.0.1:48238 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:39:39.154 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 20:43:37.467 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56536 10 6452 1 2025-10-07 20:43:44.525 00:00:10.362 TCP 23.104.0.1:36510 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:44:15.847 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:44:15.885 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:44:37.684 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43304 10 6452 1 2025-10-07 20:44:44.927 00:00:10.376 TCP 23.104.0.1:42490 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:45:37.894 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:46506 10 6452 1 2025-10-07 20:45:45.340 00:00:10.370 TCP 23.104.0.1:55242 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:46:38.088 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50864 10 6452 1 2025-10-07 20:46:45.748 00:00:10.872 TCP 23.104.0.1:51380 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:47:38.293 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:51604 10 6452 1 2025-10-07 20:47:46.661 00:00:10.364 TCP 23.104.0.1:46060 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:44:39.153 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 20:48:38.539 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47334 10 6452 1 2025-10-07 20:48:47.064 00:00:10.374 TCP 23.104.0.1:50594 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:49:15.833 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:49:15.820 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:45:39.156 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 20:49:38.753 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-10-07 20:49:47.478 00:00:10.369 TCP 23.104.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:50:38.964 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51172 10 6452 1 2025-10-07 20:50:47.888 00:00:10.382 TCP 23.104.0.1:55394 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:51:39.182 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38336 10 6452 1 2025-10-07 20:51:48.323 00:00:10.364 TCP 23.104.0.1:53582 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:52:39.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56976 10 6452 1 2025-10-07 20:52:48.725 00:00:10.364 TCP 23.104.0.1:46176 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:53:39.606 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54178 10 6452 1 2025-10-07 20:53:49.131 00:00:10.360 TCP 23.104.0.1:48354 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:54:15.796 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:54:15.782 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:50:39.155 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 20:54:39.817 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44826 10 6452 1 2025-10-07 20:54:49.527 00:00:11.785 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:51:39.157 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 20:55:40.043 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35354 10 6452 1 2025-10-07 20:55:51.348 00:00:10.379 TCP 23.104.0.1:39750 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:56:40.255 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60124 10 6452 1 2025-10-07 20:56:51.770 00:00:10.329 TCP 23.104.0.1:50364 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:57:40.433 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43922 10 6452 1 2025-10-07 20:57:52.136 00:00:10.375 TCP 23.104.0.1:53004 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:58:40.642 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60964 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1065, avg pps: 0, avg bpp: 318 Time window: 2025-10-07 19:56:39 - 2025-10-07 20:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0051s User: 0.0010s Wall: 0.0031s flows/second: 52093.2 Runtime: 0.0031s