Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 00:59:20.977 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:59:21.325 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:59:34.113 00:00:10.325 TCP 23.104.0.1:48194 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:59:41.590 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6452 1 2025-10-08 01:00:34.474 00:00:10.372 TCP 23.104.0.1:60378 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:56:39.216 00:05:02.017 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 01:00:41.826 00:00:10.628 TCP 1.101.0.1:3000 -> 22.102.0.1:54416 10 6452 1 2025-10-08 00:57:39.218 00:05:02.013 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 01:01:34.876 00:00:10.385 TCP 23.104.0.1:35262 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:01:42.492 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45936 10 6452 1 2025-10-08 01:02:35.294 00:00:10.324 TCP 23.104.0.1:56764 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:02:42.710 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46404 10 6452 1 2025-10-08 01:03:35.658 00:00:10.366 TCP 23.104.0.1:56514 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:03:42.920 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46484 10 6452 1 2025-10-08 01:04:21.336 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:04:21.464 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:04:36.090 00:00:10.365 TCP 23.104.0.1:46224 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:04:43.131 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57850 10 6452 1 2025-10-08 01:05:36.494 00:00:10.363 TCP 23.104.0.1:37234 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:05:43.345 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56006 10 6452 1 2025-10-08 01:02:39.217 00:05:02.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 01:06:36.895 00:00:10.377 TCP 23.104.0.1:53740 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:06:43.566 00:00:11.202 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-10-08 01:03:39.220 00:05:02.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 01:07:37.308 00:00:10.362 TCP 23.104.0.1:33202 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:07:44.806 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49530 10 6452 1 2025-10-08 01:08:37.711 00:00:10.364 TCP 23.104.0.1:46004 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:08:44.974 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:35818 10 6452 1 2025-10-08 01:09:20.978 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:09:21.171 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:09:38.118 00:00:10.362 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:09:45.207 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45144 10 6452 1 2025-10-08 01:10:38.515 00:00:10.376 TCP 23.104.0.1:46546 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:10:45.417 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43814 10 6452 1 2025-10-08 01:11:38.931 00:00:10.390 TCP 23.104.0.1:35700 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:11:45.580 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-10-08 01:08:39.218 00:05:02.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 01:12:39.357 00:00:10.368 TCP 23.104.0.1:59628 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:12:45.789 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42996 10 6452 1 2025-10-08 01:09:39.221 00:05:02.013 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 01:13:39.762 00:00:15.766 TCP 23.104.0.1:36470 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:13:46.008 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37658 10 6452 1 2025-10-08 01:14:21.030 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:14:21.182 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:14:45.612 00:00:10.319 TCP 23.104.0.1:51016 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:14:46.253 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35332 10 6452 1 2025-10-08 01:15:45.974 00:00:10.366 TCP 23.104.0.1:37556 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:15:46.465 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37420 10 6452 1 2025-10-08 01:16:46.676 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35336 10 6452 1 2025-10-08 01:16:46.394 00:00:10.321 TCP 23.104.0.1:33228 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:17:46.758 00:00:10.385 TCP 23.104.0.1:45370 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:17:46.886 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58308 10 6452 1 2025-10-08 01:14:39.219 00:05:02.018 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 01:18:47.181 00:00:10.361 TCP 23.104.0.1:55840 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:18:47.105 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44376 10 6452 1 2025-10-08 01:19:21.216 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:19:21.383 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:15:39.222 00:05:02.013 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 01:19:47.319 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:43936 12 10375 1 2025-10-08 01:19:47.580 00:00:10.446 TCP 23.104.0.1:35080 -> 1.101.0.1:3000 15 1926 1 2025-10-08 01:20:47.557 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59034 10 6452 1 2025-10-08 01:20:48.103 00:00:10.326 TCP 23.104.0.1:41670 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:21:47.768 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48020 10 6452 1 2025-10-08 01:21:48.468 00:00:10.600 TCP 23.104.0.1:48736 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:22:49.113 00:00:10.363 TCP 23.104.0.1:60768 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:22:47.943 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:50432 10 6452 1 2025-10-08 01:23:48.174 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39416 10 6452 1 2025-10-08 01:23:49.516 00:00:10.367 TCP 23.104.0.1:45346 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:24:21.489 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:24:21.484 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:20:39.223 00:05:02.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 01:24:48.393 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36486 10 6452 1 2025-10-08 01:24:49.925 00:00:10.391 TCP 23.104.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:21:39.227 00:05:02.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 01:25:50.356 00:00:10.377 TCP 23.104.0.1:47480 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:25:48.602 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55588 10 6452 1 2025-10-08 01:26:48.817 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40256 10 6452 1 2025-10-08 01:26:50.770 00:00:10.328 TCP 23.104.0.1:60194 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:27:49.042 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55822 10 6452 1 2025-10-08 01:27:51.144 00:00:10.376 TCP 23.104.0.1:59654 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:28:51.559 00:00:10.370 TCP 23.104.0.1:59656 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:28:49.248 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46270 10 6452 1 2025-10-08 01:29:21.594 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:29:21.599 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:29:49.458 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35534 10 6452 1 2025-10-08 01:29:51.991 00:00:11.037 TCP 23.104.0.1:44718 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:26:39.225 00:05:02.021 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 01:30:49.669 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58886 10 6452 1 2025-10-08 01:30:53.110 00:00:10.365 TCP 23.104.0.1:57630 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:27:39.227 00:05:02.016 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 01:31:49.880 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42806 10 6452 1 2025-10-08 01:31:53.513 00:00:10.326 TCP 23.104.0.1:40016 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:32:50.079 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35460 10 6452 1 2025-10-08 01:32:53.874 00:00:10.371 TCP 23.104.0.1:37736 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:33:50.247 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43708 10 6452 1 2025-10-08 01:33:54.274 00:00:10.364 TCP 23.104.0.1:48308 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:34:21.364 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:34:21.628 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:34:50.460 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44880 10 6452 1 2025-10-08 01:34:54.677 00:00:10.369 TCP 23.104.0.1:55966 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:35:50.642 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37406 10 6452 1 2025-10-08 01:35:55.110 00:00:10.326 TCP 23.104.0.1:48186 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:32:39.226 00:05:02.020 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 01:36:50.868 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59114 10 6452 1 2025-10-08 01:36:55.476 00:00:10.373 TCP 23.104.0.1:40276 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:33:39.229 00:05:02.015 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 01:37:51.089 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55440 10 6452 1 2025-10-08 01:37:55.884 00:00:10.382 TCP 23.104.0.1:50676 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:38:51.301 00:00:10.290 TCP 1.101.0.1:3000 -> 22.102.0.1:53428 10 6452 1 2025-10-08 01:38:56.305 00:00:10.359 TCP 23.104.0.1:48880 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:39:21.392 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:39:21.697 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:39:51.630 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47454 10 6452 1 2025-10-08 01:39:56.701 00:00:10.377 TCP 23.104.0.1:43214 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:40:51.799 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43830 10 6452 1 2025-10-08 01:40:57.113 00:00:10.370 TCP 23.104.0.1:54682 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:41:52.014 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33812 10 6452 1 2025-10-08 01:41:57.522 00:00:10.373 TCP 23.104.0.1:43606 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:38:39.229 00:05:02.020 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 01:42:52.224 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59376 10 6452 1 2025-10-08 01:42:57.934 00:00:10.390 TCP 23.104.0.1:50420 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:39:39.231 00:05:02.015 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 01:43:52.435 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56226 10 6452 1 2025-10-08 01:43:58.369 00:00:10.369 TCP 23.104.0.1:33512 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:44:21.934 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:44:21.682 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:44:52.652 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58338 10 6452 1 2025-10-08 01:44:58.785 00:00:10.364 TCP 23.104.0.1:37742 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:45:52.863 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57444 10 6452 1 2025-10-08 01:45:59.189 00:00:10.367 TCP 23.104.0.1:44714 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:46:53.091 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40924 10 6452 1 2025-10-08 01:46:59.595 00:00:10.366 TCP 23.104.0.1:41436 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:47:53.304 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-10-08 01:48:00.001 00:00:10.356 TCP 23.104.0.1:42416 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:44:39.230 00:05:02.020 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 01:48:53.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58052 10 6452 1 2025-10-08 01:49:00.393 00:00:10.329 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:49:21.921 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:49:21.647 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:45:39.233 00:05:02.014 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 01:49:53.734 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41932 10 6452 1 2025-10-08 01:50:00.773 00:00:10.382 TCP 23.104.0.1:47542 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:50:53.946 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47004 10 6452 1 2025-10-08 01:51:01.192 00:00:10.365 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:51:54.179 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60386 10 6452 1 2025-10-08 01:52:01.594 00:00:10.327 TCP 23.104.0.1:46998 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:52:54.355 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37546 10 6452 1 2025-10-08 01:53:01.957 00:00:10.368 TCP 23.104.0.1:48754 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:53:54.567 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35518 10 6452 1 2025-10-08 01:54:02.365 00:00:10.365 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:54:21.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:54:22.044 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:50:39.233 00:05:02.019 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 01:54:54.798 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57644 10 6452 1 2025-10-08 01:55:02.767 00:00:10.378 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:51:39.234 00:05:02.015 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 01:55:55.016 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35668 10 6452 1 2025-10-08 01:56:03.184 00:00:10.365 TCP 23.104.0.1:50878 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:56:55.230 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54404 10 6452 1 2025-10-08 01:57:03.587 00:00:10.371 TCP 23.104.0.1:57774 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:57:55.447 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49560 10 6452 1 2025-10-08 01:58:03.988 00:00:10.369 TCP 23.104.0.1:55342 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494731, total packets: 1557, avg bps: 1071, avg pps: 0, avg bpp: 317 Time window: 2025-10-08 00:56:39 - 2025-10-08 01:58:14 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0037s User: 0.0012s Wall: 0.0024s flows/second: 67670.3 Runtime: 0.0024s