Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 02:59:23.638 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:59:23.457 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:59:25.702 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42466 10 6452 1 2025-10-08 02:59:28.869 00:00:10.368 TCP 23.104.0.1:53026 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:00:25.918 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38148 10 6452 1 2025-10-08 02:56:39.243 00:05:02.045 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 03:00:29.275 00:00:10.327 TCP 23.104.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:01:26.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34652 10 6452 1 2025-10-08 03:01:29.641 00:00:10.382 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:57:39.246 00:05:02.040 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 03:02:26.342 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58862 10 6452 1 2025-10-08 03:02:30.064 00:00:10.365 TCP 23.104.0.1:45172 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:03:26.555 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55666 10 6452 1 2025-10-08 03:03:30.470 00:00:10.327 TCP 23.104.0.1:43404 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:04:23.387 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 03:04:23.447 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 03:04:26.800 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60438 10 6452 1 2025-10-08 03:04:30.838 00:00:10.830 TCP 23.104.0.1:43072 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:05:27.031 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47930 10 6452 1 2025-10-08 03:05:31.700 00:00:10.366 TCP 23.104.0.1:54938 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:06:27.245 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57034 10 6452 1 2025-10-08 03:02:39.256 00:05:02.034 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 03:06:32.114 00:00:10.388 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:03:39.256 00:05:02.033 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 03:07:27.459 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36230 10 6452 1 2025-10-08 03:07:32.553 00:00:10.368 TCP 23.104.0.1:39256 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:08:27.676 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53424 10 6452 1 2025-10-08 03:08:32.967 00:00:10.340 TCP 23.104.0.1:56380 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:09:23.362 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 03:09:23.596 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 03:09:27.892 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58958 10 6452 1 2025-10-08 03:09:33.357 00:00:10.363 TCP 23.104.0.1:43868 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:10:28.111 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55602 10 6452 1 2025-10-08 03:10:33.760 00:00:10.385 TCP 23.104.0.1:51516 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:11:28.322 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45096 10 6452 1 2025-10-08 03:11:34.183 00:00:10.363 TCP 23.104.0.1:58570 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:12:28.532 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55594 10 6452 1 2025-10-08 03:08:39.257 00:05:02.034 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 03:12:34.585 00:00:10.368 TCP 23.104.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:13:28.747 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34606 10 6452 1 2025-10-08 03:09:39.260 00:05:02.029 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 03:13:34.994 00:00:10.326 TCP 23.104.0.1:38450 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:14:23.560 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 03:14:23.569 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 03:14:28.957 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:36630 14 10479 1 2025-10-08 03:14:35.367 00:00:10.450 TCP 23.104.0.1:57640 -> 1.101.0.1:3000 15 1926 1 2025-10-08 03:15:29.219 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54526 10 6452 1 2025-10-08 03:15:35.849 00:00:10.339 TCP 23.104.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:16:29.441 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38330 10 6452 1 2025-10-08 03:16:36.226 00:00:10.327 TCP 23.104.0.1:35478 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:17:29.619 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49706 10 6452 1 2025-10-08 03:17:36.590 00:00:10.367 TCP 23.104.0.1:58152 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:18:29.830 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-10-08 03:14:39.259 00:05:02.035 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 03:18:36.995 00:00:10.361 TCP 23.104.0.1:44246 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:19:23.808 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 03:19:23.758 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 03:15:39.261 00:05:02.030 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 03:19:30.071 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36224 10 6452 1 2025-10-08 03:19:37.390 00:00:10.324 TCP 23.104.0.1:55310 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:20:30.282 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:44408 10 6452 1 2025-10-08 03:20:37.749 00:00:10.325 TCP 23.104.0.1:44814 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:21:30.487 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42004 10 6452 1 2025-10-08 03:21:38.116 00:00:10.415 TCP 23.104.0.1:54554 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:22:30.711 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60866 10 6452 1 2025-10-08 03:22:38.569 00:00:10.370 TCP 23.104.0.1:46264 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:23:30.922 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-10-08 03:23:38.978 00:00:10.326 TCP 23.104.0.1:52052 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:24:23.706 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 03:24:23.846 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 03:24:31.134 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58564 10 6452 1 2025-10-08 03:20:39.260 00:05:02.035 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 03:24:39.346 00:00:10.378 TCP 23.104.0.1:54562 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:21:39.262 00:05:02.030 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 03:25:31.310 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49078 10 6452 1 2025-10-08 03:25:39.763 00:00:10.334 TCP 23.104.0.1:45168 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:26:31.531 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46526 10 6452 1 2025-10-08 03:26:40.135 00:00:10.367 TCP 23.104.0.1:57692 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:27:31.752 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41548 10 6452 1 2025-10-08 03:27:40.547 00:00:10.368 TCP 23.104.0.1:47010 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:28:31.964 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56348 10 6452 1 2025-10-08 03:28:40.958 00:00:10.360 TCP 23.104.0.1:54450 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:29:23.890 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 03:29:23.948 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 03:29:32.184 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59440 10 6452 1 2025-10-08 03:29:41.359 00:00:10.369 TCP 23.104.0.1:51186 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:26:39.261 00:05:02.036 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 03:30:32.401 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55480 10 6452 1 2025-10-08 03:30:41.761 00:00:10.377 TCP 23.104.0.1:55226 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:27:39.264 00:05:02.032 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 03:31:32.611 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36530 10 6452 1 2025-10-08 03:31:42.178 00:00:10.368 TCP 23.104.0.1:50538 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:32:32.822 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55344 10 6452 1 2025-10-08 03:32:42.580 00:00:10.367 TCP 23.104.0.1:42038 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:33:33.072 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40922 10 6452 1 2025-10-08 03:33:42.985 00:00:10.370 TCP 23.104.0.1:43914 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:34:24.246 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 03:34:24.276 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 03:34:33.283 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33662 10 6452 1 2025-10-08 03:34:43.392 00:00:10.365 TCP 23.104.0.1:59058 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:35:33.496 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36910 10 6452 1 2025-10-08 03:35:43.796 00:00:10.366 TCP 23.104.0.1:53636 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:32:39.264 00:05:02.041 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 03:36:33.715 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39260 10 6452 1 2025-10-08 03:36:44.211 00:00:10.328 TCP 23.104.0.1:47506 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:33:39.267 00:05:02.036 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 03:37:33.891 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49732 10 6452 1 2025-10-08 03:37:44.576 00:00:10.364 TCP 23.104.0.1:53528 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:38:34.109 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40384 10 6452 1 2025-10-08 03:38:44.979 00:00:10.319 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:39:23.967 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 03:39:24.010 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 03:39:34.325 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-10-08 03:39:45.336 00:00:10.360 TCP 23.104.0.1:48248 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:40:34.493 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55970 10 6452 1 2025-10-08 03:40:45.739 00:00:10.845 TCP 23.104.0.1:57502 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:41:34.705 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56608 10 6452 1 2025-10-08 03:41:46.625 00:00:10.360 TCP 23.104.0.1:48610 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:38:39.271 00:05:02.037 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 03:42:34.879 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45036 10 6452 1 2025-10-08 03:42:47.023 00:00:10.381 TCP 23.104.0.1:42062 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:43:35.108 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:48762 10 6452 1 2025-10-08 03:39:39.272 00:05:02.032 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 03:43:47.439 00:00:10.364 TCP 23.104.0.1:43318 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:44:23.969 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 03:44:24.282 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 03:44:35.314 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43032 10 6452 1 2025-10-08 03:44:47.849 00:00:10.380 TCP 23.104.0.1:34866 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:45:35.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45860 10 6452 1 2025-10-08 03:45:48.272 00:00:10.363 TCP 23.104.0.1:51902 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:46:35.736 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40612 10 6452 1 2025-10-08 03:46:48.675 00:00:10.332 TCP 23.104.0.1:50040 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:47:35.947 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57276 10 6452 1 2025-10-08 03:47:49.060 00:00:10.365 TCP 23.104.0.1:36248 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:48:36.187 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35222 10 6452 1 2025-10-08 03:44:39.272 00:05:02.036 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 03:48:49.467 00:00:10.366 TCP 23.104.0.1:39180 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:49:24.545 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 03:49:24.412 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 03:45:39.274 00:05:02.036 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 03:49:36.407 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:46130 10 6452 1 2025-10-08 03:49:49.865 00:00:10.372 TCP 23.104.0.1:55382 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:50:36.593 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48796 10 6452 1 2025-10-08 03:50:50.276 00:00:10.365 TCP 23.104.0.1:53780 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:51:36.815 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46652 10 6452 1 2025-10-08 03:51:50.683 00:00:10.378 TCP 23.104.0.1:46420 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:52:37.034 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54662 10 6452 1 2025-10-08 03:52:51.121 00:00:10.367 TCP 23.104.0.1:60536 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:53:37.262 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48010 10 6452 1 2025-10-08 03:53:51.522 00:00:10.365 TCP 23.104.0.1:36612 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:54:24.440 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 03:54:24.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 03:50:39.272 00:05:02.042 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 03:54:37.469 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:52694 10 6452 1 2025-10-08 03:54:51.929 00:00:10.371 TCP 23.104.0.1:44850 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:51:39.277 00:05:02.036 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 03:55:37.719 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59440 10 6452 1 2025-10-08 03:55:52.338 00:00:10.367 TCP 23.104.0.1:50934 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:56:37.930 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:59138 10 6452 1 2025-10-08 03:56:52.746 00:00:10.362 TCP 23.104.0.1:38512 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:57:38.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56812 10 6452 1 2025-10-08 03:57:53.157 00:00:10.366 TCP 23.104.0.1:51556 -> 1.101.0.1:3000 11 1507 1 2025-10-08 03:58:38.389 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34452 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1075, avg pps: 0, avg bpp: 319 Time window: 2025-10-08 02:56:39 - 2025-10-08 03:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0017s Wall: 0.0030s flows/second: 54676.2 Runtime: 0.0030s