Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 10:58:52.866 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 10:58:52.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 10:58:59.488 00:00:10.326 TCP 23.104.0.1:60462 -> 1.101.0.1:3000 11 1507 1 2025-10-17 10:59:16.520 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35666 10 6452 1 2025-10-17 10:59:59.854 00:00:10.378 TCP 23.104.0.1:45584 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:00:16.729 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54728 10 6452 1 2025-10-17 10:56:43.569 00:05:02.617 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 10:56:43.565 00:05:02.622 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 11:01:00.267 00:00:10.366 TCP 23.104.0.1:34278 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:01:17.061 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57958 10 6452 1 2025-10-17 11:02:00.669 00:00:10.332 TCP 23.104.0.1:37458 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:02:17.231 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52886 10 6452 1 2025-10-17 11:03:01.035 00:00:10.367 TCP 23.104.0.1:34468 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:03:17.445 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58370 10 6452 1 2025-10-17 11:03:53.111 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:03:53.068 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:04:01.438 00:00:10.367 TCP 23.104.0.1:55634 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:04:17.664 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44340 10 6452 1 2025-10-17 11:05:01.845 00:00:10.387 TCP 23.104.0.1:50472 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:05:17.878 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39300 10 6452 1 2025-10-17 11:06:02.270 00:00:10.361 TCP 23.104.0.1:51768 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:06:18.077 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52710 10 6452 1 2025-10-17 11:02:43.567 00:05:02.623 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 11:02:43.570 00:05:02.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 11:07:02.676 00:00:10.466 TCP 23.104.0.1:48652 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:07:18.301 00:00:10.425 TCP 1.101.0.1:3000 -> 22.102.0.1:46442 10 6452 1 2025-10-17 11:08:03.181 00:00:10.362 TCP 23.104.0.1:46240 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:08:18.767 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50832 10 6452 1 2025-10-17 11:08:52.934 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:08:52.879 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:09:03.582 00:00:10.364 TCP 23.104.0.1:48774 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:09:18.982 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57798 10 6452 1 2025-10-17 11:10:03.986 00:00:10.360 TCP 23.104.0.1:41984 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:10:19.208 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58156 10 6452 1 2025-10-17 11:11:04.387 00:00:10.361 TCP 23.104.0.1:53318 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:11:19.421 00:00:10.672 TCP 1.101.0.1:3000 -> 22.102.0.1:57970 10 6452 1 2025-10-17 11:12:04.787 00:00:10.364 TCP 23.104.0.1:60042 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:12:20.132 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57712 10 6452 1 2025-10-17 11:08:43.568 00:05:02.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 11:08:43.572 00:05:02.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 11:13:05.187 00:00:10.364 TCP 23.104.0.1:48886 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:13:20.349 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58928 10 6452 1 2025-10-17 11:13:53.224 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:13:52.904 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:14:05.589 00:00:10.366 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:14:20.561 00:00:10.349 TCP 1.101.0.1:3000 -> 22.102.0.1:34700 10 6452 1 2025-10-17 11:15:05.995 00:00:10.360 TCP 23.104.0.1:53656 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:15:20.954 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:48454 10 6452 1 2025-10-17 11:16:06.398 00:00:10.361 TCP 23.104.0.1:39738 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:16:21.137 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35514 10 6452 1 2025-10-17 11:17:06.798 00:00:10.446 TCP 23.104.0.1:50996 -> 1.101.0.1:3000 15 1926 1 2025-10-17 11:17:21.351 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:47066 12 10369 1 2025-10-17 11:18:07.283 00:00:10.362 TCP 23.104.0.1:37092 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:18:21.550 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58114 10 6452 1 2025-10-17 11:14:43.569 00:05:02.630 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 11:14:43.572 00:05:02.625 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 11:18:53.387 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:18:53.160 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:19:07.687 00:00:10.365 TCP 23.104.0.1:57662 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:19:21.772 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46178 10 6452 1 2025-10-17 11:20:08.110 00:00:10.369 TCP 23.104.0.1:46410 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:20:21.985 00:00:10.523 TCP 1.101.0.1:3000 -> 22.102.0.1:45096 10 6452 1 2025-10-17 11:21:08.514 00:00:10.363 TCP 23.104.0.1:51018 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:21:22.551 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44776 10 6452 1 2025-10-17 11:22:08.915 00:00:10.362 TCP 23.104.0.1:37726 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:22:22.720 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34648 10 6452 1 2025-10-17 11:23:09.315 00:00:10.367 TCP 23.104.0.1:50486 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:23:22.931 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56830 10 6452 1 2025-10-17 11:23:53.479 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:23:53.209 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:24:09.720 00:00:10.369 TCP 23.104.0.1:59186 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:24:23.167 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35028 10 6452 1 2025-10-17 11:20:43.569 00:05:02.632 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 11:20:43.573 00:05:02.626 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 11:25:10.125 00:00:10.367 TCP 23.104.0.1:60490 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:25:23.391 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55044 10 6452 1 2025-10-17 11:26:10.529 00:00:10.365 TCP 23.104.0.1:41486 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:26:23.612 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37540 10 6452 1 2025-10-17 11:27:10.935 00:00:10.339 TCP 23.104.0.1:57668 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:27:23.783 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40752 10 6452 1 2025-10-17 11:28:11.307 00:00:10.364 TCP 23.104.0.1:56580 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:28:24.000 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:58128 10 6452 1 2025-10-17 11:28:53.621 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:28:53.614 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:29:11.704 00:00:10.371 TCP 23.104.0.1:52380 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:29:24.241 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60194 10 6452 1 2025-10-17 11:30:12.109 00:00:10.363 TCP 23.104.0.1:51226 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:30:24.461 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54492 10 6452 1 2025-10-17 11:26:43.573 00:05:02.627 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 11:26:43.571 00:05:02.632 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 11:31:12.508 00:00:10.369 TCP 23.104.0.1:36964 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:31:24.679 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48508 10 6452 1 2025-10-17 11:32:12.913 00:00:10.324 TCP 23.104.0.1:49390 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:32:24.866 00:00:12.954 TCP 1.101.0.1:3000 -> 22.102.0.1:39924 10 6452 1 2025-10-17 11:33:13.287 00:00:10.358 TCP 23.104.0.1:53504 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:33:27.866 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38876 10 6452 1 2025-10-17 11:33:53.878 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:33:53.375 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:34:13.685 00:00:10.367 TCP 23.104.0.1:53588 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:34:28.088 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57020 10 6452 1 2025-10-17 11:35:14.109 00:00:10.361 TCP 23.104.0.1:50670 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:35:28.304 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54438 10 6452 1 2025-10-17 11:36:14.509 00:00:10.361 TCP 23.104.0.1:37772 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:36:28.481 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60324 10 6452 1 2025-10-17 11:32:43.576 00:05:02.625 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 11:32:43.572 00:05:02.630 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 11:37:14.914 00:00:10.364 TCP 23.104.0.1:36642 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:37:28.703 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34674 10 6452 1 2025-10-17 11:38:15.326 00:00:10.362 TCP 23.104.0.1:45138 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:38:28.916 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 10 6452 1 2025-10-17 11:38:53.834 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:38:53.544 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:39:15.725 00:00:10.369 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:39:29.108 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36744 10 6452 1 2025-10-17 11:40:16.136 00:00:10.365 TCP 23.104.0.1:51136 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:40:29.324 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48784 10 6452 1 2025-10-17 11:41:16.543 00:00:10.789 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:41:29.538 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37532 10 6452 1 2025-10-17 11:42:17.370 00:00:10.365 TCP 23.104.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:42:29.756 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53342 10 6452 1 2025-10-17 11:38:43.577 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 11:38:43.573 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 11:43:17.774 00:00:10.399 TCP 23.104.0.1:50810 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:43:29.968 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59904 10 6452 1 2025-10-17 11:43:53.505 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:43:53.882 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:44:18.189 00:00:10.347 TCP 23.104.0.1:33456 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:44:30.193 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41978 10 6452 1 2025-10-17 11:45:18.585 00:00:10.373 TCP 23.104.0.1:48844 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:45:30.366 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54752 10 6452 1 2025-10-17 11:46:19.000 00:00:10.363 TCP 23.104.0.1:49160 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:46:30.586 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57996 10 6452 1 2025-10-17 11:47:19.402 00:00:10.375 TCP 23.104.0.1:55236 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:47:30.799 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52536 10 6452 1 2025-10-17 11:48:19.813 00:00:10.367 TCP 23.104.0.1:50822 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:48:31.020 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56426 10 6452 1 2025-10-17 11:44:43.580 00:05:02.626 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 11:44:43.577 00:05:02.632 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 11:48:53.906 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:48:53.836 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:49:20.214 00:00:10.371 TCP 23.104.0.1:35250 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:49:31.236 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37632 10 6452 1 2025-10-17 11:50:20.623 00:00:10.370 TCP 23.104.0.1:35258 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:50:31.409 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48300 10 6452 1 2025-10-17 11:51:21.032 00:00:10.367 TCP 23.104.0.1:34708 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:51:31.621 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53194 10 6452 1 2025-10-17 11:52:21.439 00:00:10.371 TCP 23.104.0.1:37620 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:52:31.835 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41122 10 6452 1 2025-10-17 11:53:21.845 00:00:10.381 TCP 23.104.0.1:53550 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:53:32.089 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51032 10 6452 1 2025-10-17 11:53:53.984 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:53:53.844 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:54:22.267 00:00:10.361 TCP 23.104.0.1:45682 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:50:43.578 00:05:02.632 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 11:54:32.314 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47634 10 6452 1 2025-10-17 11:50:43.580 00:05:02.628 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 11:55:22.672 00:00:10.370 TCP 23.104.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:55:32.527 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35318 10 6452 1 2025-10-17 11:56:23.126 00:00:10.315 TCP 23.104.0.1:39500 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:56:32.737 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46332 10 6452 1 2025-10-17 11:57:23.481 00:00:10.486 TCP 23.104.0.1:48806 -> 1.101.0.1:3000 15 1926 1 2025-10-17 11:57:32.915 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38714 12 10369 1 2025-10-17 11:58:24.008 00:00:10.364 TCP 23.104.0.1:46298 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:58:33.131 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37048 10 6452 1 Summary: total flows: 164, total bytes: 507020, total packets: 1584, avg bps: 1090, avg pps: 0, avg bpp: 320 Time window: 2025-10-17 10:56:43 - 2025-10-17 11:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0052s User: 0.0031s Wall: 0.0044s flows/second: 37298.9 Runtime: 0.0044s