Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 11:58:54.037 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 11:58:53.750 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 11:59:24.412 00:00:10.366 TCP 23.104.0.1:43350 -> 1.101.0.1:3000 11 1507 1 2025-10-17 11:59:33.306 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40920 10 6452 1 2025-10-17 12:00:24.816 00:00:10.366 TCP 23.104.0.1:53152 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:00:33.481 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40188 10 6452 1 2025-10-17 11:56:43.580 00:05:02.632 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 11:56:43.581 00:05:02.628 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 12:01:25.223 00:00:10.365 TCP 23.104.0.1:45554 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:01:33.696 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36672 10 6452 1 2025-10-17 12:02:25.628 00:00:10.366 TCP 23.104.0.1:53738 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:02:33.869 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56096 10 6452 1 2025-10-17 12:03:26.034 00:00:10.403 TCP 23.104.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:03:34.095 00:00:11.418 TCP 1.101.0.1:3000 -> 22.102.0.1:60722 10 6452 1 2025-10-17 12:03:54.124 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:03:54.015 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:04:26.475 00:00:10.367 TCP 23.104.0.1:41076 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:04:35.561 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49550 10 6452 1 2025-10-17 12:05:26.883 00:00:10.381 TCP 23.104.0.1:52922 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:05:35.772 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57568 10 6452 1 2025-10-17 12:06:27.302 00:00:10.359 TCP 23.104.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:02:43.584 00:05:02.627 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 12:06:35.982 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56164 10 6452 1 2025-10-17 12:02:43.582 00:05:02.632 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 12:07:27.701 00:00:10.361 TCP 23.104.0.1:50952 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:07:36.205 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42820 10 6452 1 2025-10-17 12:08:28.115 00:00:10.367 TCP 23.104.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:08:36.427 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47634 10 6452 1 2025-10-17 12:08:54.193 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:08:54.272 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:09:28.516 00:00:10.363 TCP 23.104.0.1:60104 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:09:36.604 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43688 10 6452 1 2025-10-17 12:10:28.916 00:00:10.401 TCP 23.104.0.1:35008 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:10:36.817 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58754 10 6452 1 2025-10-17 12:11:29.363 00:00:10.376 TCP 23.104.0.1:44674 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:11:37.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40336 10 6452 1 2025-10-17 12:12:29.784 00:00:10.347 TCP 23.104.0.1:60144 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:08:43.586 00:05:02.633 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 12:12:37.256 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35532 10 6452 1 2025-10-17 12:08:43.583 00:05:02.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 12:13:30.168 00:00:10.365 TCP 23.104.0.1:58454 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:13:37.469 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58258 10 6452 1 2025-10-17 12:13:54.460 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:13:54.020 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:14:30.572 00:00:10.366 TCP 23.104.0.1:59020 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:14:37.675 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46934 10 6452 1 2025-10-17 12:15:30.978 00:00:10.365 TCP 23.104.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:15:37.884 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52648 10 6452 1 2025-10-17 12:16:31.383 00:00:10.380 TCP 23.104.0.1:58006 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:16:38.104 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58400 10 6452 1 2025-10-17 12:17:31.804 00:00:10.369 TCP 23.104.0.1:46546 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:17:38.319 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45170 10 6452 1 2025-10-17 12:14:43.584 00:05:02.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 12:18:32.207 00:00:10.371 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:14:43.587 00:05:02.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 12:18:38.534 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58894 10 6452 1 2025-10-17 12:18:54.363 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:18:54.342 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:19:32.617 00:00:10.360 TCP 23.104.0.1:55182 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:19:38.776 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57160 10 6452 1 2025-10-17 12:20:33.016 00:00:10.370 TCP 23.104.0.1:44924 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:20:38.990 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45750 10 6452 1 2025-10-17 12:21:33.425 00:00:10.361 TCP 23.104.0.1:45700 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:21:39.222 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37714 10 6452 1 2025-10-17 12:22:33.828 00:00:10.378 TCP 23.104.0.1:34170 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:22:39.437 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51720 10 6452 1 2025-10-17 12:23:34.245 00:00:10.365 TCP 23.104.0.1:39950 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:23:39.659 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50800 10 6452 1 2025-10-17 12:23:54.563 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:23:54.639 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:24:34.652 00:00:10.371 TCP 23.104.0.1:51480 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:20:43.588 00:05:02.633 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 12:20:43.586 00:05:02.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 12:24:39.877 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34942 10 6452 1 2025-10-17 12:25:35.086 00:00:10.378 TCP 23.104.0.1:34376 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:25:40.105 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58178 10 6452 1 2025-10-17 12:26:35.501 00:00:10.364 TCP 23.104.0.1:34548 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:26:40.314 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49044 10 6452 1 2025-10-17 12:27:35.904 00:00:10.368 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:27:40.488 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41702 10 6452 1 2025-10-17 12:28:36.310 00:00:10.364 TCP 23.104.0.1:51514 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:28:40.698 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49258 10 6452 1 2025-10-17 12:28:54.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:28:54.728 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:29:36.710 00:00:10.363 TCP 23.104.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:29:40.918 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42636 10 6452 1 2025-10-17 12:26:43.591 00:05:02.633 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 12:26:43.589 00:05:02.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 12:30:37.110 00:00:10.373 TCP 23.104.0.1:42844 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:30:41.129 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60868 10 6452 1 2025-10-17 12:31:37.520 00:00:10.365 TCP 23.104.0.1:42530 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:31:41.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49154 10 6452 1 2025-10-17 12:32:37.922 00:00:10.376 TCP 23.104.0.1:52496 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:32:41.509 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58956 10 6452 1 2025-10-17 12:33:38.338 00:00:10.366 TCP 23.104.0.1:34946 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:33:41.724 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41012 10 6452 1 2025-10-17 12:33:55.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:33:55.053 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:34:38.743 00:00:10.320 TCP 23.104.0.1:60912 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:34:41.894 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52196 10 6452 1 2025-10-17 12:35:39.107 00:00:10.360 TCP 23.104.0.1:56832 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:35:42.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37212 10 6452 1 2025-10-17 12:32:43.593 00:05:02.632 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 12:32:43.591 00:05:02.637 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 12:36:39.510 00:00:10.361 TCP 23.104.0.1:49530 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:36:42.331 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52684 10 6452 1 2025-10-17 12:37:39.913 00:00:10.365 TCP 23.104.0.1:57414 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:37:42.544 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56432 10 6452 1 2025-10-17 12:38:40.313 00:00:10.367 TCP 23.104.0.1:43018 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:38:54.876 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:38:42.750 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44186 11 6775 1 2025-10-17 12:38:54.852 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:39:40.713 00:00:10.372 TCP 23.104.0.1:37848 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:39:42.961 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43422 12 6556 1 2025-10-17 12:40:41.125 00:00:10.365 TCP 23.104.0.1:34014 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:40:43.199 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47378 10 6452 1 2025-10-17 12:41:41.529 00:00:10.362 TCP 23.104.0.1:47116 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:41:43.409 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40978 10 6452 1 2025-10-17 12:38:43.591 00:05:02.637 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 12:38:43.594 00:05:02.632 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 12:42:41.936 00:00:10.376 TCP 23.104.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:42:43.576 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59140 10 6452 1 2025-10-17 12:43:55.043 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:43:42.355 00:00:10.366 TCP 23.104.0.1:51472 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:43:43.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38814 10 6452 1 2025-10-17 12:43:55.066 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:44:43.997 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33154 10 6452 1 2025-10-17 12:44:42.765 00:00:10.382 TCP 23.104.0.1:58616 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:45:43.185 00:00:10.335 TCP 23.104.0.1:38852 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:45:44.177 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45072 10 6452 1 2025-10-17 12:46:44.399 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50902 10 6452 1 2025-10-17 12:46:43.557 00:00:10.367 TCP 23.104.0.1:41614 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:47:44.624 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33758 10 6452 1 2025-10-17 12:47:43.961 00:00:10.377 TCP 23.104.0.1:49116 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:44:43.597 00:05:02.629 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 12:44:43.596 00:05:02.633 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 12:48:54.990 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:48:44.839 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37950 10 6452 1 2025-10-17 12:48:55.014 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:48:44.378 00:00:10.365 TCP 23.104.0.1:35310 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:49:44.785 00:00:10.369 TCP 23.104.0.1:52150 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:49:45.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38302 10 6452 1 2025-10-17 12:50:45.295 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52290 10 6452 1 2025-10-17 12:50:45.189 00:00:10.423 TCP 23.104.0.1:51880 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:51:45.620 00:00:10.328 TCP 23.104.0.1:46726 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:51:45.514 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50248 10 6452 1 2025-10-17 12:52:45.723 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37730 12 10369 1 2025-10-17 12:52:45.982 00:00:10.447 TCP 23.104.0.1:57234 -> 1.101.0.1:3000 15 1926 1 2025-10-17 12:53:45.968 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-10-17 12:53:55.384 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:53:46.470 00:00:10.376 TCP 23.104.0.1:39448 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:53:55.549 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:50:43.596 00:05:02.636 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 12:50:43.600 00:05:02.630 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 12:54:46.189 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54026 10 6452 1 2025-10-17 12:54:46.893 00:00:10.371 TCP 23.104.0.1:60340 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:55:46.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37266 10 6452 1 2025-10-17 12:55:47.303 00:00:10.365 TCP 23.104.0.1:55088 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:56:46.609 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46230 10 6452 1 2025-10-17 12:56:47.707 00:00:10.372 TCP 23.104.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:57:48.104 00:00:10.324 TCP 23.104.0.1:34828 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:57:46.827 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58164 10 6452 1 Summary: total flows: 162, total bytes: 495152, total packets: 1560, avg bps: 1077, avg pps: 0, avg bpp: 317 Time window: 2025-10-17 11:56:43 - 2025-10-17 12:57:58 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0021s Wall: 0.0022s flows/second: 73132.8 Runtime: 0.0022s