Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 12:58:55.362 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 12:58:55.185 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 12:58:48.467 00:00:10.391 TCP 23.104.0.1:57582 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:58:47.072 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56946 10 6452 1 2025-10-17 12:59:47.282 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33888 10 6452 1 2025-10-17 12:59:48.897 00:00:10.336 TCP 23.104.0.1:38678 -> 1.101.0.1:3000 11 1507 1 2025-10-17 12:56:43.599 00:05:02.633 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 12:56:43.604 00:05:02.628 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 13:00:47.495 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52232 10 6452 1 2025-10-17 13:00:49.273 00:00:10.363 TCP 23.104.0.1:55364 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:01:49.675 00:00:10.376 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:01:47.714 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-10-17 13:02:47.929 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:37660 10 6452 1 2025-10-17 13:02:50.108 00:00:10.368 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:03:55.299 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:03:55.157 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:03:50.512 00:00:10.367 TCP 23.104.0.1:44704 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:03:48.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6452 1 2025-10-17 13:04:50.916 00:00:10.378 TCP 23.104.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:04:48.326 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56914 10 6452 1 2025-10-17 13:05:51.336 00:00:10.390 TCP 23.104.0.1:59900 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:05:48.542 00:00:10.423 TCP 1.101.0.1:3000 -> 22.102.0.1:40870 10 6452 1 2025-10-17 13:02:43.615 00:05:02.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 13:02:43.613 00:05:02.624 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 13:06:49.006 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39650 10 6452 1 2025-10-17 13:06:51.763 00:00:10.383 TCP 23.104.0.1:39146 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:07:49.219 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54562 10 6452 1 2025-10-17 13:07:52.183 00:00:10.360 TCP 23.104.0.1:37480 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:08:55.618 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:08:55.531 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:08:49.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49420 10 6452 1 2025-10-17 13:08:52.581 00:00:10.851 TCP 23.104.0.1:50424 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:09:49.650 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54350 10 6452 1 2025-10-17 13:09:53.475 00:00:10.369 TCP 23.104.0.1:34498 -> 1.101.0.1:3000 12 1559 1 2025-10-17 13:10:49.858 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60182 10 6452 1 2025-10-17 13:10:53.877 00:00:10.350 TCP 23.104.0.1:57760 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:11:50.097 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46998 10 6452 1 2025-10-17 13:11:54.269 00:00:10.364 TCP 23.104.0.1:37136 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:08:43.605 00:05:02.632 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 13:08:43.609 00:05:02.627 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 13:12:50.320 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:39530 10 6452 1 2025-10-17 13:12:54.669 00:00:10.366 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:13:55.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:13:55.467 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:13:50.530 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49974 10 6452 1 2025-10-17 13:13:55.102 00:00:10.364 TCP 23.104.0.1:42514 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:14:55.504 00:00:10.490 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:14:50.755 00:00:11.729 TCP 1.101.0.1:3000 -> 22.102.0.1:45266 10 6452 1 2025-10-17 13:15:52.524 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57460 10 6452 1 2025-10-17 13:15:56.062 00:00:10.367 TCP 23.104.0.1:54300 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:16:52.741 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54504 10 6452 1 2025-10-17 13:16:56.470 00:00:10.327 TCP 23.104.0.1:42556 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:17:52.910 00:00:10.679 TCP 1.101.0.1:3000 -> 22.102.0.1:57020 10 6452 1 2025-10-17 13:17:56.836 00:00:10.401 TCP 23.104.0.1:54234 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:14:43.613 00:05:02.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 13:14:43.610 00:05:02.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 13:18:55.685 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:18:55.737 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:18:53.629 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55004 10 6452 1 2025-10-17 13:18:57.278 00:00:10.373 TCP 23.104.0.1:40672 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:19:53.803 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54490 10 6452 1 2025-10-17 13:19:57.688 00:00:10.334 TCP 23.104.0.1:53584 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:20:54.050 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40466 10 6452 1 2025-10-17 13:20:58.078 00:00:10.362 TCP 23.104.0.1:42402 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:21:54.266 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42832 10 6452 1 2025-10-17 13:21:58.470 00:00:10.327 TCP 23.104.0.1:41254 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:22:54.441 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47012 10 6452 1 2025-10-17 13:22:58.836 00:00:10.351 TCP 23.104.0.1:36508 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:23:55.794 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:23:55.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:23:54.654 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37048 10 6452 1 2025-10-17 13:23:59.219 00:00:10.333 TCP 23.104.0.1:46736 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:20:43.614 00:05:02.625 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 13:20:43.613 00:05:02.630 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 13:24:54.863 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49640 10 6452 1 2025-10-17 13:24:59.590 00:00:10.369 TCP 23.104.0.1:35674 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:25:55.083 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52964 10 6452 1 2025-10-17 13:25:59.996 00:00:10.364 TCP 23.104.0.1:47132 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:26:55.301 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35446 10 6452 1 2025-10-17 13:27:00.401 00:00:10.369 TCP 23.104.0.1:57604 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:27:55.479 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34876 12 6556 1 2025-10-17 13:28:00.807 00:00:10.364 TCP 23.104.0.1:53030 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:28:56.001 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:28:55.782 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:28:55.693 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50168 10 6452 1 2025-10-17 13:29:01.212 00:00:10.368 TCP 23.104.0.1:33764 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:29:55.900 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41126 10 6452 1 2025-10-17 13:30:01.618 00:00:10.366 TCP 23.104.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:26:43.617 00:05:02.623 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 13:26:43.614 00:05:02.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 13:30:56.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35488 10 6452 1 2025-10-17 13:31:02.021 00:00:10.326 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:31:56.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58502 10 6452 1 2025-10-17 13:32:02.387 00:00:10.317 TCP 23.104.0.1:54152 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:32:56.506 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51754 10 6452 1 2025-10-17 13:33:02.743 00:00:10.363 TCP 23.104.0.1:50534 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:33:55.965 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:33:55.867 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:33:56.729 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59898 10 6452 1 2025-10-17 13:34:03.150 00:00:10.323 TCP 23.104.0.1:56890 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:34:56.910 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-10-17 13:35:03.520 00:00:10.363 TCP 23.104.0.1:49782 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:35:57.102 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60784 10 6452 1 2025-10-17 13:36:03.918 00:00:10.378 TCP 23.104.0.1:60178 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:32:43.615 00:05:02.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 13:32:43.617 00:05:02.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 13:36:57.268 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43906 10 6452 1 2025-10-17 13:37:04.335 00:00:10.362 TCP 23.104.0.1:57580 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:37:57.473 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43452 10 6452 1 2025-10-17 13:38:04.734 00:00:10.366 TCP 23.104.0.1:49196 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:38:56.470 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:38:56.582 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:38:57.646 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53814 10 6452 1 2025-10-17 13:39:05.138 00:00:10.368 TCP 23.104.0.1:41244 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:39:57.849 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55202 10 6452 1 2025-10-17 13:40:05.544 00:00:10.366 TCP 23.104.0.1:38920 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:40:58.086 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44494 10 6452 1 2025-10-17 13:41:05.965 00:00:10.380 TCP 23.104.0.1:56798 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:41:58.299 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53974 10 6452 1 2025-10-17 13:42:06.385 00:00:10.365 TCP 23.104.0.1:34878 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:38:43.615 00:05:02.630 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 13:38:43.618 00:05:02.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 13:42:58.508 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60048 10 6452 1 2025-10-17 13:43:06.789 00:00:10.368 TCP 23.104.0.1:60190 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:43:56.026 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:43:56.224 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:43:58.684 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-10-17 13:44:07.195 00:00:10.415 TCP 23.104.0.1:38958 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:44:58.906 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:53162 10 6452 1 2025-10-17 13:45:07.659 00:00:10.362 TCP 23.104.0.1:42468 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:45:59.099 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58200 10 6452 1 2025-10-17 13:46:08.087 00:00:10.382 TCP 23.104.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:46:59.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6452 1 2025-10-17 13:47:08.509 00:00:10.365 TCP 23.104.0.1:46332 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:47:59.513 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53858 10 6452 1 2025-10-17 13:48:08.913 00:00:10.366 TCP 23.104.0.1:59238 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:44:43.619 00:05:02.625 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 13:48:56.253 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:44:43.617 00:05:02.630 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 13:48:56.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:48:59.737 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33682 10 6452 1 2025-10-17 13:49:09.320 00:00:10.387 TCP 23.104.0.1:33662 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:49:59.953 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48758 12 6556 1 2025-10-17 13:50:09.749 00:00:10.365 TCP 23.104.0.1:35188 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:51:00.178 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58340 10 6452 1 2025-10-17 13:51:10.150 00:00:10.367 TCP 23.104.0.1:42450 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:52:00.346 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46166 10 6452 1 2025-10-17 13:52:10.553 00:00:10.375 TCP 23.104.0.1:41998 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:53:00.560 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40696 10 6452 1 2025-10-17 13:53:10.970 00:00:10.372 TCP 23.104.0.1:36296 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:53:56.836 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:53:56.797 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:54:00.771 00:00:10.566 TCP 1.101.0.1:3000 -> 22.102.0.1:50234 10 6452 1 2025-10-17 13:54:11.381 00:00:10.329 TCP 23.104.0.1:44840 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:50:43.620 00:05:02.626 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 13:50:43.617 00:05:02.632 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 13:55:01.376 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37740 10 6452 1 2025-10-17 13:55:11.752 00:00:10.377 TCP 23.104.0.1:32982 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:56:01.597 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47716 10 6452 1 2025-10-17 13:56:12.165 00:00:10.558 TCP 23.104.0.1:56854 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:57:01.819 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41476 10 6452 1 2025-10-17 13:57:12.761 00:00:10.368 TCP 23.104.0.1:51456 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:58:02.070 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44858 10 6452 1 2025-10-17 13:58:13.169 00:00:10.362 TCP 23.104.0.1:53428 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498608, total packets: 1577, avg bps: 1078, avg pps: 0, avg bpp: 316 Time window: 2025-10-17 12:56:43 - 2025-10-17 13:58:23 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0010s Wall: 0.0025s flows/second: 66185.5 Runtime: 0.0025s