Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 13:58:56.367 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 13:58:56.477 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 13:59:02.280 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44706 10 6452 1 2025-10-17 13:59:13.568 00:00:10.366 TCP 23.104.0.1:58374 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:00:02.493 00:00:16.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6452 1 2025-10-17 14:00:13.972 00:00:10.374 TCP 23.104.0.1:44104 -> 1.101.0.1:3000 11 1507 1 2025-10-17 13:56:43.623 00:05:02.631 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 13:56:43.619 00:05:02.636 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 14:01:08.743 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40946 10 6452 1 2025-10-17 14:01:14.389 00:00:10.365 TCP 23.104.0.1:59156 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:02:08.914 00:00:10.619 TCP 1.101.0.1:3000 -> 22.102.0.1:33568 10 6452 1 2025-10-17 14:02:14.793 00:00:10.359 TCP 23.104.0.1:36964 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:03:09.571 00:00:10.800 TCP 1.101.0.1:3000 -> 22.102.0.1:43920 10 6452 1 2025-10-17 14:03:15.194 00:00:10.674 TCP 23.104.0.1:40226 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:03:56.562 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 14:03:56.522 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 14:04:10.411 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47248 10 6452 1 2025-10-17 14:04:15.907 00:00:10.368 TCP 23.104.0.1:39382 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:05:10.620 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52128 10 6452 1 2025-10-17 14:05:16.316 00:00:10.370 TCP 23.104.0.1:43074 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:06:10.836 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56052 10 6452 1 2025-10-17 14:06:16.735 00:00:10.368 TCP 23.104.0.1:56290 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:02:43.620 00:05:02.637 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 14:02:43.623 00:05:02.631 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 14:07:11.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57522 10 6452 1 2025-10-17 14:07:17.146 00:00:10.326 TCP 23.104.0.1:50312 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:08:11.292 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-10-17 14:08:17.515 00:00:10.366 TCP 23.104.0.1:42162 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:08:56.605 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 14:08:56.786 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 14:09:11.502 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40378 10 6452 1 2025-10-17 14:09:17.911 00:00:10.365 TCP 23.104.0.1:40624 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:10:11.714 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37080 10 6452 1 2025-10-17 14:10:18.320 00:00:10.363 TCP 23.104.0.1:53622 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:11:11.936 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55436 10 6452 1 2025-10-17 14:11:18.718 00:00:10.375 TCP 23.104.0.1:44818 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:12:12.166 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49858 10 6452 1 2025-10-17 14:12:19.139 00:00:10.367 TCP 23.104.0.1:33386 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:08:43.623 00:05:02.633 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 14:08:43.622 00:05:02.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 14:13:12.383 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:58200 10 6452 1 2025-10-17 14:13:19.541 00:00:10.364 TCP 23.104.0.1:56958 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:13:56.529 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 14:13:56.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 14:14:12.554 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38426 10 6452 1 2025-10-17 14:14:19.947 00:00:10.370 TCP 23.104.0.1:43644 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:15:12.768 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52460 10 6452 1 2025-10-17 14:15:20.357 00:00:10.364 TCP 23.104.0.1:57862 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:16:12.979 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:35948 10 6452 1 2025-10-17 14:16:20.760 00:00:10.380 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:17:13.174 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53844 12 10375 1 2025-10-17 14:17:21.191 00:00:10.436 TCP 23.104.0.1:36450 -> 1.101.0.1:3000 15 1926 1 2025-10-17 14:18:13.421 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:49152 10 6452 1 2025-10-17 14:18:21.666 00:00:10.369 TCP 23.104.0.1:52306 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:14:43.623 00:05:02.636 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 14:14:43.626 00:05:02.631 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 14:18:56.840 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 14:18:56.891 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 14:19:13.627 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34016 10 6452 1 2025-10-17 14:19:22.101 00:00:10.369 TCP 23.104.0.1:46274 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:20:13.836 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35594 10 6452 1 2025-10-17 14:20:22.523 00:00:10.370 TCP 23.104.0.1:55376 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:21:14.076 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45834 10 6452 1 2025-10-17 14:21:22.930 00:00:10.378 TCP 23.104.0.1:43832 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:22:14.247 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55388 10 6452 1 2025-10-17 14:22:23.345 00:00:10.365 TCP 23.104.0.1:55298 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:23:14.459 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46490 10 6452 1 2025-10-17 14:23:23.750 00:00:10.383 TCP 23.104.0.1:50602 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:23:56.776 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 14:23:56.959 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 14:24:14.667 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55888 10 6452 1 2025-10-17 14:24:24.176 00:00:10.359 TCP 23.104.0.1:55706 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:20:43.627 00:05:02.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 14:20:43.629 00:05:02.632 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 14:25:14.846 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59286 10 6452 1 2025-10-17 14:25:24.576 00:00:10.361 TCP 23.104.0.1:49954 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:26:15.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44750 10 6452 1 2025-10-17 14:26:24.977 00:00:10.385 TCP 23.104.0.1:38196 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:27:15.295 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60446 10 6452 1 2025-10-17 14:27:25.403 00:00:10.326 TCP 23.104.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:28:15.522 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40100 10 6452 1 2025-10-17 14:28:25.770 00:00:10.370 TCP 23.104.0.1:53568 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:28:57.016 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 14:28:57.243 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 14:29:15.735 00:00:10.315 TCP 1.101.0.1:3000 -> 22.102.0.1:38782 12 6556 1 2025-10-17 14:29:26.174 00:00:10.364 TCP 23.104.0.1:56410 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:30:16.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51876 10 6452 1 2025-10-17 14:30:26.576 00:00:10.332 TCP 23.104.0.1:50798 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:26:43.629 00:05:02.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 14:26:43.625 00:05:02.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 14:31:16.300 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55466 10 6452 1 2025-10-17 14:31:26.938 00:00:10.380 TCP 23.104.0.1:42352 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:32:16.472 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40168 10 6452 1 2025-10-17 14:32:27.356 00:00:10.326 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:33:16.642 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 12 6556 1 2025-10-17 14:33:27.720 00:00:10.374 TCP 23.104.0.1:50994 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:33:57.059 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 14:33:57.100 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 14:34:16.862 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35158 10 6452 1 2025-10-17 14:34:28.133 00:00:10.326 TCP 23.104.0.1:37974 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:35:17.084 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39038 10 6452 1 2025-10-17 14:35:28.496 00:00:10.370 TCP 23.104.0.1:54540 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:36:17.308 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40092 10 6452 1 2025-10-17 14:36:28.901 00:00:10.331 TCP 23.104.0.1:52508 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:32:43.629 00:05:02.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 14:32:43.627 00:05:02.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 14:37:17.529 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43192 10 6452 1 2025-10-17 14:37:29.266 00:00:10.320 TCP 23.104.0.1:42872 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:38:17.761 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52290 10 6452 1 2025-10-17 14:38:29.623 00:00:10.374 TCP 23.104.0.1:50116 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:38:57.534 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 14:38:57.374 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 14:39:17.973 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55900 10 6452 1 2025-10-17 14:39:30.037 00:00:10.366 TCP 23.104.0.1:57522 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:40:18.211 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33180 10 6452 1 2025-10-17 14:40:30.443 00:00:10.368 TCP 23.104.0.1:51884 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:41:18.423 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34256 10 6452 1 2025-10-17 14:41:30.850 00:00:10.350 TCP 23.104.0.1:42102 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:42:18.642 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:39184 12 10369 1 2025-10-17 14:42:31.255 00:00:10.437 TCP 23.104.0.1:38960 -> 1.101.0.1:3000 15 1926 1 2025-10-17 14:38:43.630 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 14:38:43.627 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 14:43:18.903 00:00:10.656 TCP 1.101.0.1:3000 -> 22.102.0.1:58168 10 6452 1 2025-10-17 14:43:31.732 00:00:10.324 TCP 23.104.0.1:38056 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:43:57.588 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 14:43:57.397 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 14:44:19.597 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33010 10 6452 1 2025-10-17 14:44:32.108 00:00:10.361 TCP 23.104.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:45:19.808 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58118 10 6452 1 2025-10-17 14:45:32.509 00:00:10.358 TCP 23.104.0.1:36532 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:46:20.032 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53822 10 6452 1 2025-10-17 14:46:32.908 00:00:10.326 TCP 23.104.0.1:33860 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:47:20.204 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45006 10 6452 1 2025-10-17 14:47:33.274 00:00:10.386 TCP 23.104.0.1:34394 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:48:20.419 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49254 10 6452 1 2025-10-17 14:44:43.631 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 14:44:43.634 00:05:02.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 14:48:33.696 00:00:10.323 TCP 23.104.0.1:41242 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:48:57.447 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 14:48:57.479 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 14:49:20.637 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47918 10 6452 1 2025-10-17 14:49:34.062 00:00:10.317 TCP 23.104.0.1:59974 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:50:20.848 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33142 10 6452 1 2025-10-17 14:50:34.430 00:00:10.363 TCP 23.104.0.1:58076 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:51:21.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37968 10 6452 1 2025-10-17 14:51:34.830 00:00:10.376 TCP 23.104.0.1:48634 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:52:21.297 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:43336 10 6452 1 2025-10-17 14:52:35.238 00:00:10.358 TCP 23.104.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:53:21.482 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34590 10 6452 1 2025-10-17 14:53:35.636 00:00:10.369 TCP 23.104.0.1:51432 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:53:57.621 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 14:53:57.509 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 14:54:21.703 00:00:10.595 TCP 1.101.0.1:3000 -> 22.102.0.1:39216 10 6452 1 2025-10-17 14:54:36.050 00:00:10.372 TCP 23.104.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:50:43.642 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 14:50:43.639 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 14:55:22.339 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59490 10 6452 1 2025-10-17 14:55:36.461 00:00:10.364 TCP 23.104.0.1:49994 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:56:22.564 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33798 10 6452 1 2025-10-17 14:56:36.864 00:00:10.367 TCP 23.104.0.1:55504 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:57:22.793 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52172 10 6452 1 2025-10-17 14:57:37.269 00:00:10.329 TCP 23.104.0.1:49474 -> 1.101.0.1:3000 11 1507 1 2025-10-17 14:58:22.968 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35952 12 6556 1 2025-10-17 14:58:37.629 00:00:10.358 TCP 23.104.0.1:57814 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507338, total packets: 1590, avg bps: 1089, avg pps: 0, avg bpp: 319 Time window: 2025-10-17 13:56:43 - 2025-10-17 14:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0008s Wall: 0.0019s flows/second: 86906.6 Runtime: 0.0019s