Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 17:59:01.323 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 17:59:01.193 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 17:58:53.976 00:00:10.365 TCP 23.104.0.1:52934 -> 1.101.0.1:3000 11 1507 1 2025-10-17 17:59:05.261 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40024 10 6452 1 2025-10-17 17:59:54.378 00:00:10.757 TCP 23.104.0.1:56920 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:00:05.474 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60954 10 6452 1 2025-10-17 17:56:43.707 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 17:56:43.710 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 18:00:55.170 00:00:10.324 TCP 23.104.0.1:56336 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:01:05.649 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:32812 10 6452 1 2025-10-17 18:01:55.527 00:00:10.369 TCP 23.104.0.1:44298 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:02:05.820 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-10-17 18:02:55.934 00:00:10.380 TCP 23.104.0.1:33572 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:03:06.034 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58156 10 6452 1 2025-10-17 18:04:01.473 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:04:01.579 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:03:56.357 00:00:10.320 TCP 23.104.0.1:44814 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:04:06.246 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60714 10 6452 1 2025-10-17 18:04:56.720 00:00:10.323 TCP 23.104.0.1:39112 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:05:06.460 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-10-17 18:05:57.102 00:00:10.366 TCP 23.104.0.1:60068 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:06:06.675 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6452 1 2025-10-17 18:02:43.712 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 18:02:43.709 00:05:02.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 18:06:57.504 00:00:10.365 TCP 23.104.0.1:50282 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:07:06.889 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49646 10 6452 1 2025-10-17 18:07:57.912 00:00:10.365 TCP 23.104.0.1:35016 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:08:07.105 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 10 6452 1 2025-10-17 18:09:01.484 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:09:01.403 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:08:58.328 00:00:10.365 TCP 23.104.0.1:38784 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:09:07.321 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57636 10 6452 1 2025-10-17 18:09:58.732 00:00:10.369 TCP 23.104.0.1:49072 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:10:07.544 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33310 10 6452 1 2025-10-17 18:10:59.144 00:00:10.367 TCP 23.104.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:11:07.771 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60456 10 6452 1 2025-10-17 18:11:59.546 00:00:10.323 TCP 23.104.0.1:36266 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:12:07.986 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60072 10 6452 1 2025-10-17 18:08:43.711 00:05:02.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 18:08:43.713 00:05:02.637 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 18:12:59.908 00:00:10.370 TCP 23.104.0.1:57668 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:13:08.215 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:57160 10 6452 1 2025-10-17 18:14:01.482 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:14:01.624 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:14:00.315 00:00:10.326 TCP 23.104.0.1:44478 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:14:08.387 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50120 10 6452 1 2025-10-17 18:15:00.684 00:00:10.324 TCP 23.104.0.1:37632 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:15:08.599 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59482 10 6452 1 2025-10-17 18:16:01.055 00:00:10.362 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:16:08.811 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52986 10 6452 1 2025-10-17 18:17:01.460 00:00:10.364 TCP 23.104.0.1:48838 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:17:08.984 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59956 10 6452 1 2025-10-17 18:18:01.859 00:00:10.332 TCP 23.104.0.1:40732 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:18:09.214 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41554 10 6452 1 2025-10-17 18:14:43.715 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 18:14:43.713 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 18:19:01.550 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:19:01.741 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:19:02.234 00:00:10.361 TCP 23.104.0.1:42156 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:19:09.431 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44466 10 6452 1 2025-10-17 18:20:02.635 00:00:10.362 TCP 23.104.0.1:42030 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:20:09.600 00:00:10.864 TCP 1.101.0.1:3000 -> 22.102.0.1:48902 10 6452 1 2025-10-17 18:21:03.034 00:00:10.327 TCP 23.104.0.1:35070 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:21:10.505 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40110 10 6452 1 2025-10-17 18:22:03.399 00:00:10.366 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:22:10.676 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48764 10 6452 1 2025-10-17 18:23:03.803 00:00:10.364 TCP 23.104.0.1:54904 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:23:10.890 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-10-17 18:24:01.673 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:24:01.889 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:24:04.206 00:00:10.371 TCP 23.104.0.1:35096 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:24:11.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6452 1 2025-10-17 18:20:43.715 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 18:20:43.714 00:05:02.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 18:25:04.616 00:00:10.324 TCP 23.104.0.1:59732 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:25:11.325 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54784 10 6452 1 2025-10-17 18:26:04.977 00:00:10.367 TCP 23.104.0.1:55400 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:26:11.539 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35424 10 6452 1 2025-10-17 18:27:05.384 00:00:10.364 TCP 23.104.0.1:39250 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:27:11.749 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-10-17 18:28:05.783 00:00:10.371 TCP 23.104.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:28:11.917 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38664 10 6452 1 2025-10-17 18:29:01.831 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:29:02.324 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:29:06.199 00:00:10.322 TCP 23.104.0.1:53870 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:29:12.127 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36344 10 6452 1 2025-10-17 18:30:06.560 00:00:10.401 TCP 23.104.0.1:37222 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:30:12.346 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43214 10 6452 1 2025-10-17 18:26:43.718 00:05:02.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 18:26:43.717 00:05:02.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 18:31:06.995 00:00:10.323 TCP 23.104.0.1:42150 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:31:12.552 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57776 10 6452 1 2025-10-17 18:32:07.356 00:00:10.368 TCP 23.104.0.1:37764 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:32:12.765 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34790 10 6452 1 2025-10-17 18:33:07.763 00:00:10.338 TCP 23.104.0.1:36678 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:33:12.985 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43964 10 6452 1 2025-10-17 18:34:01.848 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:34:02.093 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:34:08.153 00:00:10.371 TCP 23.104.0.1:55660 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:34:13.208 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:36604 10 6452 1 2025-10-17 18:35:08.561 00:00:10.364 TCP 23.104.0.1:52624 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:35:13.379 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49520 10 6452 1 2025-10-17 18:36:08.963 00:00:10.366 TCP 23.104.0.1:48798 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:36:13.598 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54632 10 6452 1 2025-10-17 18:32:43.719 00:05:02.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 18:32:43.721 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 18:37:09.367 00:00:10.364 TCP 23.104.0.1:55532 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:37:13.812 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46310 10 6452 1 2025-10-17 18:38:09.771 00:00:10.370 TCP 23.104.0.1:50882 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:38:14.071 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53448 10 6452 1 2025-10-17 18:39:01.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:39:01.878 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:39:10.179 00:00:10.361 TCP 23.104.0.1:38788 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:39:14.247 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38594 10 6452 1 2025-10-17 18:40:10.580 00:00:10.361 TCP 23.104.0.1:55558 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:40:14.460 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36170 10 6452 1 2025-10-17 18:41:10.972 00:00:10.366 TCP 23.104.0.1:57530 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:41:14.681 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58634 10 6452 1 2025-10-17 18:42:11.372 00:00:10.366 TCP 23.104.0.1:42564 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:42:14.895 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:36102 10 6452 1 2025-10-17 18:38:43.722 00:05:02.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 18:38:43.726 00:05:02.633 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 18:43:15.091 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36326 10 6452 1 2025-10-17 18:43:11.776 00:00:10.372 TCP 23.104.0.1:41312 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:44:02.257 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:44:02.170 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:44:12.181 00:00:10.363 TCP 23.104.0.1:53150 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:44:15.265 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37166 10 6452 1 2025-10-17 18:45:15.472 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6452 1 2025-10-17 18:45:12.586 00:00:10.364 TCP 23.104.0.1:47268 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:46:12.985 00:00:10.328 TCP 23.104.0.1:54646 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:46:15.692 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45148 10 6452 1 2025-10-17 18:47:15.908 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37846 10 6452 1 2025-10-17 18:47:13.351 00:00:10.364 TCP 23.104.0.1:40762 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:48:16.123 00:00:10.474 TCP 1.101.0.1:3000 -> 22.102.0.1:58258 10 6452 1 2025-10-17 18:48:13.753 00:00:10.387 TCP 23.104.0.1:50916 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:44:43.726 00:05:02.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 18:44:43.725 00:05:02.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 18:49:02.423 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:49:02.426 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:49:14.177 00:00:10.364 TCP 23.104.0.1:37648 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:49:16.633 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55506 10 6452 1 2025-10-17 18:50:14.579 00:00:10.364 TCP 23.104.0.1:48946 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:50:16.839 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:44572 10 6452 1 2025-10-17 18:51:14.982 00:00:10.367 TCP 23.104.0.1:54866 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:51:17.010 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58756 10 6452 1 2025-10-17 18:52:15.388 00:00:10.367 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:52:17.223 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41048 10 6452 1 2025-10-17 18:53:15.790 00:00:10.366 TCP 23.104.0.1:45654 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:53:17.436 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33926 10 6452 1 2025-10-17 18:54:02.391 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:54:02.337 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:54:16.196 00:00:10.365 TCP 23.104.0.1:51680 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:54:17.614 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40280 10 6452 1 2025-10-17 18:50:43.725 00:05:02.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 18:50:43.728 00:05:02.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 18:55:16.597 00:00:10.373 TCP 23.104.0.1:47720 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:55:17.827 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57594 10 6452 1 2025-10-17 18:56:18.052 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38652 10 6452 1 2025-10-17 18:56:17.010 00:00:10.366 TCP 23.104.0.1:60342 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:57:18.272 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47672 10 6452 1 2025-10-17 18:57:17.413 00:00:10.367 TCP 23.104.0.1:33240 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:58:17.814 00:00:10.367 TCP 23.104.0.1:46454 -> 1.101.0.1:3000 11 1507 1 2025-10-17 18:58:18.487 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38954 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1076, avg pps: 0, avg bpp: 317 Time window: 2025-10-17 17:56:43 - 2025-10-17 18:58:28 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0109s User: 0.0036s Wall: 0.0087s flows/second: 18790.6 Runtime: 0.0088s