Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 18:59:02.447 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 18:59:02.662 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 18:59:18.706 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 10 6452 1 2025-10-17 18:59:18.224 00:00:10.366 TCP 23.104.0.1:54530 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:00:18.639 00:00:10.339 TCP 23.104.0.1:46190 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:00:18.928 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36914 10 6452 1 2025-10-17 18:56:43.728 00:05:02.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 18:56:43.732 00:05:02.633 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 19:01:19.168 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34460 10 6452 1 2025-10-17 19:01:19.017 00:00:10.371 TCP 23.104.0.1:57938 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:02:19.425 00:00:10.374 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:02:19.383 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46246 12 6556 1 2025-10-17 19:03:19.840 00:00:10.502 TCP 23.104.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:03:19.604 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58464 10 6452 1 2025-10-17 19:04:02.573 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:04:02.714 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:04:20.381 00:00:10.366 TCP 23.104.0.1:47896 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:04:19.818 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34376 10 6452 1 2025-10-17 19:05:20.071 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37980 10 6452 1 2025-10-17 19:05:20.784 00:00:10.329 TCP 23.104.0.1:44070 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:06:20.290 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57792 10 6452 1 2025-10-17 19:06:21.150 00:00:10.370 TCP 23.104.0.1:34266 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:02:43.731 00:05:02.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 19:02:43.733 00:05:02.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 19:07:21.550 00:00:10.365 TCP 23.104.0.1:55810 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:07:20.508 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51558 10 6452 1 2025-10-17 19:08:20.689 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-10-17 19:08:21.955 00:00:10.370 TCP 23.104.0.1:54898 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:09:02.719 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:09:02.784 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:09:20.864 00:00:10.659 TCP 1.101.0.1:3000 -> 22.102.0.1:48266 10 6452 1 2025-10-17 19:09:22.366 00:00:10.363 TCP 23.104.0.1:59470 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:10:21.561 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51020 10 6452 1 2025-10-17 19:10:22.769 00:00:10.370 TCP 23.104.0.1:56602 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:11:21.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54718 10 6452 1 2025-10-17 19:11:23.178 00:00:10.365 TCP 23.104.0.1:50820 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:12:23.577 00:00:10.366 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:12:21.989 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33378 10 6452 1 2025-10-17 19:08:43.735 00:05:02.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 19:08:43.733 00:05:02.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 19:13:23.980 00:00:10.368 TCP 23.104.0.1:55696 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:13:22.211 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58786 10 6452 1 2025-10-17 19:14:03.007 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:14:02.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:14:24.385 00:00:10.366 TCP 23.104.0.1:43798 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:14:22.421 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39298 10 6452 1 2025-10-17 19:15:22.642 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45610 10 6452 1 2025-10-17 19:15:24.786 00:00:10.344 TCP 23.104.0.1:52164 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:16:25.168 00:00:10.365 TCP 23.104.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:16:22.817 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58680 10 6452 1 2025-10-17 19:17:25.564 00:00:10.363 TCP 23.104.0.1:34546 -> 1.101.0.1:3000 12 1559 1 2025-10-17 19:17:23.040 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45040 10 6452 1 2025-10-17 19:18:25.966 00:00:10.364 TCP 23.104.0.1:40112 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:18:23.255 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-10-17 19:14:43.733 00:05:02.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 19:14:43.735 00:05:02.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 19:19:02.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:19:02.939 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:19:26.368 00:00:10.363 TCP 23.104.0.1:34166 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:19:23.428 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52240 10 6452 1 2025-10-17 19:20:23.641 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-10-17 19:20:26.772 00:00:10.336 TCP 23.104.0.1:40618 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:21:23.856 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39396 10 6452 1 2025-10-17 19:21:27.137 00:00:10.416 TCP 23.104.0.1:58898 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:22:24.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57876 10 6452 1 2025-10-17 19:22:27.595 00:00:10.367 TCP 23.104.0.1:51156 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:23:24.299 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50554 10 6452 1 2025-10-17 19:23:28.003 00:00:10.365 TCP 23.104.0.1:35890 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:24:02.985 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:24:02.945 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:24:24.518 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59066 10 6452 1 2025-10-17 19:24:28.409 00:00:10.327 TCP 23.104.0.1:40036 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:20:43.734 00:05:02.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 19:20:43.736 00:05:02.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 19:25:24.737 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:39152 10 6452 1 2025-10-17 19:25:28.773 00:00:10.372 TCP 23.104.0.1:39346 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:26:24.949 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35582 12 6556 1 2025-10-17 19:26:29.182 00:00:10.366 TCP 23.104.0.1:49120 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:27:25.176 00:00:10.443 TCP 1.101.0.1:3000 -> 22.102.0.1:50100 10 6452 1 2025-10-17 19:27:29.593 00:00:10.388 TCP 23.104.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:28:25.655 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55928 10 6452 1 2025-10-17 19:28:30.024 00:00:10.362 TCP 23.104.0.1:36038 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:29:03.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:29:03.660 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:29:25.825 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52850 10 6452 1 2025-10-17 19:29:30.426 00:00:10.378 TCP 23.104.0.1:36140 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:30:26.070 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46544 10 6452 1 2025-10-17 19:30:30.843 00:00:10.350 TCP 23.104.0.1:57824 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:26:43.748 00:05:02.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 19:26:43.745 00:05:02.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 19:31:26.283 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54806 11 6492 1 2025-10-17 19:31:31.232 00:00:10.369 TCP 23.104.0.1:46592 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:32:26.495 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43536 10 6452 1 2025-10-17 19:32:31.640 00:00:10.373 TCP 23.104.0.1:55588 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:33:26.705 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35804 10 6452 1 2025-10-17 19:33:32.064 00:00:10.362 TCP 23.104.0.1:35586 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:34:03.292 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:34:03.136 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:34:26.928 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35738 10 6452 1 2025-10-17 19:34:32.469 00:00:10.359 TCP 23.104.0.1:33390 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:35:27.102 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50194 10 6452 1 2025-10-17 19:35:32.867 00:00:10.363 TCP 23.104.0.1:57938 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:36:27.321 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42018 10 6452 1 2025-10-17 19:32:43.748 00:05:02.627 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 19:32:43.751 00:05:02.622 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 19:36:33.274 00:00:10.369 TCP 23.104.0.1:52236 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:37:27.532 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48940 10 6452 1 2025-10-17 19:37:33.684 00:00:10.327 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:38:27.703 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47936 10 6452 1 2025-10-17 19:38:34.059 00:00:10.366 TCP 23.104.0.1:43328 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:39:03.300 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:39:03.266 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:39:27.931 00:00:11.070 TCP 1.101.0.1:3000 -> 22.102.0.1:55650 10 6452 1 2025-10-17 19:39:34.464 00:00:10.320 TCP 23.104.0.1:58156 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:40:29.065 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39006 10 6452 1 2025-10-17 19:40:34.816 00:00:10.366 TCP 23.104.0.1:44286 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:41:29.283 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38066 10 6452 1 2025-10-17 19:41:35.219 00:00:10.326 TCP 23.104.0.1:38446 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:42:29.498 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53046 10 6452 1 2025-10-17 19:38:43.751 00:05:02.622 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 19:42:35.578 00:00:10.324 TCP 23.104.0.1:37694 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:38:43.750 00:05:02.627 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 19:43:29.713 00:00:10.424 TCP 1.101.0.1:3000 -> 22.102.0.1:44744 10 6452 1 2025-10-17 19:43:35.943 00:00:10.341 TCP 23.104.0.1:56322 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:44:03.246 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:44:03.360 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:44:30.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42272 10 6452 1 2025-10-17 19:44:36.322 00:00:10.364 TCP 23.104.0.1:37710 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:45:30.390 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41446 10 6452 1 2025-10-17 19:45:36.728 00:00:10.332 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:46:30.560 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43226 10 6452 1 2025-10-17 19:46:37.108 00:00:10.327 TCP 23.104.0.1:44954 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:47:30.770 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50892 10 6452 1 2025-10-17 19:47:37.473 00:00:10.361 TCP 23.104.0.1:54252 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:48:30.977 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34388 10 6452 1 2025-10-17 19:44:43.752 00:05:02.625 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 19:48:37.870 00:00:10.367 TCP 23.104.0.1:54734 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:44:43.755 00:05:02.620 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 19:49:03.160 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:49:03.463 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:49:31.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47416 10 6452 1 2025-10-17 19:49:38.283 00:00:10.363 TCP 23.104.0.1:56674 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:50:31.431 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:36162 10 6452 1 2025-10-17 19:50:38.685 00:00:10.372 TCP 23.104.0.1:38224 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:51:31.618 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 10 6452 1 2025-10-17 19:51:39.106 00:00:10.328 TCP 23.104.0.1:41286 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:52:31.794 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:45156 12 10375 1 2025-10-17 19:52:39.470 00:00:10.437 TCP 23.104.0.1:47388 -> 1.101.0.1:3000 15 1926 1 2025-10-17 19:53:31.988 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54976 10 6452 1 2025-10-17 19:53:39.947 00:00:10.373 TCP 23.104.0.1:57590 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:54:03.802 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:54:03.614 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:54:32.211 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45108 10 6452 1 2025-10-17 19:50:43.754 00:05:02.625 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 19:50:43.756 00:05:02.620 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 19:54:40.360 00:00:10.372 TCP 23.104.0.1:51622 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:55:32.380 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57066 10 6452 1 2025-10-17 19:55:40.782 00:00:10.374 TCP 23.104.0.1:33666 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:56:32.589 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35900 10 6452 1 2025-10-17 19:56:41.200 00:00:10.326 TCP 23.104.0.1:46380 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:57:32.766 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56380 10 6452 1 2025-10-17 19:57:41.567 00:00:10.365 TCP 23.104.0.1:42302 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:58:32.989 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41376 10 6452 1 Summary: total flows: 163, total bytes: 501483, total packets: 1573, avg bps: 1078, avg pps: 0, avg bpp: 318 Time window: 2025-10-17 18:56:43 - 2025-10-17 19:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0026s Wall: 0.0024s flows/second: 67831.3 Runtime: 0.0024s