Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 22:59:07.079 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:59:07.025 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:59:08.755 00:00:10.388 TCP 23.104.0.1:57404 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:59:15.591 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56336 10 6452 1 2025-10-17 23:00:09.186 00:00:10.374 TCP 23.104.0.1:52026 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:00:15.770 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53078 10 6452 1 2025-10-17 22:56:43.817 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 22:56:43.820 00:05:02.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 23:01:09.597 00:00:10.366 TCP 23.104.0.1:59488 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:01:15.994 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37332 10 6452 1 2025-10-17 23:02:10.002 00:00:10.363 TCP 23.104.0.1:42238 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:02:16.220 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48218 10 6452 1 2025-10-17 23:03:10.411 00:00:10.391 TCP 23.104.0.1:57668 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:03:16.426 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45428 10 6452 1 2025-10-17 23:04:07.371 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:04:07.415 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:04:10.831 00:00:10.385 TCP 23.104.0.1:45134 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:04:16.639 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35294 10 6452 1 2025-10-17 23:05:11.262 00:00:10.372 TCP 23.104.0.1:32866 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:05:16.851 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41630 10 6452 1 2025-10-17 23:06:11.674 00:00:10.362 TCP 23.104.0.1:36904 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:06:17.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59380 10 6452 1 2025-10-17 23:02:43.819 00:05:02.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 23:02:43.823 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 23:07:12.103 00:00:10.322 TCP 23.104.0.1:37560 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:07:17.302 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6452 1 2025-10-17 23:08:12.465 00:00:10.363 TCP 23.104.0.1:35746 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:08:17.516 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:45652 10 6452 1 2025-10-17 23:09:07.335 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:09:07.408 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:09:12.867 00:00:10.329 TCP 23.104.0.1:50546 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:09:17.781 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45880 10 6452 1 2025-10-17 23:10:13.237 00:00:10.326 TCP 23.104.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:10:18.008 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-10-17 23:11:13.601 00:00:10.332 TCP 23.104.0.1:35020 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:11:18.225 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57120 10 6452 1 2025-10-17 23:12:13.972 00:00:10.371 TCP 23.104.0.1:53738 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:12:18.438 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56434 10 6452 1 2025-10-17 23:08:43.824 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 23:08:43.822 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 23:13:14.386 00:00:10.327 TCP 23.104.0.1:49960 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:13:18.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45752 10 6452 1 2025-10-17 23:14:07.666 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:14:07.789 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:14:14.752 00:00:10.371 TCP 23.104.0.1:53956 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:14:18.861 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45150 10 6452 1 2025-10-17 23:15:15.163 00:00:10.366 TCP 23.104.0.1:47216 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:15:19.087 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44536 10 6452 1 2025-10-17 23:16:15.569 00:00:10.333 TCP 23.104.0.1:36680 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:16:19.292 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45626 10 6452 1 2025-10-17 23:17:15.938 00:00:10.455 TCP 23.104.0.1:35174 -> 1.101.0.1:3000 15 1926 1 2025-10-17 23:17:19.518 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37186 12 10375 1 2025-10-17 23:18:16.426 00:00:10.365 TCP 23.104.0.1:44876 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:18:19.759 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59676 10 6452 1 2025-10-17 23:14:43.826 00:05:02.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 23:14:43.825 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 23:19:07.824 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:19:07.753 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:19:19.971 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38076 10 6452 1 2025-10-17 23:19:16.834 00:00:10.545 TCP 23.104.0.1:52776 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:20:20.195 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51460 10 6452 1 2025-10-17 23:20:17.421 00:00:10.370 TCP 23.104.0.1:42960 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:21:17.825 00:00:10.367 TCP 23.104.0.1:42474 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:21:20.406 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56806 10 6452 1 2025-10-17 23:22:18.228 00:00:10.368 TCP 23.104.0.1:47644 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:22:20.620 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51358 10 6452 1 2025-10-17 23:23:20.831 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6452 1 2025-10-17 23:23:18.634 00:00:10.367 TCP 23.104.0.1:46704 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:24:07.861 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:24:07.666 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:24:19.037 00:00:10.725 TCP 23.104.0.1:57818 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:24:21.068 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50528 10 6452 1 2025-10-17 23:20:43.825 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 23:20:43.827 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 23:25:19.805 00:00:10.367 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:25:21.239 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34524 10 6452 1 2025-10-17 23:26:21.453 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39404 10 6452 1 2025-10-17 23:26:20.210 00:00:10.366 TCP 23.104.0.1:38046 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:27:21.672 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42950 10 6452 1 2025-10-17 23:27:20.614 00:00:10.329 TCP 23.104.0.1:34974 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:28:20.976 00:00:10.370 TCP 23.104.0.1:54632 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:28:21.884 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56534 10 6452 1 2025-10-17 23:29:08.004 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:29:07.898 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:29:21.385 00:00:10.366 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:29:22.108 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55024 10 6452 1 2025-10-17 23:30:22.321 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57218 10 6452 1 2025-10-17 23:30:21.792 00:00:10.365 TCP 23.104.0.1:48692 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:26:43.829 00:05:02.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 23:26:43.831 00:05:02.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 23:31:22.538 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49808 10 6452 1 2025-10-17 23:31:22.195 00:00:10.320 TCP 23.104.0.1:46130 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:32:22.552 00:00:10.434 TCP 23.104.0.1:45074 -> 1.101.0.1:3000 15 1926 1 2025-10-17 23:32:22.755 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 12 10369 1 2025-10-17 23:33:23.029 00:00:10.381 TCP 23.104.0.1:51720 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:33:22.947 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35824 10 6452 1 2025-10-17 23:34:07.950 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:34:08.135 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:34:23.463 00:00:10.369 TCP 23.104.0.1:57050 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:34:23.182 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45936 10 6452 1 2025-10-17 23:35:23.868 00:00:10.370 TCP 23.104.0.1:51778 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:35:23.415 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35368 10 6452 1 2025-10-17 23:36:23.590 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42506 10 6452 1 2025-10-17 23:36:24.280 00:00:10.366 TCP 23.104.0.1:50736 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:32:43.834 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 23:32:43.831 00:05:02.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 23:37:24.687 00:00:10.369 TCP 23.104.0.1:40450 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:37:23.795 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48484 10 6452 1 2025-10-17 23:38:24.005 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40430 10 6452 1 2025-10-17 23:38:25.106 00:00:10.370 TCP 23.104.0.1:35228 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:39:08.023 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:39:08.055 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:39:24.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33148 10 6452 1 2025-10-17 23:39:25.512 00:00:10.319 TCP 23.104.0.1:41912 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:40:24.431 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51164 10 6452 1 2025-10-17 23:40:25.872 00:00:10.366 TCP 23.104.0.1:33188 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:41:24.647 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36188 10 6452 1 2025-10-17 23:41:26.279 00:00:10.361 TCP 23.104.0.1:35020 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:42:24.856 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 2025-10-17 23:42:26.678 00:00:10.328 TCP 23.104.0.1:42136 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:38:43.832 00:05:02.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 23:38:43.833 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 23:43:25.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51578 10 6452 1 2025-10-17 23:43:27.045 00:00:10.363 TCP 23.104.0.1:52630 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:44:08.277 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:44:07.914 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:44:25.302 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37590 10 6452 1 2025-10-17 23:44:27.440 00:00:10.366 TCP 23.104.0.1:33804 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:45:25.471 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40834 10 6452 1 2025-10-17 23:45:27.848 00:00:10.390 TCP 23.104.0.1:57680 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:46:25.684 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58466 10 6452 1 2025-10-17 23:46:28.275 00:00:10.365 TCP 23.104.0.1:48524 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:47:25.896 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:49414 12 10375 1 2025-10-17 23:47:28.676 00:00:10.440 TCP 23.104.0.1:43262 -> 1.101.0.1:3000 15 1926 1 2025-10-17 23:48:26.138 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60556 10 6452 1 2025-10-17 23:48:29.150 00:00:10.367 TCP 23.104.0.1:33010 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:44:43.837 00:05:02.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 23:44:43.835 00:05:02.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 23:49:08.352 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:49:08.306 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:49:26.346 00:00:15.752 TCP 1.101.0.1:3000 -> 22.102.0.1:44884 10 6452 1 2025-10-17 23:49:29.552 00:00:12.653 TCP 23.104.0.1:34792 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:50:32.283 00:00:10.362 TCP 23.104.0.1:35124 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:50:32.152 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40060 10 6452 1 2025-10-17 23:51:32.360 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40270 10 6452 1 2025-10-17 23:51:32.684 00:00:10.363 TCP 23.104.0.1:53714 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:52:32.535 00:00:10.253 TCP 1.101.0.1:3000 -> 22.102.0.1:55846 10 6452 1 2025-10-17 23:52:33.106 00:00:10.329 TCP 23.104.0.1:56306 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:53:32.821 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38218 10 6452 1 2025-10-17 23:53:33.467 00:00:10.370 TCP 23.104.0.1:38104 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:54:08.446 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:54:08.528 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:54:33.052 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53258 10 6452 1 2025-10-17 23:50:43.839 00:05:02.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 23:54:33.877 00:00:10.365 TCP 23.104.0.1:40784 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:50:43.842 00:05:02.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 23:55:34.275 00:00:10.329 TCP 23.104.0.1:39562 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:55:33.289 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48070 10 6452 1 2025-10-17 23:56:34.647 00:00:10.322 TCP 23.104.0.1:50438 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:56:33.501 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:54560 10 6452 1 2025-10-17 23:57:33.695 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51012 10 6452 1 2025-10-17 23:57:35.012 00:00:10.323 TCP 23.104.0.1:37130 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:58:33.911 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50564 10 6452 1 2025-10-17 23:58:35.378 00:00:10.364 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511368, total packets: 1590, avg bps: 1099, avg pps: 0, avg bpp: 321 Time window: 2025-10-17 22:56:43 - 2025-10-17 23:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0065s User: 0.0000s Wall: 0.0142s flows/second: 11530.5 Runtime: 0.0142s