Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 23:59:08.316 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 23:59:08.631 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 23:59:34.125 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52420 10 6452 1 2025-10-17 23:59:35.780 00:00:10.377 TCP 23.104.0.1:48484 -> 1.101.0.1:3000 11 1507 1 2025-10-17 23:56:43.840 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 00:00:34.342 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59188 10 6452 1 2025-10-17 23:56:43.843 00:05:02.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 00:00:36.195 00:00:10.384 TCP 23.104.0.1:43270 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:01:34.548 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43042 10 6452 1 2025-10-18 00:01:36.597 00:00:10.366 TCP 23.104.0.1:41494 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:02:34.718 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51256 10 6452 1 2025-10-18 00:02:36.996 00:00:10.328 TCP 23.104.0.1:56584 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:03:34.932 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55802 10 6452 1 2025-10-18 00:03:37.358 00:00:10.365 TCP 23.104.0.1:38358 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:04:08.771 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:04:08.623 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:04:35.154 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35546 10 6452 1 2025-10-18 00:04:37.762 00:00:10.445 TCP 23.104.0.1:58282 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:05:35.331 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45044 10 6452 1 2025-10-18 00:05:38.243 00:00:10.326 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:06:35.544 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34486 10 6452 1 2025-10-18 00:02:43.843 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 00:06:38.604 00:00:10.363 TCP 23.104.0.1:55598 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:02:43.846 00:05:02.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 00:07:35.761 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60018 10 6452 1 2025-10-18 00:07:39.004 00:00:10.332 TCP 23.104.0.1:57948 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:08:35.986 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55214 10 6452 1 2025-10-18 00:08:39.373 00:00:10.328 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:09:08.885 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:09:08.830 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:09:36.211 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49390 10 6452 1 2025-10-18 00:09:39.737 00:00:10.369 TCP 23.104.0.1:58102 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:10:36.430 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-10-18 00:10:40.142 00:00:10.326 TCP 23.104.0.1:41188 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:11:36.646 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59190 10 6452 1 2025-10-18 00:11:40.504 00:00:10.326 TCP 23.104.0.1:48682 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:08:43.847 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 00:12:40.869 00:00:10.366 TCP 23.104.0.1:41768 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:08:43.844 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 00:12:36.862 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46652 10 6452 1 2025-10-18 00:13:37.096 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41810 10 6452 1 2025-10-18 00:13:41.279 00:00:10.361 TCP 23.104.0.1:53076 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:14:09.017 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:14:09.089 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:14:37.307 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59582 10 6452 1 2025-10-18 00:14:41.679 00:00:10.369 TCP 23.104.0.1:47930 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:15:37.518 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48132 10 6452 1 2025-10-18 00:15:42.106 00:00:10.380 TCP 23.104.0.1:39780 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:16:37.726 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58028 10 6452 1 2025-10-18 00:16:42.531 00:00:10.331 TCP 23.104.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:17:37.899 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48276 10 6452 1 2025-10-18 00:17:42.902 00:00:10.324 TCP 23.104.0.1:33918 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:14:43.848 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 00:18:38.115 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45104 10 6452 1 2025-10-18 00:14:43.846 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 00:18:43.269 00:00:10.329 TCP 23.104.0.1:39944 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:19:08.894 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:19:09.162 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:19:38.288 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41418 10 6452 1 2025-10-18 00:19:43.634 00:00:10.335 TCP 23.104.0.1:33540 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:20:38.508 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:48924 10 6452 1 2025-10-18 00:20:43.994 00:00:10.371 TCP 23.104.0.1:58376 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:21:38.714 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37726 10 6452 1 2025-10-18 00:21:44.402 00:00:10.367 TCP 23.104.0.1:57272 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:22:38.928 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34510 10 6452 1 2025-10-18 00:22:44.806 00:00:10.330 TCP 23.104.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:23:39.180 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34458 10 6452 1 2025-10-18 00:23:45.175 00:00:10.374 TCP 23.104.0.1:54124 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:24:09.153 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:24:09.026 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:20:43.851 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 00:20:43.853 00:05:02.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 00:24:39.391 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53140 10 6452 1 2025-10-18 00:24:45.585 00:00:10.369 TCP 23.104.0.1:42996 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:25:39.618 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41182 10 6452 1 2025-10-18 00:25:46.001 00:00:10.326 TCP 23.104.0.1:57922 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:26:39.831 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37740 10 6452 1 2025-10-18 00:26:46.370 00:00:10.364 TCP 23.104.0.1:35688 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:27:40.006 00:00:10.862 TCP 1.101.0.1:3000 -> 22.102.0.1:56648 10 6452 1 2025-10-18 00:27:46.776 00:00:10.794 TCP 23.104.0.1:35754 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:28:40.902 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54540 10 6452 1 2025-10-18 00:28:47.612 00:00:10.363 TCP 23.104.0.1:55576 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:29:09.132 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:29:09.040 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:29:41.117 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55946 10 6452 1 2025-10-18 00:29:48.012 00:00:10.359 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:26:43.855 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 00:30:41.331 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51946 10 6452 1 2025-10-18 00:26:43.852 00:05:02.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 00:30:48.407 00:00:10.325 TCP 23.104.0.1:57384 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:31:41.509 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39546 10 6452 1 2025-10-18 00:31:48.768 00:00:10.330 TCP 23.104.0.1:49784 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:32:41.717 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36090 10 6452 1 2025-10-18 00:32:49.135 00:00:10.368 TCP 23.104.0.1:60054 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:33:41.889 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56706 10 6452 1 2025-10-18 00:33:49.539 00:00:10.358 TCP 23.104.0.1:56362 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:34:09.902 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:34:09.828 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:34:42.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41522 10 6452 1 2025-10-18 00:34:49.938 00:00:10.336 TCP 23.104.0.1:45180 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:35:42.316 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34850 10 6452 1 2025-10-18 00:35:50.314 00:00:10.367 TCP 23.104.0.1:57106 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:32:43.855 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 00:32:43.857 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 00:36:42.542 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47150 10 6452 1 2025-10-18 00:36:50.719 00:00:10.326 TCP 23.104.0.1:49304 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:37:42.767 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53584 10 6452 1 2025-10-18 00:37:51.100 00:00:10.356 TCP 23.104.0.1:48592 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:38:42.985 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59528 10 6452 1 2025-10-18 00:38:51.496 00:00:10.373 TCP 23.104.0.1:34908 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:39:09.400 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:39:09.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:39:43.219 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46938 10 6452 1 2025-10-18 00:39:51.908 00:00:10.367 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:40:43.443 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46326 10 6452 1 2025-10-18 00:40:52.316 00:00:10.367 TCP 23.104.0.1:56820 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:41:43.670 00:00:10.304 TCP 1.101.0.1:3000 -> 22.102.0.1:53508 10 6452 1 2025-10-18 00:41:52.720 00:00:10.371 TCP 23.104.0.1:35480 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:38:43.859 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 00:38:43.858 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 00:42:44.021 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53844 10 6452 1 2025-10-18 00:42:53.151 00:00:10.374 TCP 23.104.0.1:33918 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:43:44.238 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45712 10 6452 1 2025-10-18 00:43:53.559 00:00:10.385 TCP 23.104.0.1:39134 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:44:09.446 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:44:09.477 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:44:44.415 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33106 10 6452 1 2025-10-18 00:44:53.985 00:00:10.380 TCP 23.104.0.1:47826 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:45:44.627 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50118 10 6452 1 2025-10-18 00:45:54.404 00:00:10.373 TCP 23.104.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:46:44.807 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51352 10 6452 1 2025-10-18 00:46:54.811 00:00:10.367 TCP 23.104.0.1:48572 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:47:45.045 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49186 10 6452 1 2025-10-18 00:47:55.218 00:00:10.321 TCP 23.104.0.1:57442 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:44:43.865 00:05:02.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 00:44:43.863 00:05:02.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 00:48:45.256 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39452 10 6452 1 2025-10-18 00:49:09.534 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:48:55.580 00:00:10.361 TCP 23.104.0.1:35558 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:49:09.468 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:49:45.468 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43518 10 6452 1 2025-10-18 00:49:55.983 00:00:10.375 TCP 23.104.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:50:45.681 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41930 10 6452 1 2025-10-18 00:50:56.393 00:00:10.333 TCP 23.104.0.1:49440 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:51:45.896 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48652 10 6452 1 2025-10-18 00:51:56.763 00:00:10.380 TCP 23.104.0.1:57004 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:52:46.117 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36576 10 6452 1 2025-10-18 00:52:57.183 00:00:10.364 TCP 23.104.0.1:46706 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:53:46.335 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33572 10 6452 1 2025-10-18 00:54:09.792 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:54:09.518 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:53:57.585 00:00:10.366 TCP 23.104.0.1:34360 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:50:43.862 00:05:02.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 00:50:43.867 00:05:02.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 00:54:46.552 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34600 11 6492 1 2025-10-18 00:54:57.990 00:00:10.371 TCP 23.104.0.1:44136 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:55:46.765 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59060 10 6452 1 2025-10-18 00:55:58.402 00:00:10.368 TCP 23.104.0.1:46322 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:56:46.983 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55180 10 6452 1 2025-10-18 00:56:58.806 00:00:10.389 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:57:47.213 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-10-18 00:57:59.232 00:00:10.417 TCP 23.104.0.1:44790 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490429, total packets: 1552, avg bps: 1064, avg pps: 0, avg bpp: 315 Time window: 2025-10-17 23:56:43 - 2025-10-18 00:58:09 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0047s User: 0.0009s Wall: 0.0018s flows/second: 90296.0 Runtime: 0.0018s