Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 10:59:21.701 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:59:22.159 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:59:33.537 00:00:10.367 TCP 23.104.0.1:40958 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:59:38.232 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54486 10 6452 1 2025-10-18 11:00:33.941 00:00:10.334 TCP 23.104.0.1:37380 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:56:44.141 00:05:02.511 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 10:56:44.139 00:05:02.516 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 11:00:38.405 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54790 10 6452 1 2025-10-18 11:01:34.310 00:00:10.365 TCP 23.104.0.1:40818 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:01:38.624 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58504 10 6452 1 2025-10-18 11:02:34.714 00:00:10.322 TCP 23.104.0.1:34570 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:02:38.841 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47196 10 6452 1 2025-10-18 11:03:35.104 00:00:10.366 TCP 23.104.0.1:45912 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:03:39.080 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39600 10 6452 1 2025-10-18 11:04:21.889 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:04:21.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:04:35.508 00:00:10.373 TCP 23.104.0.1:55804 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:04:39.297 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40010 10 6452 1 2025-10-18 11:05:35.924 00:00:10.382 TCP 23.104.0.1:35354 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:05:39.515 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42756 10 6452 1 2025-10-18 11:06:36.343 00:00:10.416 TCP 23.104.0.1:57506 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:02:44.149 00:05:02.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 11:06:39.692 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48890 10 6452 1 2025-10-18 11:02:44.147 00:05:02.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 11:07:39.864 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41252 10 6452 1 2025-10-18 11:07:36.800 00:00:10.363 TCP 23.104.0.1:59176 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:08:37.203 00:00:10.331 TCP 23.104.0.1:37024 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:08:40.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39702 10 6452 1 2025-10-18 11:09:21.965 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:09:21.900 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:09:37.573 00:00:10.360 TCP 23.104.0.1:48314 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:09:40.295 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34260 10 6452 1 2025-10-18 11:10:37.976 00:00:10.327 TCP 23.104.0.1:39736 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:10:40.513 00:00:10.725 TCP 1.101.0.1:3000 -> 22.102.0.1:56822 10 6452 1 2025-10-18 11:11:38.341 00:00:10.358 TCP 23.104.0.1:45814 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:11:41.275 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45226 10 6452 1 2025-10-18 11:08:44.148 00:05:02.511 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 11:12:41.443 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59320 10 6452 1 2025-10-18 11:12:38.738 00:00:10.408 TCP 23.104.0.1:57540 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:08:44.150 00:05:02.506 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 11:13:39.197 00:00:10.344 TCP 23.104.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:13:41.654 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50058 10 6452 1 2025-10-18 11:14:21.783 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:14:21.922 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:14:39.583 00:00:10.825 TCP 23.104.0.1:47960 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:14:41.868 00:00:10.407 TCP 1.101.0.1:3000 -> 22.102.0.1:35752 10 6452 1 2025-10-18 11:15:40.449 00:00:10.364 TCP 23.104.0.1:48438 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:15:42.318 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43892 10 6452 1 2025-10-18 11:16:40.851 00:00:10.343 TCP 23.104.0.1:38464 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:16:42.499 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48758 10 6452 1 2025-10-18 11:17:42.671 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57022 10 6452 1 2025-10-18 11:17:41.233 00:00:11.217 TCP 23.104.0.1:52192 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:14:44.149 00:05:02.511 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 11:14:44.152 00:05:02.507 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 11:18:42.843 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51776 10 6452 1 2025-10-18 11:18:42.486 00:00:10.361 TCP 23.104.0.1:44096 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:19:22.246 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:19:22.056 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:19:43.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-10-18 11:19:42.884 00:00:10.389 TCP 23.104.0.1:33534 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:20:43.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47046 10 6452 1 2025-10-18 11:20:43.307 00:00:10.370 TCP 23.104.0.1:51844 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:21:43.522 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55512 10 6452 1 2025-10-18 11:21:43.715 00:00:10.363 TCP 23.104.0.1:33244 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:22:43.695 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51742 10 6452 1 2025-10-18 11:22:44.125 00:00:10.364 TCP 23.104.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:23:44.527 00:00:10.324 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:23:43.908 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:56472 10 6452 1 2025-10-18 11:24:22.392 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:24:22.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:20:44.153 00:05:02.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 11:20:44.153 00:05:02.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 11:24:44.886 00:00:10.378 TCP 23.104.0.1:39764 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:24:44.102 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44056 10 6452 1 2025-10-18 11:25:45.297 00:00:10.327 TCP 23.104.0.1:50060 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:25:44.273 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43354 10 6452 1 2025-10-18 11:26:45.666 00:00:10.359 TCP 23.104.0.1:46604 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:26:44.490 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35444 10 6452 1 2025-10-18 11:27:44.703 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52472 10 6452 1 2025-10-18 11:27:46.095 00:00:10.364 TCP 23.104.0.1:38934 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:28:46.497 00:00:10.362 TCP 23.104.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:28:44.918 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57552 10 6452 1 2025-10-18 11:29:22.330 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:29:22.196 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:29:45.123 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46790 10 6452 1 2025-10-18 11:29:46.901 00:00:10.370 TCP 23.104.0.1:43270 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:26:44.155 00:05:02.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 11:26:44.153 00:05:02.511 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 11:30:45.336 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50660 10 6452 1 2025-10-18 11:30:47.314 00:00:10.323 TCP 23.104.0.1:56526 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:31:45.546 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6452 1 2025-10-18 11:31:47.673 00:00:10.371 TCP 23.104.0.1:32922 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:32:45.759 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54628 10 6452 1 2025-10-18 11:32:48.112 00:00:10.370 TCP 23.104.0.1:40316 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:33:45.922 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53884 10 6452 1 2025-10-18 11:33:48.519 00:00:10.369 TCP 23.104.0.1:57550 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:34:22.541 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:34:22.586 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:34:46.132 00:00:10.478 TCP 1.101.0.1:3000 -> 22.102.0.1:52090 10 6452 1 2025-10-18 11:34:48.924 00:00:10.656 TCP 23.104.0.1:49666 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:35:46.646 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55444 10 6452 1 2025-10-18 11:35:49.615 00:00:10.367 TCP 23.104.0.1:53570 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:32:44.156 00:05:02.506 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 11:32:44.155 00:05:02.511 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 11:36:46.863 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46682 10 6452 1 2025-10-18 11:36:50.019 00:00:10.366 TCP 23.104.0.1:46548 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:37:50.431 00:00:10.364 TCP 23.104.0.1:34246 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:37:47.089 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58690 10 6452 1 2025-10-18 11:38:50.833 00:00:10.344 TCP 23.104.0.1:35334 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:38:47.336 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6452 1 2025-10-18 11:39:22.639 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:39:22.581 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:39:51.217 00:00:10.365 TCP 23.104.0.1:45008 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:39:47.550 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45294 10 6452 1 2025-10-18 11:40:51.621 00:00:10.363 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:40:47.725 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58436 10 6452 1 2025-10-18 11:41:47.939 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39242 10 6452 1 2025-10-18 11:41:52.028 00:00:10.364 TCP 23.104.0.1:60420 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:38:44.159 00:05:02.504 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 11:38:44.156 00:05:02.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 11:42:48.184 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 10 6452 1 2025-10-18 11:42:52.435 00:00:10.387 TCP 23.104.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:43:48.359 00:00:10.633 TCP 1.101.0.1:3000 -> 22.102.0.1:34816 10 6452 1 2025-10-18 11:43:52.861 00:00:10.369 TCP 23.104.0.1:37016 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:44:22.878 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:44:22.713 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:44:49.038 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44110 10 6452 1 2025-10-18 11:44:53.269 00:00:10.367 TCP 23.104.0.1:51144 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:45:49.250 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39386 10 6452 1 2025-10-18 11:45:53.673 00:00:10.361 TCP 23.104.0.1:47904 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:46:49.421 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35948 10 6452 1 2025-10-18 11:46:54.104 00:00:10.371 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:47:49.632 00:00:10.461 TCP 1.101.0.1:3000 -> 22.102.0.1:50788 10 6452 1 2025-10-18 11:47:54.533 00:00:10.363 TCP 23.104.0.1:41536 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:44:44.157 00:05:02.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 11:44:44.160 00:05:02.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 11:48:50.131 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35774 10 6452 1 2025-10-18 11:48:54.936 00:00:10.363 TCP 23.104.0.1:33204 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:49:22.693 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:49:22.815 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:49:50.344 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34086 10 6452 1 2025-10-18 11:49:55.335 00:00:10.330 TCP 23.104.0.1:36418 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:50:50.558 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47076 10 6452 1 2025-10-18 11:50:55.701 00:00:10.365 TCP 23.104.0.1:42974 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:51:50.730 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41010 10 6452 1 2025-10-18 11:51:56.102 00:00:10.368 TCP 23.104.0.1:37356 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:52:50.946 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38070 10 6452 1 2025-10-18 11:52:56.509 00:00:10.363 TCP 23.104.0.1:56350 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:53:51.178 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 2025-10-18 11:53:56.911 00:00:10.364 TCP 23.104.0.1:55380 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:54:22.716 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:54:22.815 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:50:44.161 00:05:02.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 11:50:44.157 00:05:02.511 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 11:54:51.388 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59174 10 6452 1 2025-10-18 11:54:57.317 00:00:10.321 TCP 23.104.0.1:56462 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:55:51.601 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41786 10 6452 1 2025-10-18 11:55:57.678 00:00:10.372 TCP 23.104.0.1:51572 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:56:51.811 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40910 10 6452 1 2025-10-18 11:56:58.114 00:00:10.367 TCP 23.104.0.1:33348 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:57:52.045 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46476 10 6452 1 2025-10-18 11:57:58.523 00:00:10.348 TCP 23.104.0.1:54352 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490389, total packets: 1551, avg bps: 1064, avg pps: 0, avg bpp: 316 Time window: 2025-10-18 10:56:44 - 2025-10-18 11:58:08 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0043s User: 0.0017s Wall: 0.0031s flows/second: 53046.9 Runtime: 0.0031s