Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 14:59:26.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:59:26.573 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:59:17.048 00:00:10.363 TCP 23.104.0.1:42184 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:59:40.706 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46062 10 6452 1 2025-10-18 15:00:17.447 00:00:10.325 TCP 23.104.0.1:60082 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:56:44.211 00:05:02.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 15:00:40.926 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:39326 10 6452 1 2025-10-18 14:56:44.207 00:05:02.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 15:01:17.809 00:00:10.368 TCP 23.104.0.1:39230 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:01:41.170 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32848 10 6452 1 2025-10-18 15:02:18.214 00:00:10.361 TCP 23.104.0.1:51692 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:02:41.385 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50194 10 6452 1 2025-10-18 15:03:18.615 00:00:10.747 TCP 23.104.0.1:56178 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:03:41.604 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34346 10 6452 1 2025-10-18 15:04:26.859 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:04:26.728 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:04:19.402 00:00:10.362 TCP 23.104.0.1:37224 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:04:41.822 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54922 10 6452 1 2025-10-18 15:05:19.805 00:00:10.370 TCP 23.104.0.1:51696 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:05:42.067 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55342 10 6452 1 2025-10-18 15:06:20.216 00:00:10.325 TCP 23.104.0.1:44676 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:02:44.209 00:05:02.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 15:02:44.211 00:05:02.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 15:06:42.277 00:00:20.468 TCP 1.101.0.1:3000 -> 22.102.0.1:55684 10 6452 1 2025-10-18 15:07:20.581 00:00:10.362 TCP 23.104.0.1:38524 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:07:52.787 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44612 10 6452 1 2025-10-18 15:08:20.979 00:00:10.371 TCP 23.104.0.1:50242 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:08:53.007 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60244 10 6452 1 2025-10-18 15:09:26.869 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:09:26.518 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:09:21.385 00:00:10.766 TCP 23.104.0.1:45504 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:09:53.225 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53490 10 6452 1 2025-10-18 15:10:22.192 00:00:10.363 TCP 23.104.0.1:56196 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:10:53.444 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37114 10 6452 1 2025-10-18 15:11:22.593 00:00:10.366 TCP 23.104.0.1:37730 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:11:53.661 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34178 10 6452 1 2025-10-18 15:12:22.997 00:00:10.364 TCP 23.104.0.1:43356 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:08:44.212 00:05:02.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 15:08:44.209 00:05:02.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 15:12:53.841 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:36654 12 10375 1 2025-10-18 15:13:23.432 00:00:10.438 TCP 23.104.0.1:42300 -> 1.101.0.1:3000 15 1926 1 2025-10-18 15:13:54.097 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42442 10 6452 1 2025-10-18 15:14:26.668 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:14:26.970 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:14:23.910 00:00:10.367 TCP 23.104.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:14:54.312 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56204 10 6452 1 2025-10-18 15:15:24.314 00:00:10.844 TCP 23.104.0.1:50036 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:15:54.530 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42222 10 6452 1 2025-10-18 15:16:25.196 00:00:10.361 TCP 23.104.0.1:45716 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:16:54.747 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46462 10 6452 1 2025-10-18 15:17:25.595 00:00:10.364 TCP 23.104.0.1:40962 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:17:54.961 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60732 10 6452 1 2025-10-18 15:18:26.000 00:00:10.360 TCP 23.104.0.1:34888 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:14:44.211 00:05:02.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 15:14:44.212 00:05:02.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 15:18:55.195 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43450 10 6452 1 2025-10-18 15:19:26.837 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:19:26.771 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:19:26.404 00:00:10.327 TCP 23.104.0.1:36260 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:19:55.407 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37824 10 6452 1 2025-10-18 15:20:26.772 00:00:10.375 TCP 23.104.0.1:40206 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:20:55.627 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53078 10 6452 1 2025-10-18 15:21:27.181 00:00:10.367 TCP 23.104.0.1:42650 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:21:55.835 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54392 10 6452 1 2025-10-18 15:22:27.584 00:00:10.360 TCP 23.104.0.1:47814 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:22:56.009 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 10 6452 1 2025-10-18 15:23:27.984 00:00:10.372 TCP 23.104.0.1:47792 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:23:56.227 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33126 10 6452 1 2025-10-18 15:24:27.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:24:27.199 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:24:28.395 00:00:10.367 TCP 23.104.0.1:58362 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:20:44.212 00:05:02.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 15:20:44.215 00:05:02.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 15:24:56.462 00:00:10.364 TCP 1.101.0.1:3000 -> 22.102.0.1:56230 10 6452 1 2025-10-18 15:25:28.796 00:00:10.373 TCP 23.104.0.1:44832 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:25:56.868 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:40998 10 6452 1 2025-10-18 15:26:29.198 00:00:10.368 TCP 23.104.0.1:44392 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:26:57.118 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39866 10 6452 1 2025-10-18 15:27:29.608 00:00:10.376 TCP 23.104.0.1:40076 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:27:57.340 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58718 10 6452 1 2025-10-18 15:28:30.025 00:00:10.376 TCP 23.104.0.1:55156 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:28:57.560 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58424 10 6452 1 2025-10-18 15:29:27.221 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:29:27.191 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:29:30.437 00:00:10.380 TCP 23.104.0.1:55532 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:29:57.775 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38688 10 6452 1 2025-10-18 15:30:30.858 00:00:10.375 TCP 23.104.0.1:44266 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:26:44.214 00:05:02.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 15:26:44.213 00:05:02.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 15:30:57.997 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 10 6452 1 2025-10-18 15:31:31.271 00:00:10.370 TCP 23.104.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:31:58.182 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47062 10 6452 1 2025-10-18 15:32:31.674 00:00:10.375 TCP 23.104.0.1:35176 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:32:58.397 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45620 10 6452 1 2025-10-18 15:33:32.094 00:00:10.368 TCP 23.104.0.1:49390 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:33:58.622 00:00:10.535 TCP 1.101.0.1:3000 -> 22.102.0.1:35786 10 6452 1 2025-10-18 15:34:27.180 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:34:27.230 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:34:32.499 00:00:10.320 TCP 23.104.0.1:35904 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:34:59.193 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47582 10 6452 1 2025-10-18 15:35:32.854 00:00:10.381 TCP 23.104.0.1:55068 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:35:59.418 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33052 10 6452 1 2025-10-18 15:36:33.269 00:00:10.367 TCP 23.104.0.1:55602 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:32:44.217 00:05:02.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 15:32:44.214 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 15:36:59.638 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48542 10 6452 1 2025-10-18 15:37:33.673 00:00:10.368 TCP 23.104.0.1:42738 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:37:59.859 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57698 10 6452 1 2025-10-18 15:38:34.117 00:00:10.327 TCP 23.104.0.1:50678 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:39:00.097 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41762 10 6452 1 2025-10-18 15:39:27.199 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:39:27.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:39:34.488 00:00:10.361 TCP 23.104.0.1:32976 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:40:00.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38706 10 6452 1 2025-10-18 15:40:34.896 00:00:10.341 TCP 23.104.0.1:45658 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:41:00.522 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35380 10 6452 1 2025-10-18 15:41:35.271 00:00:12.166 TCP 23.104.0.1:56720 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:42:00.740 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:58362 10 6452 1 2025-10-18 15:42:37.477 00:00:10.365 TCP 23.104.0.1:39094 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:38:44.217 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 15:38:44.216 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 15:43:00.925 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:40158 12 6556 1 2025-10-18 15:43:37.880 00:00:10.336 TCP 23.104.0.1:50916 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:44:01.172 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:41836 10 6452 1 2025-10-18 15:44:27.382 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:44:27.427 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:44:38.256 00:00:10.366 TCP 23.104.0.1:46476 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:45:01.354 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51004 10 6452 1 2025-10-18 15:45:38.664 00:00:10.364 TCP 23.104.0.1:33362 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:46:01.563 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45294 10 6452 1 2025-10-18 15:46:39.085 00:00:10.335 TCP 23.104.0.1:53772 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:47:01.772 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35240 10 6452 1 2025-10-18 15:47:39.453 00:00:10.566 TCP 23.104.0.1:54338 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:48:01.986 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43666 10 6452 1 2025-10-18 15:44:44.216 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 15:44:44.219 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 15:48:40.065 00:00:10.369 TCP 23.104.0.1:48902 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:49:02.230 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:38896 10 6452 1 2025-10-18 15:49:27.587 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:49:27.347 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:49:40.471 00:00:10.322 TCP 23.104.0.1:36282 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:50:02.511 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50358 10 6452 1 2025-10-18 15:50:40.830 00:00:10.355 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:51:02.701 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53268 10 6452 1 2025-10-18 15:51:41.220 00:00:10.366 TCP 23.104.0.1:60058 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:52:02.927 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:45298 10 6452 1 2025-10-18 15:52:41.625 00:00:10.365 TCP 23.104.0.1:36344 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:53:03.178 00:00:13.940 TCP 1.101.0.1:3000 -> 22.102.0.1:45406 10 6452 1 2025-10-18 15:53:42.031 00:00:10.361 TCP 23.104.0.1:59834 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:54:07.165 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37444 10 6452 1 2025-10-18 15:54:27.405 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:54:27.448 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:50:44.218 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 15:50:44.221 00:05:02.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 15:54:42.436 00:00:10.340 TCP 23.104.0.1:51978 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:55:07.391 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57774 10 6452 1 2025-10-18 15:55:42.820 00:00:10.389 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:56:07.614 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46146 10 6452 1 2025-10-18 15:56:43.223 00:00:10.394 TCP 23.104.0.1:47708 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:57:07.783 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45052 10 6452 1 2025-10-18 15:57:43.662 00:00:10.369 TCP 23.104.0.1:36178 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:58:08.004 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57908 10 6452 1 Summary: total flows: 162, total bytes: 494835, total packets: 1559, avg bps: 1071, avg pps: 0, avg bpp: 317 Time window: 2025-10-18 14:56:44 - 2025-10-18 15:58:18 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0032s User: 0.0032s Wall: 0.0028s flows/second: 56945.8 Runtime: 0.0029s