Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-27 02:59:02.779 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 02:59:02.910 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 02:59:19.747 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41220 10 6452 1 2025-08-27 02:59:33.471 00:00:10.324 TCP 23.104.0.1:52924 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:00:19.975 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6452 1 2025-08-27 03:00:33.833 00:00:10.392 TCP 23.104.0.1:35726 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:01:20.203 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45366 10 6452 1 2025-08-27 03:01:34.263 00:00:10.369 TCP 23.104.0.1:54396 -> 1.101.0.1:3000 11 1507 1 2025-08-27 02:57:18.635 00:06:00.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 03:02:20.419 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48904 10 6452 1 2025-08-27 03:02:34.668 00:00:10.365 TCP 23.104.0.1:46756 -> 1.101.0.1:3000 11 1507 1 2025-08-27 02:58:18.673 00:06:00.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 03:03:20.634 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59548 10 6452 1 2025-08-27 03:03:35.103 00:00:10.365 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:04:02.660 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 03:04:02.825 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 03:04:20.802 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35440 10 6452 1 2025-08-27 03:04:35.510 00:00:10.320 TCP 23.104.0.1:46840 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:05:21.034 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55842 10 6452 1 2025-08-27 03:05:35.866 00:00:10.371 TCP 23.104.0.1:35766 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:06:21.252 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51052 10 6452 1 2025-08-27 03:06:36.276 00:00:10.365 TCP 23.104.0.1:60906 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:07:21.426 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-08-27 03:07:36.680 00:00:10.373 TCP 23.104.0.1:49104 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:08:21.638 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38164 10 6452 1 2025-08-27 03:08:37.105 00:00:10.322 TCP 23.104.0.1:35752 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:09:03.071 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 03:09:03.026 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 03:04:18.635 00:06:00.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 03:09:21.845 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53036 10 6452 1 2025-08-27 03:09:37.464 00:00:10.366 TCP 23.104.0.1:57796 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:05:18.637 00:06:00.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 03:10:22.079 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49128 10 6452 1 2025-08-27 03:10:37.867 00:00:10.373 TCP 23.104.0.1:60452 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:11:22.289 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53176 10 6452 1 2025-08-27 03:11:38.274 00:00:10.400 TCP 23.104.0.1:51578 -> 1.101.0.1:3000 15 1926 1 2025-08-27 03:12:22.465 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:47936 12 10367 1 2025-08-27 03:12:38.711 00:00:10.377 TCP 23.104.0.1:43250 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:13:22.661 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59552 10 6452 1 2025-08-27 03:13:39.125 00:00:10.325 TCP 23.104.0.1:55886 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:14:02.809 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 03:14:02.730 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 03:14:22.872 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36662 10 6452 1 2025-08-27 03:14:39.488 00:00:10.370 TCP 23.104.0.1:34454 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:15:23.066 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43074 10 6452 1 2025-08-27 03:15:39.894 00:00:10.381 TCP 23.104.0.1:46764 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:11:18.635 00:06:00.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 03:16:23.278 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39998 10 6452 1 2025-08-27 03:16:40.311 00:00:10.365 TCP 23.104.0.1:50742 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:12:18.638 00:06:00.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 03:17:23.450 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38280 10 6452 1 2025-08-27 03:17:40.714 00:00:10.445 TCP 23.104.0.1:37490 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:18:23.663 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51324 10 6452 1 2025-08-27 03:18:41.197 00:00:10.364 TCP 23.104.0.1:60846 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:19:02.840 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 03:19:03.096 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 03:19:23.886 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35856 10 6452 1 2025-08-27 03:19:41.598 00:00:10.376 TCP 23.104.0.1:57162 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:20:24.113 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45178 10 6452 1 2025-08-27 03:20:42.024 00:00:10.360 TCP 23.104.0.1:54020 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:21:24.291 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60450 10 6452 1 2025-08-27 03:21:42.424 00:00:10.365 TCP 23.104.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:22:24.505 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55044 10 6452 1 2025-08-27 03:22:42.826 00:00:10.378 TCP 23.104.0.1:59964 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:18:18.637 00:06:00.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 03:23:24.714 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43384 10 6452 1 2025-08-27 03:23:43.236 00:00:10.325 TCP 23.104.0.1:59804 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:24:03.418 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 03:24:03.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 03:19:18.641 00:06:00.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 03:24:24.896 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35892 10 6452 1 2025-08-27 03:24:43.597 00:00:10.363 TCP 23.104.0.1:38432 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:25:25.138 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56472 10 6452 1 2025-08-27 03:25:44.002 00:00:10.366 TCP 23.104.0.1:38482 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:26:25.351 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33900 10 6452 1 2025-08-27 03:26:44.413 00:00:10.326 TCP 23.104.0.1:40172 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:27:25.564 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50778 10 6452 1 2025-08-27 03:27:44.775 00:00:10.366 TCP 23.104.0.1:46826 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:28:25.783 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57794 10 6452 1 2025-08-27 03:28:45.179 00:00:10.365 TCP 23.104.0.1:52074 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:29:03.286 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 03:29:03.438 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 03:29:26.000 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55774 10 6452 1 2025-08-27 03:29:45.576 00:00:10.367 TCP 23.104.0.1:49370 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:25:18.639 00:06:00.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 03:30:26.216 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55066 10 6452 1 2025-08-27 03:30:45.989 00:00:10.367 TCP 23.104.0.1:35536 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:26:18.642 00:06:00.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 03:31:26.432 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45292 10 6452 1 2025-08-27 03:31:46.436 00:00:10.365 TCP 23.104.0.1:48024 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:32:26.643 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:33678 10 6452 1 2025-08-27 03:32:46.841 00:00:10.344 TCP 23.104.0.1:45088 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:33:26.823 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48058 10 6452 1 2025-08-27 03:33:47.225 00:00:10.368 TCP 23.104.0.1:45976 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:34:03.615 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 03:34:03.687 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 03:34:27.063 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37066 10 6452 1 2025-08-27 03:34:47.627 00:00:10.363 TCP 23.104.0.1:34542 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:35:27.273 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58644 10 6452 1 2025-08-27 03:35:48.033 00:00:10.370 TCP 23.104.0.1:40226 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:36:27.482 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6452 1 2025-08-27 03:36:48.436 00:00:10.333 TCP 23.104.0.1:50692 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:32:18.642 00:06:00.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 03:37:27.700 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43522 10 6452 1 2025-08-27 03:37:48.807 00:00:10.369 TCP 23.104.0.1:54460 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:33:18.645 00:06:00.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 03:38:27.910 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:40208 10 6452 1 2025-08-27 03:38:49.212 00:00:10.365 TCP 23.104.0.1:33810 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:39:03.572 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 03:39:03.643 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 03:39:28.099 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43740 10 6452 1 2025-08-27 03:39:49.615 00:00:10.363 TCP 23.104.0.1:52252 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:40:28.307 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54914 10 6452 1 2025-08-27 03:40:50.014 00:00:10.322 TCP 23.104.0.1:47988 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:41:28.514 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45782 10 6452 1 2025-08-27 03:41:50.374 00:00:10.318 TCP 23.104.0.1:52152 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:42:28.730 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60288 10 6452 1 2025-08-27 03:42:50.736 00:00:10.374 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:43:28.944 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47252 10 6452 1 2025-08-27 03:44:03.679 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 03:43:51.149 00:00:10.373 TCP 23.104.0.1:49150 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:44:03.726 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 03:39:18.645 00:06:00.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 03:44:29.170 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:49224 11 6504 1 2025-08-27 03:44:51.557 00:00:10.361 TCP 23.104.0.1:59040 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:40:18.646 00:06:00.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 03:45:29.441 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36266 10 6452 1 2025-08-27 03:45:51.957 00:00:10.323 TCP 23.104.0.1:58354 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:46:29.651 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:35698 12 10365 1 2025-08-27 03:46:52.319 00:00:10.439 TCP 23.104.0.1:47970 -> 1.101.0.1:3000 15 1926 1 2025-08-27 03:47:29.849 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52636 10 6452 1 2025-08-27 03:47:52.795 00:00:10.366 TCP 23.104.0.1:59134 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:48:30.085 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52616 10 6452 1 2025-08-27 03:48:53.200 00:00:10.365 TCP 23.104.0.1:49384 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:49:03.973 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 03:49:03.787 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 03:49:30.254 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40350 10 6452 1 2025-08-27 03:49:53.601 00:00:10.370 TCP 23.104.0.1:34824 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:50:30.471 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45706 12 6556 1 2025-08-27 03:50:54.017 00:00:10.361 TCP 23.104.0.1:46506 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:46:18.650 00:06:00.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 03:51:30.691 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:43798 12 10367 1 2025-08-27 03:51:54.415 00:00:10.441 TCP 23.104.0.1:47156 -> 1.101.0.1:3000 15 1926 1 2025-08-27 03:47:18.653 00:06:00.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 03:52:30.899 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48744 10 6452 1 2025-08-27 03:52:54.894 00:00:10.339 TCP 23.104.0.1:45116 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:53:31.112 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35240 10 6452 1 2025-08-27 03:54:04.227 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 03:54:04.220 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 03:53:55.268 00:00:10.364 TCP 23.104.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:54:31.323 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44042 10 6452 1 2025-08-27 03:54:55.674 00:00:10.363 TCP 23.104.0.1:53986 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:55:31.537 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45676 10 6452 1 2025-08-27 03:55:56.102 00:00:10.365 TCP 23.104.0.1:33986 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:56:31.766 00:00:10.566 TCP 1.101.0.1:3000 -> 22.102.0.1:59628 10 6452 1 2025-08-27 03:56:56.506 00:00:10.369 TCP 23.104.0.1:41602 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:57:32.369 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33146 10 6452 1 2025-08-27 03:57:56.908 00:00:10.390 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-08-27 03:53:18.653 00:06:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 03:58:32.584 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42052 10 6452 1 Summary: total flows: 160, total bytes: 509874, total packets: 1580, avg bps: 1096, avg pps: 0, avg bpp: 322 Time window: 2025-08-27 02:57:18 - 2025-08-27 03:59:18 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0034s User: 0.0017s Wall: 0.0027s flows/second: 59945.4 Runtime: 0.0027s