Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 01:58:50.908 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 01:58:42.535 00:00:10.372 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:54:24.263 00:06:00.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 01:59:27.457 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39228 10 6452 1 2025-09-06 01:59:42.944 00:00:10.368 TCP 23.104.0.1:34190 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:00:27.666 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35424 10 6452 1 2025-09-06 02:00:43.353 00:00:10.358 TCP 23.104.0.1:50658 -> 1.101.0.1:3000 11 1507 1 2025-09-06 01:56:24.265 00:06:00.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 02:01:27.890 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53438 10 6452 1 2025-09-06 02:01:43.756 00:00:10.375 TCP 23.104.0.1:56354 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:02:28.110 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51090 10 6452 1 2025-09-06 02:02:44.163 00:00:10.367 TCP 23.104.0.1:43296 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:03:28.333 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:39594 12 6556 1 2025-09-06 02:03:50.874 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 02:03:50.968 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:03:44.566 00:00:10.624 TCP 23.104.0.1:50772 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:04:28.574 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42410 10 6452 1 2025-09-06 02:04:45.226 00:00:10.364 TCP 23.104.0.1:35524 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:05:28.792 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:57420 10 6452 1 2025-09-06 02:05:45.624 00:00:10.367 TCP 23.104.0.1:39518 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:01:24.265 00:06:00.717 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 02:06:28.981 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:49134 10 6452 1 2025-09-06 02:06:46.029 00:00:10.366 TCP 23.104.0.1:35906 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:07:29.238 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57248 10 6452 1 2025-09-06 02:07:46.437 00:00:10.462 TCP 23.104.0.1:39072 -> 1.101.0.1:3000 15 1926 1 2025-09-06 02:03:24.266 00:06:00.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 02:08:29.422 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:52190 12 10365 1 2025-09-06 02:08:51.011 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:08:50.953 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 02:08:46.938 00:00:10.386 TCP 23.104.0.1:51506 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:09:29.662 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49760 10 6452 1 2025-09-06 02:09:47.360 00:00:10.362 TCP 23.104.0.1:60056 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:10:29.832 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52814 10 6452 1 2025-09-06 02:10:47.762 00:00:10.373 TCP 23.104.0.1:56070 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:11:30.073 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46334 10 6452 1 2025-09-06 02:11:48.175 00:00:10.325 TCP 23.104.0.1:51834 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:12:30.295 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52034 10 6452 1 2025-09-06 02:12:48.540 00:00:10.361 TCP 23.104.0.1:54944 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:08:24.265 00:06:00.717 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 02:13:30.515 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34068 10 6452 1 2025-09-06 02:13:50.933 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:13:50.960 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 02:13:48.943 00:00:10.375 TCP 23.104.0.1:51286 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:14:30.726 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56354 10 6452 1 2025-09-06 02:14:49.356 00:00:10.369 TCP 23.104.0.1:33450 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:10:24.267 00:06:00.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 02:15:30.944 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45640 10 6452 1 2025-09-06 02:15:49.764 00:00:10.385 TCP 23.104.0.1:43532 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:16:31.185 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57264 10 6452 1 2025-09-06 02:16:50.175 00:00:10.370 TCP 23.104.0.1:41064 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:17:31.395 00:00:10.764 TCP 1.101.0.1:3000 -> 22.102.0.1:38736 10 6452 1 2025-09-06 02:17:50.582 00:00:10.326 TCP 23.104.0.1:51272 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:18:32.198 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50012 10 6452 1 2025-09-06 02:18:51.029 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:18:50.741 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 02:18:50.945 00:00:10.364 TCP 23.104.0.1:42612 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:19:32.415 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50782 12 6556 1 2025-09-06 02:19:51.348 00:00:10.368 TCP 23.104.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:15:24.267 00:06:00.716 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 02:20:32.634 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39560 10 6452 1 2025-09-06 02:20:51.764 00:00:10.382 TCP 23.104.0.1:58660 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:21:32.841 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53154 10 6452 1 2025-09-06 02:21:52.185 00:00:10.330 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:17:24.271 00:06:00.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 02:22:33.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60148 10 6452 1 2025-09-06 02:22:52.558 00:00:10.367 TCP 23.104.0.1:52740 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:23:33.296 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56102 10 6452 1 2025-09-06 02:23:51.557 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:23:51.466 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 02:23:52.965 00:00:10.331 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:24:33.505 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36272 10 6452 1 2025-09-06 02:24:53.329 00:00:10.368 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:25:33.676 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33792 10 6452 1 2025-09-06 02:25:53.736 00:00:10.367 TCP 23.104.0.1:40076 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:26:33.849 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59006 10 6452 1 2025-09-06 02:26:54.137 00:00:10.382 TCP 23.104.0.1:55310 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:22:24.270 00:06:00.716 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 02:27:34.083 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:42242 10 6452 1 2025-09-06 02:27:54.576 00:00:10.324 TCP 23.104.0.1:53666 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:28:34.373 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55116 10 6452 1 2025-09-06 02:28:51.250 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 02:28:51.229 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:28:54.934 00:00:10.388 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:24:24.273 00:06:00.710 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 02:29:34.583 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43336 10 6452 1 2025-09-06 02:29:55.356 00:00:10.365 TCP 23.104.0.1:53880 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:30:34.795 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46236 10 6452 1 2025-09-06 02:30:55.758 00:00:10.382 TCP 23.104.0.1:51566 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:31:34.969 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59412 10 6452 1 2025-09-06 02:31:56.180 00:00:10.364 TCP 23.104.0.1:36548 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:32:35.172 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42246 10 6452 1 2025-09-06 02:32:56.581 00:00:10.374 TCP 23.104.0.1:55908 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:33:35.400 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58916 10 6452 1 2025-09-06 02:33:51.239 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 02:33:51.502 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:33:56.992 00:00:10.368 TCP 23.104.0.1:45104 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:29:24.271 00:06:00.715 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 02:34:35.611 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44790 10 6452 1 2025-09-06 02:34:57.398 00:00:10.372 TCP 23.104.0.1:51626 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:35:35.821 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36498 10 6452 1 2025-09-06 02:35:57.802 00:00:10.338 TCP 23.104.0.1:42616 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:31:24.274 00:06:00.710 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 02:36:35.990 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42918 10 6452 1 2025-09-06 02:36:58.177 00:00:13.450 TCP 23.104.0.1:39514 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:37:36.210 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59352 10 6452 1 2025-09-06 02:38:01.693 00:00:10.323 TCP 23.104.0.1:50762 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:38:36.421 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35156 10 6452 1 2025-09-06 02:38:51.636 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 02:38:51.462 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:39:02.096 00:00:10.320 TCP 23.104.0.1:54790 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:39:36.637 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54778 10 6452 1 2025-09-06 02:40:02.461 00:00:10.364 TCP 23.104.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:40:36.853 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:53708 10 6452 1 2025-09-06 02:41:02.863 00:00:10.334 TCP 23.104.0.1:37246 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:36:24.272 00:06:00.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 02:41:37.099 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46750 10 6452 1 2025-09-06 02:42:03.229 00:00:10.370 TCP 23.104.0.1:33538 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:42:37.314 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56400 10 6452 1 2025-09-06 02:43:03.645 00:00:10.370 TCP 23.104.0.1:38616 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:38:24.276 00:06:00.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 02:43:51.641 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 02:43:37.530 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54682 10 6452 1 2025-09-06 02:43:51.780 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:44:04.060 00:00:10.372 TCP 23.104.0.1:59878 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:44:37.743 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60376 10 6452 1 2025-09-06 02:45:04.465 00:00:10.323 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:45:37.950 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46406 10 6452 1 2025-09-06 02:46:04.830 00:00:10.385 TCP 23.104.0.1:33502 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:46:38.180 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 11 6492 1 2025-09-06 02:47:05.250 00:00:10.645 TCP 23.104.0.1:56400 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:47:38.411 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-09-06 02:48:05.930 00:00:10.383 TCP 23.104.0.1:51666 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:43:24.274 00:06:00.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 02:48:51.532 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 02:48:38.623 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49792 10 6452 1 2025-09-06 02:48:51.607 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:49:06.349 00:00:10.374 TCP 23.104.0.1:38984 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:49:38.827 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38962 10 6452 1 2025-09-06 02:50:06.759 00:00:10.382 TCP 23.104.0.1:44544 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:45:24.278 00:06:00.708 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 02:50:39.072 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42940 10 6452 1 2025-09-06 02:51:07.193 00:00:10.367 TCP 23.104.0.1:41956 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:51:39.284 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48998 10 6452 1 2025-09-06 02:52:07.599 00:00:10.367 TCP 23.104.0.1:51610 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:52:39.496 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-09-06 02:53:08.008 00:00:10.403 TCP 23.104.0.1:60926 -> 1.101.0.1:3000 15 1926 1 2025-09-06 02:53:39.706 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46350 12 10367 1 2025-09-06 02:53:51.918 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 02:53:51.730 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:54:08.444 00:00:10.410 TCP 23.104.0.1:46258 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:54:39.947 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59714 10 6452 1 2025-09-06 02:55:08.893 00:00:10.381 TCP 23.104.0.1:48376 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:50:24.279 00:06:00.711 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-06 02:55:40.176 00:00:10.516 TCP 1.101.0.1:3000 -> 22.102.0.1:58258 10 6452 1 2025-09-06 02:56:09.316 00:00:10.368 TCP 23.104.0.1:49248 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:56:40.734 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38734 10 6452 1 2025-09-06 02:57:09.721 00:00:10.371 TCP 23.104.0.1:33848 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:52:24.281 00:06:00.707 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-06 02:57:40.961 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44666 10 6452 1 2025-09-06 02:58:10.131 00:00:10.363 TCP 23.104.0.1:40670 -> 1.101.0.1:3000 11 1507 1 2025-09-06 02:58:51.808 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 02:58:41.209 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33666 10 6452 1 2025-09-06 02:58:51.706 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 508252, total packets: 1604, avg bps: 1051, avg pps: 0, avg bpp: 316 Time window: 2025-09-06 01:54:24 - 2025-09-06 02:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0010s Wall: 0.0032s flows/second: 51176.9 Runtime: 0.0032s