Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 03:58:53.251 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 03:58:53.229 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 03:58:54.653 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41928 10 6452 1 2025-09-06 03:58:52.179 00:00:10.357 TCP 23.104.0.1:45120 -> 1.101.0.1:3000 12 1559 1 2025-09-06 03:59:52.575 00:00:10.564 TCP 23.104.0.1:56036 -> 1.101.0.1:3000 11 1507 1 2025-09-06 03:59:54.861 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6452 1 2025-09-06 03:56:24.296 00:05:00.744 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 04:00:55.101 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54464 10 6452 1 2025-09-06 04:00:53.185 00:00:10.332 TCP 23.104.0.1:38882 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:01:55.270 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50648 10 6452 1 2025-09-06 04:01:53.565 00:00:10.363 TCP 23.104.0.1:53170 -> 1.101.0.1:3000 11 1507 1 2025-09-06 03:58:24.299 00:05:00.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 04:02:53.972 00:00:10.377 TCP 23.104.0.1:38536 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:02:55.509 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60506 10 6452 1 2025-09-06 04:03:53.267 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:03:53.324 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:03:55.736 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39688 10 6452 1 2025-09-06 04:03:54.387 00:00:10.381 TCP 23.104.0.1:58294 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:04:54.807 00:00:10.369 TCP 23.104.0.1:36442 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:04:55.965 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49128 10 6452 1 2025-09-06 04:05:56.188 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33340 10 6452 1 2025-09-06 04:05:55.218 00:00:10.362 TCP 23.104.0.1:59428 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:02:24.297 00:05:00.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 04:06:56.422 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-09-06 04:06:55.619 00:00:10.364 TCP 23.104.0.1:51646 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:07:56.021 00:00:10.364 TCP 23.104.0.1:49384 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:07:56.669 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60884 10 6452 1 2025-09-06 04:04:24.300 00:05:00.741 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 04:08:53.374 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:08:53.233 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:08:56.423 00:00:10.366 TCP 23.104.0.1:49534 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:08:56.884 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37702 10 6452 1 2025-09-06 04:09:56.822 00:00:10.371 TCP 23.104.0.1:60570 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:09:57.112 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33536 10 6452 1 2025-09-06 04:10:57.345 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33476 10 6452 1 2025-09-06 04:10:57.227 00:00:10.360 TCP 23.104.0.1:37708 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:11:57.512 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54442 10 6452 1 2025-09-06 04:11:57.626 00:00:10.361 TCP 23.104.0.1:47478 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:08:24.299 00:05:00.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 04:12:58.028 00:00:10.362 TCP 23.104.0.1:41028 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:12:57.729 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43704 10 6452 1 2025-09-06 04:13:53.568 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:13:53.322 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:13:58.429 00:00:10.366 TCP 23.104.0.1:33854 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:13:57.944 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51314 10 6452 1 2025-09-06 04:10:24.301 00:05:00.744 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 04:14:58.182 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2025-09-06 04:14:58.829 00:00:10.390 TCP 23.104.0.1:33720 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:15:58.394 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49040 10 6452 1 2025-09-06 04:15:59.255 00:00:10.364 TCP 23.104.0.1:41082 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:16:58.615 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35180 10 6452 1 2025-09-06 04:16:59.658 00:00:10.366 TCP 23.104.0.1:46728 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:17:58.838 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45566 10 6452 1 2025-09-06 04:18:00.082 00:00:10.324 TCP 23.104.0.1:37318 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:14:24.301 00:05:00.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 04:18:53.601 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:18:53.555 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:18:59.077 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34560 10 6452 1 2025-09-06 04:19:00.445 00:00:10.360 TCP 23.104.0.1:53198 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:20:00.841 00:00:10.342 TCP 23.104.0.1:60654 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:19:59.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47586 10 6452 1 2025-09-06 04:16:24.303 00:05:00.744 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 04:20:59.516 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45968 10 6452 1 2025-09-06 04:21:01.224 00:00:10.870 TCP 23.104.0.1:45300 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:21:59.725 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32918 10 6452 1 2025-09-06 04:22:02.135 00:00:10.360 TCP 23.104.0.1:57194 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:22:59.938 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59530 10 6452 1 2025-09-06 04:23:02.533 00:00:10.374 TCP 23.104.0.1:33922 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:23:53.890 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:23:53.967 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:24:00.168 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51364 10 6452 1 2025-09-06 04:24:02.948 00:00:10.365 TCP 23.104.0.1:60380 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:20:24.301 00:05:00.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 04:25:00.374 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60024 10 6452 1 2025-09-06 04:25:03.353 00:00:10.413 TCP 23.104.0.1:48670 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:26:00.583 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57142 10 6452 1 2025-09-06 04:26:03.807 00:00:10.370 TCP 23.104.0.1:44278 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:22:24.305 00:05:00.745 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 04:27:00.798 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36092 10 6452 1 2025-09-06 04:27:04.214 00:00:10.366 TCP 23.104.0.1:34474 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:28:01.024 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:36768 10 6452 1 2025-09-06 04:28:04.617 00:00:10.368 TCP 23.104.0.1:46328 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:28:53.873 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:28:53.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:29:01.281 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54270 10 6452 1 2025-09-06 04:29:05.028 00:00:10.325 TCP 23.104.0.1:41636 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:30:01.498 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:44422 10 6452 1 2025-09-06 04:30:05.396 00:00:10.367 TCP 23.104.0.1:48346 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:26:24.305 00:05:00.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 04:31:01.695 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38450 10 6452 1 2025-09-06 04:31:05.797 00:00:10.884 TCP 23.104.0.1:51788 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:32:01.916 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45606 10 6452 1 2025-09-06 04:32:06.753 00:00:10.379 TCP 23.104.0.1:54736 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:28:24.308 00:05:00.742 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 04:33:02.133 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55334 10 6452 1 2025-09-06 04:33:07.167 00:00:10.364 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:33:53.829 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:33:53.617 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:34:02.356 00:00:12.969 TCP 1.101.0.1:3000 -> 22.102.0.1:49266 10 6452 1 2025-09-06 04:34:07.578 00:00:10.360 TCP 23.104.0.1:41636 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:35:05.367 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52796 10 6452 1 2025-09-06 04:35:07.986 00:00:10.372 TCP 23.104.0.1:39112 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:36:05.584 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:42180 10 6452 1 2025-09-06 04:36:08.404 00:00:10.370 TCP 23.104.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:32:24.305 00:05:00.750 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 04:37:05.771 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44850 10 6452 1 2025-09-06 04:37:08.818 00:00:10.366 TCP 23.104.0.1:60974 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:38:05.983 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53622 10 6452 1 2025-09-06 04:38:09.234 00:00:10.324 TCP 23.104.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:34:24.309 00:05:00.745 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 04:38:54.057 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:38:53.811 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:39:06.220 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44622 10 6452 1 2025-09-06 04:39:09.595 00:00:10.366 TCP 23.104.0.1:39096 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:40:06.441 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43772 10 6452 1 2025-09-06 04:40:09.998 00:00:10.704 TCP 23.104.0.1:37080 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:41:06.654 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46486 10 6452 1 2025-09-06 04:41:10.742 00:00:10.368 TCP 23.104.0.1:35672 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:42:11.152 00:00:10.361 TCP 23.104.0.1:51864 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:42:06.863 00:00:10.770 TCP 1.101.0.1:3000 -> 22.102.0.1:53444 10 6452 1 2025-09-06 04:38:24.307 00:05:00.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 04:43:11.550 00:00:10.323 TCP 23.104.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:43:07.675 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55784 10 6452 1 2025-09-06 04:43:53.746 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:43:54.344 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:44:07.897 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59632 10 6452 1 2025-09-06 04:44:11.910 00:00:10.331 TCP 23.104.0.1:38814 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:40:24.310 00:05:00.743 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 04:45:08.115 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50192 10 6452 1 2025-09-06 04:45:12.275 00:00:10.364 TCP 23.104.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:46:08.332 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44162 10 6452 1 2025-09-06 04:46:12.677 00:00:10.371 TCP 23.104.0.1:36830 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:47:08.549 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:59426 10 6452 1 2025-09-06 04:47:13.105 00:00:10.328 TCP 23.104.0.1:46188 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:48:08.715 00:00:11.411 TCP 1.101.0.1:3000 -> 22.102.0.1:35544 10 6452 1 2025-09-06 04:44:24.309 00:05:00.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 04:48:13.482 00:00:10.373 TCP 23.104.0.1:53220 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:48:53.751 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:48:53.910 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:49:10.165 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60534 10 6452 1 2025-09-06 04:49:13.890 00:00:10.367 TCP 23.104.0.1:44540 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:50:10.372 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44672 10 6452 1 2025-09-06 04:50:14.292 00:00:10.367 TCP 23.104.0.1:40646 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:46:24.313 00:05:00.742 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 04:51:10.582 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53312 10 6452 1 2025-09-06 04:51:14.698 00:00:10.370 TCP 23.104.0.1:45640 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:52:10.759 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:36462 10 6452 1 2025-09-06 04:52:15.115 00:00:10.362 TCP 23.104.0.1:54446 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:53:10.967 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41438 10 6452 1 2025-09-06 04:53:15.515 00:00:10.325 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:53:54.041 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:53:54.175 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:54:11.200 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52768 10 6452 1 2025-09-06 04:50:24.310 00:05:00.750 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 04:54:15.881 00:00:10.324 TCP 23.104.0.1:41130 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:55:11.414 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35256 10 6452 1 2025-09-06 04:55:16.245 00:00:10.369 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:56:11.584 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:42418 10 6452 1 2025-09-06 04:56:16.651 00:00:10.329 TCP 23.104.0.1:41664 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:52:24.313 00:05:00.745 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 04:57:11.823 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-09-06 04:57:17.021 00:00:10.356 TCP 23.104.0.1:48464 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:58:12.081 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36564 10 6452 1 2025-09-06 04:58:17.453 00:00:10.569 TCP 23.104.0.1:48240 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1070, avg pps: 0, avg bpp: 316 Time window: 2025-09-06 03:56:24 - 2025-09-06 04:58:28 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0010s Wall: 0.0023s flows/second: 70782.7 Runtime: 0.0023s