Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 04:58:54.103 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 04:58:54.354 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 04:59:12.312 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41404 10 6452 1 2025-09-06 04:59:18.082 00:00:10.365 TCP 23.104.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:00:12.493 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59064 10 6452 1 2025-09-06 04:56:24.310 00:05:00.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 05:00:18.487 00:00:10.364 TCP 23.104.0.1:34368 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:01:12.711 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6452 1 2025-09-06 05:01:18.890 00:00:10.366 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-09-06 04:58:24.314 00:05:00.750 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 05:02:12.926 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:44698 10 6452 1 2025-09-06 05:02:19.299 00:00:10.366 TCP 23.104.0.1:37038 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:03:13.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57886 10 6452 1 2025-09-06 05:03:19.702 00:00:10.326 TCP 23.104.0.1:46970 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:03:54.518 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 05:03:54.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 05:04:13.347 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51530 10 6452 1 2025-09-06 05:04:20.099 00:00:10.320 TCP 23.104.0.1:35662 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:05:13.563 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40740 10 6452 1 2025-09-06 05:05:20.456 00:00:10.364 TCP 23.104.0.1:41956 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:06:13.734 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58906 10 6452 1 2025-09-06 05:02:24.312 00:05:00.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 05:06:20.858 00:00:10.330 TCP 23.104.0.1:47950 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:07:13.907 00:00:10.266 TCP 1.101.0.1:3000 -> 22.102.0.1:43986 10 6452 1 2025-09-06 05:07:21.226 00:00:10.364 TCP 23.104.0.1:56846 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:04:24.315 00:05:00.751 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 05:08:14.219 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34428 10 6452 1 2025-09-06 05:08:21.625 00:00:10.365 TCP 23.104.0.1:41214 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:08:54.500 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 05:08:54.539 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 05:09:14.440 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-09-06 05:09:22.029 00:00:10.365 TCP 23.104.0.1:45336 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:10:14.666 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46032 10 6452 1 2025-09-06 05:10:22.433 00:00:10.363 TCP 23.104.0.1:42086 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:11:14.882 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:53774 10 6452 1 2025-09-06 05:11:22.835 00:00:10.394 TCP 23.104.0.1:58592 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:08:24.314 00:05:00.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 05:12:15.113 00:00:10.301 TCP 1.101.0.1:3000 -> 22.102.0.1:49528 11 6504 1 2025-09-06 05:12:23.270 00:00:20.127 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:13:15.453 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57538 10 6452 1 2025-09-06 05:13:33.439 00:00:10.361 TCP 23.104.0.1:39844 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:13:54.668 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 05:13:54.335 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 05:14:15.668 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50334 10 6452 1 2025-09-06 05:10:24.317 00:05:00.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 05:14:33.843 00:00:10.353 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:15:15.906 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57866 10 6452 1 2025-09-06 05:15:34.236 00:00:10.367 TCP 23.104.0.1:56084 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:16:16.125 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58510 10 6452 1 2025-09-06 05:16:34.645 00:00:10.362 TCP 23.104.0.1:58006 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:17:16.299 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37994 10 6452 1 2025-09-06 05:17:35.049 00:00:10.367 TCP 23.104.0.1:41474 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:18:16.519 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54684 10 6452 1 2025-09-06 05:14:24.315 00:05:00.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 05:18:35.456 00:00:10.362 TCP 23.104.0.1:41698 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:18:54.888 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 05:18:54.696 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 05:19:16.691 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43772 10 6452 1 2025-09-06 05:19:35.854 00:00:10.381 TCP 23.104.0.1:45216 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:16:24.318 00:05:00.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 05:20:16.908 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58224 10 6452 1 2025-09-06 05:20:36.276 00:00:10.318 TCP 23.104.0.1:59140 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:21:17.124 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 10 6452 1 2025-09-06 05:21:36.634 00:00:10.367 TCP 23.104.0.1:54420 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:22:17.337 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45946 10 6452 1 2025-09-06 05:22:37.049 00:00:10.336 TCP 23.104.0.1:39442 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:23:17.559 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35840 12 10367 1 2025-09-06 05:23:37.413 00:00:10.402 TCP 23.104.0.1:40800 -> 1.101.0.1:3000 15 1926 1 2025-09-06 05:23:54.642 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 05:23:54.666 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 05:20:24.320 00:05:00.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 05:24:17.805 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36522 10 6452 1 2025-09-06 05:24:37.855 00:00:10.373 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:25:18.035 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35074 10 6452 1 2025-09-06 05:25:38.266 00:00:10.366 TCP 23.104.0.1:47408 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:22:24.323 00:05:00.749 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 05:26:18.254 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6452 1 2025-09-06 05:26:38.671 00:00:10.326 TCP 23.104.0.1:45822 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:27:18.470 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52762 10 6452 1 2025-09-06 05:27:39.036 00:00:10.995 TCP 23.104.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:28:18.683 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37380 10 6452 1 2025-09-06 05:28:40.115 00:00:10.366 TCP 23.104.0.1:54756 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:28:54.863 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 05:28:54.957 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 05:29:18.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36712 10 6452 1 2025-09-06 05:29:40.516 00:00:10.319 TCP 23.104.0.1:32828 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:26:24.324 00:05:00.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 05:30:19.114 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51494 10 6452 1 2025-09-06 05:30:40.874 00:00:10.360 TCP 23.104.0.1:44768 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:31:19.306 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:46278 10 6452 1 2025-09-06 05:31:41.276 00:00:10.360 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:28:24.327 00:05:00.749 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 05:32:19.578 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58622 10 6452 1 2025-09-06 05:32:41.676 00:00:10.368 TCP 23.104.0.1:46660 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:33:19.793 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48890 10 6452 1 2025-09-06 05:33:55.190 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 05:33:55.351 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 05:33:42.100 00:00:10.361 TCP 23.104.0.1:54376 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:34:20.041 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57138 10 6452 1 2025-09-06 05:34:42.497 00:00:10.373 TCP 23.104.0.1:33504 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:35:20.256 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60046 10 6452 1 2025-09-06 05:35:42.910 00:00:22.018 TCP 23.104.0.1:56266 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:32:24.324 00:05:00.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 05:36:20.470 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46518 10 6452 1 2025-09-06 05:36:54.991 00:00:10.327 TCP 23.104.0.1:56682 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:37:20.682 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35306 10 6452 1 2025-09-06 05:37:55.354 00:00:10.360 TCP 23.104.0.1:38702 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:34:24.330 00:05:00.747 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 05:38:20.900 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33282 10 6452 1 2025-09-06 05:38:55.056 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 05:38:55.093 00:00:00.052 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 05:38:55.754 00:00:10.385 TCP 23.104.0.1:52938 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:39:21.122 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59150 10 6452 1 2025-09-06 05:39:56.178 00:00:10.359 TCP 23.104.0.1:45662 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:40:21.349 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35494 10 6452 1 2025-09-06 05:40:56.575 00:00:10.332 TCP 23.104.0.1:46376 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:41:21.563 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-09-06 05:41:56.949 00:00:10.372 TCP 23.104.0.1:48478 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:38:24.327 00:05:00.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 05:42:21.783 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:37516 10 6452 1 2025-09-06 05:42:57.363 00:00:10.363 TCP 23.104.0.1:44200 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:43:22.080 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40650 10 6452 1 2025-09-06 05:43:55.298 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 05:43:55.237 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 05:43:57.760 00:00:10.384 TCP 23.104.0.1:36102 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:40:24.330 00:05:00.748 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 05:44:22.299 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:49380 10 6452 1 2025-09-06 05:44:58.178 00:00:10.365 TCP 23.104.0.1:35422 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:45:22.490 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36358 10 6452 1 2025-09-06 05:45:58.582 00:00:10.322 TCP 23.104.0.1:60514 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:46:22.704 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42076 10 6452 1 2025-09-06 05:46:58.941 00:00:10.379 TCP 23.104.0.1:50414 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:47:22.887 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49146 10 6452 1 2025-09-06 05:47:59.361 00:00:10.361 TCP 23.104.0.1:52000 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:44:24.327 00:05:00.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 05:48:23.119 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42860 10 6452 1 2025-09-06 05:48:55.413 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 05:48:55.488 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 05:48:59.760 00:00:10.681 TCP 23.104.0.1:33254 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:49:23.333 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47336 10 6452 1 2025-09-06 05:50:00.477 00:00:10.360 TCP 23.104.0.1:53082 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:46:24.330 00:05:00.749 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 05:50:23.544 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56660 10 6452 1 2025-09-06 05:51:00.875 00:00:10.368 TCP 23.104.0.1:52152 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:51:23.757 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:54784 10 6452 1 2025-09-06 05:52:01.280 00:00:10.364 TCP 23.104.0.1:42782 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:52:23.940 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:57528 10 6452 1 2025-09-06 05:53:01.678 00:00:10.373 TCP 23.104.0.1:39306 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:53:24.192 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2025-09-06 05:53:55.720 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 05:53:55.462 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 05:54:02.114 00:00:10.365 TCP 23.104.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:50:24.329 00:05:00.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 05:54:24.373 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54332 10 6452 1 2025-09-06 05:55:02.515 00:00:10.369 TCP 23.104.0.1:48334 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:55:24.600 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35336 10 6452 1 2025-09-06 05:56:02.914 00:00:10.365 TCP 23.104.0.1:35812 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:52:24.336 00:05:00.744 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 05:56:24.830 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45406 10 6452 1 2025-09-06 05:57:03.325 00:00:10.351 TCP 23.104.0.1:43990 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:57:25.008 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56388 10 6452 1 2025-09-06 05:58:03.710 00:00:10.363 TCP 23.104.0.1:56702 -> 1.101.0.1:3000 11 1507 1 2025-09-06 05:58:25.188 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42112 10 6452 1 Summary: total flows: 163, total bytes: 501227, total packets: 1568, avg bps: 1074, avg pps: 0, avg bpp: 319 Time window: 2025-09-06 04:56:24 - 2025-09-06 05:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0009s User: 0.0038s Wall: 0.0031s flows/second: 51895.5 Runtime: 0.0032s