Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 14:59:06.379 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 14:59:06.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 14:58:58.615 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36106 10 6452 1 2025-09-06 14:59:25.638 00:00:10.366 TCP 23.104.0.1:34616 -> 1.101.0.1:3000 11 1507 1 2025-09-06 14:59:58.789 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38852 10 6452 1 2025-09-06 14:56:24.486 00:05:00.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 15:00:26.058 00:00:10.363 TCP 23.104.0.1:34692 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:00:59.003 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45050 10 6452 1 2025-09-06 15:01:26.468 00:00:10.378 TCP 23.104.0.1:48804 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:01:59.177 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37460 10 6452 1 2025-09-06 14:58:24.489 00:05:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 15:02:26.882 00:00:10.395 TCP 23.104.0.1:46076 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:02:59.382 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49226 10 6452 1 2025-09-06 15:03:27.312 00:00:10.367 TCP 23.104.0.1:49872 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:04:06.367 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:04:06.113 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:03:59.611 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:54572 10 6452 1 2025-09-06 15:04:27.718 00:00:10.376 TCP 23.104.0.1:49952 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:04:59.853 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44906 10 6452 1 2025-09-06 15:05:28.130 00:00:10.386 TCP 23.104.0.1:36632 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:06:00.075 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55050 10 6452 1 2025-09-06 15:02:24.488 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 15:06:28.553 00:00:10.361 TCP 23.104.0.1:55600 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:07:00.291 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49114 10 6452 1 2025-09-06 15:07:28.952 00:00:10.365 TCP 23.104.0.1:53764 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:08:00.504 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37494 10 6452 1 2025-09-06 15:04:24.491 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 15:08:29.355 00:00:10.329 TCP 23.104.0.1:45370 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:09:06.332 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:09:06.509 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:09:00.723 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53184 10 6452 1 2025-09-06 15:09:29.714 00:00:10.374 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:10:00.942 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51554 10 6452 1 2025-09-06 15:10:30.129 00:00:10.375 TCP 23.104.0.1:35982 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:11:01.175 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57314 10 6452 1 2025-09-06 15:11:30.544 00:00:10.320 TCP 23.104.0.1:37680 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:12:01.402 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54938 10 6452 1 2025-09-06 15:08:24.490 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 15:12:30.901 00:00:10.364 TCP 23.104.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:13:01.614 00:00:10.831 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 12 10367 1 2025-09-06 15:13:31.300 00:00:10.445 TCP 23.104.0.1:54462 -> 1.101.0.1:3000 15 1926 1 2025-09-06 15:14:06.543 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:14:06.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:14:02.488 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58572 10 6452 1 2025-09-06 15:10:24.491 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 15:14:31.784 00:00:10.370 TCP 23.104.0.1:41394 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:15:02.700 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47924 10 6452 1 2025-09-06 15:15:32.192 00:00:10.368 TCP 23.104.0.1:43996 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:16:02.918 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33580 10 6452 1 2025-09-06 15:16:32.595 00:00:10.366 TCP 23.104.0.1:47336 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:17:03.129 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56412 10 6452 1 2025-09-06 15:17:33.002 00:00:10.361 TCP 23.104.0.1:52938 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:18:03.301 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55658 10 6452 1 2025-09-06 15:14:24.491 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 15:18:33.404 00:00:10.325 TCP 23.104.0.1:33884 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:19:06.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:19:06.675 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:19:03.511 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48900 10 6452 1 2025-09-06 15:19:33.768 00:00:10.380 TCP 23.104.0.1:51122 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:20:03.728 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34644 10 6452 1 2025-09-06 15:16:24.491 00:05:00.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 15:20:34.191 00:00:10.367 TCP 23.104.0.1:49234 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:21:03.950 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37378 12 6556 1 2025-09-06 15:21:34.591 00:00:10.322 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:22:04.181 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40004 10 6452 1 2025-09-06 15:22:34.950 00:00:10.367 TCP 23.104.0.1:50710 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:23:04.405 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50678 10 6452 1 2025-09-06 15:23:35.361 00:00:10.365 TCP 23.104.0.1:40866 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:24:06.743 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:24:06.951 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:24:04.618 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-09-06 15:20:24.497 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 15:24:35.764 00:00:10.384 TCP 23.104.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:25:04.825 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41398 10 6452 1 2025-09-06 15:25:36.181 00:00:10.368 TCP 23.104.0.1:53370 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:26:05.074 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59542 10 6452 1 2025-09-06 15:22:24.499 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 15:26:36.583 00:00:10.364 TCP 23.104.0.1:38976 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:27:05.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43382 10 6452 1 2025-09-06 15:27:36.987 00:00:10.378 TCP 23.104.0.1:58330 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:28:05.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49606 10 6452 1 2025-09-06 15:28:37.424 00:00:10.373 TCP 23.104.0.1:60648 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:29:06.940 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:29:06.938 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:29:05.737 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54082 10 6452 1 2025-09-06 15:29:37.840 00:00:10.352 TCP 23.104.0.1:56874 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:30:05.945 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43974 10 6452 1 2025-09-06 15:26:24.498 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 15:30:38.227 00:00:10.325 TCP 23.104.0.1:34170 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:31:06.170 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57874 10 6452 1 2025-09-06 15:31:38.590 00:00:10.367 TCP 23.104.0.1:60176 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:32:06.385 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51568 10 6452 1 2025-09-06 15:28:24.502 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 15:32:38.991 00:00:10.318 TCP 23.104.0.1:33574 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:33:06.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60254 10 6452 1 2025-09-06 15:33:39.349 00:00:10.322 TCP 23.104.0.1:45446 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:34:06.784 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:34:07.200 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:34:06.813 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48432 10 6452 1 2025-09-06 15:34:39.710 00:00:10.393 TCP 23.104.0.1:56166 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:35:07.029 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42004 10 6452 1 2025-09-06 15:35:40.111 00:00:10.323 TCP 23.104.0.1:47918 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:36:07.245 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59878 10 6452 1 2025-09-06 15:32:24.499 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 15:36:40.473 00:00:10.364 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:37:07.461 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59180 10 6452 1 2025-09-06 15:37:40.875 00:00:10.374 TCP 23.104.0.1:41160 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:38:07.675 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46080 10 6452 1 2025-09-06 15:34:24.501 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 15:38:41.284 00:00:10.322 TCP 23.104.0.1:37832 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:39:06.365 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:39:06.401 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:39:07.883 00:00:11.958 TCP 1.101.0.1:3000 -> 22.102.0.1:34054 10 6452 1 2025-09-06 15:39:41.643 00:00:10.325 TCP 23.104.0.1:48340 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:40:09.884 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39248 10 6452 1 2025-09-06 15:40:42.006 00:00:10.372 TCP 23.104.0.1:43172 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:41:10.113 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35674 10 6452 1 2025-09-06 15:41:42.430 00:00:10.371 TCP 23.104.0.1:60936 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:42:10.327 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46156 10 6452 1 2025-09-06 15:38:24.501 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 15:42:42.842 00:00:10.381 TCP 23.104.0.1:58106 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:43:10.496 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 2025-09-06 15:43:43.270 00:00:10.358 TCP 23.104.0.1:46344 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:44:06.944 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:44:07.198 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:44:10.673 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49450 10 6452 1 2025-09-06 15:40:24.504 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 15:44:43.666 00:00:10.326 TCP 23.104.0.1:47164 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:45:10.892 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36288 10 6452 1 2025-09-06 15:45:44.030 00:00:10.331 TCP 23.104.0.1:42796 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:46:11.114 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48364 10 6452 1 2025-09-06 15:46:44.399 00:00:10.362 TCP 23.104.0.1:37730 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:47:11.329 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60992 10 6452 1 2025-09-06 15:47:44.801 00:00:10.332 TCP 23.104.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:48:11.549 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56052 10 6452 1 2025-09-06 15:44:24.503 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 15:48:45.170 00:00:10.361 TCP 23.104.0.1:52818 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:49:07.826 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:49:07.292 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:49:11.775 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42948 10 6452 1 2025-09-06 15:49:45.569 00:00:10.417 TCP 23.104.0.1:51366 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:46:24.506 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 15:50:11.991 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38090 10 6452 1 2025-09-06 15:50:46.025 00:00:10.357 TCP 23.104.0.1:48840 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:51:12.223 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49694 10 6452 1 2025-09-06 15:51:46.417 00:00:10.372 TCP 23.104.0.1:35574 -> 1.101.0.1:3000 12 1559 1 2025-09-06 15:52:12.438 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43494 10 6452 1 2025-09-06 15:52:46.826 00:00:10.875 TCP 23.104.0.1:55150 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:53:12.661 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40324 10 6452 1 2025-09-06 15:53:47.743 00:00:10.323 TCP 23.104.0.1:37086 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:54:07.206 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:54:07.397 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:54:12.889 00:00:10.369 TCP 1.101.0.1:3000 -> 22.102.0.1:40406 10 6452 1 2025-09-06 15:50:24.515 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 15:54:48.112 00:00:10.354 TCP 23.104.0.1:43062 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:55:13.297 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46938 10 6452 1 2025-09-06 15:55:48.506 00:00:10.362 TCP 23.104.0.1:52852 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:56:13.512 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60000 10 6452 1 2025-09-06 15:52:24.520 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 15:56:48.907 00:00:10.330 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:57:13.735 00:00:10.589 TCP 1.101.0.1:3000 -> 22.102.0.1:55208 10 6452 1 2025-09-06 15:57:49.274 00:00:10.362 TCP 23.104.0.1:50136 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:58:14.364 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46904 10 6452 1 Summary: total flows: 163, total bytes: 501331, total packets: 1570, avg bps: 1078, avg pps: 0, avg bpp: 319 Time window: 2025-09-06 14:56:24 - 2025-09-06 15:58:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0016s Wall: 0.0031s flows/second: 52715.8 Runtime: 0.0031s