Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 19:59:12.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 19:59:12.306 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 19:59:09.966 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60032 10 6452 1 2025-09-06 19:59:30.714 00:00:10.332 TCP 23.104.0.1:47974 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:00:10.207 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6452 1 2025-09-06 19:56:24.594 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 20:00:31.098 00:00:10.364 TCP 23.104.0.1:55052 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:01:10.422 00:00:10.477 TCP 1.101.0.1:3000 -> 22.102.0.1:53952 10 6452 1 2025-09-06 20:01:31.502 00:00:10.363 TCP 23.104.0.1:58610 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:02:10.933 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:49810 10 6452 1 2025-09-06 19:58:24.596 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 20:02:31.906 00:00:10.386 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:03:11.175 00:00:10.738 TCP 1.101.0.1:3000 -> 22.102.0.1:56904 10 6452 1 2025-09-06 20:03:32.352 00:00:10.327 TCP 23.104.0.1:35080 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:04:12.562 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:04:12.600 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:04:11.951 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:57162 10 6452 1 2025-09-06 20:04:32.717 00:00:10.419 TCP 23.104.0.1:33104 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:05:12.146 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:56680 10 6452 1 2025-09-06 20:05:33.172 00:00:10.364 TCP 23.104.0.1:47168 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:06:12.335 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52536 10 6452 1 2025-09-06 20:02:24.596 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 20:06:33.576 00:00:10.363 TCP 23.104.0.1:47752 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:07:12.577 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46480 10 6452 1 2025-09-06 20:07:33.978 00:00:10.370 TCP 23.104.0.1:38930 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:08:12.793 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35290 10 6452 1 2025-09-06 20:04:24.599 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 20:08:34.384 00:00:10.321 TCP 23.104.0.1:52084 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:09:12.582 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:09:12.818 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:09:13.004 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47220 10 6452 1 2025-09-06 20:09:34.752 00:00:10.385 TCP 23.104.0.1:34766 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:10:13.220 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43670 10 6452 1 2025-09-06 20:10:35.181 00:00:10.362 TCP 23.104.0.1:57502 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:11:13.432 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60878 10 6452 1 2025-09-06 20:11:35.580 00:00:10.369 TCP 23.104.0.1:44974 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:12:13.650 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52850 10 6452 1 2025-09-06 20:08:24.597 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 20:12:35.984 00:00:10.477 TCP 23.104.0.1:36230 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:13:13.862 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40748 10 6452 1 2025-09-06 20:13:36.495 00:00:10.364 TCP 23.104.0.1:34006 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:14:12.651 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:14:12.644 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:14:14.079 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54530 10 6452 1 2025-09-06 20:10:24.599 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 20:14:36.900 00:00:10.375 TCP 23.104.0.1:36794 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:15:14.298 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6452 1 2025-09-06 20:15:37.310 00:00:10.364 TCP 23.104.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:16:14.520 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34962 10 6452 1 2025-09-06 20:16:37.712 00:00:10.337 TCP 23.104.0.1:55410 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:17:14.738 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50714 10 6452 1 2025-09-06 20:17:38.105 00:00:10.335 TCP 23.104.0.1:43814 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:18:14.952 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:36436 10 6452 1 2025-09-06 20:14:24.598 00:05:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 20:18:38.466 00:00:10.364 TCP 23.104.0.1:58906 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:19:12.615 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:19:12.622 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:19:15.197 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35162 10 6452 1 2025-09-06 20:19:38.868 00:00:10.330 TCP 23.104.0.1:45250 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:20:15.419 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43042 10 6452 1 2025-09-06 20:16:24.601 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 20:20:39.241 00:00:10.367 TCP 23.104.0.1:37768 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:21:15.637 00:00:10.413 TCP 1.101.0.1:3000 -> 22.102.0.1:59266 10 6452 1 2025-09-06 20:21:39.643 00:00:10.366 TCP 23.104.0.1:40216 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:22:16.103 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42306 10 6452 1 2025-09-06 20:22:40.056 00:00:10.328 TCP 23.104.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:23:16.320 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32944 10 6452 1 2025-09-06 20:23:40.427 00:00:10.366 TCP 23.104.0.1:50990 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:24:12.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:24:12.841 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:24:16.539 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55036 10 6452 1 2025-09-06 20:20:24.601 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 20:24:40.830 00:00:10.377 TCP 23.104.0.1:52690 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:25:16.754 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50524 10 6452 1 2025-09-06 20:25:41.248 00:00:10.363 TCP 23.104.0.1:34490 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:22:24.602 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 20:26:16.971 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45274 10 6452 1 2025-09-06 20:26:41.650 00:00:10.362 TCP 23.104.0.1:42600 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:27:17.207 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-09-06 20:27:42.055 00:00:10.321 TCP 23.104.0.1:34404 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:28:17.429 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50462 10 6452 1 2025-09-06 20:28:42.414 00:00:10.365 TCP 23.104.0.1:40030 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:29:13.053 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:29:12.911 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:29:17.641 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:51260 10 6452 1 2025-09-06 20:29:42.842 00:00:10.394 TCP 23.104.0.1:50902 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:26:24.600 00:05:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 20:30:17.891 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40606 10 6452 1 2025-09-06 20:30:43.274 00:00:10.863 TCP 23.104.0.1:38286 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:31:18.108 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39002 10 6452 1 2025-09-06 20:31:44.174 00:00:10.363 TCP 23.104.0.1:37794 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:28:24.605 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 20:32:18.329 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38774 10 6452 1 2025-09-06 20:32:44.581 00:00:10.368 TCP 23.104.0.1:44174 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:33:18.557 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37838 10 6452 1 2025-09-06 20:33:44.994 00:00:10.362 TCP 23.104.0.1:51108 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:34:13.058 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:34:12.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:34:18.777 00:00:10.307 TCP 1.101.0.1:3000 -> 22.102.0.1:49852 10 6452 1 2025-09-06 20:34:45.400 00:00:10.363 TCP 23.104.0.1:58506 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:35:19.123 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:32926 10 6452 1 2025-09-06 20:35:45.802 00:00:10.370 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:32:24.602 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 20:36:19.316 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55262 10 6452 1 2025-09-06 20:36:46.212 00:00:10.325 TCP 23.104.0.1:53368 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:37:19.546 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57566 10 6452 1 2025-09-06 20:37:46.582 00:00:10.373 TCP 23.104.0.1:47646 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:34:24.605 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 20:38:19.714 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51986 10 6452 1 2025-09-06 20:38:46.994 00:00:10.357 TCP 23.104.0.1:56388 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:39:13.122 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:39:13.070 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:39:19.920 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42368 10 6452 1 2025-09-06 20:39:47.392 00:00:10.363 TCP 23.104.0.1:46470 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:40:20.128 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56126 10 6452 1 2025-09-06 20:40:47.794 00:00:10.355 TCP 23.104.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:41:20.351 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33856 10 6452 1 2025-09-06 20:41:48.194 00:00:10.362 TCP 23.104.0.1:55492 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:38:24.602 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 20:42:20.570 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50162 10 6452 1 2025-09-06 20:42:48.596 00:00:10.320 TCP 23.104.0.1:55904 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:43:20.791 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60824 10 6452 1 2025-09-06 20:43:48.956 00:00:10.369 TCP 23.104.0.1:38312 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:44:13.121 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:44:12.955 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:40:24.606 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 20:44:20.974 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:51586 13 6608 1 2025-09-06 20:44:49.375 00:00:10.320 TCP 23.104.0.1:54168 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:45:21.233 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52728 10 6452 1 2025-09-06 20:45:49.733 00:00:10.323 TCP 23.104.0.1:40580 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:46:21.453 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41438 10 6452 1 2025-09-06 20:46:50.106 00:00:10.319 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:47:21.673 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49798 10 6452 1 2025-09-06 20:47:50.464 00:00:10.362 TCP 23.104.0.1:43760 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:44:24.604 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 20:48:21.841 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58230 10 6452 1 2025-09-06 20:48:50.868 00:00:10.323 TCP 23.104.0.1:33720 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:49:13.634 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:49:13.694 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:49:22.031 00:00:10.291 TCP 1.101.0.1:3000 -> 22.102.0.1:49300 10 6452 1 2025-09-06 20:49:51.228 00:00:10.361 TCP 23.104.0.1:47130 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:46:24.606 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 20:50:22.362 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44252 10 6452 1 2025-09-06 20:50:51.631 00:00:10.320 TCP 23.104.0.1:46050 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:51:22.576 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54646 10 6452 1 2025-09-06 20:51:51.992 00:00:10.370 TCP 23.104.0.1:39650 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:52:22.794 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52840 10 6452 1 2025-09-06 20:52:52.399 00:00:10.358 TCP 23.104.0.1:52076 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:53:23.008 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48514 10 6452 1 2025-09-06 20:53:52.793 00:00:10.359 TCP 23.104.0.1:44656 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:54:13.430 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:54:13.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:50:24.605 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 20:54:23.180 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57356 10 6452 1 2025-09-06 20:54:53.194 00:00:10.364 TCP 23.104.0.1:37096 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:55:23.398 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40814 10 6452 1 2025-09-06 20:55:53.599 00:00:10.360 TCP 23.104.0.1:57678 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:52:24.608 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 20:56:23.620 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43536 10 6452 1 2025-09-06 20:56:54.007 00:00:10.372 TCP 23.104.0.1:33136 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:57:23.857 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60218 10 6452 1 2025-09-06 20:57:54.415 00:00:10.322 TCP 23.104.0.1:59008 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:58:24.088 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59706 10 6452 1 Summary: total flows: 163, total bytes: 496997, total packets: 1564, avg bps: 1066, avg pps: 0, avg bpp: 317 Time window: 2025-09-06 19:56:24 - 2025-09-06 20:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0021s Wall: 0.0022s flows/second: 75079.2 Runtime: 0.0022s