Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 07:59:26.688 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:59:06.947 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38330 10 6452 1 2025-09-07 07:59:26.945 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:59:34.537 00:00:10.362 TCP 23.104.0.1:45040 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:00:07.180 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42400 10 6452 1 2025-09-07 07:56:24.810 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 08:00:34.936 00:00:10.370 TCP 23.104.0.1:54896 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:01:07.392 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35174 10 6452 1 2025-09-07 08:01:35.344 00:00:10.364 TCP 23.104.0.1:49556 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:02:07.604 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45374 10 6452 1 2025-09-07 07:58:24.815 00:05:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 08:02:35.747 00:00:10.363 TCP 23.104.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:03:07.777 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42724 10 6452 1 2025-09-07 08:03:36.151 00:00:10.370 TCP 23.104.0.1:56348 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:04:07.988 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46774 10 6452 1 2025-09-07 08:04:27.496 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:04:27.346 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:04:36.562 00:00:10.379 TCP 23.104.0.1:45692 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:05:08.221 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48232 10 6452 1 2025-09-07 08:05:36.980 00:00:10.328 TCP 23.104.0.1:51746 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:06:08.435 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45826 10 6452 1 2025-09-07 08:02:24.813 00:05:00.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 08:06:37.348 00:00:10.361 TCP 23.104.0.1:50430 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:07:08.641 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:44712 10 6452 1 2025-09-07 08:07:37.748 00:00:10.365 TCP 23.104.0.1:60200 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:08:08.810 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33982 10 6452 1 2025-09-07 08:04:24.816 00:05:00.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 08:08:38.150 00:00:10.376 TCP 23.104.0.1:37680 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:09:08.978 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54296 10 6452 1 2025-09-07 08:09:26.905 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:09:26.768 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:09:38.564 00:00:10.321 TCP 23.104.0.1:60194 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:10:09.213 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55228 10 6452 1 2025-09-07 08:10:38.922 00:00:10.384 TCP 23.104.0.1:48604 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:11:09.425 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47354 10 6452 1 2025-09-07 08:11:39.349 00:00:10.365 TCP 23.104.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:12:09.636 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53034 10 6452 1 2025-09-07 08:08:24.814 00:05:00.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 08:12:39.751 00:00:10.395 TCP 23.104.0.1:48684 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:13:09.825 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34118 10 6452 1 2025-09-07 08:13:40.184 00:00:10.363 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:14:10.052 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50424 10 6452 1 2025-09-07 08:10:24.817 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 08:14:27.199 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:14:27.260 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:14:40.587 00:00:10.372 TCP 23.104.0.1:43720 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:15:10.227 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36240 10 6452 1 2025-09-07 08:15:40.998 00:00:10.334 TCP 23.104.0.1:33268 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:16:10.449 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49936 10 6452 1 2025-09-07 08:16:41.368 00:00:10.363 TCP 23.104.0.1:35968 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:17:10.661 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54646 10 6452 1 2025-09-07 08:17:41.777 00:00:10.364 TCP 23.104.0.1:35404 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:18:10.875 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45512 10 6452 1 2025-09-07 08:14:24.817 00:05:00.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 08:18:42.177 00:00:10.366 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:19:11.062 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49538 10 6452 1 2025-09-07 08:19:27.108 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:19:27.055 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:19:42.579 00:00:10.368 TCP 23.104.0.1:38698 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:20:11.236 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60722 10 6452 1 2025-09-07 08:16:24.818 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 08:20:42.984 00:00:10.373 TCP 23.104.0.1:52626 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:21:11.446 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38310 10 6452 1 2025-09-07 08:21:43.396 00:00:10.370 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:22:11.663 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50190 10 6452 1 2025-09-07 08:22:43.800 00:00:10.343 TCP 23.104.0.1:38642 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:23:11.831 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44906 10 6452 1 2025-09-07 08:23:44.182 00:00:10.362 TCP 23.104.0.1:52720 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:20:24.818 00:05:00.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 08:24:12.003 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55340 10 6452 1 2025-09-07 08:24:27.756 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:24:28.382 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:24:44.582 00:00:10.420 TCP 23.104.0.1:36684 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:25:12.224 00:00:10.435 TCP 1.101.0.1:3000 -> 22.102.0.1:34760 10 6452 1 2025-09-07 08:25:45.047 00:00:10.359 TCP 23.104.0.1:59202 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:22:24.821 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 08:26:12.699 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47834 10 6452 1 2025-09-07 08:26:45.448 00:00:10.361 TCP 23.104.0.1:47996 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:27:12.912 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38746 10 6452 1 2025-09-07 08:27:45.852 00:00:10.377 TCP 23.104.0.1:53966 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:28:13.121 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37198 10 6452 1 2025-09-07 08:28:46.264 00:00:10.323 TCP 23.104.0.1:46268 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:29:13.333 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38554 10 6452 1 2025-09-07 08:29:27.320 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:29:27.494 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:29:46.631 00:00:10.364 TCP 23.104.0.1:35236 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:30:13.545 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48268 10 6452 1 2025-09-07 08:26:24.819 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 08:30:47.026 00:00:10.368 TCP 23.104.0.1:53780 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:31:13.761 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47810 10 6452 1 2025-09-07 08:31:47.432 00:00:10.361 TCP 23.104.0.1:49986 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:32:13.981 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60400 10 6452 1 2025-09-07 08:28:24.825 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 08:32:47.839 00:00:10.399 TCP 23.104.0.1:55214 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:33:14.215 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38152 10 6452 1 2025-09-07 08:33:48.277 00:00:10.364 TCP 23.104.0.1:36216 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:34:14.392 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38342 10 6452 1 2025-09-07 08:34:27.692 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:34:27.604 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:34:48.676 00:00:10.385 TCP 23.104.0.1:38662 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:35:14.559 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49540 10 6452 1 2025-09-07 08:35:49.093 00:00:10.326 TCP 23.104.0.1:51790 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:32:24.821 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 08:36:14.731 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35468 10 6452 1 2025-09-07 08:36:49.472 00:00:10.802 TCP 23.104.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:37:14.979 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:46626 10 6452 1 2025-09-07 08:37:50.309 00:00:10.366 TCP 23.104.0.1:35950 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:38:15.222 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39834 10 6452 1 2025-09-07 08:34:24.823 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 08:38:50.711 00:00:10.382 TCP 23.104.0.1:45904 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:39:15.398 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43968 10 6452 1 2025-09-07 08:39:27.648 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:39:27.366 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:39:51.134 00:00:10.365 TCP 23.104.0.1:42880 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:40:15.582 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57414 10 6452 1 2025-09-07 08:40:51.537 00:00:10.711 TCP 23.104.0.1:42882 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:41:15.797 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:33894 10 6452 1 2025-09-07 08:41:52.295 00:00:10.378 TCP 23.104.0.1:38690 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:38:24.823 00:05:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 08:42:16.150 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53154 10 6452 1 2025-09-07 08:42:52.749 00:00:10.362 TCP 23.104.0.1:39286 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:43:16.362 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36826 10 6452 1 2025-09-07 08:43:53.145 00:00:10.321 TCP 23.104.0.1:44000 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:40:24.826 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 08:44:16.573 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54062 10 6452 1 2025-09-07 08:44:28.571 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:44:28.040 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:44:53.503 00:00:10.372 TCP 23.104.0.1:50772 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:45:16.747 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-09-07 08:45:53.909 00:00:10.411 TCP 23.104.0.1:45206 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:46:16.962 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40472 12 6556 1 2025-09-07 08:46:54.366 00:00:10.373 TCP 23.104.0.1:38762 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:47:17.184 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54040 10 6452 1 2025-09-07 08:47:54.776 00:00:10.370 TCP 23.104.0.1:52580 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:44:24.827 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 08:48:17.395 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56022 10 6452 1 2025-09-07 08:48:55.183 00:00:10.359 TCP 23.104.0.1:49738 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:49:27.994 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:49:27.503 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:49:17.612 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36288 10 6452 1 2025-09-07 08:49:55.582 00:00:10.331 TCP 23.104.0.1:55474 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:46:24.830 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 08:50:17.783 00:00:10.582 TCP 1.101.0.1:3000 -> 22.102.0.1:35068 11 6492 1 2025-09-07 08:50:55.951 00:00:10.377 TCP 23.104.0.1:43054 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:51:18.406 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40126 10 6452 1 2025-09-07 08:51:56.365 00:00:10.363 TCP 23.104.0.1:50104 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:52:18.620 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52546 10 6452 1 2025-09-07 08:52:56.767 00:00:10.374 TCP 23.104.0.1:34258 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:53:18.835 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52098 10 6452 1 2025-09-07 08:53:57.178 00:00:10.367 TCP 23.104.0.1:58954 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:50:24.828 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 08:54:27.932 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:54:27.938 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:54:19.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40686 10 6452 1 2025-09-07 08:54:57.582 00:00:10.367 TCP 23.104.0.1:37902 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:55:19.300 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33728 10 6452 1 2025-09-07 08:55:57.986 00:00:10.370 TCP 23.104.0.1:38066 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:52:24.830 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 08:56:19.473 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50514 10 6452 1 2025-09-07 08:56:58.396 00:00:10.367 TCP 23.104.0.1:42228 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:57:19.682 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57978 10 6452 1 2025-09-07 08:57:58.803 00:00:10.361 TCP 23.104.0.1:49260 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:58:19.895 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52908 10 6452 1 Summary: total flows: 163, total bytes: 496985, total packets: 1564, avg bps: 1067, avg pps: 0, avg bpp: 317 Time window: 2025-09-07 07:56:24 - 2025-09-07 08:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0034s User: 0.0011s Wall: 0.0025s flows/second: 65360.6 Runtime: 0.0025s