Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 07:58:53.959 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 07:58:53.924 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 07:59:04.744 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42534 10 6452 1 2025-09-16 07:59:26.487 00:00:10.368 TCP 23.104.0.1:36926 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:00:04.953 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:41496 14 10471 1 2025-09-16 07:56:29.108 00:05:01.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 08:00:26.896 00:00:10.455 TCP 23.104.0.1:43738 -> 1.101.0.1:3000 15 1926 1 2025-09-16 08:01:05.218 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37028 10 6452 1 2025-09-16 07:57:29.109 00:05:01.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 08:01:27.394 00:00:10.319 TCP 23.104.0.1:48194 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:02:05.442 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38422 10 6452 1 2025-09-16 08:02:27.750 00:00:10.395 TCP 23.104.0.1:33236 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:03:05.666 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33064 10 6452 1 2025-09-16 08:03:28.181 00:00:10.362 TCP 23.104.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:03:54.161 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:03:54.228 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:04:05.886 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60356 10 6452 1 2025-09-16 08:04:28.581 00:00:10.361 TCP 23.104.0.1:43948 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:05:06.111 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36872 10 6452 1 2025-09-16 08:05:28.980 00:00:10.367 TCP 23.104.0.1:41242 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:06:06.331 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44458 10 6452 1 2025-09-16 08:02:29.108 00:05:01.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 08:06:29.381 00:00:10.359 TCP 23.104.0.1:37810 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:07:06.547 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47298 10 6452 1 2025-09-16 08:03:29.112 00:05:01.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 08:07:29.782 00:00:10.326 TCP 23.104.0.1:39494 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:08:06.715 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34268 10 6452 1 2025-09-16 08:08:30.139 00:00:10.364 TCP 23.104.0.1:50210 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:08:54.295 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:08:54.293 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:09:06.935 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:35934 10 6452 1 2025-09-16 08:09:30.543 00:00:10.364 TCP 23.104.0.1:48590 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:10:07.177 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42850 10 6452 1 2025-09-16 08:10:30.944 00:00:10.372 TCP 23.104.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:11:07.402 00:00:10.864 TCP 1.101.0.1:3000 -> 22.102.0.1:60890 10 6452 1 2025-09-16 08:11:31.360 00:00:10.362 TCP 23.104.0.1:58146 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:12:08.305 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44404 10 6452 1 2025-09-16 08:08:29.111 00:05:01.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 08:12:31.763 00:00:10.777 TCP 23.104.0.1:45090 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:13:08.531 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60654 10 6452 1 2025-09-16 08:09:29.114 00:05:01.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 08:13:54.226 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:13:54.873 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:13:32.580 00:00:23.559 TCP 23.104.0.1:40712 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:14:08.761 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59656 10 6452 1 2025-09-16 08:14:46.182 00:00:10.367 TCP 23.104.0.1:59372 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:15:08.969 00:00:10.814 TCP 1.101.0.1:3000 -> 22.102.0.1:55580 10 6452 1 2025-09-16 08:15:46.588 00:00:10.370 TCP 23.104.0.1:46518 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:16:09.822 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49754 10 6452 1 2025-09-16 08:16:46.997 00:00:10.324 TCP 23.104.0.1:45912 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:17:10.059 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35092 10 6452 1 2025-09-16 08:17:47.359 00:00:10.675 TCP 23.104.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:18:10.228 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34356 10 6452 1 2025-09-16 08:14:29.113 00:05:01.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 08:18:54.347 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:18:54.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:18:48.104 00:00:10.322 TCP 23.104.0.1:44888 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:19:10.446 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39948 10 6452 1 2025-09-16 08:15:29.115 00:05:01.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 08:19:48.462 00:00:10.441 TCP 23.104.0.1:39774 -> 1.101.0.1:3000 15 1926 1 2025-09-16 08:20:10.665 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:39042 12 10367 1 2025-09-16 08:20:48.941 00:00:10.379 TCP 23.104.0.1:44604 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:21:10.909 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53962 10 6452 1 2025-09-16 08:21:49.359 00:00:10.363 TCP 23.104.0.1:45282 -> 1.101.0.1:3000 12 1559 1 2025-09-16 08:22:11.122 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:57830 10 6452 1 2025-09-16 08:22:49.758 00:00:10.390 TCP 23.104.0.1:53900 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:23:11.334 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39078 10 6452 1 2025-09-16 08:23:54.444 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:23:54.669 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:23:50.188 00:00:10.362 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:24:11.550 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46384 10 6452 1 2025-09-16 08:20:29.113 00:05:01.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 08:24:50.589 00:00:10.442 TCP 23.104.0.1:38150 -> 1.101.0.1:3000 15 1926 1 2025-09-16 08:25:11.725 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:54274 12 10367 1 2025-09-16 08:21:29.116 00:05:01.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 08:25:51.097 00:00:10.370 TCP 23.104.0.1:50028 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:26:11.957 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49048 10 6452 1 2025-09-16 08:26:51.507 00:00:10.330 TCP 23.104.0.1:48230 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:27:12.194 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:45468 10 6452 1 2025-09-16 08:27:51.877 00:00:10.365 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:28:12.359 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53976 10 6452 1 2025-09-16 08:28:54.497 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:28:54.839 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:28:52.281 00:00:10.329 TCP 23.104.0.1:58926 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:29:12.587 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50650 10 6452 1 2025-09-16 08:29:52.666 00:00:10.368 TCP 23.104.0.1:58914 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:30:12.799 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55034 10 6452 1 2025-09-16 08:26:29.116 00:05:01.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 08:30:53.098 00:00:10.331 TCP 23.104.0.1:34828 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:31:13.021 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42136 10 6452 1 2025-09-16 08:27:29.119 00:05:01.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 08:31:53.464 00:00:10.369 TCP 23.104.0.1:54012 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:32:13.198 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44224 10 6452 1 2025-09-16 08:32:53.875 00:00:10.369 TCP 23.104.0.1:48468 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:33:13.405 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47408 10 6452 1 2025-09-16 08:33:54.733 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:33:54.582 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:33:54.294 00:00:10.380 TCP 23.104.0.1:35110 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:34:13.617 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48936 10 6452 1 2025-09-16 08:34:54.710 00:00:10.419 TCP 23.104.0.1:54522 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:35:13.834 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45732 10 6452 1 2025-09-16 08:35:55.168 00:00:10.325 TCP 23.104.0.1:37464 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:36:14.076 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35794 10 6452 1 2025-09-16 08:32:29.119 00:05:01.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 08:36:55.533 00:00:10.370 TCP 23.104.0.1:59984 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:37:14.283 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39164 10 6452 1 2025-09-16 08:33:29.122 00:05:01.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 08:37:55.941 00:00:10.390 TCP 23.104.0.1:44224 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:38:14.491 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33664 10 6452 1 2025-09-16 08:38:54.672 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:38:54.809 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:38:56.370 00:00:10.369 TCP 23.104.0.1:33790 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:39:14.703 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58534 10 6452 1 2025-09-16 08:39:56.782 00:00:10.373 TCP 23.104.0.1:47476 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:40:14.913 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56038 10 6452 1 2025-09-16 08:40:57.193 00:00:10.947 TCP 23.104.0.1:55484 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:41:15.134 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42922 10 6452 1 2025-09-16 08:41:58.182 00:00:10.369 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:42:15.343 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59922 10 6452 1 2025-09-16 08:38:29.121 00:05:01.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 08:42:58.587 00:00:10.366 TCP 23.104.0.1:60242 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:43:15.555 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55864 10 6452 1 2025-09-16 08:39:29.123 00:05:01.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 08:43:54.894 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:43:54.774 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:43:58.988 00:00:10.369 TCP 23.104.0.1:53222 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:44:15.767 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58262 10 6452 1 2025-09-16 08:44:59.391 00:00:10.369 TCP 23.104.0.1:36302 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:45:15.985 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60210 10 6452 1 2025-09-16 08:45:59.795 00:00:10.467 TCP 23.104.0.1:42036 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:46:16.230 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6452 1 2025-09-16 08:47:00.294 00:00:10.368 TCP 23.104.0.1:44044 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:47:16.445 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48720 10 6452 1 2025-09-16 08:48:00.699 00:00:10.322 TCP 23.104.0.1:55166 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:48:16.660 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49456 10 6452 1 2025-09-16 08:44:29.121 00:05:01.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 08:48:55.053 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:48:55.110 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:49:01.091 00:00:10.363 TCP 23.104.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:49:16.873 00:00:10.292 TCP 1.101.0.1:3000 -> 22.102.0.1:41278 10 6452 1 2025-09-16 08:45:29.124 00:05:01.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 08:50:01.505 00:00:10.365 TCP 23.104.0.1:52770 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:50:17.210 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47590 10 6452 1 2025-09-16 08:51:01.911 00:00:10.361 TCP 23.104.0.1:48770 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:51:17.425 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:44438 10 6452 1 2025-09-16 08:52:02.313 00:00:10.371 TCP 23.104.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:52:17.634 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54696 10 6452 1 2025-09-16 08:53:02.712 00:00:10.335 TCP 23.104.0.1:42808 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:53:17.844 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43098 10 6452 1 2025-09-16 08:53:55.274 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:53:55.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:54:03.095 00:00:10.644 TCP 23.104.0.1:37438 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:54:18.080 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48564 10 6452 1 2025-09-16 08:50:29.121 00:05:01.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 08:55:03.774 00:00:10.372 TCP 23.104.0.1:47308 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:55:18.289 00:00:10.864 TCP 1.101.0.1:3000 -> 22.102.0.1:35738 10 6452 1 2025-09-16 08:51:29.124 00:05:01.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 08:56:04.186 00:00:10.364 TCP 23.104.0.1:42604 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:56:19.191 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44836 10 6452 1 2025-09-16 08:57:04.587 00:00:10.364 TCP 23.104.0.1:59048 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:57:19.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47802 10 6452 1 2025-09-16 08:58:04.988 00:00:10.372 TCP 23.104.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:58:19.611 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54352 10 6452 1 Summary: total flows: 163, total bytes: 509999, total packets: 1582, avg bps: 1096, avg pps: 0, avg bpp: 322 Time window: 2025-09-16 07:56:29 - 2025-09-16 08:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0031s Wall: 0.0020s flows/second: 80975.0 Runtime: 0.0020s