Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 08:58:55.180 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 08:58:55.191 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 08:59:05.394 00:00:10.334 TCP 23.104.0.1:43984 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:59:19.844 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35786 10 6452 1 2025-09-16 09:00:05.772 00:00:10.332 TCP 23.104.0.1:42392 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:00:20.027 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 6452 1 2025-09-16 08:56:29.123 00:05:01.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 09:01:06.145 00:00:10.548 TCP 23.104.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-09-16 08:57:29.127 00:05:01.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 09:01:20.247 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60186 10 6452 1 2025-09-16 09:02:06.741 00:00:10.366 TCP 23.104.0.1:37668 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:02:20.468 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48812 10 6452 1 2025-09-16 09:03:07.146 00:00:10.375 TCP 23.104.0.1:53940 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:03:20.681 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54698 10 6452 1 2025-09-16 09:03:55.485 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 09:03:55.288 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 09:04:07.572 00:00:10.365 TCP 23.104.0.1:59106 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:04:20.904 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42054 10 6452 1 2025-09-16 09:05:07.978 00:00:10.766 TCP 23.104.0.1:56958 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:05:21.128 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60808 10 6452 1 2025-09-16 09:06:08.789 00:00:10.375 TCP 23.104.0.1:59962 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:06:21.348 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46914 10 6452 1 2025-09-16 09:02:29.129 00:05:01.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 09:07:09.201 00:00:10.326 TCP 23.104.0.1:37082 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:07:21.570 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42438 10 6452 1 2025-09-16 09:03:29.132 00:05:01.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 09:08:09.563 00:00:10.366 TCP 23.104.0.1:34504 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:08:21.787 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45378 10 6452 1 2025-09-16 09:08:55.531 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 09:08:55.352 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 09:09:09.965 00:00:10.373 TCP 23.104.0.1:45946 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:09:22.009 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52004 10 6452 1 2025-09-16 09:10:10.374 00:00:10.372 TCP 23.104.0.1:38820 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:10:22.227 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41776 10 6452 1 2025-09-16 09:11:10.777 00:00:10.333 TCP 23.104.0.1:45636 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:11:22.450 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52874 10 6452 1 2025-09-16 09:12:11.145 00:00:10.362 TCP 23.104.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:08:29.130 00:05:01.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 09:12:22.662 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58426 10 6452 1 2025-09-16 09:13:11.547 00:00:10.367 TCP 23.104.0.1:34864 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:09:29.133 00:05:01.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 09:13:22.880 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41536 10 6452 1 2025-09-16 09:13:55.503 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 09:13:55.527 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 09:14:11.954 00:00:11.240 TCP 23.104.0.1:53904 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:14:23.100 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36476 10 6452 1 2025-09-16 09:15:13.236 00:00:10.360 TCP 23.104.0.1:38296 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:15:23.314 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46800 10 6452 1 2025-09-16 09:16:13.632 00:00:10.323 TCP 23.104.0.1:51848 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:16:23.528 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33114 10 6452 1 2025-09-16 09:17:13.991 00:00:10.365 TCP 23.104.0.1:48458 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:17:23.705 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51342 10 6452 1 2025-09-16 09:18:14.395 00:00:10.361 TCP 23.104.0.1:53972 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:14:29.131 00:05:01.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 09:18:23.920 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41954 10 6452 1 2025-09-16 09:18:55.690 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 09:18:55.462 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 09:19:14.798 00:00:10.933 TCP 23.104.0.1:34110 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:15:29.134 00:05:01.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 09:19:24.130 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50650 10 6452 1 2025-09-16 09:20:15.770 00:00:10.446 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 15 1926 1 2025-09-16 09:20:24.349 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:44720 12 10365 1 2025-09-16 09:21:16.249 00:00:10.361 TCP 23.104.0.1:54492 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:21:24.595 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51246 10 6452 1 2025-09-16 09:22:16.648 00:00:10.373 TCP 23.104.0.1:34070 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:22:24.809 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44054 10 6452 1 2025-09-16 09:23:17.084 00:00:10.324 TCP 23.104.0.1:60620 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:23:25.029 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35912 10 6452 1 2025-09-16 09:23:55.754 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 09:23:55.750 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 09:20:29.132 00:05:01.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 09:24:17.449 00:00:10.556 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:24:25.249 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58080 10 6452 1 2025-09-16 09:25:18.053 00:00:10.436 TCP 23.104.0.1:42770 -> 1.101.0.1:3000 15 1926 1 2025-09-16 09:21:29.135 00:05:01.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 09:25:25.464 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42546 12 10367 1 2025-09-16 09:26:18.530 00:00:10.367 TCP 23.104.0.1:44824 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:26:25.707 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54202 10 6452 1 2025-09-16 09:27:18.935 00:00:10.347 TCP 23.104.0.1:60906 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:27:25.923 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49118 10 6452 1 2025-09-16 09:28:19.320 00:00:10.362 TCP 23.104.0.1:43444 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:28:26.134 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55416 10 6452 1 2025-09-16 09:28:56.266 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 09:28:56.283 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 09:29:19.720 00:00:10.376 TCP 23.104.0.1:54998 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:29:26.345 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33358 10 6452 1 2025-09-16 09:30:20.150 00:00:10.320 TCP 23.104.0.1:56970 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:26:29.134 00:05:01.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 09:30:26.556 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43322 10 6452 1 2025-09-16 09:31:20.511 00:00:10.367 TCP 23.104.0.1:60438 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:27:29.138 00:05:01.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 09:31:26.785 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33122 10 6452 1 2025-09-16 09:32:20.918 00:00:10.371 TCP 23.104.0.1:52076 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:32:26.996 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42470 10 6452 1 2025-09-16 09:33:21.328 00:00:10.372 TCP 23.104.0.1:52252 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:33:27.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54720 10 6452 1 2025-09-16 09:33:55.915 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 09:33:56.036 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 09:34:21.744 00:00:10.373 TCP 23.104.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:34:27.423 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42056 10 6452 1 2025-09-16 09:35:22.144 00:00:10.368 TCP 23.104.0.1:59670 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:35:27.638 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52128 10 6452 1 2025-09-16 09:32:29.137 00:05:01.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 09:36:22.549 00:00:10.364 TCP 23.104.0.1:57548 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:36:27.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34722 10 6452 1 2025-09-16 09:33:29.140 00:05:01.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 09:37:22.953 00:00:10.366 TCP 23.104.0.1:41546 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:37:28.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57996 10 6452 1 2025-09-16 09:38:23.356 00:00:10.366 TCP 23.104.0.1:40212 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:38:28.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49910 10 6452 1 2025-09-16 09:38:56.136 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 09:38:55.866 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 09:39:23.760 00:00:10.370 TCP 23.104.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:39:28.508 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44084 10 6452 1 2025-09-16 09:40:24.169 00:00:10.320 TCP 23.104.0.1:58812 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:40:28.722 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41240 10 6452 1 2025-09-16 09:41:24.524 00:00:10.361 TCP 23.104.0.1:47596 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:41:28.892 00:00:10.372 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-09-16 09:38:29.139 00:05:01.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 09:42:24.927 00:00:10.382 TCP 23.104.0.1:40112 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:42:29.307 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56768 10 6452 1 2025-09-16 09:39:29.142 00:05:01.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 09:43:25.344 00:00:10.326 TCP 23.104.0.1:42502 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:43:29.526 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52828 10 6452 1 2025-09-16 09:43:55.884 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 09:43:56.242 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 09:44:25.705 00:00:10.366 TCP 23.104.0.1:45284 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:44:29.705 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40216 10 6452 1 2025-09-16 09:45:26.114 00:00:10.376 TCP 23.104.0.1:51636 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:45:29.922 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:38448 10 6452 1 2025-09-16 09:46:26.537 00:00:10.330 TCP 23.104.0.1:34030 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:46:30.184 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37930 10 6452 1 2025-09-16 09:47:30.400 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54478 10 6452 1 2025-09-16 09:47:26.906 00:00:10.369 TCP 23.104.0.1:51624 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:44:29.140 00:05:01.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 09:48:27.313 00:00:10.369 TCP 23.104.0.1:46290 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:48:30.615 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51158 10 6452 1 2025-09-16 09:48:56.214 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 09:48:56.281 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 09:45:29.142 00:05:01.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 09:49:27.721 00:00:10.380 TCP 23.104.0.1:37094 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:49:30.834 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48256 10 6452 1 2025-09-16 09:50:31.009 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46368 10 6452 1 2025-09-16 09:50:28.138 00:00:10.368 TCP 23.104.0.1:57410 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:51:31.222 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37274 10 6452 1 2025-09-16 09:51:28.539 00:00:10.388 TCP 23.104.0.1:35200 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:52:28.959 00:00:10.366 TCP 23.104.0.1:51966 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:52:31.435 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50252 10 6452 1 2025-09-16 09:53:31.647 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38744 10 6452 1 2025-09-16 09:53:29.362 00:00:10.376 TCP 23.104.0.1:41756 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:53:56.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 09:53:56.320 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 09:50:29.142 00:05:01.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 09:54:29.770 00:00:10.328 TCP 23.104.0.1:41072 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:54:31.862 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49862 10 6452 1 2025-09-16 09:51:29.144 00:05:01.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 09:55:30.136 00:00:10.361 TCP 23.104.0.1:39364 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:55:32.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43300 10 6452 1 2025-09-16 09:56:30.538 00:00:10.368 TCP 23.104.0.1:44580 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:56:32.297 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34354 10 6452 1 2025-09-16 09:57:30.942 00:00:10.372 TCP 23.104.0.1:53730 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:57:32.509 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49134 10 6452 1 2025-09-16 09:58:31.353 00:00:10.371 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-09-16 09:58:32.682 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48380 10 6452 1 Summary: total flows: 164, total bytes: 507014, total packets: 1584, avg bps: 1086, avg pps: 0, avg bpp: 320 Time window: 2025-09-16 08:56:29 - 2025-09-16 09:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0051s User: 0.0009s Wall: 0.0022s flows/second: 75086.3 Runtime: 0.0022s