Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 14:59:02.474 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:58:47.749 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49720 10 6452 1 2025-09-16 14:59:02.611 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:59:39.355 00:00:10.331 TCP 23.104.0.1:45862 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:59:47.962 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47118 10 6452 1 2025-09-16 14:56:29.223 00:05:01.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 15:00:39.733 00:00:10.373 TCP 23.104.0.1:35932 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:00:48.154 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38644 10 6452 1 2025-09-16 14:57:29.227 00:05:01.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 15:01:40.140 00:00:10.369 TCP 23.104.0.1:58996 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:01:48.383 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-09-16 15:02:40.550 00:00:10.393 TCP 23.104.0.1:58838 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:02:48.591 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49930 10 6452 1 2025-09-16 15:03:40.979 00:00:10.367 TCP 23.104.0.1:35556 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:03:48.802 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54560 10 6452 1 2025-09-16 15:04:02.510 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 15:04:02.632 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 15:04:41.380 00:00:10.368 TCP 23.104.0.1:57254 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:04:49.029 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38168 10 6452 1 2025-09-16 15:05:41.789 00:00:10.366 TCP 23.104.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:05:49.242 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:32970 10 6452 1 2025-09-16 15:02:29.229 00:05:01.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 15:06:42.194 00:00:10.363 TCP 23.104.0.1:54336 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:06:49.449 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53978 10 6452 1 2025-09-16 15:03:29.232 00:05:01.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 15:07:42.597 00:00:10.363 TCP 23.104.0.1:52238 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:07:49.661 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51014 10 6452 1 2025-09-16 15:08:43.000 00:00:10.367 TCP 23.104.0.1:41022 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:08:49.879 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45198 10 6452 1 2025-09-16 15:09:02.539 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 15:09:02.795 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 15:09:43.406 00:00:10.337 TCP 23.104.0.1:45658 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:09:50.102 00:00:10.756 TCP 1.101.0.1:3000 -> 22.102.0.1:49152 10 6452 1 2025-09-16 15:10:43.784 00:00:10.365 TCP 23.104.0.1:57258 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:10:50.908 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59816 10 6452 1 2025-09-16 15:11:44.187 00:00:10.365 TCP 23.104.0.1:45924 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:11:51.120 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45858 10 6452 1 2025-09-16 15:08:29.234 00:05:01.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 15:12:44.594 00:00:10.369 TCP 23.104.0.1:60084 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:12:51.296 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37906 10 6452 1 2025-09-16 15:09:29.236 00:05:01.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 15:13:44.999 00:00:10.360 TCP 23.104.0.1:38430 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:13:51.519 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35602 10 6452 1 2025-09-16 15:14:02.779 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 15:14:02.691 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 15:14:45.395 00:00:10.321 TCP 23.104.0.1:45690 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:14:51.733 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52090 10 6452 1 2025-09-16 15:15:45.757 00:00:10.392 TCP 23.104.0.1:48832 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:15:51.941 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:46470 10 6452 1 2025-09-16 15:16:46.197 00:00:10.369 TCP 23.104.0.1:34522 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:16:52.135 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35026 10 6452 1 2025-09-16 15:17:46.600 00:00:10.325 TCP 23.104.0.1:48804 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:17:52.305 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40660 10 6452 1 2025-09-16 15:14:29.235 00:05:01.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 15:18:46.963 00:00:10.380 TCP 23.104.0.1:36416 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:18:52.516 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49448 10 6452 1 2025-09-16 15:19:02.835 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 15:19:02.902 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 15:15:29.239 00:05:01.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 15:19:47.380 00:00:10.363 TCP 23.104.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:19:52.747 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40408 10 6452 1 2025-09-16 15:20:47.779 00:00:10.372 TCP 23.104.0.1:56758 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:20:52.982 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45268 10 6452 1 2025-09-16 15:21:48.189 00:00:10.715 TCP 23.104.0.1:46442 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:21:53.214 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-09-16 15:22:48.938 00:00:10.384 TCP 23.104.0.1:45090 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:22:53.497 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32942 10 6452 1 2025-09-16 15:23:49.354 00:00:10.367 TCP 23.104.0.1:34458 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:24:02.978 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 15:23:53.706 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 10 6452 1 2025-09-16 15:24:02.983 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 15:20:29.236 00:05:01.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 15:24:49.759 00:00:10.374 TCP 23.104.0.1:33740 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:24:53.878 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60410 10 6452 1 2025-09-16 15:21:29.239 00:05:01.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 15:25:50.170 00:00:10.367 TCP 23.104.0.1:49022 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:25:54.074 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52420 10 6452 1 2025-09-16 15:26:50.571 00:00:10.363 TCP 23.104.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:26:54.286 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51998 10 6452 1 2025-09-16 15:27:50.971 00:00:10.372 TCP 23.104.0.1:46968 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:27:54.495 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60400 10 6452 1 2025-09-16 15:28:51.380 00:00:10.364 TCP 23.104.0.1:49832 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:29:03.196 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 15:28:54.712 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34966 10 6452 1 2025-09-16 15:29:03.184 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 15:29:51.788 00:00:10.376 TCP 23.104.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:29:54.920 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51772 10 6452 1 2025-09-16 15:26:29.241 00:05:01.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 15:30:52.200 00:00:10.365 TCP 23.104.0.1:51212 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:30:55.132 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39300 10 6452 1 2025-09-16 15:27:29.244 00:05:01.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 15:31:52.605 00:00:10.366 TCP 23.104.0.1:60780 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:31:55.350 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37052 10 6452 1 2025-09-16 15:32:53.006 00:00:10.364 TCP 23.104.0.1:60228 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:32:55.565 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43918 10 6452 1 2025-09-16 15:33:53.403 00:00:10.367 TCP 23.104.0.1:39642 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:34:03.234 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 15:33:55.778 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48436 10 6452 1 2025-09-16 15:34:03.053 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 15:34:55.946 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 10 6452 1 2025-09-16 15:34:53.808 00:00:10.373 TCP 23.104.0.1:37650 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:35:56.183 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42410 10 6452 1 2025-09-16 15:35:54.222 00:00:10.765 TCP 23.104.0.1:56680 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:32:29.243 00:05:01.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 15:36:55.027 00:00:10.338 TCP 23.104.0.1:37090 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:36:56.397 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:46054 10 6452 1 2025-09-16 15:33:29.245 00:05:01.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 15:37:55.405 00:00:10.368 TCP 23.104.0.1:39322 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:37:56.566 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:39880 10 6452 1 2025-09-16 15:38:55.814 00:00:10.946 TCP 23.104.0.1:35078 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:39:03.060 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 15:39:03.266 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 15:38:56.772 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:58458 10 6452 1 2025-09-16 15:39:56.965 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50194 10 6452 1 2025-09-16 15:39:56.812 00:00:10.366 TCP 23.104.0.1:48234 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:40:57.217 00:00:10.372 TCP 23.104.0.1:41192 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:40:57.186 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 10 6452 1 2025-09-16 15:41:57.405 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:58314 11 6504 1 2025-09-16 15:41:57.628 00:00:10.359 TCP 23.104.0.1:45028 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:38:29.243 00:05:01.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 15:42:58.026 00:00:10.366 TCP 23.104.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:42:57.666 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53958 10 6452 1 2025-09-16 15:39:29.248 00:05:01.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 15:44:03.314 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 15:44:03.155 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 15:43:57.878 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52626 10 6452 1 2025-09-16 15:43:58.426 00:00:10.367 TCP 23.104.0.1:39130 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:44:58.832 00:00:10.345 TCP 23.104.0.1:51716 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:44:58.092 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41510 10 6452 1 2025-09-16 15:45:58.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-09-16 15:45:59.221 00:00:10.321 TCP 23.104.0.1:48948 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:46:59.584 00:00:10.368 TCP 23.104.0.1:34608 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:46:58.516 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34458 10 6452 1 2025-09-16 15:47:58.734 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36628 10 6452 1 2025-09-16 15:47:59.987 00:00:10.374 TCP 23.104.0.1:51564 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:44:29.250 00:05:01.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 15:49:03.107 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 15:49:03.581 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 15:49:00.401 00:00:10.366 TCP 23.104.0.1:41282 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:48:58.912 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48800 10 6452 1 2025-09-16 15:45:29.252 00:05:01.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 15:50:00.798 00:00:10.339 TCP 23.104.0.1:43144 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:49:59.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44958 10 6452 1 2025-09-16 15:50:59.336 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54420 10 6452 1 2025-09-16 15:51:01.171 00:00:10.359 TCP 23.104.0.1:33248 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:51:59.555 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35806 10 6452 1 2025-09-16 15:52:01.571 00:00:10.322 TCP 23.104.0.1:60360 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:52:59.766 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:37994 10 6452 1 2025-09-16 15:53:01.934 00:00:10.361 TCP 23.104.0.1:49794 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:54:03.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 15:54:03.758 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 15:53:59.947 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:55534 10 6452 1 2025-09-16 15:54:02.331 00:00:10.365 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:50:29.250 00:05:01.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 15:55:00.135 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44046 10 6452 1 2025-09-16 15:55:02.733 00:00:10.327 TCP 23.104.0.1:54402 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:51:29.254 00:05:01.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 15:56:00.348 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46730 10 6452 1 2025-09-16 15:56:03.104 00:00:10.392 TCP 23.104.0.1:34958 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:57:00.559 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:58426 10 6452 1 2025-09-16 15:57:03.529 00:00:10.363 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-09-16 15:58:00.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50766 10 6452 1 2025-09-16 15:58:03.928 00:00:10.386 TCP 23.104.0.1:38192 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1072, avg pps: 0, avg bpp: 318 Time window: 2025-09-16 14:56:29 - 2025-09-16 15:58:14 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0019s User: 0.0029s Wall: 0.0024s flows/second: 67020.1 Runtime: 0.0025s