Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 16:59:04.771 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 16:59:04.702 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 16:59:17.206 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51460 10 6452 1 2025-09-16 16:59:29.616 00:00:10.371 TCP 23.104.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:00:17.418 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50590 10 6452 1 2025-09-16 16:56:29.268 00:05:01.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 17:00:30.032 00:00:10.369 TCP 23.104.0.1:37460 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:01:17.631 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45012 10 6452 1 2025-09-16 16:57:29.272 00:05:01.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 17:01:30.447 00:00:10.361 TCP 23.104.0.1:46390 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:02:17.803 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53572 10 6452 1 2025-09-16 17:02:30.852 00:00:10.384 TCP 23.104.0.1:60972 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:03:18.024 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48124 10 6452 1 2025-09-16 17:03:31.282 00:00:10.360 TCP 23.104.0.1:45338 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:04:04.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 17:04:05.168 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 17:04:18.235 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53518 10 6452 1 2025-09-16 17:04:31.684 00:00:10.365 TCP 23.104.0.1:38934 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:05:18.448 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40804 10 6452 1 2025-09-16 17:05:32.104 00:00:10.366 TCP 23.104.0.1:55254 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:06:18.621 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46116 10 6452 1 2025-09-16 17:02:29.269 00:05:01.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 17:06:32.512 00:00:10.371 TCP 23.104.0.1:42758 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:03:29.272 00:05:01.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 17:07:18.845 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47298 10 6452 1 2025-09-16 17:07:32.921 00:00:10.386 TCP 23.104.0.1:43260 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:08:19.084 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34302 10 6452 1 2025-09-16 17:08:33.344 00:00:10.365 TCP 23.104.0.1:54908 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:09:05.185 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 17:09:04.811 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 17:09:19.262 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58464 10 6452 1 2025-09-16 17:09:33.759 00:00:10.604 TCP 23.104.0.1:50620 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:10:19.429 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40850 10 6452 1 2025-09-16 17:10:34.398 00:00:10.325 TCP 23.104.0.1:35450 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:11:19.600 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49648 10 6452 1 2025-09-16 17:11:34.761 00:00:10.338 TCP 23.104.0.1:45332 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:12:19.771 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54774 10 6452 1 2025-09-16 17:08:29.272 00:05:01.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 17:12:35.134 00:00:10.334 TCP 23.104.0.1:47844 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:09:29.274 00:05:01.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 17:13:19.981 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:37230 10 6452 1 2025-09-16 17:13:35.502 00:00:10.326 TCP 23.104.0.1:43410 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:14:05.206 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 17:14:05.171 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 17:14:20.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45242 10 6452 1 2025-09-16 17:14:35.862 00:00:10.370 TCP 23.104.0.1:36532 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:15:20.393 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46644 10 6452 1 2025-09-16 17:15:36.275 00:00:10.368 TCP 23.104.0.1:57036 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:16:20.605 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49434 10 6452 1 2025-09-16 17:16:36.680 00:00:10.368 TCP 23.104.0.1:45884 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:17:20.812 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39950 10 6452 1 2025-09-16 17:17:37.100 00:00:10.371 TCP 23.104.0.1:49868 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:18:21.038 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59606 10 6452 1 2025-09-16 17:14:29.272 00:05:01.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 17:18:37.506 00:00:10.368 TCP 23.104.0.1:50542 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:19:04.890 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 17:19:05.288 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 17:15:29.275 00:05:01.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 17:19:21.257 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45556 10 6452 1 2025-09-16 17:19:37.927 00:00:10.348 TCP 23.104.0.1:52922 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:20:21.431 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49790 10 6452 1 2025-09-16 17:20:38.308 00:00:10.367 TCP 23.104.0.1:46266 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:21:21.604 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35670 10 6452 1 2025-09-16 17:21:38.712 00:00:10.325 TCP 23.104.0.1:59794 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:22:21.774 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54524 10 6452 1 2025-09-16 17:22:39.101 00:00:10.315 TCP 23.104.0.1:47100 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:23:21.988 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41174 10 6452 1 2025-09-16 17:23:39.456 00:00:10.382 TCP 23.104.0.1:55964 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:24:05.440 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 17:24:05.350 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 17:20:29.273 00:05:01.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 17:24:22.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49150 10 6452 1 2025-09-16 17:24:39.859 00:00:10.447 TCP 23.104.0.1:43640 -> 1.101.0.1:3000 15 1926 1 2025-09-16 17:21:29.276 00:05:01.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 17:25:22.426 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:50382 12 10367 1 2025-09-16 17:25:40.338 00:00:10.364 TCP 23.104.0.1:45096 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:26:22.661 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48938 10 6452 1 2025-09-16 17:26:40.741 00:00:10.365 TCP 23.104.0.1:59100 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:27:22.835 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35414 10 6452 1 2025-09-16 17:27:41.141 00:00:10.363 TCP 23.104.0.1:55316 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:28:23.079 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55798 10 6452 1 2025-09-16 17:28:41.541 00:00:10.362 TCP 23.104.0.1:40568 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:29:05.595 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 17:29:05.387 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 17:29:23.297 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39506 10 6452 1 2025-09-16 17:29:41.943 00:00:10.337 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:26:29.274 00:05:01.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 17:30:23.509 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43552 10 6452 1 2025-09-16 17:30:42.324 00:00:10.343 TCP 23.104.0.1:57126 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:27:29.277 00:05:01.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 17:31:23.728 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-09-16 17:31:42.713 00:00:10.361 TCP 23.104.0.1:43252 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:32:23.905 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58624 10 6452 1 2025-09-16 17:32:43.110 00:00:10.367 TCP 23.104.0.1:50074 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:33:24.133 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34316 10 6452 1 2025-09-16 17:33:43.515 00:00:10.361 TCP 23.104.0.1:56802 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:34:05.589 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 17:34:05.656 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 17:34:24.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54466 10 6452 1 2025-09-16 17:34:43.915 00:00:10.691 TCP 23.104.0.1:48744 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:35:24.565 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43274 10 6452 1 2025-09-16 17:35:44.652 00:00:18.637 TCP 23.104.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:32:29.276 00:05:01.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 17:36:24.787 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:50228 10 6452 1 2025-09-16 17:36:53.355 00:00:10.359 TCP 23.104.0.1:35392 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:33:29.278 00:05:01.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 17:37:25.002 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45486 10 6452 1 2025-09-16 17:37:53.754 00:00:10.375 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:38:25.182 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42094 10 6452 1 2025-09-16 17:39:05.805 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 17:39:05.612 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 17:38:54.164 00:00:10.364 TCP 23.104.0.1:37244 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:39:25.397 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52710 10 6452 1 2025-09-16 17:39:54.579 00:00:10.362 TCP 23.104.0.1:57140 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:40:25.609 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59246 10 6452 1 2025-09-16 17:40:54.987 00:00:10.329 TCP 23.104.0.1:40918 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:41:25.815 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-09-16 17:41:55.355 00:00:10.323 TCP 23.104.0.1:49800 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:38:29.277 00:05:01.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 17:42:25.988 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:60464 12 6556 1 2025-09-16 17:42:55.716 00:00:10.376 TCP 23.104.0.1:53082 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:39:29.281 00:05:01.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 17:43:26.224 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53314 10 6452 1 2025-09-16 17:44:05.754 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 17:44:06.032 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 17:43:56.132 00:00:10.321 TCP 23.104.0.1:47502 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:44:26.430 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6452 1 2025-09-16 17:44:56.492 00:00:10.361 TCP 23.104.0.1:47948 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:45:26.643 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36870 10 6452 1 2025-09-16 17:45:56.891 00:00:10.552 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:46:26.851 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56288 10 6452 1 2025-09-16 17:46:57.482 00:00:10.361 TCP 23.104.0.1:51894 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:47:27.087 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43732 10 6452 1 2025-09-16 17:47:57.881 00:00:10.339 TCP 23.104.0.1:45458 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:44:29.278 00:05:01.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 17:48:27.301 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36430 10 6452 1 2025-09-16 17:49:05.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 17:49:05.721 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 17:48:58.258 00:00:10.324 TCP 23.104.0.1:44314 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:45:29.281 00:05:01.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 17:49:27.516 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40452 10 6452 1 2025-09-16 17:49:58.619 00:00:10.442 TCP 23.104.0.1:51958 -> 1.101.0.1:3000 15 1926 1 2025-09-16 17:50:27.732 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35142 12 10365 1 2025-09-16 17:50:59.107 00:00:10.361 TCP 23.104.0.1:49894 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:51:27.977 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52586 10 6452 1 2025-09-16 17:51:59.512 00:00:10.360 TCP 23.104.0.1:35560 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:52:28.211 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51408 10 6452 1 2025-09-16 17:52:59.907 00:00:10.364 TCP 23.104.0.1:37334 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:53:28.391 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55924 10 6452 1 2025-09-16 17:54:05.947 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 17:54:06.245 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 17:54:00.308 00:00:10.340 TCP 23.104.0.1:52714 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:50:29.280 00:05:01.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 17:54:28.606 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57986 10 6452 1 2025-09-16 17:55:00.693 00:00:10.368 TCP 23.104.0.1:55638 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:51:29.282 00:05:01.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 17:55:28.826 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55040 10 6452 1 2025-09-16 17:56:01.102 00:00:10.369 TCP 23.104.0.1:51620 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:56:28.992 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50454 10 6452 1 2025-09-16 17:57:01.508 00:00:10.371 TCP 23.104.0.1:49698 -> 1.101.0.1:3000 11 1507 1 2025-09-16 17:57:29.210 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46876 10 6452 1 2025-09-16 17:58:01.913 00:00:11.391 TCP 23.104.0.1:54550 -> 1.101.0.1:3000 13 1611 1 2025-09-16 17:58:29.437 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:44044 10 6452 1 Summary: total flows: 163, total bytes: 505715, total packets: 1577, avg bps: 1084, avg pps: 0, avg bpp: 320 Time window: 2025-09-16 16:56:29 - 2025-09-16 17:58:39 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0021s Wall: 0.0021s flows/second: 76200.6 Runtime: 0.0022s