Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 00:59:14.314 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 00:59:14.646 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 00:59:14.384 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57566 10 6452 1 2025-09-17 00:59:20.535 00:00:10.359 TCP 23.104.0.1:48592 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:00:14.598 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48686 10 6452 1 2025-09-17 00:56:29.449 00:05:01.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 01:00:20.931 00:00:10.384 TCP 23.104.0.1:38994 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:01:14.818 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59178 10 6452 1 2025-09-17 01:01:21.355 00:00:10.364 TCP 23.104.0.1:37904 -> 1.101.0.1:3000 11 1507 1 2025-09-17 00:57:29.452 00:05:01.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 01:02:15.044 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45456 10 6452 1 2025-09-17 01:02:21.754 00:00:10.353 TCP 23.104.0.1:51536 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:03:15.267 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47088 10 6452 1 2025-09-17 01:03:22.141 00:00:10.356 TCP 23.104.0.1:38414 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:04:14.691 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 01:04:14.584 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 01:04:15.480 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40606 10 6452 1 2025-09-17 01:04:22.536 00:00:10.360 TCP 23.104.0.1:33052 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:05:15.655 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57710 10 6452 1 2025-09-17 01:05:22.936 00:00:10.379 TCP 23.104.0.1:41228 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:06:15.863 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47234 10 6452 1 2025-09-17 01:02:29.450 00:05:01.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 01:06:23.352 00:00:10.364 TCP 23.104.0.1:60116 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:07:16.096 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32770 10 6452 1 2025-09-17 01:03:29.454 00:05:01.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 01:07:23.751 00:00:10.327 TCP 23.104.0.1:45232 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:08:16.280 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43756 10 6452 1 2025-09-17 01:08:24.111 00:00:10.323 TCP 23.104.0.1:41254 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:09:14.501 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 01:09:14.895 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 01:09:16.463 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33314 10 6452 1 2025-09-17 01:09:24.470 00:00:10.369 TCP 23.104.0.1:48132 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:10:16.674 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59804 10 6452 1 2025-09-17 01:10:24.874 00:00:10.369 TCP 23.104.0.1:59100 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:11:16.889 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41944 10 6452 1 2025-09-17 01:11:25.278 00:00:10.361 TCP 23.104.0.1:47938 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:12:17.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37906 10 6452 1 2025-09-17 01:08:29.453 00:05:01.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 01:12:25.679 00:00:10.367 TCP 23.104.0.1:42940 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:09:29.454 00:05:01.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 01:13:17.297 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:33514 10 6452 1 2025-09-17 01:13:26.104 00:00:10.374 TCP 23.104.0.1:35650 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:14:14.447 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 01:14:14.830 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 01:14:17.508 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49270 10 6452 1 2025-09-17 01:14:26.500 00:00:10.366 TCP 23.104.0.1:44994 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:15:17.737 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49962 10 6452 1 2025-09-17 01:15:26.903 00:00:10.366 TCP 23.104.0.1:55732 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:16:17.952 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59258 10 6452 1 2025-09-17 01:16:27.313 00:00:10.367 TCP 23.104.0.1:48724 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:17:18.184 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44798 10 6452 1 2025-09-17 01:17:27.718 00:00:10.382 TCP 23.104.0.1:53232 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:14:29.453 00:05:01.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 01:18:18.405 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36876 10 6452 1 2025-09-17 01:18:28.138 00:00:10.381 TCP 23.104.0.1:46046 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:19:14.899 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 01:19:14.842 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 01:19:18.621 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47386 10 6452 1 2025-09-17 01:15:29.456 00:05:01.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 01:19:28.561 00:00:10.362 TCP 23.104.0.1:47460 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:20:18.801 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50454 10 6452 1 2025-09-17 01:20:28.958 00:00:10.374 TCP 23.104.0.1:53848 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:21:18.969 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55952 10 6452 1 2025-09-17 01:21:29.371 00:00:10.364 TCP 23.104.0.1:36400 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:22:19.204 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54640 10 6452 1 2025-09-17 01:22:29.775 00:00:10.421 TCP 23.104.0.1:44418 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:23:19.416 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60774 11 6504 1 2025-09-17 01:23:30.241 00:00:10.363 TCP 23.104.0.1:48662 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:24:14.950 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 01:24:14.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 01:24:19.637 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35096 10 6452 1 2025-09-17 01:20:29.454 00:05:01.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 01:24:30.644 00:00:10.369 TCP 23.104.0.1:50974 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:21:29.456 00:05:01.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 01:25:19.848 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33698 10 6452 1 2025-09-17 01:25:31.051 00:00:10.365 TCP 23.104.0.1:57666 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:26:20.079 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40028 10 6452 1 2025-09-17 01:26:31.454 00:00:10.324 TCP 23.104.0.1:37350 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:27:20.250 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51036 10 6452 1 2025-09-17 01:27:31.812 00:00:10.372 TCP 23.104.0.1:53096 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:28:20.477 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48346 10 6452 1 2025-09-17 01:28:32.222 00:00:10.365 TCP 23.104.0.1:56450 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:29:15.292 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 01:29:15.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 01:29:20.689 00:00:10.691 TCP 1.101.0.1:3000 -> 22.102.0.1:47738 10 6452 1 2025-09-17 01:29:32.629 00:00:10.362 TCP 23.104.0.1:38174 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:30:21.421 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39816 10 6452 1 2025-09-17 01:26:29.459 00:05:01.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 01:30:33.037 00:00:10.372 TCP 23.104.0.1:51302 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:27:29.461 00:05:01.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 01:31:21.639 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:37760 10 6452 1 2025-09-17 01:31:33.443 00:00:10.364 TCP 23.104.0.1:37130 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:32:21.846 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43112 10 6452 1 2025-09-17 01:32:33.846 00:00:10.832 TCP 23.104.0.1:43566 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:33:22.079 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60508 10 6452 1 2025-09-17 01:33:34.712 00:00:10.334 TCP 23.104.0.1:46368 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:34:15.271 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 01:34:15.058 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 01:34:22.291 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52416 10 6452 1 2025-09-17 01:34:35.106 00:00:10.364 TCP 23.104.0.1:33932 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:35:22.510 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43360 10 6452 1 2025-09-17 01:35:35.513 00:00:10.364 TCP 23.104.0.1:58332 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:32:29.460 00:05:01.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 01:36:22.725 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-09-17 01:36:35.916 00:00:10.382 TCP 23.104.0.1:58142 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:33:29.463 00:05:01.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 01:37:22.945 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:57056 10 6452 1 2025-09-17 01:37:36.330 00:00:10.368 TCP 23.104.0.1:32782 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:38:23.134 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58916 10 6452 1 2025-09-17 01:38:36.736 00:00:10.326 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:39:15.416 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 01:39:15.355 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 01:39:23.355 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57360 10 6452 1 2025-09-17 01:39:37.103 00:00:10.366 TCP 23.104.0.1:47076 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:40:23.524 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60022 10 6452 1 2025-09-17 01:40:37.507 00:00:10.365 TCP 23.104.0.1:41940 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:41:23.746 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45370 10 6452 1 2025-09-17 01:41:37.913 00:00:10.368 TCP 23.104.0.1:50626 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:38:29.462 00:05:01.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 01:42:23.918 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43054 10 6452 1 2025-09-17 01:42:38.318 00:00:10.368 TCP 23.104.0.1:52068 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:39:29.465 00:05:01.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 01:43:24.128 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55612 10 6452 1 2025-09-17 01:43:38.721 00:00:10.375 TCP 23.104.0.1:42478 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:44:15.330 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 01:44:15.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 01:44:24.344 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35952 10 6452 1 2025-09-17 01:44:39.136 00:00:10.366 TCP 23.104.0.1:37132 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:45:24.564 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50114 10 6452 1 2025-09-17 01:45:39.546 00:00:10.368 TCP 23.104.0.1:60156 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:46:24.782 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34628 10 6452 1 2025-09-17 01:46:39.957 00:00:10.363 TCP 23.104.0.1:46902 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:47:24.955 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44958 10 6452 1 2025-09-17 01:47:40.359 00:00:10.374 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:44:29.465 00:05:01.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 01:48:25.188 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47062 10 6452 1 2025-09-17 01:48:40.771 00:00:10.367 TCP 23.104.0.1:51820 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:49:15.495 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 01:49:15.536 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 01:45:29.468 00:05:01.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 01:49:25.398 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54694 10 6452 1 2025-09-17 01:49:41.188 00:00:10.429 TCP 23.104.0.1:40332 -> 1.101.0.1:3000 15 1926 1 2025-09-17 01:50:25.613 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:50556 12 10365 1 2025-09-17 01:50:41.658 00:00:10.364 TCP 23.104.0.1:48308 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:51:25.856 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49426 10 6452 1 2025-09-17 01:51:42.083 00:00:10.365 TCP 23.104.0.1:49222 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:52:26.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35626 10 6452 1 2025-09-17 01:52:42.496 00:00:10.369 TCP 23.104.0.1:59374 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:53:26.298 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60600 10 6452 1 2025-09-17 01:53:42.899 00:00:10.373 TCP 23.104.0.1:43120 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:54:15.644 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 01:54:15.488 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 01:50:29.466 00:05:01.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 01:54:26.504 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:48896 10 6452 1 2025-09-17 01:54:43.315 00:00:10.326 TCP 23.104.0.1:43146 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:51:29.469 00:05:01.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 01:55:26.707 00:00:10.680 TCP 1.101.0.1:3000 -> 22.102.0.1:60962 10 6452 1 2025-09-17 01:55:43.691 00:00:10.362 TCP 23.104.0.1:40530 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:56:27.430 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49476 10 6452 1 2025-09-17 01:56:44.113 00:00:10.367 TCP 23.104.0.1:46954 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:57:27.648 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51812 10 6452 1 2025-09-17 01:57:44.515 00:00:10.364 TCP 23.104.0.1:37326 -> 1.101.0.1:3000 11 1507 1 2025-09-17 01:58:27.862 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55722 10 6452 1 Summary: total flows: 163, total bytes: 501225, total packets: 1568, avg bps: 1075, avg pps: 0, avg bpp: 319 Time window: 2025-09-17 00:56:29 - 2025-09-17 01:58:38 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0015s Wall: 0.0030s flows/second: 53478.7 Runtime: 0.0031s