Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-26 13:58:49.970 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 13:58:45.215 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52700 10 6452 1 2025-09-26 13:59:26.179 00:00:10.369 TCP 23.104.0.1:56878 -> 1.101.0.1:3000 11 1507 1 2025-09-26 13:59:45.427 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52478 10 6452 1 2025-09-26 14:00:26.587 00:00:10.365 TCP 23.104.0.1:39446 -> 1.101.0.1:3000 11 1507 1 2025-09-26 13:56:33.864 00:05:01.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 14:00:45.604 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38530 10 6452 1 2025-09-26 13:57:33.868 00:05:01.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 14:01:26.991 00:00:10.371 TCP 23.104.0.1:44902 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:01:45.820 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36620 10 6452 1 2025-09-26 14:02:27.400 00:00:10.323 TCP 23.104.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:02:46.047 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 10 6452 1 2025-09-26 14:03:27.760 00:00:10.389 TCP 23.104.0.1:36486 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:03:50.120 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 14:03:50.069 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:03:46.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44314 10 6452 1 2025-09-26 14:04:28.185 00:00:10.371 TCP 23.104.0.1:55390 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:04:46.434 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50254 10 6452 1 2025-09-26 14:05:28.593 00:00:10.372 TCP 23.104.0.1:60986 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:05:46.645 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41148 10 6452 1 2025-09-26 14:02:33.865 00:05:01.574 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 14:06:29.005 00:00:10.362 TCP 23.104.0.1:36416 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:06:46.861 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-09-26 14:03:33.868 00:05:01.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 14:07:29.403 00:00:10.363 TCP 23.104.0.1:35712 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:07:47.085 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35416 10 6452 1 2025-09-26 14:08:29.806 00:00:10.367 TCP 23.104.0.1:36368 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:08:50.332 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:08:50.227 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 14:08:47.296 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:39820 10 6452 1 2025-09-26 14:09:30.215 00:00:10.366 TCP 23.104.0.1:59872 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:09:47.497 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:49628 10 6452 1 2025-09-26 14:10:30.616 00:00:10.362 TCP 23.104.0.1:44276 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:10:47.730 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60452 10 6452 1 2025-09-26 14:11:31.021 00:00:10.369 TCP 23.104.0.1:37582 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:11:47.940 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37404 10 6452 1 2025-09-26 14:08:33.869 00:05:01.572 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 14:12:31.435 00:00:10.368 TCP 23.104.0.1:38142 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:12:48.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45478 10 6452 1 2025-09-26 14:09:33.871 00:05:01.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 14:13:31.841 00:00:10.400 TCP 23.104.0.1:49142 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:13:50.211 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:13:50.429 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 14:13:48.395 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58718 10 6452 1 2025-09-26 14:14:32.276 00:00:10.365 TCP 23.104.0.1:48912 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:14:48.611 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41962 10 6452 1 2025-09-26 14:15:32.680 00:00:10.363 TCP 23.104.0.1:59740 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:15:48.826 00:00:10.330 TCP 1.101.0.1:3000 -> 22.102.0.1:51662 10 6452 1 2025-09-26 14:16:33.098 00:00:10.364 TCP 23.104.0.1:53082 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:16:49.196 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56922 10 6452 1 2025-09-26 14:17:33.507 00:00:10.324 TCP 23.104.0.1:34800 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:17:49.403 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36166 10 6452 1 2025-09-26 14:14:33.869 00:05:01.572 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 14:18:33.872 00:00:10.362 TCP 23.104.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:18:50.356 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 14:18:50.521 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:18:49.620 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55912 10 6452 1 2025-09-26 14:15:33.871 00:05:01.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 14:19:34.275 00:00:10.366 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:19:49.832 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38210 10 6452 1 2025-09-26 14:20:34.682 00:00:10.319 TCP 23.104.0.1:47298 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:20:50.065 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:36732 10 6452 1 2025-09-26 14:21:35.045 00:00:10.446 TCP 23.104.0.1:37366 -> 1.101.0.1:3000 15 1926 1 2025-09-26 14:21:50.228 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:36266 12 10365 1 2025-09-26 14:22:35.536 00:00:10.368 TCP 23.104.0.1:40938 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:22:50.468 00:00:10.802 TCP 1.101.0.1:3000 -> 22.102.0.1:54256 10 6452 1 2025-09-26 14:23:35.944 00:00:10.370 TCP 23.104.0.1:57180 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:23:50.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:23:50.555 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 14:23:51.305 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57716 10 6452 1 2025-09-26 14:20:33.871 00:05:01.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 14:24:36.352 00:00:10.364 TCP 23.104.0.1:41756 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:24:51.525 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32894 10 6452 1 2025-09-26 14:21:33.875 00:05:01.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 14:25:36.754 00:00:10.378 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:25:51.735 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36648 10 6452 1 2025-09-26 14:26:37.166 00:00:10.326 TCP 23.104.0.1:40982 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:26:51.924 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45804 10 6452 1 2025-09-26 14:27:37.526 00:00:10.374 TCP 23.104.0.1:52926 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:27:52.129 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53142 10 6452 1 2025-09-26 14:28:50.694 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 14:28:50.533 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:28:37.941 00:00:10.372 TCP 23.104.0.1:58856 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:28:52.336 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44676 10 6452 1 2025-09-26 14:29:38.348 00:00:10.318 TCP 23.104.0.1:58892 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:29:52.543 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-09-26 14:26:33.876 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 14:30:38.704 00:00:10.365 TCP 23.104.0.1:36564 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:30:52.754 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60046 10 6452 1 2025-09-26 14:27:33.880 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 14:31:39.109 00:00:10.361 TCP 23.104.0.1:35688 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:31:52.965 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:43234 11 6504 1 2025-09-26 14:32:39.510 00:00:10.374 TCP 23.104.0.1:35750 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:32:53.234 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36516 10 6452 1 2025-09-26 14:33:50.437 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:33:39.919 00:00:10.386 TCP 23.104.0.1:44888 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:33:50.600 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 14:33:53.405 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33094 10 6452 1 2025-09-26 14:34:40.344 00:00:10.372 TCP 23.104.0.1:35918 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:34:53.615 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39240 10 6452 1 2025-09-26 14:35:40.749 00:00:10.381 TCP 23.104.0.1:45624 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:35:53.830 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55848 10 6452 1 2025-09-26 14:32:33.878 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 14:36:41.171 00:00:10.389 TCP 23.104.0.1:34032 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:36:54.068 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50114 10 6452 1 2025-09-26 14:33:33.880 00:05:01.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 14:37:41.584 00:00:10.383 TCP 23.104.0.1:49566 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:37:54.248 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:52272 10 6452 1 2025-09-26 14:38:50.619 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 14:38:50.777 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:38:42.006 00:00:10.365 TCP 23.104.0.1:34094 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:38:54.413 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54056 10 6452 1 2025-09-26 14:39:42.403 00:00:10.363 TCP 23.104.0.1:35778 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:39:54.582 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53530 10 6452 1 2025-09-26 14:40:42.804 00:00:10.372 TCP 23.104.0.1:44314 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:40:54.799 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42884 10 6452 1 2025-09-26 14:41:43.209 00:00:10.364 TCP 23.104.0.1:49168 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:41:55.029 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-09-26 14:38:33.878 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 14:42:43.610 00:00:10.374 TCP 23.104.0.1:48444 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:42:55.247 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46032 10 6452 1 2025-09-26 14:39:33.881 00:05:01.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 14:43:50.820 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 14:43:50.981 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:43:44.025 00:00:10.320 TCP 23.104.0.1:46696 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:43:55.414 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-09-26 14:44:44.389 00:00:10.357 TCP 23.104.0.1:51460 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:44:55.626 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:39784 10 6452 1 2025-09-26 14:45:44.783 00:00:10.362 TCP 23.104.0.1:54024 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:45:55.793 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60518 10 6452 1 2025-09-26 14:46:45.186 00:00:10.362 TCP 23.104.0.1:47126 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:46:55.973 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54878 10 6452 1 2025-09-26 14:47:45.584 00:00:10.367 TCP 23.104.0.1:41354 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:47:56.149 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37530 10 6452 1 2025-09-26 14:44:33.879 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 14:48:50.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 14:48:51.133 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:48:45.991 00:00:10.369 TCP 23.104.0.1:50068 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:48:56.358 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37212 10 6452 1 2025-09-26 14:45:33.882 00:05:01.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 14:49:46.397 00:00:10.364 TCP 23.104.0.1:46868 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:49:56.584 00:00:11.156 TCP 1.101.0.1:3000 -> 22.102.0.1:46984 10 6452 1 2025-09-26 14:50:46.804 00:00:10.379 TCP 23.104.0.1:41480 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:50:57.778 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35446 10 6452 1 2025-09-26 14:51:47.224 00:00:10.326 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:51:57.993 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37766 10 6452 1 2025-09-26 14:52:47.584 00:00:10.322 TCP 23.104.0.1:52734 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:52:58.215 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45770 10 6452 1 2025-09-26 14:53:51.060 00:00:00.052 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 14:53:50.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:53:47.948 00:00:10.371 TCP 23.104.0.1:36274 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:53:58.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40838 10 6452 1 2025-09-26 14:50:33.882 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 14:54:48.359 00:00:10.359 TCP 23.104.0.1:41462 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:54:58.653 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54790 10 6452 1 2025-09-26 14:51:33.884 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 14:55:48.757 00:00:10.383 TCP 23.104.0.1:52550 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:55:58.870 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38812 10 6452 1 2025-09-26 14:56:49.179 00:00:10.364 TCP 23.104.0.1:45786 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:56:59.065 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44454 10 6452 1 2025-09-26 14:57:49.581 00:00:10.326 TCP 23.104.0.1:44208 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:57:59.279 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36180 10 6452 1 2025-09-26 14:58:51.177 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 14:58:50.988 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 164, total bytes: 501477, total packets: 1571, avg bps: 1073, avg pps: 0, avg bpp: 319 Time window: 2025-09-26 13:56:33 - 2025-09-26 14:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0020s User: 0.0029s Wall: 0.0031s flows/second: 52803.1 Runtime: 0.0031s