Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-26 17:58:54.848 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 17:58:54.668 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 17:58:39.598 00:00:15.945 TCP 1.101.0.1:3000 -> 22.102.0.1:55460 10 6452 1 2025-09-26 17:59:20.588 00:00:10.319 TCP 23.104.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-09-26 17:59:45.587 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41288 10 6452 1 2025-09-26 18:00:20.953 00:00:10.380 TCP 23.104.0.1:33466 -> 1.101.0.1:3000 11 1507 1 2025-09-26 17:56:33.956 00:05:01.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 18:00:45.806 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38424 10 6452 1 2025-09-26 18:01:21.366 00:00:10.371 TCP 23.104.0.1:57550 -> 1.101.0.1:3000 11 1507 1 2025-09-26 17:57:33.959 00:05:01.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 18:01:46.037 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:51034 10 6452 1 2025-09-26 18:02:21.778 00:00:10.338 TCP 23.104.0.1:59734 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:02:46.312 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42020 10 6452 1 2025-09-26 18:03:22.152 00:00:10.321 TCP 23.104.0.1:40048 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:03:54.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 18:03:46.527 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34796 10 6452 1 2025-09-26 18:03:55.238 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 18:04:22.521 00:00:10.327 TCP 23.104.0.1:41172 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:04:46.736 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33618 10 6452 1 2025-09-26 18:05:22.883 00:00:10.376 TCP 23.104.0.1:41972 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:05:46.956 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39558 10 6452 1 2025-09-26 18:06:23.296 00:00:10.323 TCP 23.104.0.1:34484 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:02:33.957 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 18:06:47.194 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33682 10 6452 1 2025-09-26 18:03:33.960 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 18:07:23.657 00:00:10.369 TCP 23.104.0.1:42682 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:07:47.413 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40176 10 6452 1 2025-09-26 18:08:24.079 00:00:10.366 TCP 23.104.0.1:37572 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:08:54.718 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 18:08:54.956 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 18:08:47.626 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38952 10 6452 1 2025-09-26 18:09:24.479 00:00:10.360 TCP 23.104.0.1:35820 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:09:47.832 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49580 10 6452 1 2025-09-26 18:10:24.877 00:00:10.362 TCP 23.104.0.1:54536 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:10:48.069 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55844 10 6452 1 2025-09-26 18:11:25.281 00:00:10.614 TCP 23.104.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:11:48.279 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 6452 1 2025-09-26 18:12:25.933 00:00:10.380 TCP 23.104.0.1:52904 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:08:33.957 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 18:12:48.496 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6452 1 2025-09-26 18:09:33.961 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 18:13:26.353 00:00:15.354 TCP 23.104.0.1:55802 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:13:54.969 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 18:13:54.990 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 18:13:48.708 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42346 10 6452 1 2025-09-26 18:14:31.742 00:00:10.323 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:14:48.921 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:41768 10 6452 1 2025-09-26 18:15:32.106 00:00:10.367 TCP 23.104.0.1:34614 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:15:49.109 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34566 10 6452 1 2025-09-26 18:16:32.513 00:00:10.368 TCP 23.104.0.1:33378 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:16:49.319 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51590 10 6452 1 2025-09-26 18:17:32.913 00:00:10.360 TCP 23.104.0.1:59634 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:17:49.531 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48326 10 6452 1 2025-09-26 18:14:33.962 00:05:01.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 18:18:33.314 00:00:10.594 TCP 23.104.0.1:58826 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:18:54.897 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 18:18:55.199 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 18:18:49.746 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60810 10 6452 1 2025-09-26 18:15:33.965 00:05:01.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 18:19:33.944 00:00:10.372 TCP 23.104.0.1:40040 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:19:49.921 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52868 10 6452 1 2025-09-26 18:20:34.357 00:00:10.363 TCP 23.104.0.1:55670 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:20:50.100 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35342 10 6452 1 2025-09-26 18:21:34.760 00:00:10.339 TCP 23.104.0.1:39506 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:21:50.319 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48920 10 6452 1 2025-09-26 18:22:35.134 00:00:10.324 TCP 23.104.0.1:39926 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:22:50.491 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51006 10 6452 1 2025-09-26 18:23:35.494 00:00:10.324 TCP 23.104.0.1:46036 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:23:55.092 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 18:23:55.508 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 18:23:50.667 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58726 10 6452 1 2025-09-26 18:20:33.963 00:05:01.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 18:24:35.853 00:00:10.981 TCP 23.104.0.1:52902 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:24:50.882 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39210 10 6452 1 2025-09-26 18:21:33.965 00:05:01.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 18:25:36.872 00:00:10.363 TCP 23.104.0.1:42640 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:25:51.116 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47038 10 6452 1 2025-09-26 18:26:37.270 00:00:10.443 TCP 23.104.0.1:46016 -> 1.101.0.1:3000 15 1926 1 2025-09-26 18:26:51.350 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43684 12 10367 1 2025-09-26 18:27:37.755 00:00:10.333 TCP 23.104.0.1:38370 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:27:51.559 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60984 10 6452 1 2025-09-26 18:28:55.324 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 18:28:38.126 00:00:10.364 TCP 23.104.0.1:38246 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:28:55.168 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 18:28:51.766 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50704 10 6452 1 2025-09-26 18:29:38.529 00:00:10.369 TCP 23.104.0.1:52292 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:29:51.981 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:48324 13 6608 1 2025-09-26 18:26:33.964 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 18:30:38.933 00:00:10.375 TCP 23.104.0.1:59994 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:30:52.225 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56518 10 6452 1 2025-09-26 18:27:33.967 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 18:31:39.345 00:00:10.368 TCP 23.104.0.1:56440 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:31:52.434 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33864 10 6452 1 2025-09-26 18:32:39.751 00:00:10.380 TCP 23.104.0.1:55418 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:32:52.644 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47700 10 6452 1 2025-09-26 18:33:40.167 00:00:10.366 TCP 23.104.0.1:58356 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:33:55.598 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 18:33:55.463 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 18:33:52.860 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54144 10 6452 1 2025-09-26 18:34:40.581 00:00:10.373 TCP 23.104.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:34:53.087 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49160 10 6452 1 2025-09-26 18:35:40.989 00:00:10.364 TCP 23.104.0.1:33592 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:35:53.306 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50566 10 6452 1 2025-09-26 18:32:33.965 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 18:36:41.391 00:00:10.329 TCP 23.104.0.1:44764 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:36:53.525 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35118 10 6452 1 2025-09-26 18:33:33.968 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 18:37:41.756 00:00:10.373 TCP 23.104.0.1:39956 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:37:53.741 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:34522 10 6452 1 2025-09-26 18:38:55.570 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 18:38:42.165 00:00:10.374 TCP 23.104.0.1:54354 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:38:55.651 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 18:38:53.914 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52532 10 6452 1 2025-09-26 18:39:42.578 00:00:10.322 TCP 23.104.0.1:49160 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:39:54.130 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52850 10 6452 1 2025-09-26 18:40:42.946 00:00:10.367 TCP 23.104.0.1:55602 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:40:54.345 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6452 1 2025-09-26 18:41:43.357 00:00:10.321 TCP 23.104.0.1:59772 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:41:54.556 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60042 10 6452 1 2025-09-26 18:38:33.966 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 18:42:43.717 00:00:10.329 TCP 23.104.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:42:54.723 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35996 10 6452 1 2025-09-26 18:39:33.968 00:05:01.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 18:43:55.605 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 18:43:44.112 00:00:10.324 TCP 23.104.0.1:38198 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:43:55.423 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 18:43:54.931 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47042 10 6452 1 2025-09-26 18:44:44.479 00:00:10.362 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:44:55.162 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35708 10 6452 1 2025-09-26 18:45:44.880 00:00:10.380 TCP 23.104.0.1:57374 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:45:55.374 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53102 10 6452 1 2025-09-26 18:46:45.297 00:00:10.363 TCP 23.104.0.1:47652 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:46:55.581 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 2025-09-26 18:47:45.695 00:00:10.322 TCP 23.104.0.1:55152 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:47:55.760 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51788 10 6452 1 2025-09-26 18:44:33.967 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 18:48:55.954 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 18:48:46.050 00:00:10.378 TCP 23.104.0.1:58986 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:48:55.745 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 18:48:55.936 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:39860 10 6452 1 2025-09-26 18:45:33.968 00:05:01.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 18:49:46.468 00:00:10.372 TCP 23.104.0.1:36326 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:49:56.172 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37722 10 6452 1 2025-09-26 18:50:46.869 00:00:10.371 TCP 23.104.0.1:34534 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:50:56.393 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55414 10 6452 1 2025-09-26 18:51:47.277 00:00:10.365 TCP 23.104.0.1:52430 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:51:56.570 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41250 10 6452 1 2025-09-26 18:52:47.685 00:00:10.368 TCP 23.104.0.1:57410 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:52:56.792 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45332 10 6452 1 2025-09-26 18:53:56.143 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 18:53:56.083 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 18:53:48.111 00:00:10.364 TCP 23.104.0.1:39008 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:53:56.968 00:00:10.695 TCP 1.101.0.1:3000 -> 22.102.0.1:43984 11 7373 1 2025-09-26 18:50:33.967 00:05:01.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 18:54:48.515 00:00:10.324 TCP 23.104.0.1:47238 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:54:57.701 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44130 10 6452 1 2025-09-26 18:51:33.972 00:05:01.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 18:55:48.873 00:00:10.363 TCP 23.104.0.1:60544 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:55:57.913 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:44996 10 6452 1 2025-09-26 18:56:49.273 00:00:10.365 TCP 23.104.0.1:40430 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:56:58.109 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36838 10 6452 1 2025-09-26 18:57:49.678 00:00:10.374 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-09-26 18:57:58.332 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47632 10 6452 1 Summary: total flows: 163, total bytes: 502252, total packets: 1571, avg bps: 1087, avg pps: 0, avg bpp: 319 Time window: 2025-09-26 17:56:33 - 2025-09-26 18:58:08 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0009s Wall: 0.0023s flows/second: 71053.0 Runtime: 0.0023s