Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 19:59:05.222 00:00:10.370 TCP 23.104.0.1:34238 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:59:25.239 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:32824 10 6452 1 2025-08-20 20:00:05.630 00:00:10.364 TCP 23.104.0.1:55396 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:00:25.412 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38690 10 6452 1 2025-08-20 20:01:00.989 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:01:01.086 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:01:06.029 00:00:10.322 TCP 23.104.0.1:55606 -> 1.101.0.1:3000 11 1507 1 2025-08-20 19:57:14.133 00:05:00.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 20:01:25.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46898 10 6452 1 2025-08-20 20:02:06.393 00:00:10.363 TCP 23.104.0.1:56338 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:02:25.834 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41400 10 6452 1 2025-08-20 20:03:06.794 00:00:10.362 TCP 23.104.0.1:49752 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:03:26.076 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42300 10 6452 1 2025-08-20 20:00:14.130 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 20:04:07.193 00:00:10.365 TCP 23.104.0.1:57536 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:04:26.292 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39598 10 6452 1 2025-08-20 20:05:07.613 00:00:10.364 TCP 23.104.0.1:35902 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:05:26.506 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42320 10 6452 1 2025-08-20 20:06:01.218 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:06:00.993 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:06:08.031 00:00:10.329 TCP 23.104.0.1:46100 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:06:26.728 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51358 10 6452 1 2025-08-20 20:03:14.133 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 20:07:08.401 00:00:10.330 TCP 23.104.0.1:55400 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:07:26.940 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:48474 10 6452 1 2025-08-20 20:08:08.766 00:00:10.329 TCP 23.104.0.1:37816 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:08:27.198 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45564 10 6452 1 2025-08-20 20:09:09.134 00:00:10.319 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:09:27.417 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:44680 10 6452 1 2025-08-20 20:06:14.133 00:05:00.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 20:10:09.492 00:00:10.324 TCP 23.104.0.1:51036 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:10:27.674 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37820 10 6452 1 2025-08-20 20:11:01.567 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:11:01.378 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:11:09.850 00:00:10.378 TCP 23.104.0.1:57864 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:11:27.897 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47688 10 6452 1 2025-08-20 20:12:10.272 00:00:10.324 TCP 23.104.0.1:52038 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:12:28.114 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54428 10 6452 1 2025-08-20 20:09:14.135 00:05:00.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 20:13:10.631 00:00:10.370 TCP 23.104.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:13:28.330 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55890 10 6452 1 2025-08-20 20:14:11.058 00:00:10.366 TCP 23.104.0.1:39644 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:14:28.545 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43012 10 6452 1 2025-08-20 20:15:11.461 00:00:10.357 TCP 23.104.0.1:40850 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:15:28.751 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53506 10 6452 1 2025-08-20 20:16:01.326 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:16:01.310 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:12:14.134 00:05:00.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 20:16:11.856 00:00:10.338 TCP 23.104.0.1:60378 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:16:28.962 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35014 10 6452 1 2025-08-20 20:17:12.230 00:00:10.332 TCP 23.104.0.1:34942 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:17:29.184 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52012 10 6452 1 2025-08-20 20:18:12.599 00:00:10.366 TCP 23.104.0.1:52196 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:18:29.398 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43970 10 6452 1 2025-08-20 20:15:14.137 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 20:19:13.005 00:00:10.319 TCP 23.104.0.1:51414 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:19:29.614 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53814 10 6452 1 2025-08-20 20:20:13.366 00:00:10.367 TCP 23.104.0.1:60514 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:20:29.826 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36130 10 6452 1 2025-08-20 20:21:01.300 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:21:01.558 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:21:13.772 00:00:10.389 TCP 23.104.0.1:39616 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:21:30.061 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37690 10 6452 1 2025-08-20 20:18:14.136 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 20:22:14.200 00:00:10.366 TCP 23.104.0.1:55392 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:22:30.274 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59742 10 6452 1 2025-08-20 20:23:14.603 00:00:10.320 TCP 23.104.0.1:42518 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:23:30.455 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44094 10 6452 1 2025-08-20 20:24:14.969 00:00:10.386 TCP 23.104.0.1:53478 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:24:30.668 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33388 10 6452 1 2025-08-20 20:21:14.140 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 20:25:15.414 00:00:10.358 TCP 23.104.0.1:42896 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:25:30.842 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45132 10 6452 1 2025-08-20 20:26:01.643 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:26:01.530 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:26:15.815 00:00:10.368 TCP 23.104.0.1:36462 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:26:31.085 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52066 10 6452 1 2025-08-20 20:27:16.221 00:00:10.365 TCP 23.104.0.1:54304 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:27:31.255 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41610 10 6452 1 2025-08-20 20:24:14.136 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 20:28:16.622 00:00:10.365 TCP 23.104.0.1:56178 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:28:31.462 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-08-20 20:29:17.025 00:00:10.378 TCP 23.104.0.1:56208 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:29:31.670 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57500 10 6452 1 2025-08-20 20:30:17.438 00:00:10.363 TCP 23.104.0.1:44036 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:30:31.842 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35090 10 6452 1 2025-08-20 20:31:01.938 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:31:01.750 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:27:14.138 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 20:31:17.834 00:00:10.390 TCP 23.104.0.1:59828 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:31:32.080 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33706 10 6452 1 2025-08-20 20:32:18.265 00:00:10.366 TCP 23.104.0.1:59134 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:32:32.294 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39224 10 6452 1 2025-08-20 20:33:18.669 00:00:10.316 TCP 23.104.0.1:43598 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:33:32.505 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40098 10 6452 1 2025-08-20 20:30:14.136 00:05:00.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 20:34:19.025 00:00:10.326 TCP 23.104.0.1:57746 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:34:32.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58326 10 6452 1 2025-08-20 20:35:19.390 00:00:10.363 TCP 23.104.0.1:53832 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:35:32.930 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35750 11 6492 1 2025-08-20 20:36:01.742 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:36:01.645 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:36:19.791 00:00:10.368 TCP 23.104.0.1:54252 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:36:33.175 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56272 10 6452 1 2025-08-20 20:33:14.139 00:05:00.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 20:37:20.198 00:00:10.366 TCP 23.104.0.1:32992 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:37:33.348 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49920 10 6452 1 2025-08-20 20:38:20.599 00:00:10.321 TCP 23.104.0.1:60282 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:38:33.569 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41522 10 6452 1 2025-08-20 20:39:20.959 00:00:10.364 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:39:33.742 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51104 10 6452 1 2025-08-20 20:36:14.137 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 20:40:21.367 00:00:10.362 TCP 23.104.0.1:45424 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:40:33.962 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39402 10 6452 1 2025-08-20 20:41:02.095 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:41:02.052 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:41:21.764 00:00:10.379 TCP 23.104.0.1:59378 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:41:34.193 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36768 10 6452 1 2025-08-20 20:42:22.179 00:00:10.363 TCP 23.104.0.1:47914 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:42:34.413 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52978 10 6452 1 2025-08-20 20:39:14.140 00:05:00.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 20:43:22.582 00:00:10.367 TCP 23.104.0.1:60166 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:43:34.632 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49392 10 6452 1 2025-08-20 20:44:22.985 00:00:10.359 TCP 23.104.0.1:55200 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:44:34.853 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35304 10 6452 1 2025-08-20 20:45:23.386 00:00:10.369 TCP 23.104.0.1:60046 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:45:35.039 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51184 10 6452 1 2025-08-20 20:46:01.956 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:46:02.002 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:42:14.138 00:05:00.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 20:46:23.795 00:00:10.367 TCP 23.104.0.1:52760 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:46:35.216 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35648 10 6452 1 2025-08-20 20:47:24.203 00:00:10.973 TCP 23.104.0.1:37794 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:47:35.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45948 10 6452 1 2025-08-20 20:48:25.215 00:00:10.362 TCP 23.104.0.1:38492 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:48:35.635 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52992 10 6452 1 2025-08-20 20:45:14.142 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 20:49:25.615 00:00:10.365 TCP 23.104.0.1:59806 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:49:35.853 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45056 10 6452 1 2025-08-20 20:50:26.021 00:00:10.379 TCP 23.104.0.1:36680 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:50:36.083 00:00:10.546 TCP 1.101.0.1:3000 -> 22.102.0.1:57154 10 6452 1 2025-08-20 20:51:01.838 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:51:01.995 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:51:26.442 00:00:10.325 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:51:36.669 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56554 10 6452 1 2025-08-20 20:48:14.146 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 20:52:26.802 00:00:10.374 TCP 23.104.0.1:42958 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:52:36.890 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53168 10 6452 1 2025-08-20 20:53:27.220 00:00:10.324 TCP 23.104.0.1:42382 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:53:37.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53796 10 6452 1 2025-08-20 20:54:27.578 00:00:10.364 TCP 23.104.0.1:44906 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:54:37.323 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46374 10 6452 1 2025-08-20 20:51:14.150 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 20:55:27.983 00:00:10.373 TCP 23.104.0.1:59386 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:55:37.533 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36496 10 6452 1 2025-08-20 20:56:02.299 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:56:02.169 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 20:56:28.400 00:00:10.368 TCP 23.104.0.1:40156 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:56:37.747 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45696 10 6452 1 2025-08-20 20:57:28.813 00:00:10.331 TCP 23.104.0.1:38406 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:57:37.956 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:44496 10 6452 1 2025-08-20 20:54:14.147 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 20:58:29.193 00:00:10.367 TCP 23.104.0.1:38244 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:58:38.147 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47974 10 6452 1 Summary: total flows: 164, total bytes: 498388, total packets: 1573, avg bps: 1071, avg pps: 0, avg bpp: 316 Time window: 2025-08-20 19:57:14 - 2025-08-20 20:59:15 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0009s Wall: 0.0027s flows/second: 61631.2 Runtime: 0.0027s