Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-16 18:59:11.786 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38042 10 6452 1 2025-12-16 18:59:35.540 00:00:10.366 TCP 23.104.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:00:11.999 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41392 10 6452 1 2025-12-16 19:00:35.942 00:00:10.840 TCP 23.104.0.1:35470 -> 1.101.0.1:3000 11 1507 1 2025-12-16 18:56:18.458 00:05:54.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-16 19:01:12.243 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58788 10 6452 1 2025-12-16 19:01:36.834 00:00:10.349 TCP 23.104.0.1:59374 -> 1.101.0.1:3000 11 1507 1 2025-12-16 18:57:18.455 00:05:54.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-16 19:02:12.410 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49892 10 6452 1 2025-12-16 19:02:37.225 00:00:10.371 TCP 23.104.0.1:40446 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:02:57.383 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:02:57.260 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:03:12.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59782 10 6452 1 2025-12-16 19:03:37.634 00:00:10.360 TCP 23.104.0.1:42086 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:04:12.841 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35178 10 6452 1 2025-12-16 19:04:38.030 00:00:10.362 TCP 23.104.0.1:60794 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:05:13.081 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42690 10 6452 1 2025-12-16 19:05:38.427 00:00:10.364 TCP 23.104.0.1:42628 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:06:13.294 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33104 10 6452 1 2025-12-16 19:06:38.833 00:00:10.355 TCP 23.104.0.1:34878 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:02:18.460 00:05:54.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-16 19:07:13.510 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59260 10 6452 1 2025-12-16 19:07:39.222 00:00:10.364 TCP 23.104.0.1:46006 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:07:57.350 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:07:57.607 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:03:18.458 00:05:54.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-16 19:08:13.725 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44172 10 6452 1 2025-12-16 19:08:39.627 00:00:10.361 TCP 23.104.0.1:59014 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:09:13.939 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57188 10 6452 1 2025-12-16 19:09:40.027 00:00:10.370 TCP 23.104.0.1:43596 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:10:14.145 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40348 10 6452 1 2025-12-16 19:10:40.432 00:00:10.357 TCP 23.104.0.1:49950 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:11:14.327 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52918 10 6452 1 2025-12-16 19:11:40.829 00:00:10.431 TCP 23.104.0.1:57958 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:12:14.540 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44212 10 6452 1 2025-12-16 19:12:41.292 00:00:10.364 TCP 23.104.0.1:41924 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:12:57.530 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:12:57.613 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:08:18.461 00:05:54.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-16 19:13:14.755 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47050 10 6452 1 2025-12-16 19:13:41.688 00:00:10.365 TCP 23.104.0.1:50400 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:09:18.459 00:05:54.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-16 19:14:14.970 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 10 6452 1 2025-12-16 19:14:42.101 00:00:10.370 TCP 23.104.0.1:48302 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:15:15.198 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35694 10 6452 1 2025-12-16 19:15:42.510 00:00:10.327 TCP 23.104.0.1:58246 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:16:15.405 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45592 10 6452 1 2025-12-16 19:16:42.876 00:00:10.364 TCP 23.104.0.1:37302 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:17:15.619 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38798 10 6452 1 2025-12-16 19:17:43.278 00:00:10.321 TCP 23.104.0.1:39682 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:17:57.917 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:17:57.778 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:18:15.831 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49014 10 6452 1 2025-12-16 19:18:43.639 00:00:10.372 TCP 23.104.0.1:46200 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:14:18.463 00:05:54.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-16 19:19:16.005 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50502 10 6452 1 2025-12-16 19:19:44.066 00:00:10.322 TCP 23.104.0.1:42794 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:15:18.462 00:05:54.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-16 19:20:16.188 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51666 10 6452 1 2025-12-16 19:20:44.432 00:00:10.323 TCP 23.104.0.1:39644 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:21:16.405 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42462 10 6452 1 2025-12-16 19:21:44.794 00:00:10.367 TCP 23.104.0.1:41426 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:22:16.621 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43936 10 6452 1 2025-12-16 19:22:45.198 00:00:10.324 TCP 23.104.0.1:40530 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:22:57.884 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:22:57.816 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:23:16.835 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35340 10 6452 1 2025-12-16 19:23:45.557 00:00:10.364 TCP 23.104.0.1:59666 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:24:17.068 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35766 10 6452 1 2025-12-16 19:24:45.959 00:00:10.333 TCP 23.104.0.1:54056 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:20:18.465 00:05:54.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-16 19:25:17.239 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43120 10 6452 1 2025-12-16 19:25:46.327 00:00:10.363 TCP 23.104.0.1:55816 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:21:18.463 00:05:54.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-16 19:26:17.455 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41774 10 6452 1 2025-12-16 19:26:46.727 00:00:10.366 TCP 23.104.0.1:42944 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:27:17.668 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54380 10 6452 1 2025-12-16 19:27:47.127 00:00:10.322 TCP 23.104.0.1:52512 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:27:58.109 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:27:58.049 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:28:17.886 00:00:10.344 TCP 1.101.0.1:3000 -> 22.102.0.1:35416 10 6452 1 2025-12-16 19:28:47.488 00:00:10.361 TCP 23.104.0.1:45178 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:29:18.273 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46320 10 6452 1 2025-12-16 19:29:47.887 00:00:10.456 TCP 23.104.0.1:42036 -> 1.101.0.1:3000 15 1926 1 2025-12-16 19:30:18.444 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38920 12 10375 1 2025-12-16 19:30:48.398 00:00:10.359 TCP 23.104.0.1:44918 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:26:18.466 00:05:54.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-16 19:31:18.682 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-12-16 19:31:48.795 00:00:10.363 TCP 23.104.0.1:35868 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:27:18.467 00:05:54.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-16 19:32:18.904 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38778 10 6452 1 2025-12-16 19:32:58.187 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:32:49.198 00:00:10.363 TCP 23.104.0.1:48070 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:32:58.208 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:33:19.121 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41786 10 6452 1 2025-12-16 19:33:49.598 00:00:10.363 TCP 23.104.0.1:51676 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:34:19.335 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47714 10 6452 1 2025-12-16 19:34:50.002 00:00:10.364 TCP 23.104.0.1:35068 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:35:19.550 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44716 10 6452 1 2025-12-16 19:35:50.406 00:00:10.374 TCP 23.104.0.1:40718 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:36:19.773 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34308 10 6452 1 2025-12-16 19:36:50.821 00:00:10.366 TCP 23.104.0.1:54676 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:32:18.469 00:05:54.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-16 19:37:19.985 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:60104 10 6452 1 2025-12-16 19:37:51.225 00:00:10.365 TCP 23.104.0.1:38100 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:37:57.855 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:37:58.307 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:33:18.467 00:05:54.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-16 19:38:20.170 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51606 10 6452 1 2025-12-16 19:38:51.629 00:00:10.367 TCP 23.104.0.1:53118 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:39:20.340 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58628 10 6452 1 2025-12-16 19:39:52.032 00:00:10.364 TCP 23.104.0.1:44310 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:40:20.515 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45062 10 6452 1 2025-12-16 19:40:52.434 00:00:10.371 TCP 23.104.0.1:51218 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:41:20.739 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56932 10 6452 1 2025-12-16 19:41:52.833 00:00:10.400 TCP 23.104.0.1:33334 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:42:20.956 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46782 10 6452 1 2025-12-16 19:42:58.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:42:58.243 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:42:53.277 00:00:10.371 TCP 23.104.0.1:38854 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:38:18.469 00:05:54.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-16 19:43:21.191 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54930 10 6452 1 2025-12-16 19:43:53.683 00:00:10.325 TCP 23.104.0.1:37380 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:39:18.467 00:05:54.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-16 19:44:21.409 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46136 10 6452 1 2025-12-16 19:44:54.052 00:00:10.368 TCP 23.104.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:45:21.630 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2025-12-16 19:45:54.457 00:00:10.364 TCP 23.104.0.1:60718 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:46:21.851 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50948 10 6452 1 2025-12-16 19:46:54.860 00:00:10.333 TCP 23.104.0.1:47394 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:47:22.086 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55278 10 6452 1 2025-12-16 19:47:58.348 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:47:58.374 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:47:55.231 00:00:10.361 TCP 23.104.0.1:38640 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:48:22.311 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49270 10 6452 1 2025-12-16 19:48:55.631 00:00:10.321 TCP 23.104.0.1:37690 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:44:18.473 00:05:54.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-16 19:49:22.545 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34364 10 6452 1 2025-12-16 19:49:55.992 00:00:10.771 TCP 23.104.0.1:48528 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:45:18.470 00:05:54.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-16 19:50:22.765 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54484 10 6452 1 2025-12-16 19:50:56.802 00:00:10.365 TCP 23.104.0.1:41416 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:51:22.988 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:39628 10 6452 1 2025-12-16 19:51:57.211 00:00:10.376 TCP 23.104.0.1:37954 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:52:23.190 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:33092 10 6452 1 2025-12-16 19:52:58.461 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:52:58.774 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:52:57.627 00:00:10.331 TCP 23.104.0.1:52320 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:53:23.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33932 10 6452 1 2025-12-16 19:53:57.997 00:00:10.327 TCP 23.104.0.1:52696 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:54:23.608 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:42628 10 6452 1 2025-12-16 19:54:58.361 00:00:10.831 TCP 23.104.0.1:52828 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:50:18.477 00:05:54.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-16 19:55:23.791 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36488 10 6452 1 2025-12-16 19:55:59.225 00:00:10.321 TCP 23.104.0.1:38996 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:51:18.474 00:05:54.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-16 19:56:24.004 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45906 10 6452 1 2025-12-16 19:56:59.585 00:00:10.376 TCP 23.104.0.1:57952 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:57:24.220 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33428 10 6452 1 2025-12-16 19:57:58.447 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-16 19:57:58.678 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-16 19:57:59.997 00:00:10.328 TCP 23.104.0.1:56204 -> 1.101.0.1:3000 11 1507 1 2025-12-16 19:58:24.389 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48934 10 6452 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1073, avg pps: 0, avg bpp: 319 Time window: 2025-12-16 18:56:18 - 2025-12-16 19:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0018s Wall: 0.0026s flows/second: 63150.9 Runtime: 0.0026s