Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-17 18:59:23.938 00:00:10.383 TCP 23.104.0.1:34412 -> 1.101.0.1:3000 11 1507 1 2025-12-17 18:59:26.387 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44534 10 6452 1 2025-12-17 19:00:24.360 00:00:10.365 TCP 23.104.0.1:38430 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:00:26.596 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36016 10 6452 1 2025-12-17 18:56:18.911 00:05:54.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-17 19:01:24.765 00:00:10.383 TCP 23.104.0.1:55592 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:01:26.821 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50602 10 6452 1 2025-12-17 18:57:18.908 00:05:54.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-17 19:02:25.184 00:00:10.372 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:02:26.993 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52224 10 6452 1 2025-12-17 19:03:26.565 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:03:26.486 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:03:25.585 00:00:10.368 TCP 23.104.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:03:27.219 00:00:10.568 TCP 1.101.0.1:3000 -> 22.102.0.1:39490 10 6452 1 2025-12-17 19:04:25.997 00:00:10.364 TCP 23.104.0.1:45662 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:04:27.826 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51804 10 6452 1 2025-12-17 19:05:26.402 00:00:10.327 TCP 23.104.0.1:46686 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:05:28.066 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33370 10 6452 1 2025-12-17 19:06:28.294 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37512 10 6452 1 2025-12-17 19:06:26.765 00:00:10.374 TCP 23.104.0.1:39978 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:02:18.915 00:05:54.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-17 19:07:27.182 00:00:10.362 TCP 23.104.0.1:51532 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:07:28.514 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41488 10 6452 1 2025-12-17 19:03:18.912 00:05:54.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-17 19:08:26.337 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:08:26.499 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:08:28.690 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58236 10 6452 1 2025-12-17 19:08:27.584 00:00:10.365 TCP 23.104.0.1:40480 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:09:27.986 00:00:10.367 TCP 23.104.0.1:40440 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:09:28.859 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44378 10 6452 1 2025-12-17 19:10:28.391 00:00:10.394 TCP 23.104.0.1:49824 -> 1.101.0.1:3000 15 1926 1 2025-12-17 19:10:29.087 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41664 12 10375 1 2025-12-17 19:11:29.325 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46178 10 6452 1 2025-12-17 19:11:28.824 00:00:10.363 TCP 23.104.0.1:43334 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:12:29.220 00:00:10.367 TCP 23.104.0.1:40430 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:12:29.547 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43248 10 6452 1 2025-12-17 19:08:18.916 00:05:54.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-17 19:13:26.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:13:26.253 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:13:29.760 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6452 1 2025-12-17 19:13:29.624 00:00:10.374 TCP 23.104.0.1:35178 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:09:18.913 00:05:54.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-17 19:14:29.982 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:55342 10 6452 1 2025-12-17 19:14:30.033 00:00:10.329 TCP 23.104.0.1:57642 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:15:30.223 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52088 10 6452 1 2025-12-17 19:15:30.400 00:00:10.366 TCP 23.104.0.1:40074 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:16:30.442 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40860 10 6452 1 2025-12-17 19:16:30.803 00:00:10.366 TCP 23.104.0.1:40030 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:17:31.207 00:00:10.367 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:17:30.609 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54550 10 6452 1 2025-12-17 19:18:26.648 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:18:26.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:18:31.611 00:00:10.369 TCP 23.104.0.1:59026 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:18:30.824 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57768 10 6452 1 2025-12-17 19:14:18.916 00:05:54.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-17 19:19:31.064 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:59416 10 6452 1 2025-12-17 19:19:32.027 00:00:10.361 TCP 23.104.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:15:18.914 00:05:54.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-17 19:20:31.228 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45630 10 6452 1 2025-12-17 19:20:32.421 00:00:10.370 TCP 23.104.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:21:31.445 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33852 10 6452 1 2025-12-17 19:21:32.825 00:00:10.362 TCP 23.104.0.1:42828 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:22:31.666 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52394 10 6452 1 2025-12-17 19:22:33.226 00:00:10.375 TCP 23.104.0.1:42570 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:23:26.665 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:23:27.066 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:23:33.669 00:00:10.364 TCP 23.104.0.1:44730 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:23:31.885 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53590 10 6452 1 2025-12-17 19:24:34.098 00:00:10.370 TCP 23.104.0.1:38766 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:24:32.103 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41574 10 6452 1 2025-12-17 19:20:18.920 00:05:54.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-17 19:25:34.505 00:00:11.181 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:25:32.317 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54658 10 6452 1 2025-12-17 19:21:18.919 00:05:54.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-17 19:26:32.533 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41298 10 6452 1 2025-12-17 19:26:35.732 00:00:10.366 TCP 23.104.0.1:58572 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:27:36.132 00:00:10.363 TCP 23.104.0.1:38036 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:27:32.753 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59148 10 6452 1 2025-12-17 19:28:26.805 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:28:26.818 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:28:32.971 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48574 10 6452 1 2025-12-17 19:28:36.538 00:00:10.365 TCP 23.104.0.1:50814 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:29:33.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52242 10 6452 1 2025-12-17 19:29:36.944 00:00:10.372 TCP 23.104.0.1:53380 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:30:33.424 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:43516 10 6452 1 2025-12-17 19:30:37.354 00:00:10.366 TCP 23.104.0.1:39860 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:26:18.921 00:05:54.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-17 19:31:33.666 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39060 10 6452 1 2025-12-17 19:31:37.762 00:00:10.379 TCP 23.104.0.1:39130 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:27:18.919 00:05:54.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-17 19:32:33.837 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58546 10 6452 1 2025-12-17 19:32:38.179 00:00:10.364 TCP 23.104.0.1:47112 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:33:26.845 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:33:26.882 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:33:34.023 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36476 10 6452 1 2025-12-17 19:33:38.590 00:00:10.342 TCP 23.104.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:34:34.236 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53130 10 6452 1 2025-12-17 19:34:38.982 00:00:10.330 TCP 23.104.0.1:54612 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:35:34.444 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55766 10 6452 1 2025-12-17 19:35:39.349 00:00:10.371 TCP 23.104.0.1:32982 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:36:34.617 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42788 10 6452 1 2025-12-17 19:36:39.761 00:00:10.376 TCP 23.104.0.1:34330 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:32:18.923 00:05:54.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-17 19:37:34.835 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49426 10 6452 1 2025-12-17 19:37:40.175 00:00:10.361 TCP 23.104.0.1:36400 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:33:18.921 00:05:54.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-17 19:38:27.044 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:38:26.981 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:38:35.069 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47284 10 6452 1 2025-12-17 19:38:40.575 00:00:10.327 TCP 23.104.0.1:52058 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:39:35.289 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6452 1 2025-12-17 19:39:40.944 00:00:10.381 TCP 23.104.0.1:54246 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:40:35.509 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39990 10 6452 1 2025-12-17 19:40:41.357 00:00:10.325 TCP 23.104.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:41:35.731 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59850 10 6452 1 2025-12-17 19:41:41.720 00:00:10.328 TCP 23.104.0.1:36376 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:42:35.961 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:48178 10 6452 1 2025-12-17 19:42:42.106 00:00:10.367 TCP 23.104.0.1:40190 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:38:18.924 00:05:54.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-17 19:43:27.156 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:43:27.341 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:43:36.145 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58582 10 6452 1 2025-12-17 19:43:42.511 00:00:10.369 TCP 23.104.0.1:33838 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:39:18.921 00:05:54.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-17 19:44:36.363 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46398 10 6452 1 2025-12-17 19:44:42.916 00:00:10.364 TCP 23.104.0.1:57130 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:45:36.548 00:00:10.781 TCP 1.101.0.1:3000 -> 22.102.0.1:39120 10 6452 1 2025-12-17 19:45:43.326 00:00:10.370 TCP 23.104.0.1:33906 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:46:37.368 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48970 10 6452 1 2025-12-17 19:46:43.726 00:00:10.329 TCP 23.104.0.1:42642 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:47:37.580 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48422 10 6452 1 2025-12-17 19:47:44.101 00:00:10.365 TCP 23.104.0.1:45014 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:48:27.064 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:48:27.303 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:48:37.793 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34956 10 6452 1 2025-12-17 19:48:44.506 00:00:10.368 TCP 23.104.0.1:52678 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:44:18.927 00:05:54.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-17 19:49:38.028 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41278 10 6452 1 2025-12-17 19:49:44.913 00:00:10.325 TCP 23.104.0.1:53954 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:45:18.925 00:05:54.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-17 19:50:38.249 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53220 10 6452 1 2025-12-17 19:50:45.280 00:00:10.369 TCP 23.104.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:51:38.474 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38652 10 6452 1 2025-12-17 19:51:45.685 00:00:10.368 TCP 23.104.0.1:36798 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:52:38.685 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49152 10 6452 1 2025-12-17 19:52:46.105 00:00:10.323 TCP 23.104.0.1:48948 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:53:27.303 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:53:27.476 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:53:38.905 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34354 10 6452 1 2025-12-17 19:53:46.469 00:00:10.367 TCP 23.104.0.1:57838 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:54:39.132 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51336 10 6452 1 2025-12-17 19:54:46.872 00:00:10.370 TCP 23.104.0.1:53518 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:50:18.929 00:05:54.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-17 19:55:39.366 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48818 10 6452 1 2025-12-17 19:55:47.274 00:00:10.324 TCP 23.104.0.1:47106 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:51:18.926 00:05:54.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-17 19:56:39.542 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49810 10 6452 1 2025-12-17 19:56:47.637 00:00:10.367 TCP 23.104.0.1:49850 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:57:39.767 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42088 10 6452 1 2025-12-17 19:57:48.052 00:00:10.366 TCP 23.104.0.1:33468 -> 1.101.0.1:3000 11 1507 1 2025-12-17 19:58:27.507 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-17 19:58:27.381 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-17 19:58:39.980 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56156 10 6452 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1068, avg pps: 0, avg bpp: 319 Time window: 2025-12-17 18:56:18 - 2025-12-17 19:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0050s User: 0.0020s Wall: 0.0028s flows/second: 58548.6 Runtime: 0.0028s