Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-20 23:58:43.460 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53702 10 6452 1 2025-12-20 23:59:34.151 00:00:10.373 TCP 23.104.0.1:35786 -> 1.101.0.1:3000 11 1507 1 2025-12-20 23:59:43.668 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52366 10 6452 1 2025-12-20 23:59:58.916 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-20 23:59:58.661 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-20 23:55:20.435 00:05:54.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-20 23:55:20.433 00:05:54.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 00:00:34.562 00:00:10.442 TCP 23.104.0.1:49758 -> 1.101.0.1:3000 15 1926 1 2025-12-21 00:00:43.879 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:49804 12 10369 1 2025-12-21 00:01:35.052 00:00:11.167 TCP 23.104.0.1:60660 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:01:44.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2025-12-21 00:02:36.269 00:00:10.374 TCP 23.104.0.1:54512 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:02:44.347 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48758 10 6452 1 2025-12-21 00:03:36.682 00:00:10.363 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:03:44.581 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52544 10 6452 1 2025-12-21 00:04:37.104 00:00:10.367 TCP 23.104.0.1:49970 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:04:44.787 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36616 10 6452 1 2025-12-21 00:04:58.992 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 00:04:58.980 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 00:05:37.508 00:00:10.327 TCP 23.104.0.1:55884 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:05:45.003 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55160 10 6452 1 2025-12-21 00:01:20.437 00:05:54.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 00:01:20.434 00:05:54.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 00:06:37.878 00:00:11.737 TCP 23.104.0.1:56080 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:06:45.219 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43956 10 6452 1 2025-12-21 00:07:39.654 00:00:10.326 TCP 23.104.0.1:38348 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:07:45.429 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39868 10 6452 1 2025-12-21 00:08:40.017 00:00:10.364 TCP 23.104.0.1:40594 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:08:45.658 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49766 10 6452 1 2025-12-21 00:09:40.419 00:00:10.327 TCP 23.104.0.1:45792 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:09:45.876 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53142 10 6452 1 2025-12-21 00:09:59.069 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 00:09:59.165 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 00:10:40.782 00:00:10.929 TCP 23.104.0.1:40392 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:10:46.075 00:00:10.461 TCP 1.101.0.1:3000 -> 22.102.0.1:39472 10 6452 1 2025-12-21 00:11:46.574 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56102 10 6452 1 2025-12-21 00:11:41.753 00:00:10.383 TCP 23.104.0.1:41494 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:07:20.437 00:05:54.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 00:07:20.440 00:05:54.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 00:12:42.173 00:00:10.371 TCP 23.104.0.1:51568 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:12:46.791 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44904 10 6452 1 2025-12-21 00:13:42.578 00:00:10.366 TCP 23.104.0.1:54830 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:13:47.004 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45188 10 6452 1 2025-12-21 00:14:42.984 00:00:10.347 TCP 23.104.0.1:43910 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:14:47.218 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37982 10 6452 1 2025-12-21 00:14:59.381 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 00:14:59.162 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 00:15:43.368 00:00:10.399 TCP 23.104.0.1:54830 -> 1.101.0.1:3000 15 1926 1 2025-12-21 00:15:47.438 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:41418 12 10375 1 2025-12-21 00:16:43.808 00:00:10.367 TCP 23.104.0.1:51658 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:16:47.679 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:38520 10 6452 1 2025-12-21 00:17:44.214 00:00:10.367 TCP 23.104.0.1:48726 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:17:47.865 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39928 10 6452 1 2025-12-21 00:13:20.444 00:05:54.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 00:13:20.441 00:05:54.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 00:18:44.621 00:00:10.362 TCP 23.104.0.1:41480 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:18:48.094 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45726 10 6452 1 2025-12-21 00:19:45.025 00:00:10.332 TCP 23.104.0.1:43362 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:19:59.195 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 00:19:48.300 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59520 10 6452 1 2025-12-21 00:19:59.397 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 00:20:45.388 00:00:10.369 TCP 23.104.0.1:40138 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:20:48.519 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58242 10 6452 1 2025-12-21 00:21:45.794 00:00:12.819 TCP 23.104.0.1:38638 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:21:48.741 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59100 10 6452 1 2025-12-21 00:22:48.919 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33540 10 6452 1 2025-12-21 00:22:48.653 00:00:10.323 TCP 23.104.0.1:39280 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:23:49.011 00:00:10.363 TCP 23.104.0.1:56680 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:23:49.139 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6452 1 2025-12-21 00:19:20.444 00:05:54.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 00:19:20.446 00:05:54.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 00:24:49.342 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56918 10 6452 1 2025-12-21 00:24:59.467 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 00:24:59.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 00:24:49.410 00:00:10.327 TCP 23.104.0.1:36484 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:25:49.564 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56568 10 6452 1 2025-12-21 00:25:49.773 00:00:10.372 TCP 23.104.0.1:60786 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:26:50.189 00:00:10.366 TCP 23.104.0.1:57660 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:26:49.781 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59476 10 6452 1 2025-12-21 00:27:50.591 00:00:10.362 TCP 23.104.0.1:50886 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:27:50.013 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6452 1 2025-12-21 00:28:50.988 00:00:10.369 TCP 23.104.0.1:48296 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:28:50.250 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41252 10 6452 1 2025-12-21 00:29:59.375 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 00:29:51.397 00:00:10.379 TCP 23.104.0.1:57430 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:29:50.483 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52174 10 6452 1 2025-12-21 00:29:59.569 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 00:25:20.445 00:05:54.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 00:25:20.448 00:05:54.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 00:30:50.704 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48398 10 6452 1 2025-12-21 00:30:51.822 00:00:10.366 TCP 23.104.0.1:40562 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:31:50.926 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:54000 10 6452 1 2025-12-21 00:31:52.223 00:00:10.361 TCP 23.104.0.1:34078 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:32:51.180 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50004 10 6452 1 2025-12-21 00:32:52.624 00:00:10.328 TCP 23.104.0.1:47676 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:33:51.396 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:48500 10 6452 1 2025-12-21 00:33:52.991 00:00:10.330 TCP 23.104.0.1:56660 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:34:51.589 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38456 10 6452 1 2025-12-21 00:34:59.754 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 00:34:59.630 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 00:34:53.359 00:00:10.376 TCP 23.104.0.1:40818 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:35:53.775 00:00:10.445 TCP 23.104.0.1:38210 -> 1.101.0.1:3000 15 1926 1 2025-12-21 00:35:51.806 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50240 12 10375 1 2025-12-21 00:31:20.454 00:05:54.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 00:31:20.452 00:05:54.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 00:36:52.070 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54556 10 6452 1 2025-12-21 00:36:54.259 00:00:10.366 TCP 23.104.0.1:60960 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:37:54.662 00:00:10.369 TCP 23.104.0.1:36210 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:37:52.278 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44902 10 6452 1 2025-12-21 00:38:52.498 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56192 10 6452 1 2025-12-21 00:38:55.101 00:00:10.369 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:39:59.821 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 00:39:59.423 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 00:39:55.502 00:00:10.367 TCP 23.104.0.1:43230 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:39:52.717 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56640 10 6452 1 2025-12-21 00:40:55.910 00:00:10.394 TCP 23.104.0.1:59896 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:40:52.922 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43902 10 6452 1 2025-12-21 00:41:53.155 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48840 10 6452 1 2025-12-21 00:41:56.343 00:00:10.376 TCP 23.104.0.1:57544 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:37:20.451 00:05:54.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 00:37:20.455 00:05:54.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 00:42:53.328 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-12-21 00:42:56.756 00:00:10.391 TCP 23.104.0.1:35848 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:43:53.544 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 12 6556 1 2025-12-21 00:43:57.187 00:00:10.365 TCP 23.104.0.1:42476 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:44:59.731 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 00:44:59.946 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 00:44:53.760 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38198 10 6452 1 2025-12-21 00:44:57.586 00:00:11.025 TCP 23.104.0.1:40078 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:45:53.972 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:41930 10 6452 1 2025-12-21 00:45:58.647 00:00:10.365 TCP 23.104.0.1:38904 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:46:54.207 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45824 10 6452 1 2025-12-21 00:46:59.049 00:00:10.368 TCP 23.104.0.1:57456 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:47:54.424 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6452 1 2025-12-21 00:43:20.455 00:05:54.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 00:47:59.452 00:00:10.326 TCP 23.104.0.1:34926 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:43:20.454 00:05:54.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 00:48:54.637 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40042 10 6452 1 2025-12-21 00:48:59.817 00:00:10.363 TCP 23.104.0.1:46498 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:49:59.873 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 00:49:59.996 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 00:49:54.845 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42512 10 6452 1 2025-12-21 00:50:00.220 00:00:10.363 TCP 23.104.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:50:55.076 00:00:10.330 TCP 1.101.0.1:3000 -> 22.102.0.1:55516 10 6452 1 2025-12-21 00:51:00.622 00:00:10.440 TCP 23.104.0.1:54274 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:51:55.445 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 10 6452 1 2025-12-21 00:52:01.112 00:00:10.370 TCP 23.104.0.1:41176 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:52:55.659 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60056 10 6452 1 2025-12-21 00:53:01.517 00:00:10.366 TCP 23.104.0.1:50622 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:53:55.886 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46826 12 6556 1 2025-12-21 00:54:01.918 00:00:10.359 TCP 23.104.0.1:57198 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:49:20.456 00:05:54.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 00:49:20.458 00:05:54.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 00:55:00.596 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 00:55:00.606 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 00:54:56.116 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42570 10 6452 1 2025-12-21 00:55:02.328 00:00:10.364 TCP 23.104.0.1:54998 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:55:56.332 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35370 10 6452 1 2025-12-21 00:56:02.732 00:00:10.368 TCP 23.104.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:56:56.552 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56604 10 6452 1 2025-12-21 00:57:03.139 00:00:10.336 TCP 23.104.0.1:43852 -> 1.101.0.1:3000 11 1507 1 2025-12-21 00:57:56.769 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42452 10 6452 1 2025-12-21 00:58:03.529 00:00:10.369 TCP 23.104.0.1:49896 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 510069, total packets: 1583, avg bps: 1081, avg pps: 0, avg bpp: 322 Time window: 2025-12-20 23:55:20 - 2025-12-21 00:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0056s User: 0.0019s Wall: 0.0020s flows/second: 82829.1 Runtime: 0.0020s