Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 02:58:54.753 00:00:10.385 TCP 23.104.0.1:35090 -> 1.101.0.1:3000 11 1507 1 2025-12-21 02:59:24.488 00:00:10.396 TCP 1.101.0.1:3000 -> 22.102.0.1:41550 10 6452 1 2025-12-21 03:00:02.682 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 02:59:55.177 00:00:10.325 TCP 23.104.0.1:55520 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:00:02.477 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 02:55:20.493 00:05:54.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 02:55:20.490 00:05:54.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 03:00:24.923 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33458 10 6452 1 2025-12-21 03:00:55.542 00:00:10.361 TCP 23.104.0.1:55268 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:01:25.131 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32768 10 6452 1 2025-12-21 03:01:55.947 00:00:10.372 TCP 23.104.0.1:51730 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:02:25.352 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6452 1 2025-12-21 03:02:56.358 00:00:10.324 TCP 23.104.0.1:50610 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:03:25.565 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46788 10 6452 1 2025-12-21 03:03:56.723 00:00:10.374 TCP 23.104.0.1:51706 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:04:25.772 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37134 10 6452 1 2025-12-21 03:05:02.694 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:05:02.696 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 03:04:57.133 00:00:10.361 TCP 23.104.0.1:42190 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:05:25.988 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60266 10 6452 1 2025-12-21 03:05:57.537 00:00:10.323 TCP 23.104.0.1:35968 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:01:20.491 00:05:54.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 03:01:20.493 00:05:54.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 03:06:26.232 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36558 10 6452 1 2025-12-21 03:06:57.901 00:00:10.365 TCP 23.104.0.1:38350 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:07:26.444 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45652 10 6452 1 2025-12-21 03:07:58.308 00:00:10.363 TCP 23.104.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:08:26.652 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38130 10 6452 1 2025-12-21 03:08:58.712 00:00:10.378 TCP 23.104.0.1:54756 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:09:26.830 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42288 10 6452 1 2025-12-21 03:10:02.640 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 03:10:02.865 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:09:59.130 00:00:10.378 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:10:27.077 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46924 10 6452 1 2025-12-21 03:10:59.551 00:00:10.367 TCP 23.104.0.1:36698 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:11:27.299 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52542 10 6452 1 2025-12-21 03:11:59.956 00:00:10.373 TCP 23.104.0.1:33294 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:07:20.491 00:05:54.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 03:07:20.493 00:05:54.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 03:12:27.521 00:00:10.531 TCP 1.101.0.1:3000 -> 22.102.0.1:47900 10 6452 1 2025-12-21 03:13:00.368 00:00:10.363 TCP 23.104.0.1:56652 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:13:28.092 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33180 10 6452 1 2025-12-21 03:14:00.770 00:00:10.374 TCP 23.104.0.1:47992 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:14:28.313 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38996 10 6452 1 2025-12-21 03:15:02.848 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 03:15:02.637 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:15:01.186 00:00:10.364 TCP 23.104.0.1:54724 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:15:28.534 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37422 10 6452 1 2025-12-21 03:16:01.589 00:00:10.371 TCP 23.104.0.1:40210 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:16:28.758 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40804 10 6452 1 2025-12-21 03:17:01.999 00:00:10.366 TCP 23.104.0.1:51134 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:17:28.969 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:41362 10 6452 1 2025-12-21 03:13:20.492 00:05:54.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 03:18:02.400 00:00:10.365 TCP 23.104.0.1:60598 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:13:20.495 00:05:54.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 03:18:29.207 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:35308 10 6452 1 2025-12-21 03:19:02.810 00:00:10.370 TCP 23.104.0.1:35540 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:19:29.396 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39920 10 6452 1 2025-12-21 03:20:02.870 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 03:20:02.960 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:20:03.250 00:00:10.363 TCP 23.104.0.1:36338 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:20:29.628 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49808 10 6452 1 2025-12-21 03:21:03.655 00:00:10.361 TCP 23.104.0.1:40612 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:21:29.849 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:50772 10 6452 1 2025-12-21 03:22:04.071 00:00:10.365 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:22:30.096 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40902 10 6452 1 2025-12-21 03:23:04.474 00:00:10.359 TCP 23.104.0.1:44072 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:23:30.321 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38322 10 6452 1 2025-12-21 03:19:20.496 00:05:54.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 03:19:20.494 00:05:54.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 03:24:04.885 00:00:10.385 TCP 23.104.0.1:55196 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:24:30.541 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46266 10 6452 1 2025-12-21 03:25:02.824 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 03:25:03.062 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:25:05.320 00:00:10.370 TCP 23.104.0.1:43476 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:25:30.777 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57878 10 6452 1 2025-12-21 03:26:05.729 00:00:10.373 TCP 23.104.0.1:50382 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:26:31.001 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42262 10 6452 1 2025-12-21 03:27:06.140 00:00:10.366 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:27:31.230 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38450 10 6452 1 2025-12-21 03:28:06.548 00:00:10.366 TCP 23.104.0.1:46500 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:28:31.397 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36646 10 6452 1 2025-12-21 03:29:06.953 00:00:10.370 TCP 23.104.0.1:34622 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:29:31.614 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54554 10 6452 1 2025-12-21 03:30:03.244 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:30:03.133 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 03:25:20.499 00:05:54.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 03:25:20.497 00:05:54.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 03:30:07.365 00:00:10.365 TCP 23.104.0.1:43834 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:30:31.828 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43626 10 6452 1 2025-12-21 03:31:07.767 00:00:10.369 TCP 23.104.0.1:40864 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:31:32.074 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60070 10 6452 1 2025-12-21 03:32:08.180 00:00:10.364 TCP 23.104.0.1:54542 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:32:32.289 00:00:10.715 TCP 1.101.0.1:3000 -> 22.102.0.1:58484 10 6452 1 2025-12-21 03:33:08.581 00:00:10.368 TCP 23.104.0.1:49490 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:33:33.068 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59498 10 6452 1 2025-12-21 03:34:08.988 00:00:10.328 TCP 23.104.0.1:46778 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:34:33.284 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56758 10 6452 1 2025-12-21 03:35:02.926 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:35:03.171 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 03:35:09.356 00:00:10.326 TCP 23.104.0.1:50082 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:35:33.456 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42994 10 6452 1 2025-12-21 03:31:20.498 00:05:54.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 03:31:20.500 00:05:54.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 03:36:09.720 00:00:10.375 TCP 23.104.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:36:33.667 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6452 1 2025-12-21 03:37:10.131 00:00:10.364 TCP 23.104.0.1:51238 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:37:33.885 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49186 10 6452 1 2025-12-21 03:38:10.536 00:00:10.324 TCP 23.104.0.1:53310 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:38:34.104 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37182 10 6452 1 2025-12-21 03:39:10.897 00:00:10.371 TCP 23.104.0.1:53706 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:39:34.317 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40260 10 6452 1 2025-12-21 03:40:03.379 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 03:40:03.324 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:40:11.302 00:00:10.363 TCP 23.104.0.1:38846 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:40:34.535 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45836 10 6452 1 2025-12-21 03:41:11.702 00:00:10.363 TCP 23.104.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:41:34.755 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6452 1 2025-12-21 03:37:20.498 00:05:54.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 03:37:20.501 00:05:54.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 03:42:12.108 00:00:10.367 TCP 23.104.0.1:36798 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:42:34.985 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46758 10 6452 1 2025-12-21 03:43:12.513 00:00:10.331 TCP 23.104.0.1:42270 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:43:35.214 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56918 10 6452 1 2025-12-21 03:44:12.885 00:00:10.376 TCP 23.104.0.1:33570 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:44:35.430 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60108 10 6452 1 2025-12-21 03:45:03.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 03:45:03.686 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:45:13.304 00:00:10.367 TCP 23.104.0.1:45618 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:45:35.654 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34834 10 6452 1 2025-12-21 03:46:13.707 00:00:10.321 TCP 23.104.0.1:48272 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:46:35.869 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38196 10 6452 1 2025-12-21 03:47:14.088 00:00:10.364 TCP 23.104.0.1:39124 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:47:36.103 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57650 10 6452 1 2025-12-21 03:43:20.506 00:05:54.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 03:43:20.504 00:05:54.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 03:48:14.493 00:00:10.367 TCP 23.104.0.1:43918 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:48:36.330 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34050 10 6452 1 2025-12-21 03:49:14.900 00:00:10.384 TCP 23.104.0.1:36544 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:49:36.549 00:00:10.998 TCP 1.101.0.1:3000 -> 22.102.0.1:59594 10 6452 1 2025-12-21 03:50:03.464 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 03:50:03.532 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:50:15.320 00:00:10.373 TCP 23.104.0.1:36194 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:50:37.575 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59624 10 6452 1 2025-12-21 03:51:15.737 00:00:10.368 TCP 23.104.0.1:58312 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:51:37.796 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37454 10 6452 1 2025-12-21 03:52:16.142 00:00:10.363 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:52:38.027 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36590 10 6452 1 2025-12-21 03:53:16.541 00:00:10.366 TCP 23.104.0.1:35694 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:53:38.208 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59902 10 6452 1 2025-12-21 03:49:20.509 00:05:54.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 03:49:20.506 00:05:54.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 03:54:16.940 00:00:10.375 TCP 23.104.0.1:46480 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:54:38.420 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:43900 10 6452 1 2025-12-21 03:55:03.358 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 03:55:03.501 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:55:17.355 00:00:10.362 TCP 23.104.0.1:54026 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:55:38.608 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57550 10 6452 1 2025-12-21 03:56:17.759 00:00:10.374 TCP 23.104.0.1:44908 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:56:38.831 00:00:10.606 TCP 1.101.0.1:3000 -> 22.102.0.1:55460 10 6452 1 2025-12-21 03:57:18.171 00:00:10.334 TCP 23.104.0.1:35714 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:57:39.480 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45302 10 6452 1 2025-12-21 03:58:18.553 00:00:10.363 TCP 23.104.0.1:51390 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:58:39.703 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46620 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1046, avg pps: 0, avg bpp: 317 Time window: 2025-12-21 02:55:20 - 2025-12-21 03:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0060s User: 0.0012s Wall: 0.0031s flows/second: 52364.9 Runtime: 0.0032s