Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 03:59:18.960 00:00:10.366 TCP 23.104.0.1:54474 -> 1.101.0.1:3000 11 1507 1 2025-12-21 03:59:39.919 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35960 10 6452 1 2025-12-21 04:00:03.671 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:00:03.667 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 03:55:20.510 00:05:54.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 03:55:20.507 00:05:54.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 04:00:19.360 00:00:10.361 TCP 23.104.0.1:35506 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:00:40.166 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60102 10 6452 1 2025-12-21 04:01:19.764 00:00:10.375 TCP 23.104.0.1:45144 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:01:40.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53094 10 6452 1 2025-12-21 04:02:20.176 00:00:10.370 TCP 23.104.0.1:40292 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:02:40.605 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-12-21 04:03:20.579 00:00:10.748 TCP 23.104.0.1:53676 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:03:40.822 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55848 10 6452 1 2025-12-21 04:04:21.362 00:00:10.366 TCP 23.104.0.1:37768 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:04:41.043 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53236 10 6452 1 2025-12-21 04:05:03.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:05:03.832 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:05:21.766 00:00:10.375 TCP 23.104.0.1:36254 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:05:41.250 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50988 10 6452 1 2025-12-21 04:01:20.512 00:05:54.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 04:01:20.509 00:05:54.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 04:06:22.183 00:00:10.365 TCP 23.104.0.1:60054 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:06:41.482 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41878 10 6452 1 2025-12-21 04:07:22.585 00:00:10.368 TCP 23.104.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:07:41.659 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33858 10 6452 1 2025-12-21 04:08:22.988 00:00:10.366 TCP 23.104.0.1:35182 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:08:41.872 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53198 10 6452 1 2025-12-21 04:09:23.393 00:00:11.053 TCP 23.104.0.1:34050 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:09:42.102 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53652 10 6452 1 2025-12-21 04:10:03.909 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:10:03.972 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:10:24.476 00:00:10.363 TCP 23.104.0.1:56254 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:10:42.317 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56678 10 6452 1 2025-12-21 04:11:24.877 00:00:10.327 TCP 23.104.0.1:39302 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:11:42.530 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37888 10 6452 1 2025-12-21 04:07:20.513 00:05:54.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 04:07:20.512 00:05:54.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 04:12:25.241 00:00:10.363 TCP 23.104.0.1:51390 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:12:42.749 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37314 10 6452 1 2025-12-21 04:13:25.647 00:00:10.370 TCP 23.104.0.1:44478 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:13:42.963 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52484 10 6452 1 2025-12-21 04:14:26.061 00:00:10.366 TCP 23.104.0.1:52834 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:14:43.198 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40220 10 6452 1 2025-12-21 04:15:03.773 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:15:04.004 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:15:26.463 00:00:10.807 TCP 23.104.0.1:49012 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:15:43.420 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33374 10 6452 1 2025-12-21 04:16:27.306 00:00:10.369 TCP 23.104.0.1:47692 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:16:43.633 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56792 10 6452 1 2025-12-21 04:17:27.712 00:00:10.364 TCP 23.104.0.1:37392 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:17:43.815 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59382 10 6452 1 2025-12-21 04:13:20.517 00:05:54.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 04:13:20.515 00:05:54.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 04:18:28.118 00:00:10.372 TCP 23.104.0.1:33800 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:18:44.033 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36242 10 6452 1 2025-12-21 04:19:28.533 00:00:10.364 TCP 23.104.0.1:46652 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:19:44.251 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42140 10 6452 1 2025-12-21 04:20:04.142 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:20:03.808 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:20:28.946 00:00:10.377 TCP 23.104.0.1:53254 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:20:44.470 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34508 10 6452 1 2025-12-21 04:21:29.360 00:00:10.364 TCP 23.104.0.1:36974 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:21:44.680 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38908 10 6452 1 2025-12-21 04:22:29.763 00:00:10.378 TCP 23.104.0.1:59904 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:22:44.898 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45742 10 6452 1 2025-12-21 04:23:30.182 00:00:10.372 TCP 23.104.0.1:43648 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:23:45.114 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35882 10 6452 1 2025-12-21 04:19:20.517 00:05:54.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 04:19:20.516 00:05:54.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 04:24:30.594 00:00:10.368 TCP 23.104.0.1:37848 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:24:45.337 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33644 10 6452 1 2025-12-21 04:25:04.438 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:25:04.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:25:31.002 00:00:10.364 TCP 23.104.0.1:33676 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:25:45.513 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55388 10 6452 1 2025-12-21 04:26:31.402 00:00:10.325 TCP 23.104.0.1:57854 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:26:45.685 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36728 10 6452 1 2025-12-21 04:27:31.761 00:00:10.334 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:27:45.855 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-12-21 04:28:32.134 00:00:10.319 TCP 23.104.0.1:55368 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:28:46.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34070 10 6452 1 2025-12-21 04:29:32.494 00:00:10.368 TCP 23.104.0.1:35990 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:29:46.295 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6452 1 2025-12-21 04:30:04.398 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:30:04.266 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:25:20.519 00:05:54.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 04:25:20.517 00:05:54.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 04:30:32.900 00:00:10.369 TCP 23.104.0.1:43190 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:30:46.515 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38314 10 6452 1 2025-12-21 04:31:33.307 00:00:10.366 TCP 23.104.0.1:60686 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:31:46.729 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40648 10 6452 1 2025-12-21 04:32:33.711 00:00:10.362 TCP 23.104.0.1:43162 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:32:46.948 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:44246 10 6452 1 2025-12-21 04:33:34.116 00:00:10.362 TCP 23.104.0.1:59334 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:33:47.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43528 10 6452 1 2025-12-21 04:34:34.517 00:00:10.328 TCP 23.104.0.1:47452 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:34:47.430 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49400 10 6452 1 2025-12-21 04:35:04.603 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:35:04.465 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:35:34.886 00:00:10.379 TCP 23.104.0.1:34902 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:35:47.602 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46818 10 6452 1 2025-12-21 04:31:20.521 00:05:54.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 04:31:20.518 00:05:54.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 04:36:35.305 00:00:10.360 TCP 23.104.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:36:47.819 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59230 10 6452 1 2025-12-21 04:37:35.708 00:00:10.343 TCP 23.104.0.1:34084 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:37:48.035 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35002 10 6452 1 2025-12-21 04:38:36.105 00:00:11.870 TCP 23.104.0.1:49538 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:38:48.248 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34290 10 6452 1 2025-12-21 04:39:38.019 00:00:10.360 TCP 23.104.0.1:33548 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:39:48.465 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53602 10 6452 1 2025-12-21 04:40:04.419 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:40:04.489 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:40:38.418 00:00:10.379 TCP 23.104.0.1:60558 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:40:48.672 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42996 10 6452 1 2025-12-21 04:41:38.837 00:00:10.390 TCP 23.104.0.1:33496 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:41:48.885 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35228 10 6452 1 2025-12-21 04:37:20.522 00:05:54.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 04:37:20.519 00:05:54.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 04:42:39.261 00:00:10.364 TCP 23.104.0.1:57486 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:42:49.107 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46566 10 6452 1 2025-12-21 04:43:39.665 00:00:10.362 TCP 23.104.0.1:47278 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:43:49.281 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48582 10 6452 1 2025-12-21 04:44:40.090 00:00:11.633 TCP 23.104.0.1:58940 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:44:49.501 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38170 10 6452 1 2025-12-21 04:45:04.928 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:45:04.584 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:45:41.762 00:00:10.383 TCP 23.104.0.1:55886 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:45:49.714 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44880 10 6452 1 2025-12-21 04:46:42.178 00:00:10.369 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:46:49.955 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47478 10 6452 1 2025-12-21 04:47:42.583 00:00:10.325 TCP 23.104.0.1:46866 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:47:50.193 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35594 10 6452 1 2025-12-21 04:43:20.521 00:05:54.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 04:43:20.523 00:05:54.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 04:48:42.947 00:00:10.328 TCP 23.104.0.1:44360 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:48:50.407 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46452 10 6452 1 2025-12-21 04:49:43.313 00:00:10.325 TCP 23.104.0.1:50060 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:49:50.626 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53044 10 6452 1 2025-12-21 04:50:04.491 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:50:04.681 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:50:43.676 00:00:10.362 TCP 23.104.0.1:48592 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:50:50.847 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44428 10 6452 1 2025-12-21 04:51:44.102 00:00:10.366 TCP 23.104.0.1:40614 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:51:51.085 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45742 10 6452 1 2025-12-21 04:52:44.509 00:00:10.374 TCP 23.104.0.1:50484 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:52:51.297 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43886 10 6452 1 2025-12-21 04:53:44.929 00:00:10.383 TCP 23.104.0.1:55380 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:53:51.472 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43130 10 6452 1 2025-12-21 04:49:20.524 00:05:54.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 04:49:20.522 00:05:54.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 04:54:45.350 00:00:10.362 TCP 23.104.0.1:32778 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:54:51.678 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49260 10 6452 1 2025-12-21 04:55:04.704 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:55:04.618 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:55:45.752 00:00:10.452 TCP 23.104.0.1:39906 -> 1.101.0.1:3000 15 1926 1 2025-12-21 04:55:51.892 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:51340 12 10375 1 2025-12-21 04:56:46.249 00:00:10.365 TCP 23.104.0.1:50290 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:56:52.142 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35574 10 6452 1 2025-12-21 04:57:46.653 00:00:10.365 TCP 23.104.0.1:53312 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:57:52.356 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39950 10 6452 1 Summary: total flows: 162, total bytes: 494731, total packets: 1557, avg bps: 1052, avg pps: 0, avg bpp: 317 Time window: 2025-12-21 03:55:20 - 2025-12-21 04:58:02 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0066s User: 0.0000s Wall: 0.0020s flows/second: 80842.0 Runtime: 0.0020s