Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 04:58:47.092 00:00:10.367 TCP 23.104.0.1:34390 -> 1.101.0.1:3000 11 1507 1 2025-12-21 04:58:52.565 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55382 10 6452 1 2025-12-21 04:59:47.497 00:00:10.371 TCP 23.104.0.1:57944 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:00:04.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 04:59:52.774 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40694 10 6452 1 2025-12-21 05:00:04.840 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 04:55:20.522 00:05:54.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 04:55:20.526 00:05:54.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 05:00:47.904 00:00:10.329 TCP 23.104.0.1:40800 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:00:52.982 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39014 10 6452 1 2025-12-21 05:01:48.274 00:00:10.366 TCP 23.104.0.1:58524 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:01:53.211 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36320 10 6452 1 2025-12-21 05:02:48.680 00:00:10.374 TCP 23.104.0.1:45710 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:02:53.422 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48356 10 6452 1 2025-12-21 05:03:49.109 00:00:10.364 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:03:53.632 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39458 10 6452 1 2025-12-21 05:04:49.516 00:00:10.365 TCP 23.104.0.1:47968 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:05:04.923 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 05:04:53.805 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60532 10 6452 1 2025-12-21 05:05:04.880 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 05:05:49.919 00:00:10.392 TCP 23.104.0.1:50962 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:05:54.041 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40376 10 6452 1 2025-12-21 05:01:20.530 00:05:54.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 05:01:20.531 00:05:54.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 05:06:50.351 00:00:10.370 TCP 23.104.0.1:57226 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:06:54.253 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58806 10 6452 1 2025-12-21 05:07:50.757 00:00:10.386 TCP 23.104.0.1:52486 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:07:54.466 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33416 10 6452 1 2025-12-21 05:08:51.184 00:00:10.378 TCP 23.104.0.1:60868 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:08:54.684 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46382 10 6452 1 2025-12-21 05:09:51.603 00:00:10.368 TCP 23.104.0.1:41534 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:10:04.914 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 05:09:54.902 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53178 10 6452 1 2025-12-21 05:10:05.040 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 05:10:52.006 00:00:10.438 TCP 23.104.0.1:35398 -> 1.101.0.1:3000 15 1926 1 2025-12-21 05:10:55.121 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:33306 12 10369 1 2025-12-21 05:11:55.361 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38340 10 6452 1 2025-12-21 05:11:52.484 00:00:10.322 TCP 23.104.0.1:49336 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:07:20.534 00:05:54.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 05:07:20.531 00:05:54.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 05:12:52.854 00:00:10.373 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:12:55.582 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46012 10 6452 1 2025-12-21 05:13:53.260 00:00:10.368 TCP 23.104.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:13:55.797 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37454 10 6452 1 2025-12-21 05:15:05.023 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 05:14:53.665 00:00:10.323 TCP 23.104.0.1:53682 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:14:55.968 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:54620 10 6452 1 2025-12-21 05:15:05.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 05:15:56.164 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50612 10 6452 1 2025-12-21 05:15:54.027 00:00:10.368 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:16:54.439 00:00:10.374 TCP 23.104.0.1:36950 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:16:56.379 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58704 10 6452 1 2025-12-21 05:17:54.853 00:00:10.377 TCP 23.104.0.1:53320 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:17:56.593 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59722 10 6452 1 2025-12-21 05:13:20.539 00:05:54.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 05:13:20.541 00:05:54.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 05:18:56.765 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 2025-12-21 05:18:55.267 00:00:10.366 TCP 23.104.0.1:48528 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:20:05.369 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 05:19:55.669 00:00:10.371 TCP 23.104.0.1:55580 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:20:05.661 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 05:19:56.988 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46572 10 6452 1 2025-12-21 05:20:56.102 00:00:10.367 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:20:57.211 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36246 10 6452 1 2025-12-21 05:21:56.506 00:00:10.370 TCP 23.104.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:21:57.418 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59156 10 6452 1 2025-12-21 05:22:57.633 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39122 10 6452 1 2025-12-21 05:22:56.914 00:00:10.363 TCP 23.104.0.1:54388 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:23:57.318 00:00:10.361 TCP 23.104.0.1:41124 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:23:57.846 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59698 10 6452 1 2025-12-21 05:19:20.543 00:05:54.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 05:19:20.542 00:05:54.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 05:25:05.523 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 05:25:05.513 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 05:24:57.718 00:00:10.333 TCP 23.104.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:24:58.081 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59016 10 6452 1 2025-12-21 05:25:58.254 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:33466 12 10369 1 2025-12-21 05:25:58.106 00:00:10.435 TCP 23.104.0.1:60932 -> 1.101.0.1:3000 15 1926 1 2025-12-21 05:26:58.498 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57468 10 6452 1 2025-12-21 05:26:58.579 00:00:10.335 TCP 23.104.0.1:41964 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:27:58.710 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58172 10 6452 1 2025-12-21 05:27:58.956 00:00:10.364 TCP 23.104.0.1:48782 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:28:59.359 00:00:10.341 TCP 23.104.0.1:49042 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:28:58.928 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:55006 10 6452 1 2025-12-21 05:30:05.612 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 05:30:05.645 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 05:29:59.123 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45724 10 6452 1 2025-12-21 05:29:59.739 00:00:10.364 TCP 23.104.0.1:59044 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:25:20.544 00:05:54.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 05:25:20.546 00:05:54.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 05:31:00.140 00:00:10.328 TCP 23.104.0.1:46604 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:30:59.331 00:00:10.685 TCP 1.101.0.1:3000 -> 22.102.0.1:60098 10 6452 1 2025-12-21 05:32:00.075 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42852 10 6452 1 2025-12-21 05:32:00.506 00:00:10.321 TCP 23.104.0.1:48142 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:33:00.291 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57268 10 6452 1 2025-12-21 05:33:00.865 00:00:10.370 TCP 23.104.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:34:01.279 00:00:10.368 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:34:00.503 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55790 10 6452 1 2025-12-21 05:35:05.715 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 05:35:05.662 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 05:35:00.720 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47886 10 6452 1 2025-12-21 05:35:01.679 00:00:10.370 TCP 23.104.0.1:59694 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:36:00.942 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:59084 10 6452 1 2025-12-21 05:31:20.548 00:05:54.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 05:36:02.107 00:00:10.367 TCP 23.104.0.1:58118 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:31:20.545 00:05:54.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 05:37:01.184 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51168 10 6452 1 2025-12-21 05:37:02.507 00:00:10.365 TCP 23.104.0.1:49166 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:38:01.398 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33298 10 6452 1 2025-12-21 05:38:02.915 00:00:10.974 TCP 23.104.0.1:35758 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:39:01.609 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45418 10 6452 1 2025-12-21 05:39:03.932 00:00:10.380 TCP 23.104.0.1:48786 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:40:05.888 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 05:40:05.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 05:40:04.350 00:00:10.369 TCP 23.104.0.1:44280 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:40:01.826 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59780 10 6452 1 2025-12-21 05:41:02.059 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49980 10 6452 1 2025-12-21 05:41:04.783 00:00:10.376 TCP 23.104.0.1:57510 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:37:20.548 00:05:54.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 05:42:05.195 00:00:10.361 TCP 23.104.0.1:41762 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:42:02.284 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34618 10 6452 1 2025-12-21 05:37:20.551 00:05:54.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 05:43:02.494 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55022 10 6452 1 2025-12-21 05:43:05.593 00:00:10.335 TCP 23.104.0.1:49592 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:44:05.966 00:00:10.334 TCP 23.104.0.1:33092 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:44:02.708 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60410 10 6452 1 2025-12-21 05:45:05.816 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 05:45:05.841 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 05:45:06.331 00:00:10.324 TCP 23.104.0.1:44608 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:45:02.920 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54778 10 6452 1 2025-12-21 05:46:03.137 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52016 12 6556 1 2025-12-21 05:46:06.690 00:00:10.324 TCP 23.104.0.1:37602 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:47:03.350 00:00:10.915 TCP 1.101.0.1:3000 -> 22.102.0.1:39668 10 6452 1 2025-12-21 05:47:07.059 00:00:10.321 TCP 23.104.0.1:49066 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:43:20.553 00:05:54.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 05:43:20.556 00:05:54.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 05:48:04.306 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34924 10 6452 1 2025-12-21 05:48:07.419 00:00:10.326 TCP 23.104.0.1:58556 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:49:04.525 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33626 10 6452 1 2025-12-21 05:49:07.789 00:00:10.373 TCP 23.104.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:50:05.829 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 05:50:05.845 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 05:50:04.712 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44676 10 6452 1 2025-12-21 05:50:08.196 00:00:10.370 TCP 23.104.0.1:48778 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:51:04.929 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:55910 10 6452 1 2025-12-21 05:51:08.595 00:00:10.358 TCP 23.104.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:52:05.172 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40602 10 6452 1 2025-12-21 05:52:08.993 00:00:10.365 TCP 23.104.0.1:34912 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:53:05.393 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56822 10 6452 1 2025-12-21 05:53:09.390 00:00:10.366 TCP 23.104.0.1:45232 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:49:20.554 00:05:54.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 05:54:05.616 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42340 10 6452 1 2025-12-21 05:49:20.557 00:05:54.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 05:54:09.791 00:00:10.372 TCP 23.104.0.1:56380 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:55:05.847 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 05:55:06.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 05:55:05.836 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60966 10 6452 1 2025-12-21 05:55:10.193 00:00:10.367 TCP 23.104.0.1:38492 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:56:06.082 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42288 10 6452 1 2025-12-21 05:56:10.601 00:00:10.382 TCP 23.104.0.1:54444 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:57:06.306 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50128 10 6452 1 2025-12-21 05:57:11.020 00:00:10.360 TCP 23.104.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-12-21 05:58:06.515 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60248 10 6452 1 2025-12-21 05:58:11.420 00:00:10.366 TCP 23.104.0.1:36972 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507124, total packets: 1586, avg bps: 1072, avg pps: 0, avg bpp: 319 Time window: 2025-12-21 04:55:20 - 2025-12-21 05:58:21 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0010s Wall: 0.0019s flows/second: 87182.0 Runtime: 0.0019s