Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 07:59:00.270 00:00:10.366 TCP 23.104.0.1:48380 -> 1.101.0.1:3000 11 1507 1 2025-12-21 07:59:41.312 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49272 10 6452 1 2025-12-21 08:00:00.672 00:00:10.323 TCP 23.104.0.1:48436 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:00:08.415 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:00:08.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 07:55:20.599 00:05:54.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 07:55:20.602 00:05:54.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 08:00:41.538 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45646 10 6452 1 2025-12-21 08:01:01.036 00:00:10.368 TCP 23.104.0.1:45080 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:01:41.753 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52188 10 6452 1 2025-12-21 08:02:01.440 00:00:10.326 TCP 23.104.0.1:39320 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:02:41.926 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56096 10 6452 1 2025-12-21 08:03:01.805 00:00:10.364 TCP 23.104.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:03:42.100 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59402 10 6452 1 2025-12-21 08:04:02.208 00:00:10.362 TCP 23.104.0.1:43960 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:04:42.309 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57872 10 6452 1 2025-12-21 08:05:08.624 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:05:08.530 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:05:02.610 00:00:10.361 TCP 23.104.0.1:41108 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:05:42.488 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49474 10 6452 1 2025-12-21 08:01:20.604 00:05:54.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 08:01:20.602 00:05:54.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 08:06:03.012 00:00:10.371 TCP 23.104.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:06:42.704 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57282 10 6452 1 2025-12-21 08:07:03.417 00:00:10.363 TCP 23.104.0.1:52110 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:07:42.875 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52260 10 6452 1 2025-12-21 08:08:03.818 00:00:10.328 TCP 23.104.0.1:59298 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:08:43.104 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54978 10 6452 1 2025-12-21 08:09:04.193 00:00:10.363 TCP 23.104.0.1:50454 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:09:43.316 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37210 10 6452 1 2025-12-21 08:10:08.841 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:10:08.783 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:10:04.595 00:00:10.327 TCP 23.104.0.1:33650 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:10:43.528 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48724 10 6452 1 2025-12-21 08:11:04.963 00:00:10.330 TCP 23.104.0.1:45224 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:11:43.704 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-12-21 08:07:20.606 00:05:54.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 08:12:05.332 00:00:10.371 TCP 23.104.0.1:46032 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:07:20.604 00:05:54.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 08:12:43.920 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50140 10 6452 1 2025-12-21 08:13:05.748 00:00:10.366 TCP 23.104.0.1:58904 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:13:44.159 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45242 10 6452 1 2025-12-21 08:14:06.150 00:00:10.896 TCP 23.104.0.1:46900 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:14:44.372 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54928 10 6452 1 2025-12-21 08:15:09.185 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:15:09.188 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:15:07.104 00:00:10.363 TCP 23.104.0.1:51886 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:15:44.585 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:39786 12 10369 1 2025-12-21 08:16:07.500 00:00:10.508 TCP 23.104.0.1:36110 -> 1.101.0.1:3000 15 1926 1 2025-12-21 08:16:44.829 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50568 10 6452 1 2025-12-21 08:17:08.059 00:00:10.368 TCP 23.104.0.1:34496 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:17:45.004 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55704 10 6452 1 2025-12-21 08:13:20.604 00:05:54.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 08:13:20.608 00:05:54.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 08:18:08.465 00:00:10.376 TCP 23.104.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:18:45.219 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54038 10 6452 1 2025-12-21 08:19:08.882 00:00:10.386 TCP 23.104.0.1:60248 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:19:45.433 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57282 10 6452 1 2025-12-21 08:20:08.721 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:20:08.882 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:20:09.310 00:00:10.363 TCP 23.104.0.1:43320 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:20:45.612 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:46566 10 6452 1 2025-12-21 08:21:09.710 00:00:10.368 TCP 23.104.0.1:45292 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:21:45.798 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46294 10 6452 1 2025-12-21 08:22:10.122 00:00:10.625 TCP 23.104.0.1:57438 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:22:45.973 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40946 10 6452 1 2025-12-21 08:23:10.780 00:00:10.368 TCP 23.104.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:23:46.210 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:43284 10 6452 1 2025-12-21 08:19:20.607 00:05:54.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 08:19:20.610 00:05:54.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 08:24:11.184 00:00:10.332 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:24:46.416 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34824 10 6452 1 2025-12-21 08:25:09.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:25:09.179 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:25:11.554 00:00:10.365 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:25:46.633 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38792 10 6452 1 2025-12-21 08:26:11.962 00:00:10.362 TCP 23.104.0.1:51972 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:26:46.810 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-12-21 08:27:12.365 00:00:10.507 TCP 23.104.0.1:54904 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:27:47.032 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50260 10 6452 1 2025-12-21 08:28:12.915 00:00:10.413 TCP 23.104.0.1:47516 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:28:47.243 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53894 10 6452 1 2025-12-21 08:29:13.370 00:00:10.324 TCP 23.104.0.1:49324 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:29:47.457 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41348 10 6452 1 2025-12-21 08:30:09.045 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:30:09.117 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:25:20.610 00:05:54.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 08:25:20.614 00:05:54.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 08:30:13.741 00:00:10.324 TCP 23.104.0.1:58478 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:30:47.672 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35532 10 6452 1 2025-12-21 08:31:14.112 00:00:10.325 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:31:47.907 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54862 10 6452 1 2025-12-21 08:32:14.479 00:00:10.365 TCP 23.104.0.1:47380 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:32:48.123 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52630 10 6452 1 2025-12-21 08:33:14.887 00:00:10.332 TCP 23.104.0.1:51106 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:33:48.334 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-12-21 08:34:15.255 00:00:10.367 TCP 23.104.0.1:58070 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:34:48.508 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53872 10 6452 1 2025-12-21 08:35:09.147 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:35:09.388 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:35:15.661 00:00:10.373 TCP 23.104.0.1:37878 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:35:48.679 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 10 6452 1 2025-12-21 08:31:20.612 00:05:54.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 08:31:20.616 00:05:54.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 08:36:16.106 00:00:10.360 TCP 23.104.0.1:33670 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:36:48.888 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34606 10 6452 1 2025-12-21 08:37:16.505 00:00:10.363 TCP 23.104.0.1:48730 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:37:49.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44996 10 6452 1 2025-12-21 08:38:16.904 00:00:10.364 TCP 23.104.0.1:34666 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:38:49.322 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52552 10 6452 1 2025-12-21 08:39:17.303 00:00:10.364 TCP 23.104.0.1:53334 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:39:49.538 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51944 10 6452 1 2025-12-21 08:40:09.439 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:40:09.364 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:40:17.708 00:00:10.371 TCP 23.104.0.1:40442 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:40:49.746 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:59238 12 10375 1 2025-12-21 08:41:18.110 00:00:10.441 TCP 23.104.0.1:56866 -> 1.101.0.1:3000 15 1926 1 2025-12-21 08:41:49.984 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49340 10 6452 1 2025-12-21 08:37:20.616 00:05:54.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 08:37:20.614 00:05:54.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 08:42:18.590 00:00:10.364 TCP 23.104.0.1:60920 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:42:50.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-12-21 08:43:18.990 00:00:16.678 TCP 23.104.0.1:43536 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:43:50.422 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52558 10 6452 1 2025-12-21 08:44:25.708 00:00:10.359 TCP 23.104.0.1:41314 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:44:50.634 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-12-21 08:45:09.620 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:45:09.565 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:45:26.108 00:00:10.363 TCP 23.104.0.1:41444 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:45:50.843 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:59398 12 10369 1 2025-12-21 08:46:26.509 00:00:10.442 TCP 23.104.0.1:51216 -> 1.101.0.1:3000 15 1926 1 2025-12-21 08:46:51.102 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53664 10 6452 1 2025-12-21 08:47:26.987 00:00:10.326 TCP 23.104.0.1:37724 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:47:51.329 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43248 10 6452 1 2025-12-21 08:43:20.618 00:05:54.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 08:43:20.615 00:05:54.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 08:48:27.351 00:00:10.418 TCP 23.104.0.1:33990 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:48:51.540 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57650 10 6452 1 2025-12-21 08:49:27.811 00:00:10.361 TCP 23.104.0.1:54178 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:49:51.755 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44036 10 6452 1 2025-12-21 08:50:09.692 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:50:09.557 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:50:28.211 00:00:10.365 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:50:51.964 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45852 10 6452 1 2025-12-21 08:51:28.614 00:00:10.363 TCP 23.104.0.1:39014 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:51:52.183 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51208 10 6452 1 2025-12-21 08:52:29.019 00:00:10.367 TCP 23.104.0.1:47950 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:52:52.396 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33064 10 6452 1 2025-12-21 08:53:29.428 00:00:10.360 TCP 23.104.0.1:56352 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:53:52.567 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37932 10 6452 1 2025-12-21 08:49:20.617 00:05:54.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 08:49:20.620 00:05:54.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 08:54:29.825 00:00:10.359 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:54:52.784 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:36998 10 6452 1 2025-12-21 08:55:09.651 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:55:09.664 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 08:55:30.225 00:00:10.373 TCP 23.104.0.1:50108 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:55:52.983 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55966 10 6452 1 2025-12-21 08:56:30.641 00:00:10.323 TCP 23.104.0.1:52530 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:56:53.201 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-12-21 08:57:31.005 00:00:10.363 TCP 23.104.0.1:35542 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:57:53.409 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40716 10 6452 1 2025-12-21 08:58:31.411 00:00:10.366 TCP 23.104.0.1:54444 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 504910, total packets: 1580, avg bps: 1062, avg pps: 0, avg bpp: 319 Time window: 2025-12-21 07:55:20 - 2025-12-21 08:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0060s User: 0.0010s Wall: 0.0022s flows/second: 73065.3 Runtime: 0.0022s