Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 08:58:53.629 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49422 10 6452 1 2025-12-21 08:59:31.813 00:00:10.368 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-12-21 08:59:53.860 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59340 10 6452 1 2025-12-21 09:00:10.068 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:00:09.818 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 08:55:20.623 00:05:54.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 08:55:20.621 00:05:54.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 09:00:32.223 00:00:10.840 TCP 23.104.0.1:43376 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:00:54.036 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56456 10 6452 1 2025-12-21 09:01:33.111 00:00:10.363 TCP 23.104.0.1:48242 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:01:54.248 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45416 10 6452 1 2025-12-21 09:02:33.515 00:00:10.363 TCP 23.104.0.1:55070 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:02:54.458 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45418 10 6452 1 2025-12-21 09:03:33.920 00:00:10.335 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:03:54.669 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44100 10 6452 1 2025-12-21 09:04:34.296 00:00:10.366 TCP 23.104.0.1:36986 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:04:54.887 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42924 10 6452 1 2025-12-21 09:05:09.978 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 09:05:09.643 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:05:34.699 00:00:10.367 TCP 23.104.0.1:57280 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:05:55.109 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41822 10 6452 1 2025-12-21 09:01:20.625 00:05:54.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 09:01:20.623 00:05:54.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 09:06:35.107 00:00:10.357 TCP 23.104.0.1:46468 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:06:55.321 00:00:10.250 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 10 6452 1 2025-12-21 09:07:35.504 00:00:10.372 TCP 23.104.0.1:33624 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:07:55.611 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41198 10 6452 1 2025-12-21 09:08:35.934 00:00:10.382 TCP 23.104.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:08:55.823 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45918 10 6452 1 2025-12-21 09:09:36.355 00:00:10.362 TCP 23.104.0.1:52300 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:09:56.042 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36222 10 6452 1 2025-12-21 09:10:09.933 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 09:10:09.773 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:10:36.757 00:00:10.365 TCP 23.104.0.1:55694 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:10:56.250 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:58610 10 6452 1 2025-12-21 09:11:37.163 00:00:11.616 TCP 23.104.0.1:41978 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:11:56.492 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34948 10 6452 1 2025-12-21 09:07:20.624 00:05:54.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 09:07:20.626 00:05:54.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 09:12:38.818 00:00:10.362 TCP 23.104.0.1:39842 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:12:56.725 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43908 10 6452 1 2025-12-21 09:13:39.219 00:00:10.370 TCP 23.104.0.1:39230 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:13:56.946 00:00:10.538 TCP 1.101.0.1:3000 -> 22.102.0.1:37604 10 6452 1 2025-12-21 09:14:39.629 00:00:10.370 TCP 23.104.0.1:59848 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:15:10.260 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:14:57.521 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35788 10 6452 1 2025-12-21 09:15:10.278 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 09:15:40.053 00:00:10.370 TCP 23.104.0.1:44810 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:15:57.737 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58042 10 6452 1 2025-12-21 09:16:40.464 00:00:10.326 TCP 23.104.0.1:54030 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:16:57.910 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:56692 10 6452 1 2025-12-21 09:17:40.827 00:00:10.379 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:17:58.104 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36140 10 6452 1 2025-12-21 09:13:20.627 00:05:54.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 09:13:20.629 00:05:54.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 09:18:41.255 00:00:10.368 TCP 23.104.0.1:56696 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:18:58.275 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:32938 10 6452 1 2025-12-21 09:19:41.661 00:00:10.368 TCP 23.104.0.1:42222 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:19:58.562 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52380 10 6452 1 2025-12-21 09:20:10.181 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 09:20:10.173 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:20:42.089 00:00:10.367 TCP 23.104.0.1:49840 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:20:58.735 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52962 10 6452 1 2025-12-21 09:21:42.490 00:00:10.328 TCP 23.104.0.1:56742 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:21:58.915 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57232 10 6452 1 2025-12-21 09:22:42.854 00:00:10.382 TCP 23.104.0.1:55114 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:22:59.122 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48058 10 6452 1 2025-12-21 09:23:43.271 00:00:10.364 TCP 23.104.0.1:46106 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:23:59.334 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:58888 10 6452 1 2025-12-21 09:19:20.627 00:05:54.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 09:19:20.630 00:05:54.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 09:24:43.677 00:00:10.373 TCP 23.104.0.1:54354 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:24:59.525 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36318 10 6452 1 2025-12-21 09:25:10.166 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 09:25:10.490 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:25:44.108 00:00:10.366 TCP 23.104.0.1:49872 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:25:59.695 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:50576 10 6452 1 2025-12-21 09:26:44.509 00:00:10.364 TCP 23.104.0.1:37544 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:26:59.931 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60030 10 6452 1 2025-12-21 09:27:44.911 00:00:10.363 TCP 23.104.0.1:59268 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:28:00.170 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-12-21 09:28:45.314 00:00:10.363 TCP 23.104.0.1:48330 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:29:00.381 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42472 10 6452 1 2025-12-21 09:29:45.717 00:00:10.370 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:30:10.368 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 09:30:00.595 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37954 10 6452 1 2025-12-21 09:30:10.333 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:25:20.634 00:05:54.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 09:25:20.631 00:05:54.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 09:30:46.123 00:00:10.327 TCP 23.104.0.1:56696 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:31:00.765 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60022 10 6452 1 2025-12-21 09:31:46.495 00:00:10.363 TCP 23.104.0.1:35274 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:32:00.984 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:59832 10 6452 1 2025-12-21 09:32:46.894 00:00:10.379 TCP 23.104.0.1:37472 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:33:01.174 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56024 10 6452 1 2025-12-21 09:33:47.309 00:00:10.325 TCP 23.104.0.1:35910 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:34:01.389 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47822 10 6452 1 2025-12-21 09:34:47.669 00:00:10.367 TCP 23.104.0.1:37710 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:35:01.600 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49440 10 6452 1 2025-12-21 09:35:10.336 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 09:35:10.483 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:35:48.106 00:00:10.362 TCP 23.104.0.1:42158 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:36:01.816 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40012 10 6452 1 2025-12-21 09:31:20.635 00:05:54.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 09:31:20.633 00:05:54.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 09:36:48.503 00:00:10.366 TCP 23.104.0.1:50054 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:37:02.037 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35628 10 6452 1 2025-12-21 09:37:48.906 00:00:10.372 TCP 23.104.0.1:34978 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:38:02.253 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43978 10 6452 1 2025-12-21 09:38:49.315 00:00:10.328 TCP 23.104.0.1:37266 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:39:02.464 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39338 10 6452 1 2025-12-21 09:39:49.686 00:00:10.364 TCP 23.104.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:40:10.605 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:40:10.838 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 09:40:02.679 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-12-21 09:40:50.098 00:00:10.366 TCP 23.104.0.1:46706 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:41:02.850 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52638 10 6452 1 2025-12-21 09:41:50.504 00:00:10.368 TCP 23.104.0.1:38318 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:37:20.635 00:05:54.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 09:42:03.029 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49852 10 6452 1 2025-12-21 09:37:20.637 00:05:54.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 09:42:50.909 00:00:10.371 TCP 23.104.0.1:40232 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:43:03.205 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56722 10 6452 1 2025-12-21 09:43:51.318 00:00:10.370 TCP 23.104.0.1:35918 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:44:03.417 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50902 10 6452 1 2025-12-21 09:44:51.724 00:00:10.326 TCP 23.104.0.1:44160 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:45:10.595 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 09:45:10.365 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:45:03.634 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60800 10 6452 1 2025-12-21 09:45:52.102 00:00:10.368 TCP 23.104.0.1:36398 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:46:03.804 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34594 10 6452 1 2025-12-21 09:46:52.509 00:00:10.363 TCP 23.104.0.1:36462 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:47:04.021 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55732 10 6452 1 2025-12-21 09:47:52.906 00:00:10.374 TCP 23.104.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:43:20.637 00:05:54.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 09:48:04.229 00:00:10.257 TCP 1.101.0.1:3000 -> 22.102.0.1:38200 10 6452 1 2025-12-21 09:43:20.638 00:05:54.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 09:48:53.318 00:00:10.363 TCP 23.104.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:49:04.527 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42770 10 6452 1 2025-12-21 09:50:10.865 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 09:49:53.726 00:00:10.372 TCP 23.104.0.1:33114 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:50:10.538 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:50:04.742 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41710 10 6452 1 2025-12-21 09:50:54.141 00:00:10.365 TCP 23.104.0.1:35924 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:51:04.956 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:45148 10 6452 1 2025-12-21 09:51:54.569 00:00:10.371 TCP 23.104.0.1:40364 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:52:05.152 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45944 10 6452 1 2025-12-21 09:52:54.972 00:00:10.374 TCP 23.104.0.1:39700 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:53:05.363 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51804 10 6452 1 2025-12-21 09:53:55.381 00:00:10.375 TCP 23.104.0.1:41262 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:49:20.642 00:05:54.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 09:54:05.577 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56316 10 6452 1 2025-12-21 09:49:20.646 00:05:54.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 09:54:55.797 00:00:10.331 TCP 23.104.0.1:50568 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:55:11.034 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 09:55:10.956 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 09:55:05.783 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42284 10 6452 1 2025-12-21 09:55:56.167 00:00:10.371 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:56:05.997 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39278 10 6452 1 2025-12-21 09:56:56.570 00:00:10.363 TCP 23.104.0.1:59258 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:57:06.173 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51032 10 6452 1 2025-12-21 09:57:56.974 00:00:10.380 TCP 23.104.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-12-21 09:58:06.391 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52206 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1052, avg pps: 0, avg bpp: 318 Time window: 2025-12-21 08:55:20 - 2025-12-21 09:58:16 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0032s Wall: 0.0026s flows/second: 63840.8 Runtime: 0.0026s