Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 14:59:05.125 00:00:10.369 TCP 23.104.0.1:57836 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:59:20.291 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47808 10 6452 1 2025-12-21 15:00:05.528 00:00:10.364 TCP 23.104.0.1:38508 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:00:16.927 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:55:20.740 00:05:54.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 14:55:20.743 00:05:54.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 15:00:16.986 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:00:20.507 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60110 10 6452 1 2025-12-21 15:01:05.928 00:00:10.384 TCP 23.104.0.1:54144 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:01:20.732 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46956 10 6452 1 2025-12-21 15:02:06.352 00:00:10.368 TCP 23.104.0.1:45312 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:02:20.948 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49902 10 6452 1 2025-12-21 15:03:06.757 00:00:10.391 TCP 23.104.0.1:58502 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:03:21.180 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54990 10 6452 1 2025-12-21 15:04:07.188 00:00:10.375 TCP 23.104.0.1:43266 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:04:21.400 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41618 10 6452 1 2025-12-21 15:05:17.394 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 15:05:07.596 00:00:10.371 TCP 23.104.0.1:45000 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:05:17.380 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:05:21.615 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58494 10 6452 1 2025-12-21 15:01:20.741 00:05:54.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 15:01:20.743 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 15:06:08.003 00:00:10.361 TCP 23.104.0.1:36630 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:06:21.826 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59534 10 6452 1 2025-12-21 15:07:08.406 00:00:10.373 TCP 23.104.0.1:57460 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:07:22.065 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47894 10 6452 1 2025-12-21 15:08:08.820 00:00:10.361 TCP 23.104.0.1:51220 -> 1.101.0.1:3000 12 1559 1 2025-12-21 15:08:22.277 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47390 10 6452 1 2025-12-21 15:09:09.221 00:00:10.366 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:09:22.488 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59670 10 6452 1 2025-12-21 15:10:16.996 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:10:09.626 00:00:10.362 TCP 23.104.0.1:50452 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:10:17.172 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 15:10:22.699 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50068 10 6452 1 2025-12-21 15:11:10.030 00:00:10.370 TCP 23.104.0.1:45704 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:11:22.921 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53780 10 6452 1 2025-12-21 15:07:20.745 00:05:54.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 15:07:20.741 00:05:54.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 15:12:10.435 00:00:10.366 TCP 23.104.0.1:54196 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:12:23.157 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54662 10 6452 1 2025-12-21 15:13:10.839 00:00:10.342 TCP 23.104.0.1:38118 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:13:23.364 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43050 10 6452 1 2025-12-21 15:14:11.221 00:00:10.360 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:14:23.575 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44098 10 6452 1 2025-12-21 15:15:11.617 00:00:10.325 TCP 23.104.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:15:17.195 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 15:15:17.256 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:15:23.788 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51766 10 6452 1 2025-12-21 15:16:11.980 00:00:10.372 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:16:23.963 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60512 10 6452 1 2025-12-21 15:17:12.396 00:00:10.327 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:17:24.141 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50458 10 6452 1 2025-12-21 15:13:20.744 00:05:54.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 15:13:20.746 00:05:54.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 15:18:12.763 00:00:10.383 TCP 23.104.0.1:38378 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:18:24.361 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59830 10 6452 1 2025-12-21 15:19:13.187 00:00:10.367 TCP 23.104.0.1:36906 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:19:24.574 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47120 10 6452 1 2025-12-21 15:20:17.500 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:20:17.593 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 15:20:13.591 00:00:10.324 TCP 23.104.0.1:48786 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:20:24.793 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51922 10 6452 1 2025-12-21 15:21:13.954 00:00:10.326 TCP 23.104.0.1:50426 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:21:25.003 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49192 10 6452 1 2025-12-21 15:22:14.327 00:00:10.367 TCP 23.104.0.1:53618 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:22:25.221 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45288 10 6452 1 2025-12-21 15:23:14.730 00:00:10.364 TCP 23.104.0.1:43162 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:23:25.394 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39080 10 6452 1 2025-12-21 15:19:20.748 00:05:54.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 15:19:20.746 00:05:54.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 15:24:15.132 00:00:10.368 TCP 23.104.0.1:34374 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:24:25.604 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32832 10 6452 1 2025-12-21 15:25:17.386 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:25:17.394 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 15:25:15.536 00:00:10.367 TCP 23.104.0.1:50122 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:25:25.778 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51436 10 6452 1 2025-12-21 15:26:15.941 00:00:10.461 TCP 23.104.0.1:42054 -> 1.101.0.1:3000 15 1926 1 2025-12-21 15:26:25.956 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:38782 12 10375 1 2025-12-21 15:27:16.451 00:00:10.324 TCP 23.104.0.1:57852 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:27:26.212 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56986 10 6452 1 2025-12-21 15:28:16.812 00:00:10.365 TCP 23.104.0.1:36842 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:28:26.428 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58560 10 6452 1 2025-12-21 15:29:17.217 00:00:10.326 TCP 23.104.0.1:50548 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:29:26.650 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49030 10 6452 1 2025-12-21 15:25:20.749 00:05:54.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 15:25:20.746 00:05:54.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 15:30:17.416 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:30:17.583 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 15:30:17.577 00:00:10.368 TCP 23.104.0.1:50510 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:30:26.872 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46300 12 6556 1 2025-12-21 15:31:17.983 00:00:10.367 TCP 23.104.0.1:34228 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:31:27.117 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57276 10 6452 1 2025-12-21 15:32:18.390 00:00:10.359 TCP 23.104.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:32:27.331 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49000 10 6452 1 2025-12-21 15:33:18.796 00:00:10.363 TCP 23.104.0.1:42196 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:33:27.540 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34024 10 6452 1 2025-12-21 15:34:19.203 00:00:10.374 TCP 23.104.0.1:38852 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:34:27.759 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40366 10 6452 1 2025-12-21 15:35:17.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:35:17.541 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 15:35:19.615 00:00:10.370 TCP 23.104.0.1:37208 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:35:27.934 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49092 10 6452 1 2025-12-21 15:31:20.752 00:05:54.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 15:31:20.754 00:05:54.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 15:36:20.027 00:00:10.371 TCP 23.104.0.1:35852 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:36:28.184 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35242 10 6452 1 2025-12-21 15:37:20.432 00:00:10.375 TCP 23.104.0.1:52942 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:37:28.392 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:41868 11 6504 1 2025-12-21 15:38:20.838 00:00:10.386 TCP 23.104.0.1:44190 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:38:28.665 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40628 10 6452 1 2025-12-21 15:39:21.260 00:00:10.363 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:39:28.879 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6452 1 2025-12-21 15:40:17.798 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:40:17.761 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 15:40:21.659 00:00:10.377 TCP 23.104.0.1:59028 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:40:29.106 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58502 10 6452 1 2025-12-21 15:41:22.092 00:00:10.326 TCP 23.104.0.1:58556 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:41:29.318 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54970 10 6452 1 2025-12-21 15:37:20.755 00:05:54.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 15:37:20.757 00:05:54.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 15:42:22.455 00:00:10.323 TCP 23.104.0.1:52452 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:42:29.531 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42502 10 6452 1 2025-12-21 15:43:22.815 00:00:10.328 TCP 23.104.0.1:46934 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:43:29.717 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51844 10 6452 1 2025-12-21 15:44:23.182 00:00:10.366 TCP 23.104.0.1:47300 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:44:29.889 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56606 10 6452 1 2025-12-21 15:45:17.719 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 15:45:17.742 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:45:23.585 00:00:10.324 TCP 23.104.0.1:34670 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:45:30.114 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58368 10 6452 1 2025-12-21 15:46:23.952 00:00:10.364 TCP 23.104.0.1:43212 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:46:30.326 00:00:12.612 TCP 1.101.0.1:3000 -> 22.102.0.1:35710 10 6452 1 2025-12-21 15:47:24.354 00:00:10.364 TCP 23.104.0.1:46544 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:47:32.977 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-12-21 15:43:20.756 00:05:54.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 15:43:20.758 00:05:54.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 15:48:24.760 00:00:10.374 TCP 23.104.0.1:38756 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:48:33.171 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:48216 10 6452 1 2025-12-21 15:49:25.175 00:00:10.335 TCP 23.104.0.1:48116 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:49:33.359 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54614 10 6452 1 2025-12-21 15:50:17.756 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 15:50:17.998 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:50:25.558 00:00:10.363 TCP 23.104.0.1:60734 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:50:33.563 00:00:11.527 TCP 1.101.0.1:3000 -> 22.102.0.1:43562 10 6452 1 2025-12-21 15:51:25.965 00:00:10.373 TCP 23.104.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:51:35.125 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57300 10 6452 1 2025-12-21 15:52:26.376 00:00:10.361 TCP 23.104.0.1:44926 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:52:35.336 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60724 10 6452 1 2025-12-21 15:53:26.773 00:00:10.370 TCP 23.104.0.1:54850 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:53:35.560 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42434 10 6452 1 2025-12-21 15:49:20.770 00:05:54.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 15:49:20.768 00:05:54.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 15:54:27.186 00:00:10.330 TCP 23.104.0.1:48122 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:54:35.732 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56222 10 6452 1 2025-12-21 15:55:18.375 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 15:55:18.079 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 15:55:27.555 00:00:10.365 TCP 23.104.0.1:34594 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:55:35.941 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48662 10 6452 1 2025-12-21 15:56:27.965 00:00:10.370 TCP 23.104.0.1:56638 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:56:36.167 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-12-21 15:57:28.372 00:00:10.363 TCP 23.104.0.1:41994 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:57:36.383 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39506 10 6452 1 2025-12-21 15:58:28.775 00:00:10.369 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:58:36.617 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51462 10 6452 1 Summary: total flows: 164, total bytes: 502898, total packets: 1582, avg bps: 1057, avg pps: 0, avg bpp: 317 Time window: 2025-12-21 14:55:20 - 2025-12-21 15:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0053s User: 0.0018s Wall: 0.0021s flows/second: 77244.9 Runtime: 0.0021s