Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 15:59:29.184 00:00:10.363 TCP 23.104.0.1:37356 -> 1.101.0.1:3000 11 1507 1 2025-12-21 15:59:36.829 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45532 10 6452 1 2025-12-21 15:55:20.762 00:05:54.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 15:55:20.760 00:05:54.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 16:00:18.226 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:00:18.064 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:00:29.589 00:00:10.323 TCP 23.104.0.1:49472 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:00:37.078 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:39050 10 6452 1 2025-12-21 16:01:29.949 00:00:10.387 TCP 23.104.0.1:51074 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:01:37.317 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50712 10 6452 1 2025-12-21 16:02:30.373 00:00:10.360 TCP 23.104.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:02:37.531 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 10 6452 1 2025-12-21 16:03:30.773 00:00:10.370 TCP 23.104.0.1:56624 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:03:37.746 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57262 10 6452 1 2025-12-21 16:04:31.185 00:00:10.361 TCP 23.104.0.1:51150 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:04:37.969 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36994 10 6452 1 2025-12-21 16:05:18.441 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:05:18.502 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:05:31.588 00:00:10.325 TCP 23.104.0.1:53020 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:05:38.198 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44760 10 6452 1 2025-12-21 16:01:20.763 00:05:54.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 16:01:20.767 00:05:54.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 16:06:31.953 00:00:10.369 TCP 23.104.0.1:38986 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:06:38.430 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34534 10 6452 1 2025-12-21 16:07:32.359 00:00:10.322 TCP 23.104.0.1:49824 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:07:38.645 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59468 10 6452 1 2025-12-21 16:08:32.722 00:00:10.377 TCP 23.104.0.1:41634 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:08:38.865 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43412 10 6452 1 2025-12-21 16:09:33.137 00:00:10.321 TCP 23.104.0.1:54542 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:09:39.087 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50660 10 6452 1 2025-12-21 16:10:18.284 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:10:18.305 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:10:33.500 00:00:10.365 TCP 23.104.0.1:33326 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:10:39.263 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58474 10 6452 1 2025-12-21 16:11:33.906 00:00:10.404 TCP 23.104.0.1:60936 -> 1.101.0.1:3000 15 1926 1 2025-12-21 16:11:39.556 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 12 10369 1 2025-12-21 16:07:20.765 00:05:54.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 16:07:20.767 00:05:54.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 16:12:34.348 00:00:10.366 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:12:39.797 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-12-21 16:13:34.752 00:00:10.384 TCP 23.104.0.1:38982 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:13:40.017 00:00:10.654 TCP 1.101.0.1:3000 -> 22.102.0.1:40384 10 6452 1 2025-12-21 16:14:35.171 00:00:10.368 TCP 23.104.0.1:38018 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:14:40.704 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57678 10 6452 1 2025-12-21 16:15:18.466 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:15:18.549 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:15:35.572 00:00:10.364 TCP 23.104.0.1:38542 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:15:40.919 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58914 10 6452 1 2025-12-21 16:16:35.980 00:00:10.326 TCP 23.104.0.1:44492 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:16:41.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35858 10 6452 1 2025-12-21 16:17:36.345 00:00:10.367 TCP 23.104.0.1:35618 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:17:41.343 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36424 10 6452 1 2025-12-21 16:13:20.779 00:05:54.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 16:13:20.775 00:05:54.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 16:18:41.560 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42176 10 6452 1 2025-12-21 16:18:36.757 00:00:10.382 TCP 23.104.0.1:45988 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:19:41.776 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54696 10 6452 1 2025-12-21 16:19:37.180 00:00:10.369 TCP 23.104.0.1:47896 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:20:18.640 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:20:18.239 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:20:37.588 00:00:10.374 TCP 23.104.0.1:45548 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:20:41.989 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56070 10 6452 1 2025-12-21 16:21:38.011 00:00:10.322 TCP 23.104.0.1:37008 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:21:42.219 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53720 10 6452 1 2025-12-21 16:22:38.370 00:00:10.321 TCP 23.104.0.1:39904 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:22:42.431 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57532 10 6452 1 2025-12-21 16:23:38.732 00:00:10.379 TCP 23.104.0.1:36598 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:23:42.659 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38508 10 6452 1 2025-12-21 16:19:20.780 00:05:54.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 16:19:20.778 00:05:54.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 16:24:39.146 00:00:10.367 TCP 23.104.0.1:47002 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:24:42.877 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59534 10 6452 1 2025-12-21 16:25:18.828 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:25:18.753 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:25:39.548 00:00:10.360 TCP 23.104.0.1:58350 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:25:43.120 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38176 10 6452 1 2025-12-21 16:26:39.950 00:00:10.365 TCP 23.104.0.1:60648 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:26:43.303 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52536 10 6452 1 2025-12-21 16:27:40.365 00:00:10.360 TCP 23.104.0.1:57854 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:27:43.516 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46138 10 6452 1 2025-12-21 16:28:40.766 00:00:10.328 TCP 23.104.0.1:48618 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:28:43.749 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40122 10 6452 1 2025-12-21 16:29:41.140 00:00:10.323 TCP 23.104.0.1:43044 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:29:43.964 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:55538 11 6504 1 2025-12-21 16:25:20.780 00:05:54.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 16:30:18.801 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:25:20.784 00:05:54.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 16:30:18.841 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:30:41.502 00:00:10.363 TCP 23.104.0.1:36130 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:30:44.243 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57296 10 6452 1 2025-12-21 16:31:41.912 00:00:10.344 TCP 23.104.0.1:41542 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:31:44.451 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43676 10 6452 1 2025-12-21 16:32:42.297 00:00:10.367 TCP 23.104.0.1:37850 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:32:44.662 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41044 10 6452 1 2025-12-21 16:33:42.704 00:00:10.364 TCP 23.104.0.1:50410 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:33:44.874 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:40104 10 6452 1 2025-12-21 16:34:43.108 00:00:10.366 TCP 23.104.0.1:49432 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:34:45.115 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-12-21 16:35:18.870 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:35:19.122 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:35:45.332 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47760 10 6452 1 2025-12-21 16:35:43.512 00:00:10.363 TCP 23.104.0.1:53262 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:31:20.786 00:05:54.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 16:31:20.782 00:05:54.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 16:36:43.917 00:00:10.372 TCP 23.104.0.1:49600 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:36:45.500 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59658 10 6452 1 2025-12-21 16:37:44.322 00:00:10.328 TCP 23.104.0.1:55028 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:37:45.715 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50208 10 6452 1 2025-12-21 16:38:44.687 00:00:10.366 TCP 23.104.0.1:42814 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:38:45.933 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:58898 10 6452 1 2025-12-21 16:39:46.133 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58814 10 6452 1 2025-12-21 16:39:45.102 00:00:11.010 TCP 23.104.0.1:43130 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:40:18.748 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:40:18.781 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:40:46.343 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39082 10 6452 1 2025-12-21 16:40:46.146 00:00:10.373 TCP 23.104.0.1:45156 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:41:46.557 00:00:10.362 TCP 23.104.0.1:52158 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:41:46.563 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49212 10 6452 1 2025-12-21 16:37:20.786 00:05:54.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 16:37:20.783 00:05:54.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 16:42:46.798 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34310 10 6452 1 2025-12-21 16:42:46.957 00:00:10.371 TCP 23.104.0.1:34934 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:43:47.025 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40912 10 6452 1 2025-12-21 16:43:47.358 00:00:10.366 TCP 23.104.0.1:59702 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:44:47.761 00:00:10.381 TCP 23.104.0.1:60622 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:44:47.204 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33392 10 6452 1 2025-12-21 16:45:18.950 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:45:18.971 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:45:47.420 00:00:11.265 TCP 1.101.0.1:3000 -> 22.102.0.1:52016 10 6452 1 2025-12-21 16:45:48.179 00:00:10.590 TCP 23.104.0.1:38690 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:46:48.810 00:00:10.361 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:46:48.716 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33022 10 6452 1 2025-12-21 16:47:49.209 00:00:10.365 TCP 23.104.0.1:59796 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:47:48.932 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:36284 10 6452 1 2025-12-21 16:43:20.787 00:05:54.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 16:43:20.785 00:05:54.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 16:48:49.615 00:00:10.370 TCP 23.104.0.1:40108 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:48:49.138 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51518 10 6452 1 2025-12-21 16:49:49.351 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59392 10 6452 1 2025-12-21 16:49:50.021 00:00:10.363 TCP 23.104.0.1:49912 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:50:19.026 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:50:19.278 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:50:49.559 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-12-21 16:50:50.425 00:00:10.375 TCP 23.104.0.1:45452 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:51:50.854 00:00:10.388 TCP 23.104.0.1:47858 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:51:49.785 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46950 10 6452 1 2025-12-21 16:52:50.008 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-12-21 16:52:51.283 00:00:10.366 TCP 23.104.0.1:49712 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:53:50.242 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40514 10 6452 1 2025-12-21 16:53:51.695 00:00:10.332 TCP 23.104.0.1:42806 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:49:20.789 00:05:54.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 16:49:20.786 00:05:54.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 16:54:50.455 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54862 10 6452 1 2025-12-21 16:54:52.093 00:00:10.331 TCP 23.104.0.1:33320 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:55:18.995 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 16:55:19.292 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 16:55:50.673 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36658 10 6452 1 2025-12-21 16:55:52.467 00:00:10.360 TCP 23.104.0.1:58336 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:56:50.894 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50648 10 6452 1 2025-12-21 16:56:52.867 00:00:10.370 TCP 23.104.0.1:48046 -> 1.101.0.1:3000 11 1507 1 2025-12-21 16:57:51.117 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55484 10 6452 1 2025-12-21 16:57:53.274 00:00:10.319 TCP 23.104.0.1:40130 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494777, total packets: 1558, avg bps: 1051, avg pps: 0, avg bpp: 317 Time window: 2025-12-21 15:55:20 - 2025-12-21 16:58:03 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0047s User: 0.0009s Wall: 0.0022s flows/second: 73338.1 Runtime: 0.0022s