Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 18:58:45.987 00:00:10.371 TCP 23.104.0.1:41078 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:59:26.621 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 12 6556 1 2025-12-21 18:59:46.399 00:00:10.398 TCP 23.104.0.1:43258 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:55:20.825 00:05:54.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 18:55:20.822 00:05:54.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 19:00:21.733 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:00:21.711 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:00:26.843 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42758 10 6452 1 2025-12-21 19:00:46.851 00:00:10.344 TCP 23.104.0.1:49002 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:01:27.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60754 10 6452 1 2025-12-21 19:01:47.229 00:00:10.362 TCP 23.104.0.1:53348 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:02:27.297 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38650 10 6452 1 2025-12-21 19:02:47.631 00:00:10.365 TCP 23.104.0.1:51292 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:03:27.508 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42324 10 6452 1 2025-12-21 19:03:48.060 00:00:10.328 TCP 23.104.0.1:38320 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:04:27.682 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49918 10 6452 1 2025-12-21 19:04:48.422 00:00:10.368 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:05:21.758 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:05:21.809 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:05:27.892 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50346 10 6452 1 2025-12-21 19:05:48.829 00:00:10.341 TCP 23.104.0.1:57452 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:01:20.823 00:05:54.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 19:01:20.825 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 19:06:28.110 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56122 10 6452 1 2025-12-21 19:06:49.212 00:00:10.364 TCP 23.104.0.1:56762 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:07:28.283 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38482 10 6452 1 2025-12-21 19:07:49.617 00:00:10.362 TCP 23.104.0.1:33888 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:08:28.495 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48990 10 6452 1 2025-12-21 19:08:50.017 00:00:10.324 TCP 23.104.0.1:45810 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:09:28.718 00:00:10.706 TCP 1.101.0.1:3000 -> 22.102.0.1:38128 10 6452 1 2025-12-21 19:09:50.383 00:00:10.911 TCP 23.104.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:10:21.915 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:10:22.023 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:10:29.465 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49752 10 6452 1 2025-12-21 19:10:51.334 00:00:10.364 TCP 23.104.0.1:47692 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:11:29.684 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:47364 10 6452 1 2025-12-21 19:11:51.738 00:00:10.363 TCP 23.104.0.1:48814 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:07:20.826 00:05:54.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 19:07:20.828 00:05:54.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 19:12:29.924 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:59534 10 6452 1 2025-12-21 19:12:52.138 00:00:10.366 TCP 23.104.0.1:44532 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:13:30.171 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33750 10 6452 1 2025-12-21 19:13:52.545 00:00:10.359 TCP 23.104.0.1:53668 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:14:30.391 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39688 10 6452 1 2025-12-21 19:14:52.942 00:00:10.379 TCP 23.104.0.1:52600 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:15:22.482 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:15:22.412 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:15:30.561 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50232 10 6452 1 2025-12-21 19:15:53.371 00:00:10.434 TCP 23.104.0.1:49784 -> 1.101.0.1:3000 15 1926 1 2025-12-21 19:16:30.737 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:54448 12 10369 1 2025-12-21 19:16:53.844 00:00:10.393 TCP 23.104.0.1:35706 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:17:30.980 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:38030 10 6452 1 2025-12-21 19:17:54.275 00:00:10.369 TCP 23.104.0.1:50040 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:13:20.827 00:05:54.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 19:13:20.830 00:05:54.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 19:18:31.183 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47172 10 6452 1 2025-12-21 19:18:54.680 00:00:10.371 TCP 23.104.0.1:39696 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:19:31.398 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44724 10 6452 1 2025-12-21 19:19:55.111 00:00:10.362 TCP 23.104.0.1:45930 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:20:21.949 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:20:21.944 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:20:31.614 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49142 10 6452 1 2025-12-21 19:20:55.513 00:00:10.366 TCP 23.104.0.1:32784 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:21:31.854 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37616 10 6452 1 2025-12-21 19:21:55.917 00:00:10.368 TCP 23.104.0.1:36112 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:22:32.085 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43642 11 6504 1 2025-12-21 19:22:56.326 00:00:10.390 TCP 23.104.0.1:49272 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:23:32.316 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6452 1 2025-12-21 19:23:56.762 00:00:10.381 TCP 23.104.0.1:34004 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:19:20.828 00:05:54.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 19:19:20.830 00:05:54.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 19:24:32.494 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:57114 10 6452 1 2025-12-21 19:24:57.180 00:00:10.366 TCP 23.104.0.1:40130 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:25:22.211 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:25:22.346 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:25:32.685 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54806 10 6452 1 2025-12-21 19:25:57.585 00:00:10.365 TCP 23.104.0.1:36078 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:26:32.901 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36694 10 6452 1 2025-12-21 19:26:57.986 00:00:10.329 TCP 23.104.0.1:47498 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:27:33.121 00:00:10.302 TCP 1.101.0.1:3000 -> 22.102.0.1:53754 10 6452 1 2025-12-21 19:27:58.354 00:00:10.342 TCP 23.104.0.1:37764 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:28:33.463 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:37604 10 6452 1 2025-12-21 19:28:58.735 00:00:10.372 TCP 23.104.0.1:56686 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:29:33.664 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40218 10 6452 1 2025-12-21 19:29:59.144 00:00:10.327 TCP 23.104.0.1:33904 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:25:20.833 00:05:54.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 19:25:20.837 00:05:54.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 19:30:22.202 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:30:22.272 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:30:33.886 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43324 10 6452 1 2025-12-21 19:30:59.512 00:00:10.372 TCP 23.104.0.1:56370 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:31:34.108 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53024 10 6452 1 2025-12-21 19:31:59.922 00:00:10.383 TCP 23.104.0.1:50800 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:32:34.319 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43030 10 6452 1 2025-12-21 19:33:00.346 00:00:10.328 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:33:34.545 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52044 10 6452 1 2025-12-21 19:34:00.705 00:00:10.366 TCP 23.104.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:34:34.715 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 10 6452 1 2025-12-21 19:35:01.112 00:00:10.366 TCP 23.104.0.1:37446 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:35:22.741 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:35:22.605 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:35:34.942 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:54012 12 6556 1 2025-12-21 19:36:01.516 00:00:10.373 TCP 23.104.0.1:40766 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:31:20.835 00:05:54.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 19:31:20.838 00:05:54.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 19:36:35.226 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48028 10 6452 1 2025-12-21 19:37:01.925 00:00:10.394 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:37:35.446 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39584 10 6452 1 2025-12-21 19:38:02.361 00:00:10.363 TCP 23.104.0.1:42306 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:38:35.671 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39802 10 6452 1 2025-12-21 19:39:02.765 00:00:10.340 TCP 23.104.0.1:46398 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:39:35.888 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47484 10 6452 1 2025-12-21 19:40:03.142 00:00:10.365 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:40:22.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:40:22.628 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:40:36.117 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38738 10 6452 1 2025-12-21 19:41:03.546 00:00:10.659 TCP 23.104.0.1:36010 -> 1.101.0.1:3000 15 1926 1 2025-12-21 19:41:36.342 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60948 12 10375 1 2025-12-21 19:37:20.835 00:05:54.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 19:42:04.242 00:00:10.360 TCP 23.104.0.1:59206 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:37:20.837 00:05:54.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 19:42:36.586 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37820 10 6452 1 2025-12-21 19:43:04.645 00:00:10.706 TCP 23.104.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:43:36.808 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50618 10 6452 1 2025-12-21 19:44:05.379 00:00:10.378 TCP 23.104.0.1:41370 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:44:37.030 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34130 10 6452 1 2025-12-21 19:45:05.793 00:00:11.133 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:45:22.665 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:45:22.845 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:45:37.257 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40334 10 6452 1 2025-12-21 19:46:06.962 00:00:10.368 TCP 23.104.0.1:36602 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:46:37.465 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56754 10 6452 1 2025-12-21 19:47:07.369 00:00:10.381 TCP 23.104.0.1:39628 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:47:37.682 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47664 10 6452 1 2025-12-21 19:43:20.839 00:05:54.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 19:43:20.837 00:05:54.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 19:48:07.786 00:00:10.885 TCP 23.104.0.1:53306 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:48:37.906 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43150 10 6452 1 2025-12-21 19:49:08.721 00:00:10.371 TCP 23.104.0.1:45994 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:49:38.128 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43290 10 6452 1 2025-12-21 19:50:09.132 00:00:10.366 TCP 23.104.0.1:40856 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:50:22.887 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:50:22.833 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:50:38.349 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48512 10 6452 1 2025-12-21 19:51:09.540 00:00:10.368 TCP 23.104.0.1:37150 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:51:38.567 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:35884 10 6452 1 2025-12-21 19:52:09.941 00:00:10.374 TCP 23.104.0.1:45022 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:52:38.783 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57458 10 6452 1 2025-12-21 19:53:10.370 00:00:10.371 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:53:38.996 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47176 10 6452 1 2025-12-21 19:49:20.837 00:05:54.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 19:49:20.842 00:05:54.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 19:54:10.790 00:00:10.365 TCP 23.104.0.1:32962 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:54:39.228 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60066 10 6452 1 2025-12-21 19:55:11.195 00:00:10.366 TCP 23.104.0.1:49514 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:55:22.969 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 19:55:22.825 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 19:55:39.460 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-12-21 19:56:11.601 00:00:10.359 TCP 23.104.0.1:37582 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:56:39.677 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54104 10 6452 1 2025-12-21 19:57:11.999 00:00:10.321 TCP 23.104.0.1:49582 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:57:39.912 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57044 10 6452 1 2025-12-21 19:58:12.356 00:00:10.361 TCP 23.104.0.1:50164 -> 1.101.0.1:3000 11 1507 1 2025-12-21 19:58:40.120 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49700 10 6452 1 Summary: total flows: 164, total bytes: 507286, total packets: 1589, avg bps: 1065, avg pps: 0, avg bpp: 319 Time window: 2025-12-21 18:55:20 - 2025-12-21 19:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0054s User: 0.0009s Wall: 0.0016s flows/second: 103734.9 Runtime: 0.0016s