Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-24 18:59:04.822 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:34534 10 6452 1 2025-12-24 18:59:28.512 00:00:10.361 TCP 23.104.0.1:52964 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:00:04.990 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37318 10 6452 1 2025-12-24 19:00:28.915 00:00:10.370 TCP 23.104.0.1:46182 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:01:05.166 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37574 10 6452 1 2025-12-24 19:01:29.325 00:00:10.367 TCP 23.104.0.1:41254 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:01:48.372 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:01:48.629 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:02:05.345 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:50586 10 6452 1 2025-12-24 19:02:29.733 00:00:10.366 TCP 23.104.0.1:57236 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:03:05.517 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56418 10 6452 1 2025-12-24 19:03:30.139 00:00:10.330 TCP 23.104.0.1:41248 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:04:05.726 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39272 10 6452 1 2025-12-24 19:00:17.315 00:05:04.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-24 19:00:17.318 00:05:04.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-24 19:04:30.507 00:00:10.370 TCP 23.104.0.1:57380 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:05:05.906 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46708 10 6452 1 2025-12-24 19:05:30.923 00:00:10.385 TCP 23.104.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:06:06.113 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39434 10 6452 1 2025-12-24 19:06:31.352 00:00:10.366 TCP 23.104.0.1:36526 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:06:48.470 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:06:48.512 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:07:06.340 00:00:10.588 TCP 1.101.0.1:3000 -> 22.102.0.1:49034 12 6556 1 2025-12-24 19:07:31.756 00:00:10.379 TCP 23.104.0.1:54734 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:08:06.967 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36232 10 6452 1 2025-12-24 19:08:32.177 00:00:10.367 TCP 23.104.0.1:55520 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:09:07.198 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42904 10 6452 1 2025-12-24 19:09:32.581 00:00:10.360 TCP 23.104.0.1:41120 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:06:17.320 00:05:04.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-24 19:10:07.375 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49358 10 6452 1 2025-12-24 19:06:17.318 00:05:04.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-24 19:10:32.980 00:00:10.373 TCP 23.104.0.1:54252 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:11:07.580 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36442 10 6452 1 2025-12-24 19:11:33.392 00:00:10.325 TCP 23.104.0.1:37430 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:11:48.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:11:48.861 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:12:07.754 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37366 10 6452 1 2025-12-24 19:12:33.757 00:00:10.369 TCP 23.104.0.1:38684 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:13:07.928 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53332 10 6452 1 2025-12-24 19:13:34.167 00:00:10.326 TCP 23.104.0.1:45590 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:14:08.160 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57148 10 6452 1 2025-12-24 19:14:34.531 00:00:10.359 TCP 23.104.0.1:60698 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:15:08.361 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45894 10 6452 1 2025-12-24 19:15:34.931 00:00:10.331 TCP 23.104.0.1:44940 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:16:08.537 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:55046 10 6452 1 2025-12-24 19:12:17.320 00:05:04.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-24 19:12:17.324 00:05:04.967 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-24 19:16:35.308 00:00:10.326 TCP 23.104.0.1:57626 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:16:48.657 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:16:48.692 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:17:08.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48994 10 6452 1 2025-12-24 19:17:35.673 00:00:10.369 TCP 23.104.0.1:57830 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:18:08.943 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60814 10 6452 1 2025-12-24 19:18:36.107 00:00:10.369 TCP 23.104.0.1:34444 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:19:09.176 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34978 10 6452 1 2025-12-24 19:19:36.516 00:00:10.366 TCP 23.104.0.1:51686 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:20:09.391 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56324 10 6452 1 2025-12-24 19:20:36.921 00:00:10.347 TCP 23.104.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:21:09.599 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37686 10 6452 1 2025-12-24 19:21:49.397 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:21:49.152 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:21:37.307 00:00:10.368 TCP 23.104.0.1:54818 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:22:09.810 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45520 10 6452 1 2025-12-24 19:18:17.323 00:05:04.974 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-24 19:18:17.327 00:05:04.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-24 19:22:37.711 00:00:10.325 TCP 23.104.0.1:52972 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:23:10.024 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38054 10 6452 1 2025-12-24 19:23:38.099 00:00:10.347 TCP 23.104.0.1:38442 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:24:10.238 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2025-12-24 19:24:38.483 00:00:10.327 TCP 23.104.0.1:56842 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:25:10.453 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58374 10 6452 1 2025-12-24 19:25:38.847 00:00:10.381 TCP 23.104.0.1:48126 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:26:10.662 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51180 10 6452 1 2025-12-24 19:26:49.076 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:26:39.270 00:00:10.364 TCP 23.104.0.1:43492 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:26:49.205 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:27:10.881 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59946 10 6452 1 2025-12-24 19:27:39.671 00:00:10.373 TCP 23.104.0.1:49262 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:28:11.104 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56650 10 6452 1 2025-12-24 19:24:17.330 00:05:04.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-24 19:24:17.331 00:05:04.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-24 19:28:40.100 00:00:10.384 TCP 23.104.0.1:34924 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:29:11.313 00:00:10.732 TCP 1.101.0.1:3000 -> 22.102.0.1:37448 10 6452 1 2025-12-24 19:29:40.523 00:00:10.362 TCP 23.104.0.1:57606 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:30:12.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36086 10 6452 1 2025-12-24 19:30:40.928 00:00:10.346 TCP 23.104.0.1:33386 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:31:12.303 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43078 10 6452 1 2025-12-24 19:31:48.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:31:49.075 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:31:41.313 00:00:10.381 TCP 23.104.0.1:43180 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:32:12.531 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41746 10 6452 1 2025-12-24 19:32:41.734 00:00:10.322 TCP 23.104.0.1:39206 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:33:12.769 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56224 10 6452 1 2025-12-24 19:33:42.108 00:00:10.687 TCP 23.104.0.1:57046 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:30:17.332 00:05:04.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-24 19:34:13.001 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56324 10 6452 1 2025-12-24 19:30:17.329 00:05:04.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-24 19:34:42.857 00:00:10.371 TCP 23.104.0.1:44212 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:35:13.221 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:41140 10 6452 1 2025-12-24 19:35:43.266 00:00:10.366 TCP 23.104.0.1:54416 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:36:13.388 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50726 10 6452 1 2025-12-24 19:36:49.632 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:36:49.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:36:43.673 00:00:10.366 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:37:13.604 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56838 10 6452 1 2025-12-24 19:37:44.103 00:00:10.322 TCP 23.104.0.1:54450 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:38:13.815 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57832 10 6452 1 2025-12-24 19:38:44.465 00:00:10.419 TCP 23.104.0.1:48384 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:39:14.001 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6452 1 2025-12-24 19:39:44.920 00:00:10.377 TCP 23.104.0.1:47852 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:40:14.222 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56938 10 6452 1 2025-12-24 19:36:17.332 00:05:04.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-24 19:36:17.335 00:05:04.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-24 19:40:45.337 00:00:10.368 TCP 23.104.0.1:51810 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:41:14.436 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33436 10 6452 1 2025-12-24 19:41:49.255 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:41:49.349 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:41:45.743 00:00:10.367 TCP 23.104.0.1:38770 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:42:14.604 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33384 10 6452 1 2025-12-24 19:42:46.142 00:00:10.369 TCP 23.104.0.1:44656 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:43:14.815 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35350 10 6452 1 2025-12-24 19:43:46.552 00:00:10.362 TCP 23.104.0.1:33778 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:44:15.067 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56880 10 6452 1 2025-12-24 19:44:46.951 00:00:10.365 TCP 23.104.0.1:39192 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:45:15.276 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 10 6452 1 2025-12-24 19:45:47.354 00:00:10.363 TCP 23.104.0.1:42392 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:42:17.337 00:05:04.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-24 19:46:15.496 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50760 10 6452 1 2025-12-24 19:42:17.334 00:05:04.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-24 19:46:49.381 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:46:49.314 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:46:47.758 00:00:10.376 TCP 23.104.0.1:54802 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:47:15.708 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56340 10 6452 1 2025-12-24 19:47:48.177 00:00:10.367 TCP 23.104.0.1:53096 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:48:15.889 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-12-24 19:48:48.580 00:00:10.367 TCP 23.104.0.1:34736 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:49:16.112 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52984 10 6452 1 2025-12-24 19:49:48.985 00:00:10.372 TCP 23.104.0.1:56224 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:50:16.324 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46528 10 6452 1 2025-12-24 19:50:49.393 00:00:10.362 TCP 23.104.0.1:36920 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:51:16.493 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53208 10 6452 1 2025-12-24 19:51:49.592 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:51:49.622 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:51:49.796 00:00:11.072 TCP 23.104.0.1:38452 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:52:16.703 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34398 10 6452 1 2025-12-24 19:48:17.335 00:05:04.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-24 19:48:17.338 00:05:04.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-24 19:52:50.902 00:00:10.368 TCP 23.104.0.1:35544 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:53:16.917 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52310 10 6452 1 2025-12-24 19:53:51.312 00:00:10.366 TCP 23.104.0.1:46896 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:54:17.130 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52920 10 6452 1 2025-12-24 19:54:51.725 00:00:10.375 TCP 23.104.0.1:38746 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:55:17.348 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:53810 10 6452 1 2025-12-24 19:55:52.140 00:00:11.238 TCP 23.104.0.1:46016 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:56:17.542 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42152 10 6452 1 2025-12-24 19:56:49.568 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-24 19:56:49.792 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-24 19:56:53.418 00:00:10.361 TCP 23.104.0.1:43444 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:57:17.717 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58390 10 6452 1 2025-12-24 19:57:53.818 00:00:10.362 TCP 23.104.0.1:39076 -> 1.101.0.1:3000 11 1507 1 2025-12-24 19:54:17.338 00:05:04.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-24 19:54:17.336 00:05:04.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-24 19:58:17.927 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1098, avg pps: 0, avg bpp: 317 Time window: 2025-12-24 18:59:04 - 2025-12-24 19:59:22 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0053s User: 0.0011s Wall: 0.0022s flows/second: 74433.5 Runtime: 0.0022s