Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-26 18:59:22.849 00:00:10.381 TCP 23.104.0.1:53946 -> 1.101.0.1:3000 11 1507 1 2025-12-26 18:59:40.219 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53406 10 6452 1 2025-12-26 19:00:23.274 00:00:10.366 TCP 23.104.0.1:44862 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:00:40.431 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38748 10 6452 1 2025-12-26 19:01:23.682 00:00:12.369 TCP 23.104.0.1:60406 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:01:40.644 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58310 10 6452 1 2025-12-26 19:02:26.097 00:00:10.364 TCP 23.104.0.1:42538 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:02:46.055 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:02:45.980 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:02:40.856 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57380 10 6452 1 2025-12-26 19:03:26.510 00:00:10.324 TCP 23.104.0.1:51428 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:03:41.081 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38690 10 6452 1 2025-12-26 18:59:23.280 00:05:54.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-26 19:00:18.242 00:05:05.036 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-26 19:04:26.872 00:00:10.362 TCP 23.104.0.1:53908 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:04:41.307 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59976 10 6452 1 2025-12-26 19:05:27.276 00:00:10.363 TCP 23.104.0.1:52956 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:05:41.536 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54262 10 6452 1 2025-12-26 19:06:27.678 00:00:10.368 TCP 23.104.0.1:45640 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:06:41.750 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54978 10 6452 1 2025-12-26 19:07:28.113 00:00:10.369 TCP 23.104.0.1:34372 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:07:46.388 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:07:46.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:07:41.983 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49708 10 6452 1 2025-12-26 19:08:28.525 00:00:10.363 TCP 23.104.0.1:45100 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:08:42.215 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59260 10 6452 1 2025-12-26 19:09:28.929 00:00:10.379 TCP 23.104.0.1:55130 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:09:42.429 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49222 10 6452 1 2025-12-26 19:05:23.280 00:05:54.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-26 19:06:18.243 00:05:05.036 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-26 19:10:29.352 00:00:10.367 TCP 23.104.0.1:36500 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:10:42.653 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41848 10 6452 1 2025-12-26 19:11:29.757 00:00:10.382 TCP 23.104.0.1:36048 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:11:42.871 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51844 10 6452 1 2025-12-26 19:12:30.216 00:00:10.322 TCP 23.104.0.1:55592 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:12:46.434 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:12:46.831 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:12:43.114 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33478 10 6452 1 2025-12-26 19:13:30.582 00:00:10.368 TCP 23.104.0.1:52760 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:13:43.336 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40712 10 6452 1 2025-12-26 19:14:30.989 00:00:10.361 TCP 23.104.0.1:34794 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:14:43.547 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34224 10 6452 1 2025-12-26 19:15:31.388 00:00:10.362 TCP 23.104.0.1:38776 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:15:43.758 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55368 10 6452 1 2025-12-26 19:11:23.283 00:05:54.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-26 19:12:18.243 00:05:05.038 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-26 19:16:31.789 00:00:10.364 TCP 23.104.0.1:56324 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:16:43.973 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47368 10 6452 1 2025-12-26 19:17:46.663 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:17:32.195 00:00:10.365 TCP 23.104.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:17:46.667 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:17:44.208 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52956 10 6452 1 2025-12-26 19:18:32.601 00:00:10.372 TCP 23.104.0.1:53150 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:18:44.387 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57126 10 6452 1 2025-12-26 19:19:33.027 00:00:10.377 TCP 23.104.0.1:37312 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:19:44.561 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42722 10 6452 1 2025-12-26 19:20:33.442 00:00:10.361 TCP 23.104.0.1:52692 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:20:44.785 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38408 10 6452 1 2025-12-26 19:21:33.844 00:00:10.385 TCP 23.104.0.1:53124 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:21:45.000 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40178 10 6452 1 2025-12-26 19:17:23.283 00:05:54.959 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-26 19:18:18.246 00:05:05.037 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-26 19:22:46.717 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:22:46.659 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:22:34.272 00:00:10.366 TCP 23.104.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:22:45.215 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:50286 10 6452 1 2025-12-26 19:23:34.674 00:00:10.366 TCP 23.104.0.1:48338 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:23:45.428 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49768 10 6452 1 2025-12-26 19:24:35.111 00:00:10.366 TCP 23.104.0.1:52652 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:24:45.651 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34792 10 6452 1 2025-12-26 19:25:35.525 00:00:10.326 TCP 23.104.0.1:37754 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:25:45.869 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60488 10 6452 1 2025-12-26 19:26:35.887 00:00:10.377 TCP 23.104.0.1:47772 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:26:46.103 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60878 12 6556 1 2025-12-26 19:27:46.759 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:27:36.305 00:00:10.323 TCP 23.104.0.1:51672 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:27:46.915 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:27:46.320 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56034 10 6452 1 2025-12-26 19:23:23.286 00:05:54.959 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-26 19:24:18.246 00:05:05.038 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-26 19:28:36.669 00:00:10.326 TCP 23.104.0.1:53036 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:28:46.534 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36856 10 6452 1 2025-12-26 19:29:37.036 00:00:10.360 TCP 23.104.0.1:51290 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:29:46.753 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57974 10 6452 1 2025-12-26 19:30:37.438 00:00:10.370 TCP 23.104.0.1:41254 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:30:46.928 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59408 10 6452 1 2025-12-26 19:31:37.852 00:00:10.372 TCP 23.104.0.1:59472 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:31:47.151 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 10 6452 1 2025-12-26 19:32:46.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:32:46.822 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:32:38.263 00:00:10.323 TCP 23.104.0.1:36348 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:32:47.364 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39444 10 6452 1 2025-12-26 19:33:38.623 00:00:10.362 TCP 23.104.0.1:56950 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:33:47.578 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60486 10 6452 1 2025-12-26 19:29:23.286 00:05:54.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-26 19:30:18.248 00:05:05.038 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-26 19:34:39.025 00:00:10.419 TCP 23.104.0.1:48452 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:34:47.748 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42070 10 6452 1 2025-12-26 19:35:39.484 00:00:10.362 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:35:47.961 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50076 10 6452 1 2025-12-26 19:36:39.885 00:00:10.385 TCP 23.104.0.1:51354 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:36:48.195 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40644 10 6452 1 2025-12-26 19:37:47.026 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:37:47.310 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:37:40.309 00:00:10.363 TCP 23.104.0.1:38350 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:37:48.409 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39990 10 6452 1 2025-12-26 19:38:40.713 00:00:10.321 TCP 23.104.0.1:39876 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:38:48.633 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39998 10 6452 1 2025-12-26 19:39:41.099 00:00:10.365 TCP 23.104.0.1:51238 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:39:48.851 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54736 10 6452 1 2025-12-26 19:35:23.288 00:05:54.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-26 19:36:18.251 00:05:05.036 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-26 19:40:41.505 00:00:10.365 TCP 23.104.0.1:53840 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:40:49.086 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36890 10 6452 1 2025-12-26 19:41:41.908 00:00:10.449 TCP 23.104.0.1:39188 -> 1.101.0.1:3000 15 1926 1 2025-12-26 19:41:49.310 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:40784 12 10375 1 2025-12-26 19:42:47.102 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:42:46.995 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:42:42.398 00:00:10.575 TCP 23.104.0.1:48736 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:42:49.561 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:49918 10 6452 1 2025-12-26 19:43:43.018 00:00:10.363 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:43:49.845 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:46898 10 6452 1 2025-12-26 19:44:43.416 00:00:10.319 TCP 23.104.0.1:41498 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:44:50.089 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54660 10 6452 1 2025-12-26 19:45:43.779 00:00:10.366 TCP 23.104.0.1:47406 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:45:50.307 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47386 10 6452 1 2025-12-26 19:41:23.290 00:05:54.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-26 19:42:18.253 00:05:05.035 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-26 19:46:44.183 00:00:10.328 TCP 23.104.0.1:40792 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:46:50.527 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54718 10 6452 1 2025-12-26 19:47:46.869 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:47:47.030 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:47:44.548 00:00:10.362 TCP 23.104.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:47:50.748 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54616 10 6452 1 2025-12-26 19:48:44.951 00:00:10.370 TCP 23.104.0.1:49282 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:48:50.974 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:54162 10 6452 1 2025-12-26 19:49:45.359 00:00:10.321 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:49:51.215 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50496 10 6452 1 2025-12-26 19:50:45.721 00:00:10.370 TCP 23.104.0.1:36026 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:50:51.384 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39038 10 6452 1 2025-12-26 19:51:46.129 00:00:10.320 TCP 23.104.0.1:33828 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:51:51.556 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59540 10 6452 1 2025-12-26 19:47:23.291 00:05:54.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-26 19:48:18.255 00:05:05.034 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-26 19:52:47.281 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:52:47.235 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:52:46.490 00:00:10.370 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:52:51.772 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47482 10 6452 1 2025-12-26 19:53:46.897 00:00:10.568 TCP 23.104.0.1:47556 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:53:51.981 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:59834 10 6452 1 2025-12-26 19:54:47.502 00:00:10.369 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:54:52.220 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54918 10 6452 1 2025-12-26 19:55:47.911 00:00:10.324 TCP 23.104.0.1:47680 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:55:52.440 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57990 10 6452 1 2025-12-26 19:56:48.276 00:00:10.368 TCP 23.104.0.1:34042 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:56:52.654 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44752 10 6452 1 2025-12-26 19:57:47.170 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-26 19:57:47.210 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-26 19:57:48.683 00:00:10.386 TCP 23.104.0.1:44864 -> 1.101.0.1:3000 11 1507 1 2025-12-26 19:57:52.873 00:00:11.229 TCP 1.101.0.1:3000 -> 22.102.0.1:60764 10 6452 1 2025-12-26 19:53:23.292 00:05:54.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-26 19:54:18.257 00:05:05.033 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 Summary: total flows: 162, total bytes: 494835, total packets: 1559, avg bps: 1099, avg pps: 0, avg bpp: 317 Time window: 2025-12-26 18:59:22 - 2025-12-26 19:59:23 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0041s User: 0.0010s Wall: 0.0027s flows/second: 60489.4 Runtime: 0.0027s