Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-28 18:58:49.885 00:00:10.412 TCP 1.101.0.1:3000 -> 22.102.0.1:55212 10 6452 1 2025-12-28 18:59:20.539 00:00:10.368 TCP 23.104.0.1:33000 -> 1.101.0.1:3000 11 1507 1 2025-12-28 18:59:50.338 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43300 10 6452 1 2025-12-28 19:00:20.943 00:00:10.372 TCP 23.104.0.1:52028 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:00:50.555 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60658 10 6452 1 2025-12-28 19:01:21.350 00:00:10.327 TCP 23.104.0.1:40234 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:01:50.783 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-12-28 19:02:21.716 00:00:10.381 TCP 23.104.0.1:59246 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:02:51.001 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50568 10 6452 1 2025-12-28 18:59:19.255 00:05:05.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-28 18:59:19.254 00:05:05.009 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-28 19:03:22.135 00:00:10.369 TCP 23.104.0.1:57842 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:03:43.831 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-28 19:03:44.010 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:03:51.222 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37398 10 6452 1 2025-12-28 19:04:22.535 00:00:10.364 TCP 23.104.0.1:48050 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:04:51.398 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:43854 10 6452 1 2025-12-28 19:05:22.936 00:00:10.372 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:05:51.593 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:45016 10 6452 1 2025-12-28 19:06:23.347 00:00:10.371 TCP 23.104.0.1:38340 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:06:51.772 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43204 10 6452 1 2025-12-28 19:07:23.759 00:00:10.368 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:07:51.986 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:34874 10 6452 1 2025-12-28 19:08:24.166 00:00:10.377 TCP 23.104.0.1:40258 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:08:44.216 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-28 19:08:44.183 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:08:52.187 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57460 10 6452 1 2025-12-28 19:05:19.254 00:05:05.013 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-28 19:05:19.256 00:05:05.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-28 19:09:24.578 00:00:10.327 TCP 23.104.0.1:57498 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:09:52.362 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44242 10 6452 1 2025-12-28 19:10:24.945 00:00:10.378 TCP 23.104.0.1:39974 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:10:52.573 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44034 10 6452 1 2025-12-28 19:11:25.360 00:00:10.364 TCP 23.104.0.1:34984 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:11:52.793 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37554 10 6452 1 2025-12-28 19:12:25.759 00:00:10.378 TCP 23.104.0.1:53554 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:12:53.014 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:59454 10 6452 1 2025-12-28 19:13:26.174 00:00:10.367 TCP 23.104.0.1:56490 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:13:44.060 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-28 19:13:44.158 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:13:53.194 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33266 10 6452 1 2025-12-28 19:14:26.579 00:00:10.365 TCP 23.104.0.1:51134 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:14:53.406 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57704 10 6452 1 2025-12-28 19:11:19.260 00:05:05.007 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-28 19:11:19.256 00:05:05.012 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-28 19:15:26.984 00:00:10.369 TCP 23.104.0.1:59654 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:15:53.641 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46372 10 6452 1 2025-12-28 19:16:27.389 00:00:10.322 TCP 23.104.0.1:33414 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:16:53.853 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38758 10 6452 1 2025-12-28 19:17:27.754 00:00:10.424 TCP 23.104.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:17:54.036 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60826 10 6452 1 2025-12-28 19:18:28.217 00:00:10.369 TCP 23.104.0.1:38296 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:18:44.333 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:18:43.968 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-28 19:18:54.257 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39940 10 6452 1 2025-12-28 19:19:28.632 00:00:10.362 TCP 23.104.0.1:59228 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:19:54.433 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37356 10 6452 1 2025-12-28 19:20:29.034 00:00:10.363 TCP 23.104.0.1:55018 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:20:54.645 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58418 10 6452 1 2025-12-28 19:17:19.260 00:05:05.007 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-28 19:17:19.257 00:05:05.013 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-28 19:21:29.437 00:00:10.365 TCP 23.104.0.1:51682 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:21:54.862 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42884 10 6452 1 2025-12-28 19:22:29.842 00:00:10.398 TCP 23.104.0.1:35738 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:22:55.056 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49534 10 6452 1 2025-12-28 19:23:30.277 00:00:10.368 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:23:44.514 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:23:44.839 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-28 19:23:55.269 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48262 10 6452 1 2025-12-28 19:24:30.679 00:00:10.369 TCP 23.104.0.1:52964 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:24:55.484 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:56856 10 6452 1 2025-12-28 19:25:31.103 00:00:10.324 TCP 23.104.0.1:45004 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:25:55.694 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35774 10 6452 1 2025-12-28 19:26:31.467 00:00:10.333 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:26:55.909 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45910 10 6452 1 2025-12-28 19:23:19.260 00:05:05.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-28 19:23:19.258 00:05:05.013 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-28 19:27:31.842 00:00:10.353 TCP 23.104.0.1:56716 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:27:56.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 10 6452 1 2025-12-28 19:28:44.383 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:28:32.230 00:00:10.374 TCP 23.104.0.1:46038 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:28:44.295 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-28 19:28:56.337 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52278 10 6452 1 2025-12-28 19:29:32.635 00:00:10.322 TCP 23.104.0.1:34584 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:29:56.547 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32826 10 6452 1 2025-12-28 19:30:32.998 00:00:10.365 TCP 23.104.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:30:56.774 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53992 10 6452 1 2025-12-28 19:31:33.402 00:00:10.368 TCP 23.104.0.1:46128 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:31:56.987 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33304 10 6452 1 2025-12-28 19:32:33.810 00:00:10.328 TCP 23.104.0.1:52730 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:32:57.217 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-12-28 19:29:19.265 00:05:05.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-28 19:29:19.263 00:05:05.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-28 19:33:44.487 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-28 19:33:44.730 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:33:34.182 00:00:10.363 TCP 23.104.0.1:58888 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:33:57.435 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53960 10 6452 1 2025-12-28 19:34:34.586 00:00:10.364 TCP 23.104.0.1:42338 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:34:57.603 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55848 10 6452 1 2025-12-28 19:35:34.995 00:00:10.369 TCP 23.104.0.1:43800 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:35:57.842 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40666 10 6452 1 2025-12-28 19:36:35.396 00:00:10.320 TCP 23.104.0.1:57022 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:36:58.090 00:00:11.726 TCP 1.101.0.1:3000 -> 22.102.0.1:40000 10 6452 1 2025-12-28 19:37:35.754 00:00:10.384 TCP 23.104.0.1:57260 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:37:59.859 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59780 10 6452 1 2025-12-28 19:38:44.627 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:38:36.178 00:00:10.369 TCP 23.104.0.1:56568 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:38:44.815 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-28 19:39:00.097 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59272 10 6452 1 2025-12-28 19:35:19.264 00:05:05.007 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-28 19:35:19.263 00:05:05.012 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-28 19:39:36.586 00:00:10.371 TCP 23.104.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:40:00.269 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:49488 10 6452 1 2025-12-28 19:40:36.991 00:00:10.375 TCP 23.104.0.1:39384 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:41:00.529 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52486 10 6452 1 2025-12-28 19:41:37.402 00:00:10.341 TCP 23.104.0.1:34836 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:42:00.745 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48740 10 6452 1 2025-12-28 19:42:37.797 00:00:10.370 TCP 23.104.0.1:54042 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:43:00.919 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60256 10 6452 1 2025-12-28 19:43:44.856 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-28 19:43:45.017 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:43:38.204 00:00:10.326 TCP 23.104.0.1:32856 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:44:01.135 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52900 10 6452 1 2025-12-28 19:44:38.569 00:00:10.369 TCP 23.104.0.1:41278 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:45:01.363 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36884 10 6452 1 2025-12-28 19:41:19.263 00:05:05.013 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-28 19:41:19.266 00:05:05.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-28 19:45:38.977 00:00:10.363 TCP 23.104.0.1:53384 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:46:01.578 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46002 10 6452 1 2025-12-28 19:46:39.383 00:00:10.371 TCP 23.104.0.1:53474 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:47:01.801 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:42438 10 6452 1 2025-12-28 19:47:39.794 00:00:10.365 TCP 23.104.0.1:52670 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:48:01.967 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:37130 13 6608 1 2025-12-28 19:48:44.948 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-28 19:48:44.957 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:48:40.197 00:00:10.373 TCP 23.104.0.1:40850 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:49:02.211 00:00:19.023 TCP 1.101.0.1:3000 -> 22.102.0.1:37154 10 6452 1 2025-12-28 19:49:40.613 00:00:10.371 TCP 23.104.0.1:42420 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:50:11.278 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-12-28 19:50:41.017 00:00:10.367 TCP 23.104.0.1:42116 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:51:11.498 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40104 10 6452 1 2025-12-28 19:47:19.268 00:05:05.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-28 19:47:19.264 00:05:05.013 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-28 19:51:41.418 00:00:10.361 TCP 23.104.0.1:54184 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:52:11.715 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44376 10 6452 1 2025-12-28 19:52:41.819 00:00:10.363 TCP 23.104.0.1:37208 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:53:11.931 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48116 10 6452 1 2025-12-28 19:53:45.046 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:53:45.061 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-28 19:53:42.222 00:00:10.322 TCP 23.104.0.1:51584 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:54:12.167 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56498 10 6452 1 2025-12-28 19:54:42.581 00:00:10.359 TCP 23.104.0.1:35192 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:55:12.392 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39798 10 6452 1 2025-12-28 19:55:42.984 00:00:10.365 TCP 23.104.0.1:41714 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:56:12.612 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51598 10 6452 1 2025-12-28 19:56:43.398 00:00:10.365 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:53:19.268 00:05:05.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-28 19:57:12.831 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60810 10 6452 1 2025-12-28 19:53:19.266 00:05:05.014 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-28 19:57:43.803 00:00:10.368 TCP 23.104.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-12-28 19:58:13.068 00:00:10.675 TCP 1.101.0.1:3000 -> 22.102.0.1:47774 10 6452 1 2025-12-28 19:58:44.873 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-28 19:58:44.985 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 496997, total packets: 1564, avg bps: 1105, avg pps: 0, avg bpp: 317 Time window: 2025-12-28 18:58:49 - 2025-12-28 19:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0049s User: 0.0008s Wall: 0.0016s flows/second: 99025.4 Runtime: 0.0017s