Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 12:54:51.950 00:05:03.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 12:58:57.714 00:00:10.385 TCP 23.104.0.1:53990 -> 1.101.0.1:3000 11 1507 1 2025-11-03 12:59:14.103 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45440 10 6452 1 2025-11-03 12:55:51.952 00:05:03.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 12:59:58.132 00:00:10.362 TCP 23.104.0.1:57922 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:00:14.274 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46624 10 6452 1 2025-11-03 13:00:58.530 00:00:10.374 TCP 23.104.0.1:38722 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:01:14.483 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55330 10 6452 1 2025-11-03 13:02:06.695 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:02:06.511 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:01:58.946 00:00:10.384 TCP 23.104.0.1:54140 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:02:14.702 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33546 10 6452 1 2025-11-03 13:02:59.357 00:00:10.370 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:03:14.950 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:47506 10 6452 1 2025-11-03 13:03:59.766 00:00:10.832 TCP 23.104.0.1:49498 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:04:15.200 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:34266 10 6452 1 2025-11-03 13:00:51.951 00:05:03.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 13:05:00.638 00:00:10.322 TCP 23.104.0.1:48088 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:05:15.443 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:45754 10 6452 1 2025-11-03 13:01:51.953 00:05:03.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 13:06:00.991 00:00:10.370 TCP 23.104.0.1:43146 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:06:15.698 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36430 10 6452 1 2025-11-03 13:07:06.650 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:07:06.897 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:07:01.405 00:00:10.366 TCP 23.104.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:07:15.912 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48936 10 6452 1 2025-11-03 13:08:01.806 00:00:10.369 TCP 23.104.0.1:34048 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:08:16.124 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57106 10 6452 1 2025-11-03 13:09:02.214 00:00:10.362 TCP 23.104.0.1:34534 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:09:16.333 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57490 10 6452 1 2025-11-03 13:10:02.614 00:00:15.532 TCP 23.104.0.1:54444 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:10:16.503 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49202 10 6452 1 2025-11-03 13:06:51.951 00:05:03.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 13:11:08.185 00:00:10.362 TCP 23.104.0.1:42526 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:11:16.711 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50312 10 6452 1 2025-11-03 13:07:51.954 00:05:03.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 13:12:06.803 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:12:07.002 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:12:08.584 00:00:10.369 TCP 23.104.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:12:16.940 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35766 10 6452 1 2025-11-03 13:13:08.993 00:00:10.363 TCP 23.104.0.1:52584 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:13:17.177 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54254 10 6452 1 2025-11-03 13:14:09.395 00:00:10.364 TCP 23.104.0.1:44970 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:14:17.403 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36138 10 6452 1 2025-11-03 13:15:09.795 00:00:10.365 TCP 23.104.0.1:51132 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:15:17.635 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56398 10 6452 1 2025-11-03 13:16:10.199 00:00:10.367 TCP 23.104.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:16:17.847 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51604 10 6452 1 2025-11-03 13:12:51.953 00:05:03.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 13:17:06.892 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:17:06.974 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:17:10.604 00:00:10.368 TCP 23.104.0.1:34468 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:17:18.082 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46836 10 6452 1 2025-11-03 13:13:51.956 00:05:03.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 13:18:11.015 00:00:10.324 TCP 23.104.0.1:50632 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:18:18.300 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49672 10 6452 1 2025-11-03 13:19:11.379 00:00:10.326 TCP 23.104.0.1:44732 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:19:18.517 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48602 10 6452 1 2025-11-03 13:20:11.743 00:00:10.436 TCP 23.104.0.1:56266 -> 1.101.0.1:3000 15 1926 1 2025-11-03 13:20:18.744 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40236 13 13955 1 2025-11-03 13:21:12.227 00:00:10.364 TCP 23.104.0.1:55450 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:21:18.983 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-11-03 13:22:07.054 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:22:07.302 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:22:12.632 00:00:10.364 TCP 23.104.0.1:39208 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:22:19.172 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57048 10 6452 1 2025-11-03 13:18:51.955 00:05:03.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 13:23:13.071 00:00:10.323 TCP 23.104.0.1:34436 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:23:19.392 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54278 10 6452 1 2025-11-03 13:19:51.958 00:05:03.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 13:24:13.435 00:00:10.347 TCP 23.104.0.1:54658 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:24:19.614 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 6452 1 2025-11-03 13:25:13.831 00:00:10.392 TCP 23.104.0.1:44986 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:25:19.833 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60602 10 6452 1 2025-11-03 13:26:14.257 00:00:10.620 TCP 23.104.0.1:51870 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:26:20.031 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45222 10 6452 1 2025-11-03 13:27:06.963 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:27:07.161 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:27:14.925 00:00:10.386 TCP 23.104.0.1:44778 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:27:20.240 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40518 10 6452 1 2025-11-03 13:28:15.351 00:00:10.365 TCP 23.104.0.1:59418 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:28:20.408 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47030 10 6452 1 2025-11-03 13:24:51.954 00:05:03.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 13:29:15.758 00:00:10.333 TCP 23.104.0.1:56212 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:29:20.620 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56432 10 6452 1 2025-11-03 13:25:51.957 00:05:03.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 13:30:16.129 00:00:10.363 TCP 23.104.0.1:50850 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:30:20.836 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43330 10 6452 1 2025-11-03 13:31:16.533 00:00:10.323 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:31:21.009 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50908 10 6452 1 2025-11-03 13:32:07.281 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:32:07.244 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:32:16.893 00:00:10.380 TCP 23.104.0.1:44140 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:32:21.237 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46276 12 6556 1 2025-11-03 13:33:17.313 00:00:10.363 TCP 23.104.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:33:21.453 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59322 10 6452 1 2025-11-03 13:34:17.715 00:00:10.367 TCP 23.104.0.1:57324 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:34:21.629 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-11-03 13:30:51.958 00:05:03.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 13:35:18.127 00:00:10.377 TCP 23.104.0.1:41332 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:35:21.853 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39094 10 6452 1 2025-11-03 13:31:51.961 00:05:03.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 13:36:18.546 00:00:10.361 TCP 23.104.0.1:39732 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:36:22.040 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38734 10 6452 1 2025-11-03 13:37:07.940 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:37:07.839 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:37:18.948 00:00:10.325 TCP 23.104.0.1:56306 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:37:22.258 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57640 10 6452 1 2025-11-03 13:38:19.308 00:00:10.363 TCP 23.104.0.1:57528 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:38:22.474 00:00:10.365 TCP 1.101.0.1:3000 -> 22.102.0.1:56314 10 6452 1 2025-11-03 13:39:19.711 00:00:10.381 TCP 23.104.0.1:41068 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:39:22.879 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59056 10 6452 1 2025-11-03 13:40:20.130 00:00:10.365 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:40:23.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40984 10 6452 1 2025-11-03 13:36:51.958 00:05:03.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 13:41:20.540 00:00:10.367 TCP 23.104.0.1:44700 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:41:23.326 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38812 10 6452 1 2025-11-03 13:37:51.959 00:05:03.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 13:42:07.258 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:42:07.429 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:42:20.948 00:00:10.437 TCP 23.104.0.1:45292 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:42:23.543 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54052 10 6452 1 2025-11-03 13:43:21.426 00:00:10.366 TCP 23.104.0.1:51078 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:43:23.764 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56476 10 6452 1 2025-11-03 13:44:21.833 00:00:10.342 TCP 23.104.0.1:36220 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:44:23.981 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:42298 10 6452 1 2025-11-03 13:45:22.212 00:00:10.366 TCP 23.104.0.1:49280 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:45:24.246 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38008 10 6452 1 2025-11-03 13:46:22.616 00:00:10.374 TCP 23.104.0.1:35626 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:46:24.457 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33562 10 6452 1 2025-11-03 13:42:51.960 00:05:03.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 13:47:07.324 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:47:07.663 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:47:23.029 00:00:10.366 TCP 23.104.0.1:59066 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:47:24.671 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39536 10 6452 1 2025-11-03 13:43:51.964 00:05:03.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 13:48:24.896 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47870 10 6452 1 2025-11-03 13:48:23.433 00:00:10.365 TCP 23.104.0.1:42922 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:49:25.113 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41200 10 6452 1 2025-11-03 13:49:23.836 00:00:10.388 TCP 23.104.0.1:46304 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:50:24.267 00:00:10.365 TCP 23.104.0.1:60260 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:50:25.332 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37882 10 6452 1 2025-11-03 13:51:24.671 00:00:10.392 TCP 23.104.0.1:46040 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:51:25.550 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58214 10 6452 1 2025-11-03 13:52:07.808 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:52:07.742 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:52:25.768 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52698 10 6452 1 2025-11-03 13:52:25.107 00:00:10.321 TCP 23.104.0.1:41708 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:48:51.961 00:05:03.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 13:53:25.469 00:00:10.333 TCP 23.104.0.1:51394 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:53:25.998 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37394 10 6452 1 2025-11-03 13:49:51.965 00:05:03.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 13:54:26.230 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35976 10 6452 1 2025-11-03 13:54:25.846 00:00:10.389 TCP 23.104.0.1:47866 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:55:26.453 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:36742 12 10375 1 2025-11-03 13:55:26.287 00:00:10.399 TCP 23.104.0.1:59142 -> 1.101.0.1:3000 15 1926 1 2025-11-03 13:56:26.697 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 10 6452 1 2025-11-03 13:56:26.726 00:00:10.370 TCP 23.104.0.1:49966 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:57:07.739 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 13:57:07.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 13:57:27.137 00:00:10.366 TCP 23.104.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-11-03 13:57:26.911 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:60894 10 6452 1 2025-11-03 13:58:27.093 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38110 10 6452 1 2025-11-03 13:58:27.550 00:00:10.366 TCP 23.104.0.1:43596 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 510716, total packets: 1587, avg bps: 1067, avg pps: 0, avg bpp: 321 Time window: 2025-11-03 12:54:51 - 2025-11-03 13:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0054s User: 0.0011s Wall: 0.0028s flows/second: 59268.1 Runtime: 0.0028s