Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 14:54:51.979 00:05:03.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 14:58:53.775 00:00:10.369 TCP 23.104.0.1:44272 -> 1.101.0.1:3000 11 1507 1 2025-11-03 14:55:51.986 00:05:03.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 14:59:41.906 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44378 10 6452 1 2025-11-03 14:59:54.183 00:00:10.363 TCP 23.104.0.1:58786 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:00:42.121 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37892 10 6452 1 2025-11-03 15:00:54.588 00:00:10.325 TCP 23.104.0.1:57490 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:01:42.332 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45858 10 6452 1 2025-11-03 15:01:54.951 00:00:10.323 TCP 23.104.0.1:36608 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:02:09.002 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:02:09.087 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:02:42.556 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 10 6452 1 2025-11-03 15:02:55.314 00:00:10.359 TCP 23.104.0.1:59140 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:03:42.770 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52234 10 6452 1 2025-11-03 15:03:55.709 00:00:10.324 TCP 23.104.0.1:36704 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:04:42.983 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:49446 10 6452 1 2025-11-03 15:00:51.983 00:05:03.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 15:04:56.108 00:00:10.365 TCP 23.104.0.1:45190 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:05:43.166 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58322 10 6452 1 2025-11-03 15:01:51.987 00:05:03.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 15:05:56.506 00:00:10.363 TCP 23.104.0.1:52800 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:06:43.382 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39810 10 6452 1 2025-11-03 15:06:56.907 00:00:10.366 TCP 23.104.0.1:38940 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:07:09.417 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:07:09.447 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:07:43.602 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56594 10 6452 1 2025-11-03 15:07:57.310 00:00:11.117 TCP 23.104.0.1:60082 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:08:43.813 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45734 10 6452 1 2025-11-03 15:08:58.468 00:00:10.367 TCP 23.104.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:09:43.987 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:56472 10 6452 1 2025-11-03 15:09:58.872 00:00:10.363 TCP 23.104.0.1:53670 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:10:44.176 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:60368 12 10369 1 2025-11-03 15:06:51.983 00:05:03.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 15:10:59.276 00:00:10.438 TCP 23.104.0.1:36192 -> 1.101.0.1:3000 15 1926 1 2025-11-03 15:11:44.426 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-11-03 15:07:51.986 00:05:03.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 15:11:59.758 00:00:10.367 TCP 23.104.0.1:52298 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:12:09.383 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:12:09.462 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:12:44.648 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45270 10 6452 1 2025-11-03 15:13:00.163 00:00:10.367 TCP 23.104.0.1:48154 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:13:44.861 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42646 10 6452 1 2025-11-03 15:14:00.569 00:00:10.367 TCP 23.104.0.1:50696 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:14:45.089 00:00:10.420 TCP 1.101.0.1:3000 -> 22.102.0.1:56574 12 6556 1 2025-11-03 15:15:00.971 00:00:10.369 TCP 23.104.0.1:46244 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:15:45.544 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34568 10 6452 1 2025-11-03 15:16:01.378 00:00:10.369 TCP 23.104.0.1:40274 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:16:45.762 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36346 10 6452 1 2025-11-03 15:12:51.984 00:05:03.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 15:17:09.387 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:17:09.445 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:17:01.781 00:00:10.368 TCP 23.104.0.1:43888 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:17:45.933 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33914 10 6452 1 2025-11-03 15:13:51.988 00:05:03.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 15:18:02.186 00:00:10.328 TCP 23.104.0.1:59220 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:18:46.170 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46382 10 6452 1 2025-11-03 15:19:02.553 00:00:10.365 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:19:46.383 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59270 10 6452 1 2025-11-03 15:20:02.960 00:00:10.366 TCP 23.104.0.1:45772 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:20:46.592 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38984 10 6452 1 2025-11-03 15:21:03.362 00:00:10.365 TCP 23.104.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:21:46.818 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41200 10 6452 1 2025-11-03 15:22:09.377 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:22:09.593 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:22:03.764 00:00:10.376 TCP 23.104.0.1:52766 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:18:51.987 00:05:03.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 15:22:47.036 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 10 6452 1 2025-11-03 15:23:04.177 00:00:10.373 TCP 23.104.0.1:32990 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:19:51.989 00:05:03.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 15:23:47.262 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-11-03 15:24:04.587 00:00:10.368 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:24:47.435 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37326 10 6452 1 2025-11-03 15:25:04.993 00:00:10.373 TCP 23.104.0.1:38742 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:25:47.645 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42710 10 6452 1 2025-11-03 15:26:05.406 00:00:10.371 TCP 23.104.0.1:50448 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:26:47.825 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:51896 10 6452 1 2025-11-03 15:27:09.742 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:27:09.806 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:27:05.819 00:00:10.366 TCP 23.104.0.1:57638 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:27:48.016 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56230 10 6452 1 2025-11-03 15:28:06.228 00:00:10.361 TCP 23.104.0.1:46884 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:24:51.991 00:05:03.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 15:28:48.227 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42908 10 6452 1 2025-11-03 15:29:06.630 00:00:10.327 TCP 23.104.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:25:51.993 00:05:03.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 15:29:48.405 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 10 6452 1 2025-11-03 15:30:06.994 00:00:10.448 TCP 23.104.0.1:59150 -> 1.101.0.1:3000 15 1926 1 2025-11-03 15:30:48.619 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59094 12 10375 1 2025-11-03 15:31:07.476 00:00:10.327 TCP 23.104.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:31:48.852 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43920 10 6452 1 2025-11-03 15:32:09.563 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:32:09.826 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:32:07.842 00:00:10.737 TCP 23.104.0.1:59062 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:32:49.080 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60864 10 6452 1 2025-11-03 15:33:08.612 00:00:10.368 TCP 23.104.0.1:38774 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:33:49.248 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56556 10 6452 1 2025-11-03 15:34:09.018 00:00:10.362 TCP 23.104.0.1:57048 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:30:51.991 00:05:03.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 15:34:49.462 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47346 10 6452 1 2025-11-03 15:35:09.418 00:00:10.422 TCP 23.104.0.1:36806 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:31:51.994 00:05:03.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 15:35:49.632 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-11-03 15:36:09.874 00:00:10.324 TCP 23.104.0.1:41126 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:36:49.845 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57376 10 6452 1 2025-11-03 15:37:09.794 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:37:09.715 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:37:10.234 00:00:10.365 TCP 23.104.0.1:42214 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:37:50.084 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45252 10 6452 1 2025-11-03 15:38:10.638 00:00:10.366 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:38:50.309 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37438 10 6452 1 2025-11-03 15:39:11.045 00:00:10.330 TCP 23.104.0.1:44672 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:39:50.517 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47390 10 6452 1 2025-11-03 15:40:11.409 00:00:10.369 TCP 23.104.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:36:51.992 00:05:03.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 15:40:50.694 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37326 10 6452 1 2025-11-03 15:41:11.817 00:00:10.330 TCP 23.104.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:37:51.996 00:05:03.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 15:41:50.864 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-11-03 15:42:10.186 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:42:10.014 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:42:12.182 00:00:10.369 TCP 23.104.0.1:42762 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:42:51.100 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46002 10 6452 1 2025-11-03 15:43:12.586 00:00:10.367 TCP 23.104.0.1:38054 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:43:51.309 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51630 10 6452 1 2025-11-03 15:44:12.995 00:00:10.365 TCP 23.104.0.1:57968 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:44:51.525 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43262 10 6452 1 2025-11-03 15:45:13.401 00:00:10.321 TCP 23.104.0.1:40784 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:45:51.741 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57022 10 6452 1 2025-11-03 15:46:13.762 00:00:10.373 TCP 23.104.0.1:51536 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:42:51.996 00:05:03.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 15:46:51.959 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49030 10 6452 1 2025-11-03 15:47:09.902 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:47:09.874 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:47:14.165 00:00:10.366 TCP 23.104.0.1:59412 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:43:51.998 00:05:03.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 15:47:52.182 00:00:10.514 TCP 1.101.0.1:3000 -> 22.102.0.1:46620 10 6452 1 2025-11-03 15:48:14.573 00:00:10.368 TCP 23.104.0.1:52344 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:48:52.740 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60388 10 6452 1 2025-11-03 15:49:14.976 00:00:10.387 TCP 23.104.0.1:52382 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:49:52.950 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:49374 10 6452 1 2025-11-03 15:50:15.406 00:00:10.327 TCP 23.104.0.1:40478 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:50:53.131 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48832 10 6452 1 2025-11-03 15:51:15.770 00:00:10.368 TCP 23.104.0.1:42226 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:51:53.345 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54140 10 6452 1 2025-11-03 15:52:10.169 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:52:09.968 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:52:16.177 00:00:10.319 TCP 23.104.0.1:43490 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:48:51.997 00:05:03.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 15:52:53.573 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37900 10 6452 1 2025-11-03 15:53:16.539 00:00:10.326 TCP 23.104.0.1:51520 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:49:52.001 00:05:03.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 15:53:53.786 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48980 10 6452 1 2025-11-03 15:54:16.902 00:00:10.327 TCP 23.104.0.1:42220 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:54:53.998 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38024 10 6452 1 2025-11-03 15:55:17.273 00:00:10.364 TCP 23.104.0.1:38768 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:55:54.218 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41476 10 6452 1 2025-11-03 15:56:17.682 00:00:10.368 TCP 23.104.0.1:40076 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:56:54.433 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37222 10 6452 1 2025-11-03 15:57:10.199 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 15:57:10.063 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 15:57:18.137 00:00:10.365 TCP 23.104.0.1:44342 -> 1.101.0.1:3000 11 1507 1 2025-11-03 15:57:54.653 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55714 10 6452 1 2025-11-03 15:58:18.535 00:00:10.366 TCP 23.104.0.1:32888 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500678, total packets: 1576, avg bps: 1049, avg pps: 0, avg bpp: 317 Time window: 2025-11-03 14:54:51 - 2025-11-03 15:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0026s Wall: 0.0028s flows/second: 58234.4 Runtime: 0.0028s