Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 22:54:52.649 00:05:03.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 22:58:56.724 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50320 10 6452 1 2025-11-04 22:59:38.414 00:00:10.363 TCP 23.104.0.1:48668 -> 1.101.0.1:3000 11 1507 1 2025-11-04 22:55:52.651 00:05:03.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 22:59:56.953 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41188 12 6556 1 2025-11-04 23:00:38.822 00:00:16.833 TCP 23.104.0.1:44536 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:00:57.186 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52546 10 6452 1 2025-11-04 23:01:45.711 00:00:10.405 TCP 23.104.0.1:44930 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:01:57.399 00:00:10.550 TCP 1.101.0.1:3000 -> 22.102.0.1:59060 10 6452 1 2025-11-04 23:02:47.118 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:02:47.475 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:02:46.149 00:00:10.364 TCP 23.104.0.1:54742 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:02:57.991 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-11-04 23:03:46.554 00:00:10.361 TCP 23.104.0.1:49706 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:03:58.210 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55652 10 6452 1 2025-11-04 23:00:52.652 00:05:03.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 23:04:46.952 00:00:10.363 TCP 23.104.0.1:50652 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:04:58.382 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35732 10 6452 1 2025-11-04 23:01:52.653 00:05:03.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 23:05:47.354 00:00:10.360 TCP 23.104.0.1:54506 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:05:58.564 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53880 10 6452 1 2025-11-04 23:06:47.757 00:00:10.380 TCP 23.104.0.1:58984 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:06:58.772 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54228 10 6452 1 2025-11-04 23:07:47.694 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:07:47.618 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:07:48.171 00:00:10.363 TCP 23.104.0.1:32776 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:07:58.991 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47994 10 6452 1 2025-11-04 23:08:48.597 00:00:10.366 TCP 23.104.0.1:60662 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:08:59.167 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52658 10 6452 1 2025-11-04 23:09:49.000 00:00:10.362 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:09:59.336 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38248 10 6452 1 2025-11-04 23:06:52.653 00:05:03.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 23:10:49.409 00:00:10.329 TCP 23.104.0.1:45606 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:10:59.546 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51834 10 6452 1 2025-11-04 23:07:52.655 00:05:03.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 23:11:49.770 00:00:10.371 TCP 23.104.0.1:43924 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:11:59.757 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6452 1 2025-11-04 23:12:47.569 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:12:47.782 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:12:50.180 00:00:10.325 TCP 23.104.0.1:45006 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:12:59.968 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59536 10 6452 1 2025-11-04 23:13:50.549 00:00:10.326 TCP 23.104.0.1:58652 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:14:00.202 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52300 11 6504 1 2025-11-04 23:14:50.915 00:00:10.370 TCP 23.104.0.1:46296 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:15:00.434 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-11-04 23:15:51.325 00:00:10.320 TCP 23.104.0.1:43040 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:16:00.649 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59446 10 6452 1 2025-11-04 23:12:52.656 00:05:03.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 23:16:51.683 00:00:10.443 TCP 23.104.0.1:60986 -> 1.101.0.1:3000 15 1926 1 2025-11-04 23:17:00.862 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:48750 12 10369 1 2025-11-04 23:17:48.297 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:17:48.196 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:13:52.657 00:05:03.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 23:17:52.167 00:00:10.363 TCP 23.104.0.1:59602 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:18:01.122 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39374 10 6452 1 2025-11-04 23:18:52.570 00:00:10.362 TCP 23.104.0.1:49946 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:19:01.334 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56316 10 6452 1 2025-11-04 23:19:52.971 00:00:10.378 TCP 23.104.0.1:39616 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:20:01.551 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42374 10 6452 1 2025-11-04 23:20:53.385 00:00:10.328 TCP 23.104.0.1:48290 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:21:01.772 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53246 10 6452 1 2025-11-04 23:21:53.757 00:00:10.375 TCP 23.104.0.1:41948 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:22:01.985 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37806 10 6452 1 2025-11-04 23:22:47.666 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:22:47.955 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:18:52.657 00:05:03.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 23:22:54.172 00:00:10.331 TCP 23.104.0.1:38436 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:23:02.207 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54848 10 6452 1 2025-11-04 23:19:52.658 00:05:03.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 23:23:54.551 00:00:10.375 TCP 23.104.0.1:49920 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:24:02.415 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40874 10 6452 1 2025-11-04 23:24:54.965 00:00:10.369 TCP 23.104.0.1:39480 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:25:02.629 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40642 10 6452 1 2025-11-04 23:25:55.378 00:00:10.366 TCP 23.104.0.1:58578 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:26:02.857 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57978 10 6452 1 2025-11-04 23:26:55.782 00:00:10.324 TCP 23.104.0.1:39426 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:27:03.074 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52902 10 6452 1 2025-11-04 23:27:47.982 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:27:47.801 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:27:56.147 00:00:10.367 TCP 23.104.0.1:54482 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:28:03.307 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43020 10 6452 1 2025-11-04 23:24:52.657 00:05:03.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 23:28:56.554 00:00:10.367 TCP 23.104.0.1:45910 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:29:03.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56870 10 6452 1 2025-11-04 23:25:52.660 00:05:03.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 23:29:56.959 00:00:10.873 TCP 23.104.0.1:46250 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:30:03.734 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:56450 10 6452 1 2025-11-04 23:30:57.871 00:00:10.364 TCP 23.104.0.1:54732 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:31:03.934 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:36610 10 6452 1 2025-11-04 23:31:58.273 00:00:10.321 TCP 23.104.0.1:44388 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:32:04.188 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54532 10 6452 1 2025-11-04 23:32:48.276 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:32:48.147 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:32:58.637 00:00:10.365 TCP 23.104.0.1:47064 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:33:04.400 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56910 10 6452 1 2025-11-04 23:33:59.042 00:00:10.364 TCP 23.104.0.1:57548 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:34:04.617 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36214 10 6452 1 2025-11-04 23:30:52.659 00:05:03.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 23:34:59.440 00:00:10.368 TCP 23.104.0.1:59602 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:35:04.832 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56716 10 6452 1 2025-11-04 23:31:52.662 00:05:03.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 23:35:59.847 00:00:10.390 TCP 23.104.0.1:35260 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:36:05.073 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58790 10 6452 1 2025-11-04 23:37:00.277 00:00:10.720 TCP 23.104.0.1:34036 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:37:05.282 00:00:10.574 TCP 1.101.0.1:3000 -> 22.102.0.1:50400 10 6452 1 2025-11-04 23:37:48.441 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:37:48.457 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:38:01.037 00:00:10.366 TCP 23.104.0.1:36704 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:38:05.894 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34480 10 6452 1 2025-11-04 23:39:01.440 00:00:10.325 TCP 23.104.0.1:44264 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:39:06.115 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51708 10 6452 1 2025-11-04 23:40:06.333 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54840 10 6452 1 2025-11-04 23:40:01.804 00:00:10.374 TCP 23.104.0.1:54668 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:36:52.659 00:05:03.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 23:41:02.214 00:00:10.328 TCP 23.104.0.1:50652 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:41:06.553 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60440 10 6452 1 2025-11-04 23:37:52.664 00:05:03.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 23:42:02.578 00:00:10.337 TCP 23.104.0.1:43324 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:42:06.768 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45564 10 6452 1 2025-11-04 23:42:48.491 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:42:48.452 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:43:02.937 00:00:10.379 TCP 23.104.0.1:55854 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:43:06.991 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6452 1 2025-11-04 23:44:03.356 00:00:10.326 TCP 23.104.0.1:39750 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:44:07.220 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56200 10 6452 1 2025-11-04 23:45:03.722 00:00:10.372 TCP 23.104.0.1:57580 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:45:07.392 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52910 10 6452 1 2025-11-04 23:46:04.132 00:00:10.324 TCP 23.104.0.1:54712 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:46:07.605 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32932 10 6452 1 2025-11-04 23:42:52.661 00:05:03.136 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 23:47:04.493 00:00:10.366 TCP 23.104.0.1:49696 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:47:07.821 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55390 10 6452 1 2025-11-04 23:47:48.402 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:47:48.419 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:43:52.665 00:05:03.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 23:48:04.898 00:00:10.368 TCP 23.104.0.1:36582 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:48:08.041 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46610 10 6452 1 2025-11-04 23:49:05.308 00:00:10.324 TCP 23.104.0.1:49350 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:49:08.261 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50452 10 6452 1 2025-11-04 23:50:05.673 00:00:10.327 TCP 23.104.0.1:52246 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:50:08.439 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60070 10 6452 1 2025-11-04 23:51:06.064 00:00:10.367 TCP 23.104.0.1:37342 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:51:08.651 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52866 10 6452 1 2025-11-04 23:52:06.467 00:00:10.365 TCP 23.104.0.1:33686 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:52:08.867 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6452 1 2025-11-04 23:52:48.628 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:52:48.574 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:48:52.662 00:05:03.137 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 23:53:06.877 00:00:10.382 TCP 23.104.0.1:50278 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:53:09.097 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37144 10 6452 1 2025-11-04 23:49:52.664 00:05:03.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 23:54:09.315 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37606 10 6452 1 2025-11-04 23:54:07.312 00:00:10.364 TCP 23.104.0.1:53158 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:55:07.724 00:00:10.381 TCP 23.104.0.1:50700 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:55:09.543 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52904 10 6452 1 2025-11-04 23:56:08.142 00:00:10.325 TCP 23.104.0.1:52348 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:56:09.768 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40612 10 6452 1 2025-11-04 23:57:09.978 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:48514 12 10375 1 2025-11-04 23:57:08.502 00:00:10.438 TCP 23.104.0.1:60742 -> 1.101.0.1:3000 15 1926 1 2025-11-04 23:57:48.759 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 23:57:48.852 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 23:58:08.984 00:00:10.368 TCP 23.104.0.1:49516 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:58:10.268 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45198 10 6452 1 Summary: total flows: 163, total bytes: 505675, total packets: 1576, avg bps: 1062, avg pps: 0, avg bpp: 320 Time window: 2025-11-04 22:54:52 - 2025-11-04 23:58:20 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0084s User: 0.0028s Wall: 0.0025s flows/second: 64680.4 Runtime: 0.0025s