Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-06 09:54:53.438 00:05:03.086 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 09:58:54.274 00:00:10.363 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-11-06 09:59:19.247 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48506 10 6452 1 2025-11-06 09:55:53.443 00:05:03.081 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 09:59:54.677 00:00:10.327 TCP 23.104.0.1:39066 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:00:19.463 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49526 10 6452 1 2025-11-06 10:00:55.055 00:00:10.366 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:01:19.684 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37874 10 6452 1 2025-11-06 10:01:55.459 00:00:10.437 TCP 23.104.0.1:38112 -> 1.101.0.1:3000 15 1926 1 2025-11-06 10:02:19.891 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36476 12 10369 1 2025-11-06 10:02:55.930 00:00:10.349 TCP 23.104.0.1:47204 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:03:29.617 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:03:20.123 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41080 10 6452 1 2025-11-06 10:03:29.792 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:03:56.319 00:00:10.364 TCP 23.104.0.1:33238 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:04:20.338 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-11-06 10:00:53.440 00:05:03.087 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 10:04:56.723 00:00:10.377 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:05:20.550 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:45430 10 6452 1 2025-11-06 10:01:53.443 00:05:03.081 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 10:05:57.139 00:00:10.362 TCP 23.104.0.1:34068 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:06:20.736 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40304 10 6452 1 2025-11-06 10:06:57.538 00:00:10.367 TCP 23.104.0.1:52746 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:07:20.952 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 10 6452 1 2025-11-06 10:07:57.939 00:00:10.365 TCP 23.104.0.1:39122 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:08:21.146 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44232 10 6452 1 2025-11-06 10:08:29.875 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:08:29.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:08:58.345 00:00:10.365 TCP 23.104.0.1:32902 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:09:21.358 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50740 10 6452 1 2025-11-06 10:09:58.748 00:00:15.712 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:10:21.574 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-11-06 10:06:53.440 00:05:03.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 10:11:04.509 00:00:10.366 TCP 23.104.0.1:54582 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:11:21.788 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39166 10 6452 1 2025-11-06 10:07:53.443 00:05:03.086 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 10:12:04.913 00:00:10.362 TCP 23.104.0.1:49574 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:12:22.029 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47294 10 6452 1 2025-11-06 10:13:05.313 00:00:10.364 TCP 23.104.0.1:51676 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:13:30.003 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:13:29.682 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:13:22.244 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40574 10 6452 1 2025-11-06 10:14:05.717 00:00:10.374 TCP 23.104.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:14:22.420 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60888 10 6452 1 2025-11-06 10:15:06.132 00:00:10.324 TCP 23.104.0.1:51686 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:15:22.652 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45160 10 6452 1 2025-11-06 10:16:06.494 00:00:10.361 TCP 23.104.0.1:48776 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:16:22.867 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51270 10 6452 1 2025-11-06 10:12:53.443 00:05:03.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 10:17:06.896 00:00:10.324 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:17:23.093 00:00:10.660 TCP 1.101.0.1:3000 -> 22.102.0.1:45496 10 6452 1 2025-11-06 10:13:53.445 00:05:03.087 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 10:18:07.258 00:00:10.363 TCP 23.104.0.1:49470 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:18:30.253 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:18:30.204 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:18:23.786 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45674 10 6452 1 2025-11-06 10:19:07.656 00:00:10.363 TCP 23.104.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:19:23.997 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48452 10 6452 1 2025-11-06 10:20:08.089 00:00:10.326 TCP 23.104.0.1:40624 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:20:24.215 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36632 10 6452 1 2025-11-06 10:21:08.453 00:00:10.359 TCP 23.104.0.1:48394 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:21:24.436 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36254 10 6452 1 2025-11-06 10:22:08.855 00:00:10.381 TCP 23.104.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:22:24.674 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59978 10 6452 1 2025-11-06 10:18:53.444 00:05:03.092 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 10:23:09.277 00:00:10.365 TCP 23.104.0.1:54398 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:23:29.798 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:23:30.209 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:23:24.896 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40764 10 6452 1 2025-11-06 10:19:53.450 00:05:03.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 10:24:09.676 00:00:10.365 TCP 23.104.0.1:49118 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:24:25.116 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45878 10 6452 1 2025-11-06 10:25:10.108 00:00:10.362 TCP 23.104.0.1:33042 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:25:25.338 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55310 10 6452 1 2025-11-06 10:26:10.512 00:00:10.366 TCP 23.104.0.1:52372 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:26:25.558 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58468 10 6452 1 2025-11-06 10:27:10.924 00:00:10.369 TCP 23.104.0.1:57444 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:27:25.779 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39744 10 6452 1 2025-11-06 10:28:11.334 00:00:10.327 TCP 23.104.0.1:46578 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:28:30.371 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:28:30.127 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:28:26.008 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45118 10 6452 1 2025-11-06 10:24:53.448 00:05:03.089 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 10:29:11.699 00:00:11.457 TCP 23.104.0.1:36156 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:29:26.236 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51602 10 6452 1 2025-11-06 10:25:53.451 00:05:03.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 10:30:13.219 00:00:10.366 TCP 23.104.0.1:56412 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:30:26.453 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-11-06 10:31:13.621 00:00:10.328 TCP 23.104.0.1:48070 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:31:26.661 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42250 10 6452 1 2025-11-06 10:32:13.986 00:00:10.369 TCP 23.104.0.1:57010 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:32:26.873 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47186 10 6452 1 2025-11-06 10:33:14.397 00:00:10.370 TCP 23.104.0.1:59732 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:33:30.208 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:33:30.430 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:33:27.076 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49456 10 6452 1 2025-11-06 10:34:14.808 00:00:10.366 TCP 23.104.0.1:42598 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:34:27.290 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38356 10 6452 1 2025-11-06 10:30:53.450 00:05:03.089 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 10:35:15.213 00:00:10.371 TCP 23.104.0.1:58574 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:35:27.506 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55250 10 6452 1 2025-11-06 10:31:53.452 00:05:03.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 10:36:15.615 00:00:10.368 TCP 23.104.0.1:51276 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:36:27.721 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47446 10 6452 1 2025-11-06 10:37:16.018 00:00:10.321 TCP 23.104.0.1:48920 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:37:27.935 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:33146 10 6452 1 2025-11-06 10:38:16.377 00:00:10.378 TCP 23.104.0.1:36806 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:38:30.443 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:38:30.320 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:38:28.174 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44814 10 6452 1 2025-11-06 10:39:16.793 00:00:10.351 TCP 23.104.0.1:41434 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:39:28.348 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57864 10 6452 1 2025-11-06 10:40:17.183 00:00:10.341 TCP 23.104.0.1:50964 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:40:28.561 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41682 10 6452 1 2025-11-06 10:36:53.451 00:05:03.089 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 10:41:17.581 00:00:10.370 TCP 23.104.0.1:40112 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:41:28.778 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36666 11 6504 1 2025-11-06 10:37:53.453 00:05:03.084 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 10:42:17.986 00:00:10.323 TCP 23.104.0.1:59244 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:42:29.006 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58632 10 6452 1 2025-11-06 10:43:30.515 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:43:30.675 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:43:18.353 00:00:10.369 TCP 23.104.0.1:47328 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:43:29.173 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55396 10 6452 1 2025-11-06 10:44:18.761 00:00:10.386 TCP 23.104.0.1:48720 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:44:29.388 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56882 10 6452 1 2025-11-06 10:45:19.186 00:00:10.324 TCP 23.104.0.1:49542 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:45:29.597 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39620 10 6452 1 2025-11-06 10:46:19.544 00:00:10.374 TCP 23.104.0.1:44926 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:46:29.818 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47474 10 6452 1 2025-11-06 10:42:53.466 00:05:03.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 10:47:19.955 00:00:10.364 TCP 23.104.0.1:47660 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:47:30.049 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36396 10 6452 1 2025-11-06 10:43:53.469 00:05:03.071 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 10:48:30.513 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:48:20.361 00:00:10.364 TCP 23.104.0.1:49806 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:48:30.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:48:30.226 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-11-06 10:49:20.765 00:00:10.371 TCP 23.104.0.1:56288 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:49:30.401 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39046 10 6452 1 2025-11-06 10:50:21.176 00:00:10.367 TCP 23.104.0.1:55602 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:50:30.626 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38030 10 6452 1 2025-11-06 10:51:21.580 00:00:10.375 TCP 23.104.0.1:46562 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:51:30.839 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32856 10 6452 1 2025-11-06 10:52:21.993 00:00:10.321 TCP 23.104.0.1:52424 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:52:31.014 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36156 10 6452 1 2025-11-06 10:48:53.468 00:05:03.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 10:53:30.763 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:53:30.683 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:53:22.348 00:00:10.361 TCP 23.104.0.1:51840 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:53:31.233 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37488 10 6452 1 2025-11-06 10:49:53.469 00:05:03.071 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 10:54:22.749 00:00:10.391 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:54:31.449 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45448 10 6452 1 2025-11-06 10:55:23.180 00:00:10.369 TCP 23.104.0.1:40258 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:55:31.665 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51056 10 6452 1 2025-11-06 10:56:23.590 00:00:10.366 TCP 23.104.0.1:41064 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:56:31.878 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54164 10 6452 1 2025-11-06 10:57:23.996 00:00:10.365 TCP 23.104.0.1:57494 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:57:32.072 00:00:10.358 TCP 1.101.0.1:3000 -> 22.102.0.1:41734 10 6452 1 2025-11-06 10:58:30.832 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 10:58:30.909 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 10:58:24.401 00:00:10.420 TCP 23.104.0.1:46164 -> 1.101.0.1:3000 11 1507 1 2025-11-06 10:58:32.465 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57280 10 6452 1 Summary: total flows: 164, total bytes: 502736, total packets: 1579, avg bps: 1050, avg pps: 0, avg bpp: 318 Time window: 2025-11-06 09:54:53 - 2025-11-06 10:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0045s User: 0.0018s Wall: 0.0027s flows/second: 61149.1 Runtime: 0.0027s