Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-07 03:54:53.787 00:05:03.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-07 03:58:57.957 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48304 10 6452 1 2025-11-07 03:59:40.885 00:00:10.389 TCP 23.104.0.1:36618 -> 1.101.0.1:3000 11 1507 1 2025-11-07 03:55:53.789 00:05:03.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-07 03:59:58.195 00:00:10.493 TCP 1.101.0.1:3000 -> 22.102.0.1:54964 10 6452 1 2025-11-07 04:00:41.312 00:00:10.365 TCP 23.104.0.1:45692 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:00:58.727 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40798 10 6452 1 2025-11-07 04:01:41.715 00:00:10.377 TCP 23.104.0.1:35400 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:01:58.945 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:56452 10 6452 1 2025-11-07 04:02:42.130 00:00:10.323 TCP 23.104.0.1:42824 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:02:59.180 00:00:10.737 TCP 1.101.0.1:3000 -> 22.102.0.1:55166 10 6452 1 2025-11-07 04:03:51.682 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 04:03:51.532 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 04:03:42.495 00:00:10.369 TCP 23.104.0.1:42284 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:03:59.954 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:36544 10 6452 1 2025-11-07 04:04:42.899 00:00:10.375 TCP 23.104.0.1:48498 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:00:53.787 00:05:03.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-07 04:05:00.186 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33624 10 6452 1 2025-11-07 04:01:53.790 00:05:03.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-07 04:05:43.313 00:00:10.391 TCP 23.104.0.1:40782 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:06:00.407 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37132 10 6452 1 2025-11-07 04:06:43.746 00:00:10.367 TCP 23.104.0.1:35268 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:07:00.627 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38204 10 6452 1 2025-11-07 04:07:44.151 00:00:10.368 TCP 23.104.0.1:44424 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:08:00.854 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33240 10 6452 1 2025-11-07 04:08:51.370 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 04:08:51.535 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 04:08:44.554 00:00:10.326 TCP 23.104.0.1:56706 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:09:01.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57212 10 6452 1 2025-11-07 04:09:44.921 00:00:10.371 TCP 23.104.0.1:40288 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:10:01.298 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40674 10 6452 1 2025-11-07 04:10:45.336 00:00:10.358 TCP 23.104.0.1:53036 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:06:53.790 00:05:03.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-07 04:11:01.511 00:00:10.783 TCP 1.101.0.1:3000 -> 22.102.0.1:60570 10 6452 1 2025-11-07 04:11:45.728 00:00:10.375 TCP 23.104.0.1:40766 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:07:53.792 00:05:03.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-07 04:12:02.343 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50634 10 6452 1 2025-11-07 04:12:46.141 00:00:10.330 TCP 23.104.0.1:60170 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:13:02.550 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53546 10 6452 1 2025-11-07 04:13:51.694 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 04:13:51.696 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 04:13:46.507 00:00:10.368 TCP 23.104.0.1:45420 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:14:02.766 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41926 10 6452 1 2025-11-07 04:14:46.910 00:00:10.364 TCP 23.104.0.1:48272 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:15:02.934 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:56276 10 6452 1 2025-11-07 04:15:47.311 00:00:10.323 TCP 23.104.0.1:60738 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:16:03.199 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55240 10 6452 1 2025-11-07 04:12:53.790 00:05:03.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-07 04:16:47.674 00:00:10.323 TCP 23.104.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:17:03.418 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37308 10 6452 1 2025-11-07 04:17:48.034 00:00:10.368 TCP 23.104.0.1:55630 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:13:53.793 00:05:03.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-07 04:18:03.635 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58586 10 6452 1 2025-11-07 04:18:51.701 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 04:18:51.597 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 04:18:48.438 00:00:10.323 TCP 23.104.0.1:54784 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:19:03.857 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:59462 10 6452 1 2025-11-07 04:19:48.803 00:00:10.371 TCP 23.104.0.1:44522 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:20:04.059 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42972 10 6452 1 2025-11-07 04:20:49.206 00:00:10.324 TCP 23.104.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:21:04.268 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39280 10 6452 1 2025-11-07 04:21:49.568 00:00:10.367 TCP 23.104.0.1:35952 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:22:04.475 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:40660 10 6452 1 2025-11-07 04:22:49.976 00:00:10.345 TCP 23.104.0.1:41240 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:18:53.791 00:05:03.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-07 04:23:04.644 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42604 10 6452 1 2025-11-07 04:23:51.893 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 04:23:51.832 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 04:23:50.364 00:00:10.377 TCP 23.104.0.1:50870 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:19:53.795 00:05:03.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-07 04:24:04.859 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:54200 10 6452 1 2025-11-07 04:24:50.778 00:00:10.375 TCP 23.104.0.1:59688 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:25:05.094 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41860 10 6452 1 2025-11-07 04:25:51.197 00:00:10.325 TCP 23.104.0.1:35056 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:26:05.306 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49630 10 6452 1 2025-11-07 04:26:51.562 00:00:10.369 TCP 23.104.0.1:54260 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:27:05.513 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41244 10 6452 1 2025-11-07 04:27:51.969 00:00:10.401 TCP 23.104.0.1:51610 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:28:05.725 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44326 10 6452 1 2025-11-07 04:28:51.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 04:28:51.918 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 04:24:53.793 00:05:03.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-07 04:28:52.444 00:00:11.923 TCP 23.104.0.1:54004 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:29:05.945 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52970 10 6452 1 2025-11-07 04:25:53.797 00:05:03.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-07 04:29:54.429 00:00:10.365 TCP 23.104.0.1:34208 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:30:06.186 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54062 10 6452 1 2025-11-07 04:30:54.832 00:00:10.386 TCP 23.104.0.1:48588 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:31:06.358 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53962 10 6452 1 2025-11-07 04:31:55.253 00:00:10.372 TCP 23.104.0.1:51196 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:32:06.566 00:00:10.272 TCP 1.101.0.1:3000 -> 22.102.0.1:48972 10 6452 1 2025-11-07 04:32:55.667 00:00:10.323 TCP 23.104.0.1:35794 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:33:06.878 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47354 10 6452 1 2025-11-07 04:33:51.939 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 04:33:52.056 00:00:00.054 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 04:33:56.034 00:00:10.382 TCP 23.104.0.1:57810 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:34:07.101 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40788 10 6452 1 2025-11-07 04:30:53.795 00:05:03.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-07 04:34:56.455 00:00:10.361 TCP 23.104.0.1:59248 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:35:07.313 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34912 10 6452 1 2025-11-07 04:31:53.800 00:05:03.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-07 04:35:56.852 00:00:10.377 TCP 23.104.0.1:52814 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:36:07.531 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:33796 10 6452 1 2025-11-07 04:36:57.268 00:00:10.377 TCP 23.104.0.1:60562 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:37:07.799 00:00:10.693 TCP 1.101.0.1:3000 -> 22.102.0.1:42986 12 6556 1 2025-11-07 04:37:57.684 00:00:10.324 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:38:08.543 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54162 10 6452 1 2025-11-07 04:38:51.965 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 04:38:52.001 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 04:38:58.054 00:00:10.332 TCP 23.104.0.1:43682 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:39:08.769 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49410 10 6452 1 2025-11-07 04:39:58.426 00:00:10.423 TCP 23.104.0.1:59164 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:40:08.985 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:44670 13 6608 1 2025-11-07 04:36:53.797 00:05:03.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-07 04:40:58.886 00:00:10.382 TCP 23.104.0.1:37908 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:41:09.229 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48606 10 6452 1 2025-11-07 04:37:53.800 00:05:03.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-07 04:41:59.305 00:00:10.453 TCP 23.104.0.1:58612 -> 1.101.0.1:3000 15 1926 1 2025-11-07 04:42:09.438 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55852 13 13949 1 2025-11-07 04:42:59.783 00:00:10.362 TCP 23.104.0.1:44106 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:43:09.681 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56310 10 6452 1 2025-11-07 04:43:52.677 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 04:43:52.536 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 04:44:00.186 00:00:10.366 TCP 23.104.0.1:60320 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:44:09.906 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53908 10 6452 1 2025-11-07 04:45:00.586 00:00:10.368 TCP 23.104.0.1:52104 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:45:10.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37078 10 6452 1 2025-11-07 04:46:00.994 00:00:10.375 TCP 23.104.0.1:50806 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:46:10.328 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40418 10 6452 1 2025-11-07 04:42:53.801 00:05:03.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-07 04:47:01.408 00:00:10.366 TCP 23.104.0.1:36362 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:47:10.538 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60610 10 6452 1 2025-11-07 04:43:53.804 00:05:03.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-07 04:48:01.808 00:00:10.335 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:48:10.753 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39324 10 6452 1 2025-11-07 04:48:52.507 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 04:48:52.396 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 04:49:02.179 00:00:10.323 TCP 23.104.0.1:52762 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:49:10.960 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48646 10 6452 1 2025-11-07 04:50:02.541 00:00:10.323 TCP 23.104.0.1:53252 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:50:11.136 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57858 10 6452 1 2025-11-07 04:51:02.903 00:00:10.332 TCP 23.104.0.1:39830 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:51:11.360 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49944 10 6452 1 2025-11-07 04:52:03.275 00:00:10.324 TCP 23.104.0.1:58520 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:52:11.587 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52358 10 6452 1 2025-11-07 04:48:53.805 00:05:03.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-07 04:53:03.640 00:00:10.326 TCP 23.104.0.1:49540 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:53:11.795 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38962 10 6452 1 2025-11-07 04:53:52.517 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 04:53:52.333 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 04:49:53.808 00:05:03.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-07 04:54:04.006 00:00:10.361 TCP 23.104.0.1:33458 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:54:12.008 00:00:10.443 TCP 1.101.0.1:3000 -> 22.102.0.1:44936 10 6452 1 2025-11-07 04:55:04.409 00:00:10.326 TCP 23.104.0.1:35708 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:55:12.491 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57568 10 6452 1 2025-11-07 04:56:04.776 00:00:10.326 TCP 23.104.0.1:53188 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:56:12.706 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-11-07 04:57:05.143 00:00:10.370 TCP 23.104.0.1:40384 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:57:12.927 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32914 10 6452 1 2025-11-07 04:58:05.546 00:00:10.362 TCP 23.104.0.1:47620 -> 1.101.0.1:3000 11 1507 1 2025-11-07 04:58:13.136 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46868 10 6452 1 Summary: total flows: 161, total bytes: 504513, total packets: 1567, avg bps: 1059, avg pps: 0, avg bpp: 321 Time window: 2025-11-07 03:54:53 - 2025-11-07 04:58:23 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0031s User: 0.0031s Wall: 0.0025s flows/second: 64632.7 Runtime: 0.0025s