Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 02:53:57.393 00:05:56.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 02:59:01.766 00:00:10.377 TCP 23.104.0.1:46616 -> 1.101.0.1:3000 11 1507 1 2025-11-08 02:59:18.850 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 02:59:18.732 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 02:59:19.508 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36458 10 6452 1 2025-11-08 02:54:57.392 00:05:56.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 03:00:02.192 00:00:10.374 TCP 23.104.0.1:54342 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:00:19.724 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:54906 10 6452 1 2025-11-08 03:01:02.606 00:00:10.366 TCP 23.104.0.1:54994 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:01:19.892 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53348 10 6452 1 2025-11-08 03:02:03.011 00:00:10.365 TCP 23.104.0.1:34452 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:02:20.115 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45506 10 6452 1 2025-11-08 03:03:03.414 00:00:10.373 TCP 23.104.0.1:55556 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:03:20.329 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36576 10 6452 1 2025-11-08 03:04:03.826 00:00:10.390 TCP 23.104.0.1:51764 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:04:19.128 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:04:19.032 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:04:20.540 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58994 10 6452 1 2025-11-08 02:59:57.396 00:05:56.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 03:05:04.255 00:00:10.371 TCP 23.104.0.1:41114 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:05:20.751 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59346 10 6452 1 2025-11-08 03:00:57.395 00:05:56.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 03:06:04.662 00:00:10.368 TCP 23.104.0.1:59490 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:06:20.923 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:43510 10 6452 1 2025-11-08 03:07:05.090 00:00:10.328 TCP 23.104.0.1:59020 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:07:21.176 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59550 10 6452 1 2025-11-08 03:08:05.454 00:00:10.364 TCP 23.104.0.1:48908 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:08:21.383 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45750 10 6452 1 2025-11-08 03:09:05.855 00:00:10.371 TCP 23.104.0.1:48266 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:09:19.387 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:09:19.161 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:09:21.616 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51474 10 6452 1 2025-11-08 03:10:06.261 00:00:10.358 TCP 23.104.0.1:56792 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:10:21.800 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42374 10 6452 1 2025-11-08 03:05:57.398 00:05:56.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 03:11:06.661 00:00:10.381 TCP 23.104.0.1:46348 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:11:22.010 00:00:10.367 TCP 1.101.0.1:3000 -> 22.102.0.1:53900 10 6452 1 2025-11-08 03:06:57.396 00:05:56.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 03:12:07.102 00:00:10.365 TCP 23.104.0.1:51728 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:12:22.421 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46942 10 6452 1 2025-11-08 03:13:07.507 00:00:10.366 TCP 23.104.0.1:41704 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:13:22.639 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53278 10 6452 1 2025-11-08 03:14:19.170 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:14:19.240 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:14:07.911 00:00:10.361 TCP 23.104.0.1:48666 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:14:22.851 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32990 10 6452 1 2025-11-08 03:15:08.312 00:00:10.315 TCP 23.104.0.1:44188 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:15:23.077 00:00:10.943 TCP 1.101.0.1:3000 -> 22.102.0.1:34282 10 6452 1 2025-11-08 03:16:08.679 00:00:10.371 TCP 23.104.0.1:39994 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:16:24.079 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51584 10 6452 1 2025-11-08 03:11:57.399 00:05:56.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 03:17:09.115 00:00:10.367 TCP 23.104.0.1:58340 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:17:24.297 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59950 10 6452 1 2025-11-08 03:12:57.396 00:05:56.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 03:18:09.520 00:00:10.366 TCP 23.104.0.1:37762 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:18:24.521 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59434 10 6452 1 2025-11-08 03:19:19.400 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:19:19.489 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:19:09.932 00:00:10.393 TCP 23.104.0.1:54348 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:19:24.740 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56942 10 6452 1 2025-11-08 03:20:10.381 00:00:12.684 TCP 23.104.0.1:35054 -> 1.101.0.1:3000 13 1611 1 2025-11-08 03:20:24.957 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:33326 10 6452 1 2025-11-08 03:21:13.121 00:00:10.362 TCP 23.104.0.1:40548 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:21:25.203 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51996 10 6452 1 2025-11-08 03:22:13.523 00:00:10.359 TCP 23.104.0.1:42780 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:22:25.419 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39276 10 6452 1 2025-11-08 03:17:57.400 00:05:56.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 03:23:13.920 00:00:10.377 TCP 23.104.0.1:36398 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:23:25.642 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41522 10 6452 1 2025-11-08 03:18:57.398 00:05:56.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 03:24:19.884 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:24:19.764 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:24:14.336 00:00:10.357 TCP 23.104.0.1:47338 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:24:25.825 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43120 10 6452 1 2025-11-08 03:25:14.730 00:00:10.330 TCP 23.104.0.1:57304 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:25:26.004 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55012 10 6452 1 2025-11-08 03:26:15.123 00:00:10.371 TCP 23.104.0.1:43352 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:26:26.230 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43062 10 6452 1 2025-11-08 03:27:15.532 00:00:10.834 TCP 23.104.0.1:58532 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:27:26.407 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52636 10 6452 1 2025-11-08 03:28:16.404 00:00:10.359 TCP 23.104.0.1:33396 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:28:26.632 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48706 10 6452 1 2025-11-08 03:23:57.402 00:05:56.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 03:29:19.847 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:29:19.722 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:29:16.801 00:00:10.344 TCP 23.104.0.1:33562 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:29:26.849 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54094 10 6452 1 2025-11-08 03:24:57.400 00:05:56.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 03:30:17.185 00:00:10.326 TCP 23.104.0.1:52516 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:30:27.079 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36332 10 6452 1 2025-11-08 03:31:17.548 00:00:10.362 TCP 23.104.0.1:56672 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:31:27.303 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54112 10 6452 1 2025-11-08 03:32:17.947 00:00:10.367 TCP 23.104.0.1:39228 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:32:27.516 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58782 10 6452 1 2025-11-08 03:33:18.354 00:00:10.365 TCP 23.104.0.1:52766 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:33:27.724 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52574 10 6452 1 2025-11-08 03:34:19.831 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:34:19.776 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:34:18.759 00:00:11.063 TCP 23.104.0.1:37784 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:34:27.932 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-11-08 03:29:57.405 00:05:56.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 03:35:19.860 00:00:10.369 TCP 23.104.0.1:59248 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:35:28.183 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54972 10 6452 1 2025-11-08 03:30:57.405 00:05:56.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 03:36:20.267 00:00:10.361 TCP 23.104.0.1:37184 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:36:28.402 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39470 10 6452 1 2025-11-08 03:37:20.667 00:00:10.327 TCP 23.104.0.1:51146 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:37:28.624 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58712 10 6452 1 2025-11-08 03:38:21.035 00:00:10.369 TCP 23.104.0.1:55812 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:38:28.845 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34698 10 6452 1 2025-11-08 03:39:19.805 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:39:19.758 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:39:21.447 00:00:10.322 TCP 23.104.0.1:51316 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:39:29.070 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42544 10 6452 1 2025-11-08 03:40:21.819 00:00:10.366 TCP 23.104.0.1:47784 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:40:29.291 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52526 10 6452 1 2025-11-08 03:35:57.407 00:05:56.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 03:41:22.221 00:00:10.363 TCP 23.104.0.1:54792 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:41:29.470 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47444 10 6452 1 2025-11-08 03:36:57.405 00:05:56.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 03:42:22.626 00:00:10.363 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:42:29.634 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56968 10 6452 1 2025-11-08 03:43:23.028 00:00:10.361 TCP 23.104.0.1:48504 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:43:29.847 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47036 10 6452 1 2025-11-08 03:44:19.950 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:44:20.003 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:44:23.427 00:00:16.268 TCP 23.104.0.1:51380 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:44:30.083 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46988 10 6452 1 2025-11-08 03:45:30.261 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54300 10 6452 1 2025-11-08 03:45:29.744 00:00:10.365 TCP 23.104.0.1:43070 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:46:30.148 00:00:10.368 TCP 23.104.0.1:43568 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:46:30.477 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60042 10 6452 1 2025-11-08 03:41:57.408 00:05:56.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 03:47:30.558 00:00:12.728 TCP 23.104.0.1:50912 -> 1.101.0.1:3000 15 1926 1 2025-11-08 03:47:30.690 00:00:12.518 TCP 1.101.0.1:3000 -> 22.102.0.1:50076 12 10375 1 2025-11-08 03:42:57.406 00:05:56.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 03:48:33.324 00:00:10.327 TCP 23.104.0.1:35816 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:48:33.249 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36470 10 6452 1 2025-11-08 03:49:19.984 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:49:19.826 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:49:33.685 00:00:10.370 TCP 23.104.0.1:37364 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:49:33.470 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47200 10 6452 1 2025-11-08 03:50:34.103 00:00:10.361 TCP 23.104.0.1:42174 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:50:33.692 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58624 10 6452 1 2025-11-08 03:51:33.908 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57810 10 6452 1 2025-11-08 03:51:34.503 00:00:10.369 TCP 23.104.0.1:36094 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:52:34.913 00:00:10.440 TCP 23.104.0.1:59714 -> 1.101.0.1:3000 15 1926 1 2025-11-08 03:52:34.125 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:41042 12 10375 1 2025-11-08 03:47:57.409 00:05:56.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 03:53:34.333 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41450 10 6452 1 2025-11-08 03:53:35.392 00:00:10.322 TCP 23.104.0.1:60082 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:48:57.408 00:05:56.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 03:54:20.141 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:54:20.048 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:54:34.561 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37726 10 6452 1 2025-11-08 03:54:35.753 00:00:10.386 TCP 23.104.0.1:55858 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:55:36.176 00:00:10.323 TCP 23.104.0.1:33304 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:55:34.786 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-11-08 03:56:36.536 00:00:10.363 TCP 23.104.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:56:34.965 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-11-08 03:57:35.183 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:40532 10 6452 1 2025-11-08 03:57:36.942 00:00:10.381 TCP 23.104.0.1:50948 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:58:35.366 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40042 10 6452 1 2025-11-08 03:58:37.367 00:00:10.419 TCP 23.104.0.1:48926 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507136, total packets: 1586, avg bps: 1042, avg pps: 0, avg bpp: 319 Time window: 2025-11-08 02:53:57 - 2025-11-08 03:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0024s Wall: 0.0029s flows/second: 55969.6 Runtime: 0.0030s