Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 07:53:57.970 00:05:56.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 07:58:57.194 00:00:10.369 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-11-09 07:59:12.874 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57740 10 6452 1 2025-11-09 07:59:53.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 07:54:57.969 00:05:56.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 07:59:53.867 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 07:59:57.598 00:00:10.365 TCP 23.104.0.1:40154 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:00:13.072 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32978 10 6452 1 2025-11-09 08:00:58.002 00:00:10.363 TCP 23.104.0.1:53526 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:01:13.289 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46110 10 6452 1 2025-11-09 08:01:58.403 00:00:10.376 TCP 23.104.0.1:46748 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:02:13.466 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-11-09 08:02:58.827 00:00:10.375 TCP 23.104.0.1:57216 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:03:13.684 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35052 10 6452 1 2025-11-09 08:03:59.239 00:00:10.362 TCP 23.104.0.1:52748 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:04:13.898 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50088 10 6452 1 2025-11-09 08:04:53.839 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 07:59:57.972 00:05:56.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 08:04:53.811 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 08:04:59.637 00:00:10.367 TCP 23.104.0.1:50580 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:05:14.085 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47688 10 6452 1 2025-11-09 08:00:57.970 00:05:56.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 08:06:00.054 00:00:10.369 TCP 23.104.0.1:35514 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:06:14.306 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34134 10 6452 1 2025-11-09 08:07:00.458 00:00:10.364 TCP 23.104.0.1:59524 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:07:14.515 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47366 10 6452 1 2025-11-09 08:08:00.859 00:00:10.439 TCP 23.104.0.1:36824 -> 1.101.0.1:3000 15 1926 1 2025-11-09 08:08:14.738 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:51836 12 10375 1 2025-11-09 08:09:01.335 00:00:10.368 TCP 23.104.0.1:48006 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:09:14.976 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50468 10 6452 1 2025-11-09 08:09:54.282 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 08:09:53.971 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 08:10:01.740 00:00:10.367 TCP 23.104.0.1:59746 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:10:15.169 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49752 10 6452 1 2025-11-09 08:05:57.990 00:05:56.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 08:11:02.145 00:00:10.363 TCP 23.104.0.1:43988 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:11:15.348 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50736 10 6452 1 2025-11-09 08:06:57.989 00:05:56.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 08:12:02.547 00:00:10.365 TCP 23.104.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:12:15.558 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42884 10 6452 1 2025-11-09 08:13:02.953 00:00:10.364 TCP 23.104.0.1:57422 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:13:15.793 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55736 10 6452 1 2025-11-09 08:14:03.354 00:00:10.361 TCP 23.104.0.1:33840 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:14:16.011 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47264 10 6452 1 2025-11-09 08:14:54.213 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 08:14:53.925 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 08:15:03.755 00:00:10.373 TCP 23.104.0.1:45910 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:15:16.228 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53714 10 6452 1 2025-11-09 08:16:04.164 00:00:10.365 TCP 23.104.0.1:38030 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:16:16.443 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-11-09 08:11:57.990 00:05:56.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 08:17:04.567 00:00:10.319 TCP 23.104.0.1:47324 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:17:16.659 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60074 10 6452 1 2025-11-09 08:12:57.990 00:05:56.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 08:18:04.924 00:00:10.392 TCP 23.104.0.1:51104 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:18:16.836 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47968 10 6452 1 2025-11-09 08:19:05.358 00:00:10.365 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:19:17.011 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:36538 10 6452 1 2025-11-09 08:19:54.261 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 08:19:54.402 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 08:20:05.765 00:00:10.378 TCP 23.104.0.1:43676 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:20:17.209 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47366 10 6452 1 2025-11-09 08:21:06.185 00:00:10.364 TCP 23.104.0.1:56464 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:21:17.420 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51094 10 6452 1 2025-11-09 08:22:06.584 00:00:10.358 TCP 23.104.0.1:35192 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:22:17.635 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58956 10 6452 1 2025-11-09 08:17:57.991 00:05:56.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 08:23:06.979 00:00:10.365 TCP 23.104.0.1:33494 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:23:17.846 00:00:10.554 TCP 1.101.0.1:3000 -> 22.102.0.1:55112 10 6452 1 2025-11-09 08:18:57.991 00:05:56.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 08:24:07.386 00:00:10.363 TCP 23.104.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:24:18.439 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43142 10 6452 1 2025-11-09 08:24:54.587 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 08:24:54.344 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 08:25:07.794 00:00:10.367 TCP 23.104.0.1:33484 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:25:18.652 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37536 10 6452 1 2025-11-09 08:26:08.205 00:00:10.365 TCP 23.104.0.1:44220 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:26:18.866 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33182 10 6452 1 2025-11-09 08:27:08.621 00:00:10.360 TCP 23.104.0.1:59512 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:27:19.097 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56146 10 6452 1 2025-11-09 08:28:09.026 00:00:10.376 TCP 23.104.0.1:42476 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:28:19.311 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43074 10 6452 1 2025-11-09 08:23:57.994 00:05:56.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 08:29:09.442 00:00:10.367 TCP 23.104.0.1:46558 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:29:19.525 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:32846 11 6504 1 2025-11-09 08:29:54.334 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 08:24:57.993 00:05:56.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 08:29:54.572 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 08:30:09.846 00:00:10.389 TCP 23.104.0.1:54680 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:30:19.805 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58110 10 6452 1 2025-11-09 08:31:10.273 00:00:10.367 TCP 23.104.0.1:52454 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:31:20.041 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46712 10 6452 1 2025-11-09 08:32:10.677 00:00:10.332 TCP 23.104.0.1:40378 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:32:20.259 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44644 10 6452 1 2025-11-09 08:33:11.058 00:00:10.377 TCP 23.104.0.1:60278 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:33:20.473 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37582 10 6452 1 2025-11-09 08:34:11.470 00:00:10.328 TCP 23.104.0.1:52168 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:34:20.685 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 10 6452 1 2025-11-09 08:34:54.555 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 08:29:57.996 00:05:56.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 08:34:54.601 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 08:35:11.836 00:00:10.385 TCP 23.104.0.1:34090 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:35:20.893 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35284 10 6452 1 2025-11-09 08:30:57.994 00:05:56.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 08:36:12.258 00:00:10.361 TCP 23.104.0.1:55014 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:36:21.121 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49674 10 6452 1 2025-11-09 08:37:12.657 00:00:10.365 TCP 23.104.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:37:21.360 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35404 10 6452 1 2025-11-09 08:38:13.060 00:00:10.364 TCP 23.104.0.1:41260 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:38:21.570 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58560 10 6452 1 2025-11-09 08:39:13.460 00:00:10.367 TCP 23.104.0.1:33364 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:39:21.790 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45446 10 6452 1 2025-11-09 08:39:54.796 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 08:39:54.580 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 08:35:57.997 00:05:00.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 667 1 2025-11-09 08:40:13.860 00:00:10.371 TCP 23.104.0.1:56268 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:40:22.002 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:59622 10 6452 1 2025-11-09 08:36:57.994 00:05:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 686 1 2025-11-09 08:41:14.266 00:00:10.367 TCP 23.104.0.1:55464 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:41:22.184 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33052 10 6452 1 2025-11-09 08:42:14.675 00:00:10.372 TCP 23.104.0.1:48566 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:42:22.397 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:58132 10 6452 1 2025-11-09 08:43:15.096 00:00:10.325 TCP 23.104.0.1:58754 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:43:22.582 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54748 10 6452 1 2025-11-09 08:44:15.464 00:00:10.361 TCP 23.104.0.1:40114 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:44:22.812 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35182 10 6452 1 2025-11-09 08:44:54.544 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 08:44:54.896 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 08:45:15.864 00:00:10.365 TCP 23.104.0.1:52242 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:45:23.054 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59880 10 6452 1 2025-11-09 08:41:54.753 00:05:03.250 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 08:46:16.265 00:00:10.329 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:46:23.224 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48636 10 6452 1 2025-11-09 08:42:54.757 00:05:03.266 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 08:47:16.627 00:00:10.321 TCP 23.104.0.1:50488 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:47:23.439 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42366 10 6452 1 2025-11-09 08:48:16.991 00:00:10.364 TCP 23.104.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:48:23.647 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54640 10 6452 1 2025-11-09 08:49:17.397 00:00:10.363 TCP 23.104.0.1:50814 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:49:23.860 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:38318 10 6452 1 2025-11-09 08:49:54.898 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 08:49:54.761 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 08:50:17.799 00:00:10.365 TCP 23.104.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:50:24.104 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41498 10 6452 1 2025-11-09 08:51:18.208 00:00:10.372 TCP 23.104.0.1:40952 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:51:24.274 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56834 10 6452 1 2025-11-09 08:47:54.756 00:05:03.278 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 08:52:18.617 00:00:10.327 TCP 23.104.0.1:57424 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:52:24.483 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56970 10 6452 1 2025-11-09 08:48:54.759 00:05:03.277 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 08:53:18.989 00:00:10.367 TCP 23.104.0.1:53692 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:53:24.696 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36610 10 6452 1 2025-11-09 08:54:19.393 00:00:10.321 TCP 23.104.0.1:41460 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:54:24.907 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45540 10 6452 1 2025-11-09 08:54:55.064 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 08:54:55.053 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 08:55:19.760 00:00:10.373 TCP 23.104.0.1:42596 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:55:25.122 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46964 10 6452 1 2025-11-09 08:56:20.167 00:00:10.327 TCP 23.104.0.1:52068 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:56:25.331 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55624 10 6452 1 2025-11-09 08:57:20.547 00:00:10.363 TCP 23.104.0.1:39856 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:57:25.548 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60360 10 6452 1 2025-11-09 08:53:54.757 00:05:03.281 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 08:58:20.947 00:00:10.372 TCP 23.104.0.1:44060 -> 1.101.0.1:3000 11 1507 1 2025-11-09 08:58:25.763 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43638 10 6452 1 Summary: total flows: 165, total bytes: 503357, total packets: 1589, avg bps: 1032, avg pps: 0, avg bpp: 316 Time window: 2025-11-09 07:53:57 - 2025-11-09 08:58:58 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0031s User: 0.0021s Wall: 0.0022s flows/second: 73756.8 Runtime: 0.0023s