Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 01:53:58.400 00:05:56.702 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 01:58:50.570 00:00:10.361 TCP 23.104.0.1:38010 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:58:54.439 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43762 10 6452 1 2025-11-10 01:59:50.978 00:00:10.364 TCP 23.104.0.1:40380 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:59:54.649 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39400 10 6452 1 2025-11-10 02:00:15.572 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:00:15.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:00:51.377 00:00:10.369 TCP 23.104.0.1:60910 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:00:54.863 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55142 10 6452 1 2025-11-10 02:01:51.784 00:00:10.367 TCP 23.104.0.1:37992 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:01:55.046 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49168 10 6452 1 2025-11-10 02:02:52.187 00:00:10.367 TCP 23.104.0.1:54624 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:02:55.260 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35558 10 6452 1 2025-11-10 01:58:58.404 00:05:56.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 02:03:55.431 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46512 10 6452 1 2025-11-10 02:03:52.591 00:00:10.371 TCP 23.104.0.1:38204 -> 1.101.0.1:3000 11 1507 1 2025-11-10 01:59:58.402 00:05:56.702 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 02:04:55.645 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41028 10 6452 1 2025-11-10 02:04:53.003 00:00:10.365 TCP 23.104.0.1:44300 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:05:15.768 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:05:15.524 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:05:53.408 00:00:10.368 TCP 23.104.0.1:47822 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:05:55.857 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42396 10 6452 1 2025-11-10 02:06:53.823 00:00:10.369 TCP 23.104.0.1:43600 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:06:56.083 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50780 10 6452 1 2025-11-10 02:07:56.259 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52828 10 6452 1 2025-11-10 02:07:54.227 00:00:10.366 TCP 23.104.0.1:44676 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:08:54.634 00:00:10.426 TCP 23.104.0.1:43222 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:08:56.475 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53552 10 6452 1 2025-11-10 02:04:58.404 00:05:56.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 02:09:55.109 00:00:10.323 TCP 23.104.0.1:34898 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:09:56.693 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49070 10 6452 1 2025-11-10 02:10:15.573 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:10:15.818 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:05:58.402 00:05:56.703 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 02:10:55.476 00:00:10.322 TCP 23.104.0.1:48556 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:10:56.909 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42174 10 6452 1 2025-11-10 02:11:55.838 00:00:10.354 TCP 23.104.0.1:50870 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:11:57.127 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52924 10 6452 1 2025-11-10 02:12:56.227 00:00:10.370 TCP 23.104.0.1:55424 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:12:57.351 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36082 10 6452 1 2025-11-10 02:13:57.571 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58816 10 6452 1 2025-11-10 02:13:56.635 00:00:10.367 TCP 23.104.0.1:33600 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:14:57.057 00:00:10.367 TCP 23.104.0.1:44072 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:14:57.786 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6452 1 2025-11-10 02:15:15.771 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:15:15.902 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:10:58.406 00:05:56.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 02:15:57.460 00:00:10.371 TCP 23.104.0.1:47124 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:15:57.957 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:33388 10 6452 1 2025-11-10 02:11:58.404 00:05:56.703 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 02:16:57.869 00:00:10.373 TCP 23.104.0.1:44592 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:16:58.181 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38314 10 6452 1 2025-11-10 02:17:58.277 00:00:10.439 TCP 23.104.0.1:33182 -> 1.101.0.1:3000 15 1926 1 2025-11-10 02:17:58.393 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52264 12 10369 1 2025-11-10 02:18:58.626 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42270 10 6452 1 2025-11-10 02:18:58.756 00:00:10.336 TCP 23.104.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:19:59.137 00:00:10.369 TCP 23.104.0.1:58122 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:20:16.144 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:19:58.812 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38846 10 6452 1 2025-11-10 02:20:16.048 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:20:59.539 00:00:10.369 TCP 23.104.0.1:47280 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:20:59.041 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47894 10 6452 1 2025-11-10 02:16:58.407 00:05:56.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 02:21:59.212 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6452 1 2025-11-10 02:21:59.944 00:00:10.368 TCP 23.104.0.1:35470 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:17:58.405 00:05:56.704 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 02:22:59.426 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43562 10 6452 1 2025-11-10 02:23:00.349 00:00:10.362 TCP 23.104.0.1:43638 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:24:00.750 00:00:10.386 TCP 23.104.0.1:54696 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:23:59.639 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49676 10 6452 1 2025-11-10 02:25:01.175 00:00:10.740 TCP 23.104.0.1:51172 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:24:59.851 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35100 10 6452 1 2025-11-10 02:25:16.102 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:25:15.881 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:26:00.079 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41124 10 6452 1 2025-11-10 02:26:01.955 00:00:10.362 TCP 23.104.0.1:44496 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:27:00.298 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-11-10 02:27:02.360 00:00:10.364 TCP 23.104.0.1:41912 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:22:58.409 00:05:56.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 02:28:00.528 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49938 10 6452 1 2025-11-10 02:28:02.762 00:00:10.371 TCP 23.104.0.1:46286 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:23:58.405 00:05:56.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 02:29:00.743 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50490 10 6452 1 2025-11-10 02:29:03.176 00:00:10.364 TCP 23.104.0.1:57004 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:30:00.958 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40940 10 6452 1 2025-11-10 02:30:03.582 00:00:10.658 TCP 23.104.0.1:37262 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:30:16.235 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:30:16.361 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:31:01.194 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44328 10 6452 1 2025-11-10 02:31:04.275 00:00:10.325 TCP 23.104.0.1:52050 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:32:01.412 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59946 10 6452 1 2025-11-10 02:32:04.640 00:00:10.363 TCP 23.104.0.1:32916 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:33:01.635 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50420 12 10369 1 2025-11-10 02:33:05.054 00:00:10.448 TCP 23.104.0.1:57722 -> 1.101.0.1:3000 15 1926 1 2025-11-10 02:28:58.410 00:05:56.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 02:34:01.880 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:42402 10 6452 1 2025-11-10 02:34:05.541 00:00:10.362 TCP 23.104.0.1:43486 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:29:58.407 00:05:56.704 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 02:35:16.180 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:35:05.941 00:00:10.370 TCP 23.104.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:35:16.321 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:35:02.132 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48740 10 6452 1 2025-11-10 02:36:06.343 00:00:10.363 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:36:02.347 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49426 10 6452 1 2025-11-10 02:37:02.569 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52800 10 6452 1 2025-11-10 02:37:06.754 00:00:10.342 TCP 23.104.0.1:47370 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:38:02.783 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44968 10 6452 1 2025-11-10 02:38:07.133 00:00:10.369 TCP 23.104.0.1:47104 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:39:02.994 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42640 10 6452 1 2025-11-10 02:39:07.538 00:00:10.363 TCP 23.104.0.1:55786 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:34:58.415 00:05:56.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 02:40:16.325 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:40:03.227 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38130 10 6452 1 2025-11-10 02:40:16.288 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:40:07.942 00:00:10.381 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:35:58.412 00:05:56.702 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 02:41:03.439 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34564 10 6452 1 2025-11-10 02:41:08.363 00:00:10.364 TCP 23.104.0.1:51516 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:42:03.656 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47434 10 6452 1 2025-11-10 02:42:08.789 00:00:10.371 TCP 23.104.0.1:54996 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:43:03.863 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57584 10 6452 1 2025-11-10 02:43:09.198 00:00:10.329 TCP 23.104.0.1:40674 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:44:04.085 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36362 10 6452 1 2025-11-10 02:44:09.569 00:00:10.325 TCP 23.104.0.1:59778 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:45:16.567 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:45:04.291 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36656 10 6452 1 2025-11-10 02:45:16.488 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:45:09.932 00:00:10.381 TCP 23.104.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:40:58.416 00:05:56.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 02:46:04.521 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48858 10 6452 1 2025-11-10 02:46:10.353 00:00:10.368 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:41:58.414 00:05:56.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 02:47:04.697 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52696 10 6452 1 2025-11-10 02:47:10.761 00:00:10.375 TCP 23.104.0.1:49154 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:48:04.905 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48708 10 6452 1 2025-11-10 02:48:11.180 00:00:10.366 TCP 23.104.0.1:58044 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:49:05.085 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34186 10 6452 1 2025-11-10 02:49:11.581 00:00:10.323 TCP 23.104.0.1:45048 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:50:16.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:50:16.458 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:50:05.260 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:46862 10 6452 1 2025-11-10 02:50:11.943 00:00:10.365 TCP 23.104.0.1:43086 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:51:05.431 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52630 10 6452 1 2025-11-10 02:51:12.347 00:00:10.374 TCP 23.104.0.1:51500 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:46:58.417 00:05:56.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 02:52:05.643 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58228 10 6452 1 2025-11-10 02:52:12.763 00:00:10.330 TCP 23.104.0.1:36150 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:47:58.415 00:05:56.704 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 02:53:05.846 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45426 10 6452 1 2025-11-10 02:53:13.130 00:00:10.371 TCP 23.104.0.1:51464 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:54:06.082 00:00:11.386 TCP 1.101.0.1:3000 -> 22.102.0.1:43702 10 6452 1 2025-11-10 02:54:13.537 00:00:10.328 TCP 23.104.0.1:43500 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:55:16.637 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 02:55:16.476 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 02:55:07.502 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-11-10 02:55:13.906 00:00:10.324 TCP 23.104.0.1:34140 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:56:07.671 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35936 10 6452 1 2025-11-10 02:56:14.275 00:00:10.367 TCP 23.104.0.1:47248 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:57:07.900 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51530 10 6452 1 2025-11-10 02:57:14.677 00:00:10.324 TCP 23.104.0.1:38868 -> 1.101.0.1:3000 11 1507 1 2025-11-10 02:52:58.419 00:05:56.700 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 02:58:08.120 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35688 10 6452 1 2025-11-10 02:58:15.050 00:00:10.366 TCP 23.104.0.1:34908 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507020, total packets: 1584, avg bps: 1040, avg pps: 0, avg bpp: 320 Time window: 2025-11-10 01:53:58 - 2025-11-10 02:58:55 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0020s Wall: 0.0026s flows/second: 62573.1 Runtime: 0.0026s