Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 04:53:58.456 00:05:56.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 04:59:06.950 00:00:10.365 TCP 23.104.0.1:52474 -> 1.101.0.1:3000 11 1507 1 2025-11-10 04:59:37.036 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54456 10 6452 1 2025-11-10 05:00:19.207 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:00:07.351 00:00:10.375 TCP 23.104.0.1:43246 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:00:19.228 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:00:37.253 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57126 10 6452 1 2025-11-10 05:01:07.763 00:00:10.388 TCP 23.104.0.1:38106 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:01:37.465 00:00:10.448 TCP 1.101.0.1:3000 -> 22.102.0.1:35656 10 6452 1 2025-11-10 05:02:08.174 00:00:10.366 TCP 23.104.0.1:39492 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:02:37.951 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43986 10 6452 1 2025-11-10 05:03:08.576 00:00:10.329 TCP 23.104.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:03:38.179 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59424 10 6452 1 2025-11-10 04:58:58.461 00:05:56.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 05:04:08.939 00:00:10.386 TCP 23.104.0.1:37100 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:04:38.387 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38592 10 6452 1 2025-11-10 04:59:58.459 00:05:56.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 05:05:19.358 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:05:09.357 00:00:10.363 TCP 23.104.0.1:59898 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:05:19.281 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:05:38.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50826 10 6452 1 2025-11-10 05:06:09.759 00:00:10.374 TCP 23.104.0.1:36942 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:06:38.814 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58576 10 6452 1 2025-11-10 05:07:10.169 00:00:10.369 TCP 23.104.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:07:38.988 00:00:10.440 TCP 1.101.0.1:3000 -> 22.102.0.1:33940 10 6452 1 2025-11-10 05:08:10.576 00:00:10.444 TCP 23.104.0.1:43378 -> 1.101.0.1:3000 15 1926 1 2025-11-10 05:08:39.470 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55624 12 10369 1 2025-11-10 05:09:11.064 00:00:10.362 TCP 23.104.0.1:32920 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:09:39.704 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38606 10 6452 1 2025-11-10 05:04:58.463 00:05:56.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 05:10:19.580 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:10:11.459 00:00:10.367 TCP 23.104.0.1:35230 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:10:19.237 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:10:39.921 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45528 10 6452 1 2025-11-10 05:05:58.461 00:05:56.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 05:11:11.861 00:00:10.383 TCP 23.104.0.1:53592 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:11:40.134 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50394 10 6452 1 2025-11-10 05:12:12.283 00:00:10.363 TCP 23.104.0.1:55926 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:12:40.351 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55292 10 6452 1 2025-11-10 05:13:12.680 00:00:10.367 TCP 23.104.0.1:57454 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:13:40.570 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44656 10 6452 1 2025-11-10 05:14:13.099 00:00:10.367 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:14:40.782 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51016 10 6452 1 2025-11-10 05:15:19.207 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:15:19.391 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:15:13.500 00:00:10.368 TCP 23.104.0.1:39692 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:15:41.001 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35444 10 6452 1 2025-11-10 05:10:58.467 00:05:56.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 05:16:13.904 00:00:10.367 TCP 23.104.0.1:39134 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:16:41.177 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49236 10 6452 1 2025-11-10 05:11:58.463 00:05:56.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 05:17:14.310 00:00:10.369 TCP 23.104.0.1:52504 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:17:41.391 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38112 10 6452 1 2025-11-10 05:18:14.714 00:00:10.376 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:18:41.613 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34424 10 6452 1 2025-11-10 05:19:15.125 00:00:10.324 TCP 23.104.0.1:53962 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:19:41.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52966 10 6452 1 2025-11-10 05:20:19.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:20:19.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:20:15.489 00:00:10.370 TCP 23.104.0.1:41730 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:20:42.076 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36096 10 6452 1 2025-11-10 05:21:15.906 00:00:10.374 TCP 23.104.0.1:60718 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:21:42.289 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37580 10 6452 1 2025-11-10 05:16:58.468 00:05:56.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 05:22:16.329 00:00:10.327 TCP 23.104.0.1:48160 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:22:42.503 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45148 10 6452 1 2025-11-10 05:17:58.466 00:05:56.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 05:23:16.696 00:00:10.364 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:23:42.717 00:00:10.839 TCP 1.101.0.1:3000 -> 22.102.0.1:53056 10 6452 1 2025-11-10 05:24:17.110 00:00:10.327 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:24:43.591 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46414 10 6452 1 2025-11-10 05:25:19.737 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:25:19.782 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:25:17.475 00:00:10.366 TCP 23.104.0.1:44388 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:25:43.764 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33240 10 6452 1 2025-11-10 05:26:17.898 00:00:10.374 TCP 23.104.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:26:43.978 00:00:10.589 TCP 1.101.0.1:3000 -> 22.102.0.1:35178 10 6452 1 2025-11-10 05:27:18.321 00:00:10.326 TCP 23.104.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:27:44.605 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52386 10 6452 1 2025-11-10 05:22:58.471 00:05:56.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 05:28:18.686 00:00:10.368 TCP 23.104.0.1:37482 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:23:58.469 00:05:56.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 05:28:44.829 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40328 10 6452 1 2025-11-10 05:29:19.101 00:00:10.335 TCP 23.104.0.1:43214 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:29:45.067 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60556 10 6452 1 2025-11-10 05:30:19.688 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:30:20.120 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:30:19.468 00:00:10.369 TCP 23.104.0.1:36640 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:30:45.287 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-11-10 05:31:19.872 00:00:10.363 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:31:45.503 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60290 10 6452 1 2025-11-10 05:32:20.274 00:00:10.366 TCP 23.104.0.1:47164 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:32:45.711 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41920 10 6452 1 2025-11-10 05:33:20.686 00:00:10.330 TCP 23.104.0.1:59288 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:33:45.928 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52316 10 6452 1 2025-11-10 05:28:58.474 00:05:56.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 05:34:21.057 00:00:10.324 TCP 23.104.0.1:58060 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:29:58.474 00:05:56.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 05:34:46.136 00:00:10.316 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-11-10 05:35:19.883 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:35:19.959 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:35:21.427 00:00:10.373 TCP 23.104.0.1:59782 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:35:46.482 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37546 10 6452 1 2025-11-10 05:36:21.843 00:00:10.392 TCP 23.104.0.1:43860 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:36:46.705 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37804 10 6452 1 2025-11-10 05:37:22.272 00:00:10.362 TCP 23.104.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:37:46.931 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:45472 10 6452 1 2025-11-10 05:38:22.673 00:00:10.392 TCP 23.104.0.1:50096 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:38:47.175 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33224 10 6452 1 2025-11-10 05:39:23.111 00:00:10.370 TCP 23.104.0.1:42224 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:34:58.473 00:05:56.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 05:39:47.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53630 10 6452 1 2025-11-10 05:40:19.612 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:40:19.776 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:40:23.519 00:00:10.372 TCP 23.104.0.1:57072 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:35:58.471 00:05:56.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 05:40:47.612 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43524 10 6452 1 2025-11-10 05:41:23.930 00:00:10.380 TCP 23.104.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:41:47.833 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49716 10 6452 1 2025-11-10 05:42:24.350 00:00:10.329 TCP 23.104.0.1:37820 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:42:48.076 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55478 10 6452 1 2025-11-10 05:43:24.719 00:00:10.381 TCP 23.104.0.1:36440 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:43:48.298 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47106 10 6452 1 2025-11-10 05:44:25.134 00:00:10.365 TCP 23.104.0.1:54338 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:44:48.527 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:43620 11 6504 1 2025-11-10 05:45:20.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:45:19.877 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:45:25.532 00:00:10.323 TCP 23.104.0.1:59142 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:40:58.475 00:05:56.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 05:45:48.804 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56776 10 6452 1 2025-11-10 05:46:25.895 00:00:10.330 TCP 23.104.0.1:45622 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:41:58.472 00:05:56.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 05:46:49.037 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34992 10 6452 1 2025-11-10 05:47:26.265 00:00:10.367 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:47:49.269 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35260 10 6452 1 2025-11-10 05:48:26.668 00:00:10.360 TCP 23.104.0.1:58322 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:48:49.483 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:51614 11 6504 1 2025-11-10 05:49:27.091 00:00:10.362 TCP 23.104.0.1:45346 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:49:49.777 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52434 10 6452 1 2025-11-10 05:50:20.292 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:50:20.245 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:50:27.494 00:00:10.330 TCP 23.104.0.1:35742 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:50:49.995 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42112 10 6452 1 2025-11-10 05:51:27.859 00:00:10.384 TCP 23.104.0.1:40570 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:46:58.475 00:05:56.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 05:51:50.216 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39160 10 6452 1 2025-11-10 05:52:28.283 00:00:10.371 TCP 23.104.0.1:58636 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:47:58.473 00:05:56.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 05:52:50.440 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34054 10 6452 1 2025-11-10 05:53:28.697 00:00:10.332 TCP 23.104.0.1:43726 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:53:50.662 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43322 10 6452 1 2025-11-10 05:54:29.103 00:00:10.365 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:54:50.885 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58896 10 6452 1 2025-11-10 05:55:20.061 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 05:55:20.008 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 05:55:29.504 00:00:10.377 TCP 23.104.0.1:40970 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:55:51.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41666 10 6452 1 2025-11-10 05:56:29.949 00:00:10.364 TCP 23.104.0.1:34164 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:56:51.297 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59560 10 6452 1 2025-11-10 05:57:30.357 00:00:10.366 TCP 23.104.0.1:40114 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:52:58.478 00:05:56.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 05:57:51.471 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50954 10 6452 1 2025-11-10 05:58:30.757 00:00:10.381 TCP 23.104.0.1:32934 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496336, total packets: 1570, avg bps: 1018, avg pps: 0, avg bpp: 316 Time window: 2025-11-10 04:53:58 - 2025-11-10 05:58:55 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0009s Wall: 0.0030s flows/second: 54011.0 Runtime: 0.0030s