Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 19:53:58.808 00:05:56.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 19:58:51.105 00:00:10.367 TCP 23.104.0.1:60574 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:59:00.427 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33604 10 6452 1 2025-11-10 19:59:51.511 00:00:10.366 TCP 23.104.0.1:48824 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:00:00.599 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56038 10 6452 1 2025-11-10 20:00:37.216 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:00:37.319 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:00:51.912 00:00:10.363 TCP 23.104.0.1:36376 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:01:00.819 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58586 10 6452 1 2025-11-10 20:01:52.314 00:00:10.366 TCP 23.104.0.1:55308 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:02:00.997 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57014 10 6452 1 2025-11-10 20:02:52.718 00:00:10.371 TCP 23.104.0.1:43910 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:03:01.220 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 10 6452 1 2025-11-10 19:58:58.812 00:05:56.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 20:03:53.125 00:00:10.363 TCP 23.104.0.1:55494 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:04:01.445 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43530 10 6452 1 2025-11-10 19:59:58.810 00:05:56.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 20:04:53.529 00:00:10.373 TCP 23.104.0.1:35410 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:05:01.658 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34676 10 6452 1 2025-11-10 20:05:37.489 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:05:37.370 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:05:53.944 00:00:10.374 TCP 23.104.0.1:51166 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:06:01.880 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39948 10 6452 1 2025-11-10 20:06:54.355 00:00:10.368 TCP 23.104.0.1:48224 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:07:02.110 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38936 10 6452 1 2025-11-10 20:07:54.761 00:00:10.378 TCP 23.104.0.1:46874 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:08:02.334 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45852 10 6452 1 2025-11-10 20:08:55.180 00:00:10.370 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:09:02.558 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55216 10 6452 1 2025-11-10 20:04:58.812 00:05:56.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 20:09:55.585 00:00:10.365 TCP 23.104.0.1:44800 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:10:02.770 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41012 10 6452 1 2025-11-10 20:10:37.334 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:10:37.397 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:05:58.811 00:05:56.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 20:10:55.987 00:00:10.368 TCP 23.104.0.1:37992 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:11:02.982 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35534 10 6452 1 2025-11-10 20:11:56.395 00:00:10.368 TCP 23.104.0.1:56002 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:12:03.223 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56336 10 6452 1 2025-11-10 20:12:56.795 00:00:10.367 TCP 23.104.0.1:52506 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:13:03.454 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36918 10 6452 1 2025-11-10 20:13:57.199 00:00:10.365 TCP 23.104.0.1:34406 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:14:03.668 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51102 10 6452 1 2025-11-10 20:14:57.603 00:00:10.367 TCP 23.104.0.1:58016 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:15:03.884 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60354 10 6452 1 2025-11-10 20:15:37.461 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:15:37.338 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:10:58.816 00:05:56.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 20:15:58.019 00:00:10.367 TCP 23.104.0.1:38532 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:16:04.113 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44628 10 6452 1 2025-11-10 20:11:58.814 00:05:56.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 20:16:58.425 00:00:10.367 TCP 23.104.0.1:48102 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:17:04.329 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52198 10 6452 1 2025-11-10 20:17:58.834 00:00:10.469 TCP 23.104.0.1:60100 -> 1.101.0.1:3000 15 1926 1 2025-11-10 20:18:04.549 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:56256 13 10427 1 2025-11-10 20:18:59.343 00:00:10.364 TCP 23.104.0.1:56060 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:19:04.846 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55536 10 6452 1 2025-11-10 20:19:59.748 00:00:10.368 TCP 23.104.0.1:54932 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:20:05.080 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57012 10 6452 1 2025-11-10 20:20:37.527 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:20:37.503 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:21:00.153 00:00:10.360 TCP 23.104.0.1:34770 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:21:05.304 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55328 10 6452 1 2025-11-10 20:16:58.819 00:05:56.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 20:22:00.552 00:00:10.362 TCP 23.104.0.1:60592 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:22:05.515 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40818 10 6452 1 2025-11-10 20:17:58.817 00:05:56.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 20:23:00.951 00:00:10.371 TCP 23.104.0.1:41336 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:23:05.687 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42820 10 6452 1 2025-11-10 20:24:01.354 00:00:10.363 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:24:05.899 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39578 10 6452 1 2025-11-10 20:25:06.113 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39450 10 6452 1 2025-11-10 20:25:01.764 00:00:10.380 TCP 23.104.0.1:38568 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:25:37.613 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:25:37.766 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:26:06.331 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47894 10 6452 1 2025-11-10 20:26:02.182 00:00:10.363 TCP 23.104.0.1:53518 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:27:02.580 00:00:10.364 TCP 23.104.0.1:50928 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:27:06.539 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35012 10 6452 1 2025-11-10 20:22:58.820 00:05:56.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 20:28:02.980 00:00:10.371 TCP 23.104.0.1:46934 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:28:06.752 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39144 10 6452 1 2025-11-10 20:23:58.817 00:05:56.588 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 20:29:03.392 00:00:10.363 TCP 23.104.0.1:38260 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:29:06.980 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:40238 10 6452 1 2025-11-10 20:30:03.795 00:00:10.349 TCP 23.104.0.1:37000 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:30:07.169 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40706 10 6452 1 2025-11-10 20:30:37.798 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:30:37.949 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:31:04.183 00:00:10.367 TCP 23.104.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:31:07.380 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59272 10 6452 1 2025-11-10 20:32:04.589 00:00:10.621 TCP 23.104.0.1:50402 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:32:07.594 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39040 10 6452 1 2025-11-10 20:33:05.252 00:00:10.362 TCP 23.104.0.1:37610 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:33:07.810 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56414 10 6452 1 2025-11-10 20:28:58.821 00:05:56.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 20:34:05.653 00:00:11.009 TCP 23.104.0.1:42756 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:34:07.989 00:00:10.642 TCP 1.101.0.1:3000 -> 22.102.0.1:42166 10 6452 1 2025-11-10 20:29:58.820 00:05:56.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 20:35:06.698 00:00:10.366 TCP 23.104.0.1:35190 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:35:08.671 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6452 1 2025-11-10 20:35:38.072 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:35:37.944 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:36:07.108 00:00:10.465 TCP 23.104.0.1:58708 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:36:08.842 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48244 10 6452 1 2025-11-10 20:37:09.081 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40258 10 6452 1 2025-11-10 20:37:07.610 00:00:10.328 TCP 23.104.0.1:59184 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:38:09.308 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52516 10 6452 1 2025-11-10 20:38:07.974 00:00:10.368 TCP 23.104.0.1:51368 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:39:09.518 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6452 1 2025-11-10 20:39:08.382 00:00:10.323 TCP 23.104.0.1:38900 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:34:58.822 00:05:56.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 20:40:08.743 00:00:10.386 TCP 23.104.0.1:56978 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:40:09.732 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57098 10 6452 1 2025-11-10 20:40:38.220 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:40:38.287 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:35:58.819 00:05:56.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 20:41:09.946 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43618 10 6452 1 2025-11-10 20:41:09.166 00:00:10.372 TCP 23.104.0.1:37576 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:42:09.576 00:00:10.334 TCP 23.104.0.1:44422 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:42:10.170 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60310 10 6452 1 2025-11-10 20:43:10.408 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50474 10 6452 1 2025-11-10 20:43:09.942 00:00:10.371 TCP 23.104.0.1:40726 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:44:10.621 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35782 10 6452 1 2025-11-10 20:44:10.349 00:00:10.375 TCP 23.104.0.1:57370 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:45:10.826 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43298 10 6452 1 2025-11-10 20:45:10.757 00:00:10.387 TCP 23.104.0.1:55204 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:45:37.938 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:45:38.097 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:40:58.825 00:05:56.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 20:46:11.068 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48152 10 6452 1 2025-11-10 20:46:11.180 00:00:10.365 TCP 23.104.0.1:37880 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:41:58.822 00:05:56.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 20:47:11.583 00:00:10.366 TCP 23.104.0.1:56554 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:47:11.279 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57946 10 6452 1 2025-11-10 20:48:11.495 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53008 10 6452 1 2025-11-10 20:48:11.988 00:00:10.365 TCP 23.104.0.1:55732 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:49:11.705 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51208 10 6452 1 2025-11-10 20:49:12.392 00:00:10.319 TCP 23.104.0.1:53876 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:50:12.753 00:00:10.376 TCP 23.104.0.1:46332 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:50:11.917 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46462 10 6452 1 2025-11-10 20:50:37.860 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:50:38.154 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:51:12.128 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44456 10 6452 1 2025-11-10 20:51:13.168 00:00:10.361 TCP 23.104.0.1:50380 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:46:58.825 00:05:56.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 20:52:12.344 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54200 10 6452 1 2025-11-10 20:52:13.575 00:00:10.362 TCP 23.104.0.1:41274 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:47:58.823 00:05:56.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 20:53:12.551 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47252 10 6452 1 2025-11-10 20:53:13.973 00:00:10.370 TCP 23.104.0.1:53112 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:54:14.383 00:00:10.357 TCP 23.104.0.1:53862 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:54:12.761 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43220 10 6452 1 2025-11-10 20:55:12.970 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55282 10 6452 1 2025-11-10 20:55:14.777 00:00:10.370 TCP 23.104.0.1:37674 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:55:38.292 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 20:55:38.322 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 20:56:13.190 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60822 10 6452 1 2025-11-10 20:56:15.188 00:00:10.362 TCP 23.104.0.1:59116 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:57:15.586 00:00:10.376 TCP 23.104.0.1:48670 -> 1.101.0.1:3000 11 1507 1 2025-11-10 20:57:13.401 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39788 10 6452 1 2025-11-10 20:52:58.828 00:05:56.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 20:58:13.611 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40090 10 6452 1 2025-11-10 20:58:15.998 00:00:10.327 TCP 23.104.0.1:49780 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502742, total packets: 1579, avg bps: 1032, avg pps: 0, avg bpp: 318 Time window: 2025-11-10 19:53:58 - 2025-11-10 20:58:55 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0021s Wall: 0.0040s flows/second: 40675.6 Runtime: 0.0041s