Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 04:55:00.586 00:05:04.485 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 04:59:03.669 00:00:10.366 TCP 23.104.0.1:55726 -> 1.101.0.1:3000 11 1507 1 2025-11-20 04:59:03.669 00:00:10.366 TCP 23.104.0.1:55726 -> 1.101.0.1:3000 11 1507 1 2025-11-20 04:59:19.684 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45548 10 6452 1 2025-11-20 04:59:19.685 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45548 10 6452 1 2025-11-20 04:56:00.586 00:05:04.487 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:00:07.944 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:00:07.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:00:07.945 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:00:07.928 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:00:04.102 00:00:10.364 TCP 23.104.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:00:04.102 00:00:10.363 TCP 23.104.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:00:19.906 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41450 10 6452 1 2025-11-20 05:00:19.905 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41450 10 6452 1 2025-11-20 05:01:04.501 00:00:10.366 TCP 23.104.0.1:50034 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:01:04.500 00:00:10.366 TCP 23.104.0.1:50034 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:01:20.124 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39044 10 6452 1 2025-11-20 05:01:20.124 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39044 10 6452 1 2025-11-20 05:02:04.901 00:00:10.366 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:02:04.902 00:00:10.366 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:02:20.346 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34928 10 6452 1 2025-11-20 05:02:20.347 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34928 10 6452 1 2025-11-20 04:59:00.591 00:05:04.479 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:03:05.307 00:00:10.368 TCP 23.104.0.1:40346 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:03:05.307 00:00:10.368 TCP 23.104.0.1:40346 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:03:20.565 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38474 10 6452 1 2025-11-20 05:03:20.565 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38474 10 6452 1 2025-11-20 05:00:00.592 00:05:04.481 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:04:05.714 00:00:10.382 TCP 23.104.0.1:52098 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:04:05.715 00:00:10.382 TCP 23.104.0.1:52098 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:04:20.794 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41474 10 6452 1 2025-11-20 05:04:20.795 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41474 10 6452 1 2025-11-20 05:01:00.589 00:05:04.488 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:05:07.897 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:05:07.899 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:05:07.897 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:05:07.897 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:05:06.136 00:00:10.364 TCP 23.104.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:05:06.136 00:00:10.365 TCP 23.104.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:05:20.971 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:43180 10 6452 1 2025-11-20 05:05:20.971 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:43180 10 6452 1 2025-11-20 05:02:00.589 00:05:04.487 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:06:06.536 00:00:10.368 TCP 23.104.0.1:38630 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:06:06.535 00:00:10.368 TCP 23.104.0.1:38630 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:06:21.165 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58530 10 6452 1 2025-11-20 05:06:21.165 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58530 10 6452 1 2025-11-20 05:07:06.964 00:00:10.386 TCP 23.104.0.1:54530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:07:06.963 00:00:10.386 TCP 23.104.0.1:54530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:07:21.378 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-11-20 05:07:21.378 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-11-20 05:08:07.388 00:00:10.510 TCP 23.104.0.1:58546 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:08:07.389 00:00:10.510 TCP 23.104.0.1:58546 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:08:21.588 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 10 6452 1 2025-11-20 05:08:21.589 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 10 6452 1 2025-11-20 05:05:00.592 00:05:04.482 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:09:07.954 00:00:10.330 TCP 23.104.0.1:59712 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:09:07.951 00:00:10.331 TCP 23.104.0.1:59712 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:09:21.833 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59546 10 6452 1 2025-11-20 05:09:21.833 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59546 10 6452 1 2025-11-20 05:10:08.038 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:10:08.141 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:06:00.592 00:05:04.483 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:10:08.141 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:10:08.038 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:10:08.322 00:00:10.371 TCP 23.104.0.1:60232 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:10:08.321 00:00:10.371 TCP 23.104.0.1:60232 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:10:22.079 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36972 10 6452 1 2025-11-20 05:10:22.080 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36972 10 6452 1 2025-11-20 05:07:00.591 00:05:04.489 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:11:08.734 00:00:10.331 TCP 23.104.0.1:36678 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:11:08.732 00:00:10.332 TCP 23.104.0.1:36678 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:11:22.297 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46164 10 6452 1 2025-11-20 05:11:22.297 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46164 10 6452 1 2025-11-20 05:08:00.590 00:05:04.488 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:12:09.108 00:00:10.368 TCP 23.104.0.1:41284 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:12:09.108 00:00:10.368 TCP 23.104.0.1:41284 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:12:22.520 00:00:10.378 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-11-20 05:12:22.520 00:00:10.378 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-11-20 05:13:09.515 00:00:10.365 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:13:09.513 00:00:10.366 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:13:22.937 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 10 6452 1 2025-11-20 05:13:22.937 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 10 6452 1 2025-11-20 05:14:09.919 00:00:10.371 TCP 23.104.0.1:50856 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:14:09.919 00:00:10.371 TCP 23.104.0.1:50856 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:14:23.178 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39304 10 6452 1 2025-11-20 05:14:23.177 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39304 10 6452 1 2025-11-20 05:11:00.594 00:05:04.494 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:15:08.017 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:15:08.175 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:15:08.174 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:15:08.016 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:15:10.327 00:00:10.364 TCP 23.104.0.1:54304 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:15:10.326 00:00:10.364 TCP 23.104.0.1:54304 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:15:23.386 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57752 10 6452 1 2025-11-20 05:15:23.385 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57752 10 6452 1 2025-11-20 05:12:00.593 00:05:04.494 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:16:10.732 00:00:10.373 TCP 23.104.0.1:53074 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:16:10.731 00:00:10.373 TCP 23.104.0.1:53074 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:16:23.596 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46702 12 6556 1 2025-11-20 05:16:23.595 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46702 12 6556 1 2025-11-20 05:13:00.592 00:05:04.499 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:17:11.143 00:00:10.367 TCP 23.104.0.1:43032 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:17:11.143 00:00:10.367 TCP 23.104.0.1:43032 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:17:23.810 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48636 10 6452 1 2025-11-20 05:17:23.811 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48636 10 6452 1 2025-11-20 05:14:00.591 00:05:04.499 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:18:11.555 00:00:10.364 TCP 23.104.0.1:48812 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:18:11.554 00:00:10.364 TCP 23.104.0.1:48812 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:18:23.982 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:55124 10 6452 1 2025-11-20 05:18:23.982 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:55124 10 6452 1 2025-11-20 05:19:11.955 00:00:10.366 TCP 23.104.0.1:46624 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:19:11.955 00:00:10.366 TCP 23.104.0.1:46624 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:19:24.218 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45974 10 6452 1 2025-11-20 05:19:24.217 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45974 10 6452 1 2025-11-20 05:20:08.297 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:20:08.467 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:20:08.297 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:20:08.466 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:20:12.363 00:00:10.362 TCP 23.104.0.1:44338 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:20:12.363 00:00:10.362 TCP 23.104.0.1:44338 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:20:24.400 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2025-11-20 05:20:24.399 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2025-11-20 05:17:00.595 00:05:04.494 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:21:12.773 00:00:10.368 TCP 23.104.0.1:38932 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:21:12.774 00:00:10.368 TCP 23.104.0.1:38932 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:21:24.637 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39078 10 6452 1 2025-11-20 05:21:24.638 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39078 10 6452 1 2025-11-20 05:18:00.596 00:05:04.494 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:22:13.187 00:00:10.360 TCP 23.104.0.1:37490 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:22:13.187 00:00:10.361 TCP 23.104.0.1:37490 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:22:24.856 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6452 1 2025-11-20 05:22:24.856 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6452 1 2025-11-20 05:19:00.594 00:05:04.499 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:23:13.588 00:00:10.361 TCP 23.104.0.1:33882 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:23:13.588 00:00:10.361 TCP 23.104.0.1:33882 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:23:25.084 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43666 10 6452 1 2025-11-20 05:23:25.087 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43666 10 6452 1 2025-11-20 05:20:00.594 00:05:04.499 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:24:13.990 00:00:10.362 TCP 23.104.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:24:13.989 00:00:10.362 TCP 23.104.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:24:25.307 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48920 10 6452 1 2025-11-20 05:24:25.308 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48920 10 6452 1 2025-11-20 05:25:08.417 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:25:08.519 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:25:08.518 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:25:08.417 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:25:14.392 00:00:10.372 TCP 23.104.0.1:49770 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:25:14.391 00:00:10.373 TCP 23.104.0.1:49770 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:25:25.528 00:00:10.547 TCP 1.101.0.1:3000 -> 22.102.0.1:58018 10 6452 1 2025-11-20 05:25:25.529 00:00:10.547 TCP 1.101.0.1:3000 -> 22.102.0.1:58018 10 6452 1 2025-11-20 05:26:14.804 00:00:10.366 TCP 23.104.0.1:58012 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:26:14.805 00:00:10.367 TCP 23.104.0.1:58012 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:26:26.125 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49914 10 6452 1 2025-11-20 05:26:26.126 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49914 10 6452 1 2025-11-20 05:23:00.596 00:05:04.494 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:27:15.211 00:00:10.328 TCP 23.104.0.1:60800 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:27:15.210 00:00:10.328 TCP 23.104.0.1:60800 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:27:26.298 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47610 10 6452 1 2025-11-20 05:27:26.297 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47610 10 6452 1 2025-11-20 05:24:00.597 00:05:04.495 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:28:15.577 00:00:10.369 TCP 23.104.0.1:57808 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:28:15.577 00:00:10.369 TCP 23.104.0.1:57808 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:28:26.523 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46860 10 6452 1 2025-11-20 05:28:26.523 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46860 10 6452 1 2025-11-20 05:25:00.595 00:05:04.499 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:29:15.985 00:00:10.369 TCP 23.104.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:29:15.985 00:00:10.369 TCP 23.104.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:29:26.743 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56644 10 6452 1 2025-11-20 05:29:26.743 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56644 10 6452 1 2025-11-20 05:26:00.595 00:05:04.499 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:30:08.399 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:30:08.637 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:30:08.399 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:30:08.636 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:30:16.392 00:00:10.362 TCP 23.104.0.1:51506 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:30:16.392 00:00:10.362 TCP 23.104.0.1:51506 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:30:26.952 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6452 1 2025-11-20 05:30:26.951 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6452 1 2025-11-20 05:31:16.794 00:00:10.377 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:31:16.794 00:00:10.377 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:31:27.183 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59384 10 6452 1 2025-11-20 05:31:27.182 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59384 10 6452 1 2025-11-20 05:32:17.205 00:00:10.364 TCP 23.104.0.1:51804 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:32:17.205 00:00:10.363 TCP 23.104.0.1:51804 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:32:27.352 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2025-11-20 05:32:27.352 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2025-11-20 05:29:00.601 00:05:04.492 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:33:17.610 00:00:10.364 TCP 23.104.0.1:54110 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:33:17.610 00:00:10.364 TCP 23.104.0.1:54110 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:33:27.566 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33828 10 6452 1 2025-11-20 05:33:27.566 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33828 10 6452 1 2025-11-20 05:30:00.600 00:05:04.491 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:34:18.015 00:00:10.320 TCP 23.104.0.1:42430 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:34:18.014 00:00:10.320 TCP 23.104.0.1:42430 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:34:27.785 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46344 10 6452 1 2025-11-20 05:34:27.785 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46344 10 6452 1 2025-11-20 05:31:00.598 00:05:04.496 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:35:08.491 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:35:08.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:35:08.843 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:35:08.492 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:35:18.373 00:00:10.364 TCP 23.104.0.1:45788 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:35:18.373 00:00:10.364 TCP 23.104.0.1:45788 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:35:28.005 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-11-20 05:35:28.004 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-11-20 05:32:00.598 00:05:04.496 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:36:18.775 00:00:10.368 TCP 23.104.0.1:52612 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:36:18.774 00:00:10.369 TCP 23.104.0.1:52612 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:36:28.226 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-11-20 05:36:28.227 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-11-20 05:37:19.182 00:00:10.373 TCP 23.104.0.1:50712 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:37:19.181 00:00:10.374 TCP 23.104.0.1:50712 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:37:28.460 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36608 10 6452 1 2025-11-20 05:37:28.461 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36608 10 6452 1 2025-11-20 05:38:19.596 00:00:10.365 TCP 23.104.0.1:39616 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:38:19.596 00:00:10.366 TCP 23.104.0.1:39616 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:38:28.685 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48918 10 6452 1 2025-11-20 05:38:28.684 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48918 10 6452 1 2025-11-20 05:35:00.602 00:05:04.490 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:39:20.006 00:00:10.372 TCP 23.104.0.1:51470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:39:20.007 00:00:10.370 TCP 23.104.0.1:51470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:39:28.900 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42648 10 6452 1 2025-11-20 05:39:28.901 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42648 10 6452 1 2025-11-20 05:40:08.664 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:40:08.819 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:36:00.604 00:05:04.489 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:40:08.664 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:40:08.819 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:40:20.418 00:00:10.377 TCP 23.104.0.1:50474 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:40:20.418 00:00:10.377 TCP 23.104.0.1:50474 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:40:29.123 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51052 10 6452 1 2025-11-20 05:40:29.122 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51052 10 6452 1 2025-11-20 05:37:00.600 00:05:04.495 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:41:20.835 00:00:10.390 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:41:20.835 00:00:10.390 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:41:29.350 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39418 10 6452 1 2025-11-20 05:41:29.350 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39418 10 6452 1 2025-11-20 05:38:00.600 00:05:04.498 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:42:21.269 00:00:10.361 TCP 23.104.0.1:55392 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:42:21.271 00:00:10.361 TCP 23.104.0.1:55392 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:42:29.571 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56830 10 6452 1 2025-11-20 05:42:29.570 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56830 10 6452 1 2025-11-20 05:43:21.670 00:00:10.361 TCP 23.104.0.1:57650 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:43:21.670 00:00:10.359 TCP 23.104.0.1:57650 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:43:29.796 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52364 10 6452 1 2025-11-20 05:43:29.796 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52364 10 6452 1 2025-11-20 05:44:22.091 00:00:10.322 TCP 23.104.0.1:39200 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:44:22.089 00:00:10.323 TCP 23.104.0.1:39200 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:44:30.023 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 10 6452 1 2025-11-20 05:44:30.023 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 10 6452 1 2025-11-20 05:41:00.603 00:05:04.493 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:45:08.971 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:45:08.696 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:45:08.696 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:45:08.972 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:45:22.452 00:00:10.340 TCP 23.104.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:45:22.453 00:00:10.339 TCP 23.104.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:45:30.242 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49542 10 6452 1 2025-11-20 05:45:30.241 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49542 10 6452 1 2025-11-20 05:42:00.604 00:05:04.493 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:46:22.830 00:00:10.379 TCP 23.104.0.1:40952 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:46:22.831 00:00:10.379 TCP 23.104.0.1:40952 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:46:30.457 00:00:10.524 TCP 1.101.0.1:3000 -> 22.102.0.1:46320 10 6452 1 2025-11-20 05:46:30.457 00:00:10.523 TCP 1.101.0.1:3000 -> 22.102.0.1:46320 10 6452 1 2025-11-20 05:43:00.600 00:05:04.499 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:47:23.246 00:00:10.323 TCP 23.104.0.1:42394 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:47:23.247 00:00:10.322 TCP 23.104.0.1:42394 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:47:31.036 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47360 10 6452 1 2025-11-20 05:47:31.036 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47360 10 6452 1 2025-11-20 05:44:00.601 00:05:04.499 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:48:23.607 00:00:10.364 TCP 23.104.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:48:23.606 00:00:10.364 TCP 23.104.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:48:31.211 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37798 10 6452 1 2025-11-20 05:48:31.211 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37798 10 6452 1 2025-11-20 05:49:24.013 00:00:10.368 TCP 23.104.0.1:53936 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:49:24.013 00:00:10.369 TCP 23.104.0.1:53936 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:49:31.435 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-11-20 05:49:31.435 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-11-20 05:50:09.207 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:50:08.907 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:50:08.907 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:50:09.207 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:50:24.419 00:00:10.367 TCP 23.104.0.1:54830 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:50:24.419 00:00:10.367 TCP 23.104.0.1:54830 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:50:31.644 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60270 10 6452 1 2025-11-20 05:50:31.644 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60270 10 6452 1 2025-11-20 05:47:00.605 00:05:04.493 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:51:24.826 00:00:10.367 TCP 23.104.0.1:60742 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:51:24.825 00:00:10.367 TCP 23.104.0.1:60742 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:51:31.859 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51352 10 6452 1 2025-11-20 05:51:31.859 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51352 10 6452 1 2025-11-20 05:48:00.605 00:05:04.495 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:52:25.245 00:00:10.365 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:52:25.243 00:00:10.365 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:52:32.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33184 10 6452 1 2025-11-20 05:52:32.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33184 10 6452 1 2025-11-20 05:49:00.604 00:05:04.498 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:53:25.646 00:00:10.326 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:53:25.646 00:00:10.326 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:53:32.299 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-11-20 05:53:32.299 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-11-20 05:50:00.608 00:05:04.495 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:54:26.013 00:00:10.363 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:54:26.011 00:00:10.364 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:54:32.520 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52266 10 6452 1 2025-11-20 05:54:32.519 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52266 10 6452 1 2025-11-20 05:55:08.939 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:55:09.175 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:55:08.939 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:55:09.175 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:55:26.423 00:00:10.363 TCP 23.104.0.1:39380 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:55:26.422 00:00:10.363 TCP 23.104.0.1:39380 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:55:32.739 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43444 10 6452 1 2025-11-20 05:55:32.739 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43444 10 6452 1 2025-11-20 05:56:26.824 00:00:10.363 TCP 23.104.0.1:47934 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:56:26.823 00:00:10.363 TCP 23.104.0.1:47934 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:56:32.957 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47600 12 6556 1 2025-11-20 05:56:32.954 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47600 12 6556 1 2025-11-20 05:53:00.613 00:05:04.486 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:57:27.236 00:00:10.438 TCP 23.104.0.1:51872 -> 1.101.0.1:3000 15 1926 1 2025-11-20 05:57:27.236 00:00:10.438 TCP 23.104.0.1:51872 -> 1.101.0.1:3000 15 1926 1 2025-11-20 05:57:33.186 00:00:10.699 TCP 1.101.0.1:3000 -> 22.102.0.1:48266 12 10375 1 2025-11-20 05:57:33.186 00:00:10.699 TCP 1.101.0.1:3000 -> 22.102.0.1:48266 12 10375 1 2025-11-20 05:54:00.616 00:05:04.485 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:58:27.717 00:00:10.378 TCP 23.104.0.1:34680 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:58:27.716 00:00:10.378 TCP 23.104.0.1:34680 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:58:33.931 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:35872 10 6452 1 2025-11-20 05:58:33.931 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:35872 10 6452 1 Summary: total flows: 328, total bytes: 1.0 M, total packets: 3164, avg bps: 2092, avg pps: 0, avg bpp: 317 Time window: 2025-11-20 04:55:00 - 2025-11-20 05:59:05 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0048s User: 0.0029s Wall: 0.0047s flows/second: 70413.1 Runtime: 0.0047s