Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 10:55:00.823 00:05:04.373 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 10:59:01.108 00:00:10.367 TCP 23.104.0.1:53984 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:59:01.108 00:00:10.368 TCP 23.104.0.1:53984 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:59:14.781 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56854 10 6452 1 2025-11-20 10:59:14.783 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56854 10 6452 1 2025-11-20 10:56:00.824 00:05:04.372 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:00:15.190 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:00:01.519 00:00:10.331 TCP 23.104.0.1:47036 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:00:15.145 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:00:15.145 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:00:01.518 00:00:10.331 TCP 23.104.0.1:47036 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:00:15.189 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:00:14.991 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41280 10 6452 1 2025-11-20 11:00:14.990 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41280 10 6452 1 2025-11-20 11:01:01.884 00:00:10.379 TCP 23.104.0.1:48520 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:01:01.885 00:00:10.379 TCP 23.104.0.1:48520 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:01:15.215 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49080 10 6452 1 2025-11-20 11:01:15.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49080 10 6452 1 2025-11-20 11:02:02.298 00:00:10.365 TCP 23.104.0.1:40712 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:02:02.298 00:00:10.365 TCP 23.104.0.1:40712 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:02:15.432 00:00:10.359 TCP 1.101.0.1:3000 -> 22.102.0.1:36122 10 6452 1 2025-11-20 11:02:15.431 00:00:10.359 TCP 1.101.0.1:3000 -> 22.102.0.1:36122 10 6452 1 2025-11-20 10:59:00.830 00:05:04.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:03:02.707 00:00:10.379 TCP 23.104.0.1:53886 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:03:02.708 00:00:10.379 TCP 23.104.0.1:53886 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:03:15.833 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48238 10 6452 1 2025-11-20 11:03:15.832 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48238 10 6452 1 2025-11-20 11:00:00.832 00:05:04.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:04:03.114 00:00:10.364 TCP 23.104.0.1:56382 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:04:03.115 00:00:10.363 TCP 23.104.0.1:56382 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:04:16.063 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40634 10 6452 1 2025-11-20 11:04:16.062 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40634 10 6452 1 2025-11-20 11:01:00.829 00:05:04.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:05:03.518 00:00:10.366 TCP 23.104.0.1:39328 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:05:15.359 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:05:03.517 00:00:10.366 TCP 23.104.0.1:39328 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:05:15.210 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:05:15.359 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:05:15.210 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:05:16.294 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45780 10 6452 1 2025-11-20 11:05:16.293 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45780 10 6452 1 2025-11-20 11:02:00.829 00:05:04.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:06:03.919 00:00:10.377 TCP 23.104.0.1:37196 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:06:03.920 00:00:10.376 TCP 23.104.0.1:37196 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:06:16.515 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43760 10 6452 1 2025-11-20 11:06:16.516 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43760 10 6452 1 2025-11-20 11:07:04.325 00:00:10.579 TCP 23.104.0.1:56694 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:07:04.326 00:00:10.580 TCP 23.104.0.1:56694 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:07:16.732 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40706 10 6452 1 2025-11-20 11:07:16.732 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40706 10 6452 1 2025-11-20 11:08:04.939 00:00:10.370 TCP 23.104.0.1:55056 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:08:04.939 00:00:10.371 TCP 23.104.0.1:55056 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:08:16.963 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54166 10 6452 1 2025-11-20 11:08:16.963 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54166 10 6452 1 2025-11-20 11:05:00.832 00:05:04.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:09:05.348 00:00:10.363 TCP 23.104.0.1:47436 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:09:05.347 00:00:10.364 TCP 23.104.0.1:47436 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:09:17.204 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46290 10 6452 1 2025-11-20 11:09:17.203 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46290 10 6452 1 2025-11-20 11:06:00.833 00:05:04.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:10:15.063 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:10:05.754 00:00:10.375 TCP 23.104.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:10:15.127 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:10:15.062 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:10:15.128 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:10:05.755 00:00:10.375 TCP 23.104.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:10:17.422 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46338 10 6452 1 2025-11-20 11:10:17.422 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46338 10 6452 1 2025-11-20 11:07:00.830 00:05:04.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:11:06.173 00:00:10.362 TCP 23.104.0.1:59548 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:11:06.172 00:00:10.363 TCP 23.104.0.1:59548 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:11:17.639 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60060 10 6452 1 2025-11-20 11:11:17.639 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60060 10 6452 1 2025-11-20 11:08:00.830 00:05:04.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:12:06.574 00:00:10.367 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:12:06.574 00:00:10.367 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:12:17.861 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60704 10 6452 1 2025-11-20 11:12:17.860 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60704 10 6452 1 2025-11-20 11:13:06.972 00:00:10.367 TCP 23.104.0.1:57930 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:13:06.972 00:00:10.367 TCP 23.104.0.1:57930 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:13:18.086 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56340 10 6452 1 2025-11-20 11:13:18.086 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56340 10 6452 1 2025-11-20 11:14:07.380 00:00:10.363 TCP 23.104.0.1:46262 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:14:07.379 00:00:10.363 TCP 23.104.0.1:46262 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:14:18.305 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51126 10 6452 1 2025-11-20 11:14:18.305 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51126 10 6452 1 2025-11-20 11:11:00.832 00:05:04.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:15:16.991 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:15:17.038 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:15:17.037 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:15:16.992 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:15:07.778 00:00:17.692 TCP 23.104.0.1:36088 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:15:07.778 00:00:17.692 TCP 23.104.0.1:36088 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:15:18.489 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6452 1 2025-11-20 11:15:18.489 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6452 1 2025-11-20 11:12:00.832 00:05:04.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:16:15.512 00:00:10.324 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:16:18.712 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52466 10 6452 1 2025-11-20 11:16:15.513 00:00:10.324 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:16:18.713 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52466 10 6452 1 2025-11-20 11:13:00.830 00:05:04.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:17:15.874 00:00:10.369 TCP 23.104.0.1:43542 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:17:18.935 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33974 10 6452 1 2025-11-20 11:17:15.874 00:00:10.370 TCP 23.104.0.1:43542 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:17:18.934 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33974 10 6452 1 2025-11-20 11:14:00.830 00:05:04.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:18:19.181 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48586 10 6452 1 2025-11-20 11:18:16.283 00:00:10.360 TCP 23.104.0.1:56908 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:18:19.182 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48586 10 6452 1 2025-11-20 11:18:16.282 00:00:10.361 TCP 23.104.0.1:56908 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:19:19.405 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45202 10 6452 1 2025-11-20 11:19:16.685 00:00:10.361 TCP 23.104.0.1:40492 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:19:16.686 00:00:10.361 TCP 23.104.0.1:40492 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:19:19.405 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45202 10 6452 1 2025-11-20 11:20:17.160 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:20:17.185 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:20:17.161 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:20:17.185 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:20:17.103 00:00:10.363 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:20:19.623 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57926 10 6452 1 2025-11-20 11:20:19.623 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57926 10 6452 1 2025-11-20 11:20:17.102 00:00:10.363 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:17:00.836 00:05:04.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:21:17.503 00:00:10.360 TCP 23.104.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:21:17.503 00:00:10.361 TCP 23.104.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:21:19.839 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-11-20 11:21:19.839 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-11-20 11:18:00.834 00:05:04.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:22:17.902 00:00:10.327 TCP 23.104.0.1:50824 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:22:20.081 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44102 10 6452 1 2025-11-20 11:22:17.901 00:00:10.327 TCP 23.104.0.1:50824 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:22:20.081 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44102 10 6452 1 2025-11-20 11:19:00.832 00:05:04.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:23:18.267 00:00:10.361 TCP 23.104.0.1:49840 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:23:18.268 00:00:10.361 TCP 23.104.0.1:49840 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:23:20.263 00:00:10.415 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6452 1 2025-11-20 11:23:20.262 00:00:10.416 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6452 1 2025-11-20 11:20:00.832 00:05:04.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:24:18.668 00:00:10.321 TCP 23.104.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:24:18.668 00:00:10.322 TCP 23.104.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:24:20.719 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49380 10 6452 1 2025-11-20 11:24:20.718 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49380 10 6452 1 2025-11-20 11:25:17.456 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:25:17.333 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:25:17.456 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:25:17.333 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:25:19.030 00:00:10.360 TCP 23.104.0.1:54574 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:25:19.030 00:00:10.361 TCP 23.104.0.1:54574 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:25:20.929 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:44620 10 6452 1 2025-11-20 11:25:20.930 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:44620 10 6452 1 2025-11-20 11:26:19.428 00:00:10.374 TCP 23.104.0.1:49786 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:26:19.429 00:00:10.373 TCP 23.104.0.1:49786 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:26:21.183 00:00:10.280 TCP 1.101.0.1:3000 -> 22.102.0.1:52636 10 6452 1 2025-11-20 11:26:21.182 00:00:10.281 TCP 1.101.0.1:3000 -> 22.102.0.1:52636 10 6452 1 2025-11-20 11:23:00.836 00:05:04.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:27:19.837 00:00:10.382 TCP 23.104.0.1:48080 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:27:19.836 00:00:10.382 TCP 23.104.0.1:48080 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:27:21.504 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-11-20 11:27:21.503 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-11-20 11:24:00.837 00:05:04.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:28:20.259 00:00:10.363 TCP 23.104.0.1:51414 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:28:21.714 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35004 10 6452 1 2025-11-20 11:28:20.258 00:00:10.363 TCP 23.104.0.1:51414 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:28:21.715 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35004 10 6452 1 2025-11-20 11:25:00.834 00:05:04.367 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:29:21.929 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:42426 10 6452 1 2025-11-20 11:29:20.665 00:00:10.362 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:29:20.665 00:00:10.362 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:29:21.928 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:42426 10 6452 1 2025-11-20 11:26:00.834 00:05:04.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:30:17.657 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:30:17.665 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:30:17.663 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:30:17.658 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:30:22.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40042 10 6452 1 2025-11-20 11:30:21.089 00:00:10.369 TCP 23.104.0.1:38648 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:30:21.089 00:00:10.369 TCP 23.104.0.1:38648 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:30:22.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40042 10 6452 1 2025-11-20 11:31:22.337 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34430 10 6452 1 2025-11-20 11:31:21.512 00:00:10.366 TCP 23.104.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:31:21.511 00:00:10.367 TCP 23.104.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:31:22.336 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34430 10 6452 1 2025-11-20 11:32:21.919 00:00:10.397 TCP 23.104.0.1:56930 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:32:22.553 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6452 1 2025-11-20 11:32:21.920 00:00:10.397 TCP 23.104.0.1:56930 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:32:22.554 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6452 1 2025-11-20 11:29:00.838 00:05:04.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:33:22.348 00:00:10.379 TCP 23.104.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:33:22.791 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38608 10 6452 1 2025-11-20 11:33:22.348 00:00:10.380 TCP 23.104.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:33:22.789 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38608 10 6452 1 2025-11-20 11:30:00.837 00:05:04.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:34:23.009 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41698 10 6452 1 2025-11-20 11:34:22.767 00:00:10.373 TCP 23.104.0.1:41800 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:34:22.767 00:00:10.373 TCP 23.104.0.1:41800 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:34:23.009 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41698 10 6452 1 2025-11-20 11:31:00.837 00:05:04.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:35:17.518 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:35:17.653 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:35:17.517 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:35:17.654 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:35:23.233 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44540 10 6452 1 2025-11-20 11:35:23.178 00:00:10.378 TCP 23.104.0.1:46900 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:35:23.178 00:00:10.378 TCP 23.104.0.1:46900 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:35:23.233 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44540 10 6452 1 2025-11-20 11:32:00.835 00:05:04.367 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:36:23.459 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39244 10 6452 1 2025-11-20 11:36:23.594 00:00:10.361 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:36:23.594 00:00:10.362 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:36:23.459 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39244 10 6452 1 2025-11-20 11:37:23.993 00:00:10.369 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:37:23.684 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40646 10 6452 1 2025-11-20 11:37:23.683 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40646 10 6452 1 2025-11-20 11:37:23.993 00:00:10.369 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:38:23.898 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40570 10 6452 1 2025-11-20 11:38:24.400 00:00:10.363 TCP 23.104.0.1:57594 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:38:23.898 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40570 10 6452 1 2025-11-20 11:38:24.400 00:00:10.363 TCP 23.104.0.1:57594 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:35:00.839 00:05:04.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:39:24.126 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:33256 10 6452 1 2025-11-20 11:39:24.802 00:00:10.364 TCP 23.104.0.1:56008 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:39:24.125 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33256 10 6452 1 2025-11-20 11:39:24.803 00:00:10.364 TCP 23.104.0.1:56008 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:36:00.840 00:05:04.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:40:17.688 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:40:17.797 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:40:17.796 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:40:17.687 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:40:24.330 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45552 10 6452 1 2025-11-20 11:40:25.205 00:00:10.321 TCP 23.104.0.1:47942 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:40:24.330 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45552 10 6452 1 2025-11-20 11:40:25.204 00:00:10.322 TCP 23.104.0.1:47942 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:37:00.837 00:05:04.371 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:41:24.545 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56774 10 6452 1 2025-11-20 11:41:24.545 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56774 10 6452 1 2025-11-20 11:41:25.567 00:00:10.369 TCP 23.104.0.1:38188 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:41:25.566 00:00:10.369 TCP 23.104.0.1:38188 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:38:00.838 00:05:04.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:42:24.762 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:58814 10 6452 1 2025-11-20 11:42:24.762 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:58814 10 6452 1 2025-11-20 11:42:25.966 00:00:10.368 TCP 23.104.0.1:49508 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:42:25.966 00:00:10.368 TCP 23.104.0.1:49508 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:43:24.947 00:00:15.438 TCP 1.101.0.1:3000 -> 22.102.0.1:54114 10 6452 1 2025-11-20 11:43:26.370 00:00:14.108 TCP 23.104.0.1:38216 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:43:24.948 00:00:15.438 TCP 1.101.0.1:3000 -> 22.102.0.1:54114 10 6452 1 2025-11-20 11:43:26.371 00:00:14.107 TCP 23.104.0.1:38216 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:44:30.522 00:00:10.400 TCP 23.104.0.1:52634 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:44:30.455 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 10 6452 1 2025-11-20 11:44:30.455 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 10 6452 1 2025-11-20 11:44:30.524 00:00:10.399 TCP 23.104.0.1:52634 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:41:00.842 00:05:04.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:45:17.766 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:45:17.556 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:45:17.554 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:45:17.765 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:45:30.693 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-11-20 11:45:30.960 00:00:10.365 TCP 23.104.0.1:44192 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:45:30.693 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-11-20 11:45:30.961 00:00:10.365 TCP 23.104.0.1:44192 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:42:00.841 00:05:04.366 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:46:31.370 00:00:10.364 TCP 23.104.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:46:30.915 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52516 10 6452 1 2025-11-20 11:46:31.370 00:00:10.364 TCP 23.104.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:46:30.916 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52516 10 6452 1 2025-11-20 11:43:00.839 00:05:04.371 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:47:31.772 00:00:10.327 TCP 23.104.0.1:54442 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:47:31.127 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39702 10 6452 1 2025-11-20 11:47:31.773 00:00:10.327 TCP 23.104.0.1:54442 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:47:31.128 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39702 10 6452 1 2025-11-20 11:44:00.843 00:05:04.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:48:31.338 00:00:10.311 TCP 1.101.0.1:3000 -> 22.102.0.1:43184 10 6452 1 2025-11-20 11:48:32.138 00:00:10.371 TCP 23.104.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:48:32.137 00:00:10.371 TCP 23.104.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:48:31.338 00:00:10.311 TCP 1.101.0.1:3000 -> 22.102.0.1:43184 10 6452 1 2025-11-20 11:49:32.539 00:00:10.364 TCP 23.104.0.1:56008 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:49:31.689 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55574 10 6452 1 2025-11-20 11:49:32.539 00:00:10.364 TCP 23.104.0.1:56008 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:49:31.689 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55574 10 6452 1 2025-11-20 11:50:17.771 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:50:18.015 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:50:18.014 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:50:17.770 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:50:32.941 00:00:10.378 TCP 23.104.0.1:60178 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:50:31.905 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59494 10 6452 1 2025-11-20 11:50:32.940 00:00:10.378 TCP 23.104.0.1:60178 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:50:31.905 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59494 10 6452 1 2025-11-20 11:47:00.846 00:05:04.361 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:51:33.360 00:00:11.012 TCP 23.104.0.1:58622 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:51:32.121 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50366 10 6452 1 2025-11-20 11:51:33.359 00:00:11.013 TCP 23.104.0.1:58622 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:51:32.120 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50366 10 6452 1 2025-11-20 11:48:00.847 00:05:04.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:52:32.343 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47560 12 10375 1 2025-11-20 11:52:34.412 00:00:10.969 TCP 23.104.0.1:44624 -> 1.101.0.1:3000 15 1926 1 2025-11-20 11:52:32.343 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47560 12 10375 1 2025-11-20 11:52:34.412 00:00:10.969 TCP 23.104.0.1:44624 -> 1.101.0.1:3000 15 1926 1 2025-11-20 11:49:00.844 00:05:04.367 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:53:32.542 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44564 10 6452 1 2025-11-20 11:53:35.425 00:00:10.364 TCP 23.104.0.1:55866 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:53:32.543 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44564 10 6452 1 2025-11-20 11:53:35.425 00:00:10.365 TCP 23.104.0.1:55866 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:50:00.844 00:05:04.367 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 11:54:32.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49332 10 6452 1 2025-11-20 11:54:32.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49332 10 6452 1 2025-11-20 11:54:35.833 00:00:10.785 TCP 23.104.0.1:55150 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:54:35.834 00:00:10.784 TCP 23.104.0.1:55150 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:55:18.213 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:55:18.143 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:55:18.212 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 11:55:18.143 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:55:32.970 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59446 10 6452 1 2025-11-20 11:55:32.970 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59446 10 6452 1 2025-11-20 11:55:36.654 00:00:10.371 TCP 23.104.0.1:36420 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:55:36.654 00:00:10.372 TCP 23.104.0.1:36420 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:56:33.201 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42594 10 6452 1 2025-11-20 11:56:33.201 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42594 10 6452 1 2025-11-20 11:56:37.060 00:00:10.380 TCP 23.104.0.1:35526 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:56:37.060 00:00:10.380 TCP 23.104.0.1:35526 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:53:00.848 00:05:04.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:57:33.417 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:36912 14 14292 1 2025-11-20 11:57:33.417 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:36912 14 14292 1 2025-11-20 11:57:37.479 00:00:10.515 TCP 23.104.0.1:45890 -> 1.101.0.1:3000 17 2241 1 2025-11-20 11:57:37.479 00:00:10.515 TCP 23.104.0.1:45890 -> 1.101.0.1:3000 17 2241 1 2025-11-20 11:54:00.847 00:05:04.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 11:58:33.688 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46216 10 6452 1 2025-11-20 11:58:33.687 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46216 10 6452 1 2025-11-20 11:58:38.063 00:00:10.370 TCP 23.104.0.1:34108 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:58:38.063 00:00:10.370 TCP 23.104.0.1:34108 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 328, total bytes: 1.0 M, total packets: 3176, avg bps: 2127, avg pps: 0, avg bpp: 321 Time window: 2025-11-20 10:55:00 - 2025-11-20 11:59:05 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0043s User: 0.0033s Wall: 0.0036s flows/second: 90957.5 Runtime: 0.0036s