Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 07:55:00.696 00:05:04.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 07:59:22.422 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44474 10 6870 1 2025-11-20 07:59:22.423 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44474 10 6870 1 2025-11-20 07:59:39.853 00:00:10.381 TCP 23.104.0.1:38696 -> 1.101.0.1:3000 11 1507 1 2025-11-20 07:59:39.853 00:00:10.382 TCP 23.104.0.1:38696 -> 1.101.0.1:3000 11 1507 1 2025-11-20 07:56:00.698 00:05:04.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:00:11.527 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:00:11.618 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:00:11.527 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:00:11.617 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:00:22.641 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32830 10 6870 1 2025-11-20 08:00:22.640 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32830 10 6870 1 2025-11-20 08:00:40.278 00:00:10.328 TCP 23.104.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:00:40.279 00:00:10.327 TCP 23.104.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:01:22.851 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56806 10 6870 1 2025-11-20 08:01:22.851 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56806 10 6870 1 2025-11-20 08:01:40.636 00:00:10.364 TCP 23.104.0.1:50782 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:01:40.636 00:00:10.364 TCP 23.104.0.1:50782 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:02:23.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51330 10 6870 1 2025-11-20 08:02:23.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51330 10 6870 1 2025-11-20 08:02:41.031 00:00:10.327 TCP 23.104.0.1:54578 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:02:41.031 00:00:10.327 TCP 23.104.0.1:54578 -> 1.101.0.1:3000 11 1507 1 2025-11-20 07:59:00.700 00:05:04.441 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:03:23.301 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41542 10 6870 1 2025-11-20 08:03:23.301 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41542 10 6870 1 2025-11-20 08:03:41.399 00:00:10.337 TCP 23.104.0.1:40472 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:03:41.400 00:00:10.337 TCP 23.104.0.1:40472 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:00:00.700 00:05:04.441 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:04:23.509 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42148 10 6870 1 2025-11-20 08:04:23.509 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42148 10 6870 1 2025-11-20 08:04:41.774 00:00:10.734 TCP 23.104.0.1:48614 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:04:41.775 00:00:10.734 TCP 23.104.0.1:48614 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:01:00.698 00:05:04.446 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:05:11.821 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:05:11.983 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:05:11.821 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:05:11.981 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:05:23.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44632 10 6870 1 2025-11-20 08:05:23.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44632 10 6870 1 2025-11-20 08:05:42.560 00:00:10.364 TCP 23.104.0.1:42066 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:05:42.561 00:00:10.364 TCP 23.104.0.1:42066 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:02:00.698 00:05:04.446 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:06:23.936 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48780 10 6870 1 2025-11-20 08:06:23.934 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48780 10 6870 1 2025-11-20 08:06:42.964 00:00:10.372 TCP 23.104.0.1:45894 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:06:42.964 00:00:10.372 TCP 23.104.0.1:45894 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:07:24.175 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51518 10 6870 1 2025-11-20 08:07:24.175 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51518 10 6870 1 2025-11-20 08:07:43.372 00:00:10.363 TCP 23.104.0.1:58784 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:07:43.372 00:00:10.364 TCP 23.104.0.1:58784 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:08:24.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45570 10 6870 1 2025-11-20 08:08:24.400 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45570 10 6870 1 2025-11-20 08:08:43.780 00:00:10.327 TCP 23.104.0.1:41186 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:08:43.780 00:00:10.327 TCP 23.104.0.1:41186 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:05:00.701 00:05:04.442 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:09:24.620 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52698 10 6870 1 2025-11-20 08:09:24.619 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52698 10 6870 1 2025-11-20 08:09:44.142 00:00:10.366 TCP 23.104.0.1:36538 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:09:44.144 00:00:10.365 TCP 23.104.0.1:36538 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:06:00.700 00:05:04.443 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:10:11.754 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:10:11.499 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:10:11.499 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:10:11.754 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:10:24.801 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37656 12 6974 1 2025-11-20 08:10:24.800 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37656 12 6974 1 2025-11-20 08:10:44.550 00:00:10.364 TCP 23.104.0.1:49916 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:10:44.548 00:00:10.364 TCP 23.104.0.1:49916 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:07:00.698 00:05:04.449 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:11:25.013 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56576 10 6870 1 2025-11-20 08:11:25.013 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56576 10 6870 1 2025-11-20 08:11:44.951 00:00:10.372 TCP 23.104.0.1:56676 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:11:44.952 00:00:10.372 TCP 23.104.0.1:56676 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:08:00.700 00:05:04.448 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:12:25.220 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55696 10 6870 1 2025-11-20 08:12:25.220 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55696 10 6870 1 2025-11-20 08:12:45.355 00:00:10.370 TCP 23.104.0.1:48570 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:12:45.355 00:00:10.370 TCP 23.104.0.1:48570 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:13:25.435 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38934 10 6870 1 2025-11-20 08:13:25.435 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38934 10 6870 1 2025-11-20 08:13:45.758 00:00:14.332 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:13:45.759 00:00:14.333 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:14:25.647 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57988 10 6870 1 2025-11-20 08:14:25.647 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57988 10 6870 1 2025-11-20 08:14:50.136 00:00:10.371 TCP 23.104.0.1:52710 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:14:50.137 00:00:10.370 TCP 23.104.0.1:52710 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:11:00.703 00:05:04.443 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:15:11.694 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:15:11.671 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:15:11.695 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:15:11.670 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:15:25.823 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34128 10 6870 1 2025-11-20 08:15:25.824 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34128 10 6870 1 2025-11-20 08:15:50.538 00:00:10.366 TCP 23.104.0.1:47600 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:15:50.537 00:00:10.366 TCP 23.104.0.1:47600 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:12:00.702 00:05:04.443 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:16:26.063 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46206 10 6870 1 2025-11-20 08:16:26.064 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46206 10 6870 1 2025-11-20 08:16:50.943 00:00:10.364 TCP 23.104.0.1:33998 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:13:00.700 00:05:04.449 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:16:50.943 00:00:10.364 TCP 23.104.0.1:33998 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:17:26.282 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33166 12 10793 1 2025-11-20 08:17:26.283 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33166 12 10793 1 2025-11-20 08:17:51.350 00:00:10.394 TCP 23.104.0.1:36722 -> 1.101.0.1:3000 15 1926 1 2025-11-20 08:17:51.351 00:00:10.394 TCP 23.104.0.1:36722 -> 1.101.0.1:3000 15 1926 1 2025-11-20 08:14:00.703 00:05:04.446 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:18:26.528 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6870 1 2025-11-20 08:18:26.529 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6870 1 2025-11-20 08:18:51.782 00:00:10.363 TCP 23.104.0.1:41502 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:18:51.782 00:00:10.363 TCP 23.104.0.1:41502 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:19:26.768 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48388 10 6870 1 2025-11-20 08:19:26.768 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48388 10 6870 1 2025-11-20 08:19:52.184 00:00:10.329 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:19:52.186 00:00:10.329 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:20:11.883 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:20:11.896 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:20:11.895 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:20:11.883 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:20:26.986 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33072 10 6870 1 2025-11-20 08:20:26.985 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:33072 10 6870 1 2025-11-20 08:20:52.552 00:00:10.361 TCP 23.104.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:20:52.551 00:00:10.361 TCP 23.104.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:17:00.708 00:05:04.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:21:27.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50634 10 6870 1 2025-11-20 08:21:27.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50634 10 6870 1 2025-11-20 08:21:52.952 00:00:10.365 TCP 23.104.0.1:42622 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:21:52.951 00:00:10.365 TCP 23.104.0.1:42622 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:18:00.711 00:05:04.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:22:27.389 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58898 10 6870 1 2025-11-20 08:22:27.388 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58898 10 6870 1 2025-11-20 08:22:53.358 00:00:10.323 TCP 23.104.0.1:49222 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:19:00.709 00:05:04.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:22:53.359 00:00:10.323 TCP 23.104.0.1:49222 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:23:27.602 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34134 10 6870 1 2025-11-20 08:23:27.602 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34134 10 6870 1 2025-11-20 08:23:53.714 00:00:10.373 TCP 23.104.0.1:56340 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:23:53.714 00:00:10.373 TCP 23.104.0.1:56340 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:20:00.709 00:05:04.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:24:27.819 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 10 6870 1 2025-11-20 08:24:27.819 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 10 6870 1 2025-11-20 08:24:54.131 00:00:10.365 TCP 23.104.0.1:34956 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:24:54.128 00:00:10.365 TCP 23.104.0.1:34956 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:25:12.075 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:25:12.155 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:25:12.076 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:25:12.154 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:25:27.987 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42034 10 6870 1 2025-11-20 08:25:27.987 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42034 10 6870 1 2025-11-20 08:25:54.534 00:00:10.321 TCP 23.104.0.1:54420 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:25:54.534 00:00:10.322 TCP 23.104.0.1:54420 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:26:28.221 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51460 10 6870 1 2025-11-20 08:26:28.220 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51460 10 6870 1 2025-11-20 08:26:54.899 00:00:10.869 TCP 23.104.0.1:48516 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:23:00.714 00:05:04.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:26:54.899 00:00:10.868 TCP 23.104.0.1:48516 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:27:28.390 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54862 10 6870 1 2025-11-20 08:27:28.391 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54862 10 6870 1 2025-11-20 08:27:55.806 00:00:10.362 TCP 23.104.0.1:54754 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:24:00.714 00:05:04.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:27:55.805 00:00:10.363 TCP 23.104.0.1:54754 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:28:28.604 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48288 10 6870 1 2025-11-20 08:28:28.605 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48288 10 6870 1 2025-11-20 08:25:00.710 00:05:04.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:28:56.208 00:00:10.364 TCP 23.104.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:28:56.208 00:00:10.364 TCP 23.104.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:29:28.815 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57756 10 6870 1 2025-11-20 08:29:28.816 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57756 10 6870 1 2025-11-20 08:29:56.615 00:00:10.326 TCP 23.104.0.1:39170 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:29:56.615 00:00:10.326 TCP 23.104.0.1:39170 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:30:12.171 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:26:00.711 00:05:04.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:30:11.783 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:30:12.171 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:30:11.783 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:30:29.030 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33780 10 6870 1 2025-11-20 08:30:29.029 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33780 10 6870 1 2025-11-20 08:30:56.985 00:00:10.367 TCP 23.104.0.1:51892 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:30:56.984 00:00:10.367 TCP 23.104.0.1:51892 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:31:29.240 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54266 10 6870 1 2025-11-20 08:31:29.239 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54266 10 6870 1 2025-11-20 08:31:57.388 00:00:10.363 TCP 23.104.0.1:59116 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:31:57.389 00:00:10.363 TCP 23.104.0.1:59116 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:32:29.454 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59968 10 6870 1 2025-11-20 08:32:29.453 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59968 10 6870 1 2025-11-20 08:29:00.718 00:05:04.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:32:57.791 00:00:10.680 TCP 23.104.0.1:48342 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:32:57.791 00:00:10.680 TCP 23.104.0.1:48342 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:33:29.668 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48238 10 6870 1 2025-11-20 08:33:29.668 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48238 10 6870 1 2025-11-20 08:33:58.510 00:00:10.324 TCP 23.104.0.1:34410 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:30:00.718 00:05:04.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:33:58.510 00:00:10.324 TCP 23.104.0.1:34410 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:34:29.887 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58896 10 6870 1 2025-11-20 08:34:29.888 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58896 10 6870 1 2025-11-20 08:31:00.715 00:05:04.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:34:58.875 00:00:10.362 TCP 23.104.0.1:39580 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:35:12.148 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:35:12.344 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:34:58.875 00:00:10.362 TCP 23.104.0.1:39580 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:35:12.148 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:35:12.343 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:35:30.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43508 10 6870 1 2025-11-20 08:35:30.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43508 10 6870 1 2025-11-20 08:35:59.277 00:00:10.323 TCP 23.104.0.1:51644 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:32:00.716 00:05:04.437 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:35:59.277 00:00:10.323 TCP 23.104.0.1:51644 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:36:30.298 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53036 10 6870 1 2025-11-20 08:36:30.297 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53036 10 6870 1 2025-11-20 08:36:59.637 00:00:10.364 TCP 23.104.0.1:45362 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:36:59.638 00:00:10.364 TCP 23.104.0.1:45362 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:37:30.464 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33504 10 6870 1 2025-11-20 08:37:30.464 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33504 10 6870 1 2025-11-20 08:38:00.061 00:00:10.365 TCP 23.104.0.1:41012 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:38:00.061 00:00:10.365 TCP 23.104.0.1:41012 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:38:30.671 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55310 10 6870 1 2025-11-20 08:38:30.669 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55310 10 6870 1 2025-11-20 08:35:00.720 00:05:04.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:39:00.473 00:00:10.364 TCP 23.104.0.1:35470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:39:00.473 00:00:10.364 TCP 23.104.0.1:35470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:39:30.888 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39610 10 6870 1 2025-11-20 08:39:30.890 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39610 10 6870 1 2025-11-20 08:40:12.166 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:36:00.720 00:05:04.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:40:12.268 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:40:00.877 00:00:10.365 TCP 23.104.0.1:49678 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:40:00.877 00:00:10.364 TCP 23.104.0.1:49678 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:40:12.267 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:40:12.165 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:40:31.120 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53524 10 6870 1 2025-11-20 08:40:31.120 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:53524 10 6870 1 2025-11-20 08:37:00.717 00:05:04.437 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:41:01.282 00:00:10.364 TCP 23.104.0.1:57444 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:41:01.282 00:00:10.364 TCP 23.104.0.1:57444 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:41:31.332 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34958 10 6870 1 2025-11-20 08:41:31.333 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34958 10 6870 1 2025-11-20 08:38:00.719 00:05:04.435 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:42:01.684 00:00:10.514 TCP 23.104.0.1:46772 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:42:01.686 00:00:10.513 TCP 23.104.0.1:46772 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:42:31.556 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36330 10 6870 1 2025-11-20 08:42:31.556 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36330 10 6870 1 2025-11-20 08:43:02.249 00:00:10.341 TCP 23.104.0.1:51090 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:43:02.249 00:00:10.341 TCP 23.104.0.1:51090 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:43:31.781 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37242 10 6870 1 2025-11-20 08:43:31.782 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37242 10 6870 1 2025-11-20 08:44:02.630 00:00:10.368 TCP 23.104.0.1:50296 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:44:02.628 00:00:10.369 TCP 23.104.0.1:50296 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:44:31.989 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33460 10 6870 1 2025-11-20 08:44:31.989 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33460 10 6870 1 2025-11-20 08:41:00.725 00:05:04.429 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:45:12.463 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:45:12.456 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:45:03.036 00:00:10.330 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:45:12.462 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:45:03.036 00:00:10.330 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:45:12.456 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:45:32.214 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:39964 10 6870 1 2025-11-20 08:45:32.213 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:39964 10 6870 1 2025-11-20 08:42:00.724 00:05:04.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:46:03.404 00:00:10.369 TCP 23.104.0.1:54998 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:46:03.404 00:00:10.368 TCP 23.104.0.1:54998 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:46:32.480 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59618 10 6870 1 2025-11-20 08:46:32.479 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59618 10 6870 1 2025-11-20 08:43:00.723 00:05:04.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:47:03.807 00:00:10.368 TCP 23.104.0.1:43688 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:47:03.807 00:00:10.368 TCP 23.104.0.1:43688 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:47:32.709 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51958 10 6870 1 2025-11-20 08:47:32.708 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51958 10 6870 1 2025-11-20 08:44:00.724 00:05:04.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:48:04.212 00:00:10.359 TCP 23.104.0.1:50570 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:48:04.212 00:00:10.359 TCP 23.104.0.1:50570 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:48:32.923 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:38426 10 6870 1 2025-11-20 08:48:32.923 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:38426 10 6870 1 2025-11-20 08:49:04.606 00:00:12.821 TCP 23.104.0.1:44956 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:49:04.605 00:00:12.822 TCP 23.104.0.1:44956 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:49:33.125 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59468 10 6870 1 2025-11-20 08:49:33.124 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59468 10 6870 1 2025-11-20 08:50:12.537 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:50:13.010 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:50:12.537 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:50:13.010 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:50:07.469 00:00:10.360 TCP 23.104.0.1:45948 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:50:07.469 00:00:10.360 TCP 23.104.0.1:45948 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:50:33.297 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49644 10 6870 1 2025-11-20 08:50:33.298 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49644 10 6870 1 2025-11-20 08:47:00.731 00:05:04.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:51:07.868 00:00:10.370 TCP 23.104.0.1:52934 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:51:07.867 00:00:10.371 TCP 23.104.0.1:52934 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:51:33.504 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34494 10 6870 1 2025-11-20 08:51:33.505 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34494 10 6870 1 2025-11-20 08:48:00.731 00:05:04.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:52:08.276 00:00:10.365 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:52:08.277 00:00:10.365 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:52:33.717 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60594 10 6870 1 2025-11-20 08:52:33.718 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60594 10 6870 1 2025-11-20 08:49:00.729 00:05:04.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:53:08.679 00:00:10.365 TCP 23.104.0.1:59972 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:53:08.678 00:00:10.366 TCP 23.104.0.1:59972 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:53:33.930 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51154 10 6870 1 2025-11-20 08:53:33.929 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51154 10 6870 1 2025-11-20 08:50:00.753 00:05:04.407 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 08:54:09.106 00:00:10.322 TCP 23.104.0.1:42682 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:54:09.105 00:00:10.321 TCP 23.104.0.1:42682 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:54:34.160 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:45996 11 6922 1 2025-11-20 08:54:34.160 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:45996 11 6922 1 2025-11-20 08:55:12.696 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:55:12.631 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:55:12.631 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 08:55:12.696 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 08:55:09.471 00:00:10.363 TCP 23.104.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:55:09.472 00:00:10.363 TCP 23.104.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:55:34.425 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33046 10 6870 1 2025-11-20 08:55:34.426 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33046 10 6870 1 2025-11-20 08:56:09.873 00:00:10.362 TCP 23.104.0.1:35770 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:56:09.875 00:00:10.362 TCP 23.104.0.1:35770 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:56:34.599 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6870 1 2025-11-20 08:56:34.600 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6870 1 2025-11-20 08:53:00.755 00:05:04.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:57:10.277 00:00:10.363 TCP 23.104.0.1:35514 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:57:10.277 00:00:10.363 TCP 23.104.0.1:35514 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:57:34.806 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36864 10 6870 1 2025-11-20 08:57:34.806 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36864 10 6870 1 2025-11-20 08:54:00.756 00:05:04.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 08:58:10.678 00:00:10.367 TCP 23.104.0.1:36206 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:58:10.679 00:00:10.367 TCP 23.104.0.1:36206 -> 1.101.0.1:3000 11 1507 1 2025-11-20 08:58:35.024 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 10 6870 1 2025-11-20 08:58:35.025 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 10 6870 1 Summary: total flows: 326, total bytes: 1.1 M, total packets: 3140, avg bps: 2190, avg pps: 0, avg bpp: 335 Time window: 2025-11-20 07:55:00 - 2025-11-20 08:59:05 Total flows processed: 326, passed: 326, Blocks skipped: 0, Bytes read: 33968 Sys: 0.0051s User: 0.0025s Wall: 0.0044s flows/second: 74478.1 Runtime: 0.0044s