Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 16:55:00.992 00:05:04.331 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 16:59:01.017 00:00:10.320 TCP 23.104.0.1:33744 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:59:01.017 00:00:10.321 TCP 23.104.0.1:33744 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:59:13.540 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48258 10 6452 1 2025-11-20 16:59:13.540 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48258 10 6452 1 2025-11-20 16:56:00.994 00:05:04.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:00:01.374 00:00:10.362 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:00:01.374 00:00:10.362 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:00:23.813 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:00:13.753 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36550 10 6452 1 2025-11-20 17:00:24.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:00:13.754 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36550 10 6452 1 2025-11-20 17:00:24.009 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:00:23.812 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:01:01.775 00:00:10.370 TCP 23.104.0.1:54326 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:01:01.774 00:00:10.370 TCP 23.104.0.1:54326 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:01:13.928 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:38958 10 6452 1 2025-11-20 17:01:13.928 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38958 10 6452 1 2025-11-20 17:02:02.179 00:00:10.326 TCP 23.104.0.1:55156 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:02:02.179 00:00:10.326 TCP 23.104.0.1:55156 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:02:14.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-11-20 17:02:14.172 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-11-20 16:59:00.997 00:05:04.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:03:02.542 00:00:10.359 TCP 23.104.0.1:47122 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:03:02.542 00:00:10.359 TCP 23.104.0.1:47122 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:03:14.387 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34342 10 6452 1 2025-11-20 17:03:14.387 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34342 10 6452 1 2025-11-20 17:00:00.997 00:05:04.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:04:02.945 00:00:10.331 TCP 23.104.0.1:36366 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:04:02.944 00:00:10.332 TCP 23.104.0.1:36366 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:04:14.601 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45584 10 6452 1 2025-11-20 17:04:14.602 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45584 10 6452 1 2025-11-20 17:01:00.996 00:05:04.334 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:05:03.317 00:00:10.361 TCP 23.104.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:05:03.317 00:00:10.361 TCP 23.104.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:05:24.173 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:05:24.046 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:05:24.172 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:05:24.045 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:05:14.772 00:00:17.776 TCP 1.101.0.1:3000 -> 22.102.0.1:52836 10 6452 1 2025-11-20 17:05:14.772 00:00:17.776 TCP 1.101.0.1:3000 -> 22.102.0.1:52836 10 6452 1 2025-11-20 17:02:00.994 00:05:04.336 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:06:03.724 00:00:10.382 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:06:03.724 00:00:10.382 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:06:22.589 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6452 1 2025-11-20 17:06:22.589 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6452 1 2025-11-20 17:07:04.131 00:00:10.363 TCP 23.104.0.1:52036 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:07:04.132 00:00:10.363 TCP 23.104.0.1:52036 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:07:22.813 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-11-20 17:07:22.812 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-11-20 17:08:04.537 00:00:10.367 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:08:04.538 00:00:10.367 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:08:23.046 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52028 10 6452 1 2025-11-20 17:08:23.046 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52028 10 6452 1 2025-11-20 17:05:00.998 00:05:04.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:09:04.949 00:00:10.370 TCP 23.104.0.1:39212 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:09:04.949 00:00:10.369 TCP 23.104.0.1:39212 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:09:23.262 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6452 1 2025-11-20 17:09:23.263 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6452 1 2025-11-20 17:06:00.997 00:05:04.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:10:05.357 00:00:10.364 TCP 23.104.0.1:42830 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:10:05.357 00:00:10.363 TCP 23.104.0.1:42830 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:10:24.342 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:10:24.268 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:10:24.342 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:10:24.268 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:10:23.484 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48998 10 6452 1 2025-11-20 17:10:23.484 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48998 10 6452 1 2025-11-20 17:07:00.994 00:05:04.337 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:11:05.765 00:00:10.350 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:11:05.765 00:00:10.350 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:11:23.705 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39740 10 6452 1 2025-11-20 17:11:23.705 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39740 10 6452 1 2025-11-20 17:08:00.996 00:05:04.337 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:12:06.193 00:00:10.324 TCP 23.104.0.1:49154 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:12:06.194 00:00:10.323 TCP 23.104.0.1:49154 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:12:23.938 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6452 1 2025-11-20 17:12:23.938 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6452 1 2025-11-20 17:13:06.554 00:00:10.334 TCP 23.104.0.1:44240 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:13:06.554 00:00:10.333 TCP 23.104.0.1:44240 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:13:24.149 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52294 10 6452 1 2025-11-20 17:13:24.148 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52294 10 6452 1 2025-11-20 17:14:06.928 00:00:10.333 TCP 23.104.0.1:46828 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:14:06.928 00:00:10.333 TCP 23.104.0.1:46828 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:14:24.373 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-11-20 17:14:24.372 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-11-20 17:11:00.998 00:05:04.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:15:07.301 00:00:10.798 TCP 23.104.0.1:54092 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:15:07.300 00:00:10.798 TCP 23.104.0.1:54092 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:15:24.159 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:15:24.328 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:15:24.160 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:15:24.329 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:15:24.584 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58186 10 6452 1 2025-11-20 17:15:24.584 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58186 10 6452 1 2025-11-20 17:12:01.000 00:05:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 667 1 2025-11-20 17:16:08.141 00:00:10.367 TCP 23.104.0.1:36022 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:16:08.141 00:00:10.367 TCP 23.104.0.1:36022 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:16:24.792 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36544 10 6452 1 2025-11-20 17:16:24.792 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36544 10 6452 1 2025-11-20 17:13:00.995 00:05:04.338 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:17:08.550 00:00:10.362 TCP 23.104.0.1:34146 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:17:08.550 00:00:10.361 TCP 23.104.0.1:34146 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:17:25.004 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57882 10 6452 1 2025-11-20 17:17:25.006 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57882 10 6452 1 2025-11-20 17:14:00.996 00:05:04.338 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:18:08.950 00:00:10.370 TCP 23.104.0.1:50166 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:18:08.949 00:00:10.370 TCP 23.104.0.1:50166 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:18:25.223 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37964 10 6452 1 2025-11-20 17:18:25.225 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37964 10 6452 1 2025-11-20 17:19:09.360 00:00:10.365 TCP 23.104.0.1:57526 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:19:09.360 00:00:10.365 TCP 23.104.0.1:57526 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:19:25.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59128 10 6452 1 2025-11-20 17:19:25.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59128 10 6452 1 2025-11-20 17:20:09.765 00:00:10.377 TCP 23.104.0.1:59052 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:20:09.764 00:00:10.377 TCP 23.104.0.1:59052 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:20:24.461 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:20:24.390 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:20:24.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:20:24.462 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:20:25.656 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56178 10 6452 1 2025-11-20 17:20:25.656 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56178 10 6452 1 2025-11-20 17:17:01.001 00:05:04.330 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:21:10.178 00:00:10.365 TCP 23.104.0.1:58130 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:21:10.178 00:00:10.365 TCP 23.104.0.1:58130 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:21:25.873 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44710 10 6452 1 2025-11-20 17:21:25.873 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44710 10 6452 1 2025-11-20 17:17:05.330 00:05:55.671 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:22:10.578 00:00:10.325 TCP 23.104.0.1:42980 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:22:10.579 00:00:10.325 TCP 23.104.0.1:42980 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:22:26.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39538 10 6452 1 2025-11-20 17:22:26.103 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39538 10 6452 1 2025-11-20 17:19:00.998 00:05:04.337 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:23:10.935 00:00:10.379 TCP 23.104.0.1:53262 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:23:10.936 00:00:10.379 TCP 23.104.0.1:53262 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:23:26.314 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36904 10 6452 1 2025-11-20 17:23:26.315 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36904 10 6452 1 2025-11-20 17:20:00.998 00:05:04.338 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:24:11.352 00:00:10.368 TCP 23.104.0.1:37668 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:24:11.353 00:00:10.368 TCP 23.104.0.1:37668 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:24:26.483 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40506 10 6452 1 2025-11-20 17:24:26.484 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40506 10 6452 1 2025-11-20 17:25:24.207 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:25:11.801 00:00:10.362 TCP 23.104.0.1:43744 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:25:24.728 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:25:24.208 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:25:11.801 00:00:10.362 TCP 23.104.0.1:43744 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:25:24.728 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:25:26.697 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 10 6452 1 2025-11-20 17:25:26.698 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 10 6452 1 2025-11-20 17:26:12.212 00:00:10.366 TCP 23.104.0.1:48852 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:26:12.212 00:00:10.366 TCP 23.104.0.1:48852 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:26:26.904 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46054 10 6452 1 2025-11-20 17:26:26.903 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46054 10 6452 1 2025-11-20 17:23:01.002 00:05:04.332 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:27:12.614 00:00:10.370 TCP 23.104.0.1:37448 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:27:12.614 00:00:10.369 TCP 23.104.0.1:37448 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:27:27.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52218 10 6452 1 2025-11-20 17:27:27.088 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52218 10 6452 1 2025-11-20 17:23:05.333 00:05:55.669 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:28:13.021 00:00:10.325 TCP 23.104.0.1:52758 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:28:13.020 00:00:10.326 TCP 23.104.0.1:52758 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:28:27.306 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60960 10 6452 1 2025-11-20 17:28:27.306 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:60960 10 6452 1 2025-11-20 17:25:00.998 00:05:04.339 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:29:13.382 00:00:10.365 TCP 23.104.0.1:54264 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:29:13.383 00:00:10.365 TCP 23.104.0.1:54264 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:29:27.512 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45580 10 6452 1 2025-11-20 17:29:27.511 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45580 10 6452 1 2025-11-20 17:26:00.998 00:05:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 686 1 2025-11-20 17:30:24.656 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:30:13.786 00:00:10.359 TCP 23.104.0.1:53106 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:30:24.490 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:30:13.788 00:00:10.359 TCP 23.104.0.1:53106 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:30:24.658 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:30:24.490 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:30:27.722 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33676 10 6452 1 2025-11-20 17:30:27.722 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33676 10 6452 1 2025-11-20 17:31:14.187 00:00:10.578 TCP 23.104.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:31:14.188 00:00:10.577 TCP 23.104.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:31:27.894 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:37194 10 6452 1 2025-11-20 17:31:27.894 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:37194 10 6452 1 2025-11-20 17:32:14.801 00:00:10.365 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:32:14.801 00:00:10.365 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:32:28.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36382 10 6452 1 2025-11-20 17:32:28.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36382 10 6452 1 2025-11-20 17:29:01.003 00:05:04.332 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:33:15.218 00:00:10.360 TCP 23.104.0.1:52732 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:33:15.218 00:00:10.360 TCP 23.104.0.1:52732 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:33:28.302 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39800 10 6452 1 2025-11-20 17:33:28.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39800 10 6452 1 2025-11-20 17:29:05.334 00:05:55.671 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:34:15.619 00:00:10.364 TCP 23.104.0.1:36950 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:34:15.619 00:00:10.364 TCP 23.104.0.1:36950 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:34:28.519 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-11-20 17:34:28.518 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-11-20 17:31:01.000 00:05:04.338 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:35:24.777 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:35:24.764 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:35:24.778 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:35:24.764 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:35:16.026 00:00:10.367 TCP 23.104.0.1:35174 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:35:16.028 00:00:10.366 TCP 23.104.0.1:35174 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:35:28.731 00:00:10.830 TCP 1.101.0.1:3000 -> 22.102.0.1:59850 10 6452 1 2025-11-20 17:35:28.730 00:00:10.830 TCP 1.101.0.1:3000 -> 22.102.0.1:59850 10 6452 1 2025-11-20 17:31:05.336 00:05:55.665 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:36:16.433 00:00:10.369 TCP 23.104.0.1:60284 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:36:16.433 00:00:10.369 TCP 23.104.0.1:60284 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:36:29.599 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57368 10 6452 1 2025-11-20 17:36:29.600 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57368 10 6452 1 2025-11-20 17:37:16.836 00:00:10.344 TCP 23.104.0.1:49486 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:37:16.836 00:00:10.344 TCP 23.104.0.1:49486 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:37:29.813 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33638 10 6452 1 2025-11-20 17:37:29.814 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33638 10 6452 1 2025-11-20 17:38:17.221 00:00:10.323 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:38:17.221 00:00:10.324 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:38:30.030 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43644 10 6452 1 2025-11-20 17:38:30.030 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43644 10 6452 1 2025-11-20 17:35:01.004 00:05:04.333 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:39:17.587 00:00:10.363 TCP 23.104.0.1:53434 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:39:17.587 00:00:10.363 TCP 23.104.0.1:53434 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:39:30.258 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47438 10 6452 1 2025-11-20 17:39:30.258 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47438 10 6452 1 2025-11-20 17:35:05.336 00:05:55.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:40:24.817 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:40:24.701 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:40:24.701 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:40:24.818 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:40:17.998 00:00:10.361 TCP 23.104.0.1:50106 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:40:17.996 00:00:10.362 TCP 23.104.0.1:50106 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:40:30.470 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56514 10 6452 1 2025-11-20 17:40:30.470 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56514 10 6452 1 2025-11-20 17:37:01.002 00:05:04.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:41:18.399 00:00:10.360 TCP 23.104.0.1:36586 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:41:18.398 00:00:10.360 TCP 23.104.0.1:36586 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:41:30.700 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44554 10 6452 1 2025-11-20 17:41:30.700 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44554 10 6452 1 2025-11-20 17:37:05.339 00:05:55.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:42:18.795 00:00:10.347 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:42:18.795 00:00:10.347 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:42:30.915 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6452 1 2025-11-20 17:42:30.916 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6452 1 2025-11-20 17:43:19.189 00:00:10.361 TCP 23.104.0.1:55508 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:43:19.187 00:00:10.361 TCP 23.104.0.1:55508 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:43:31.138 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-11-20 17:43:31.138 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-11-20 17:44:19.587 00:00:18.349 TCP 23.104.0.1:42312 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:44:19.588 00:00:18.349 TCP 23.104.0.1:42312 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:44:31.354 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-11-20 17:44:31.356 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-11-20 17:41:01.030 00:05:04.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:45:24.835 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:45:24.985 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:45:24.834 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:45:24.986 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:45:27.975 00:00:10.376 TCP 23.104.0.1:43368 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:45:27.975 00:00:10.375 TCP 23.104.0.1:43368 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:45:31.570 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46448 10 6452 1 2025-11-20 17:45:31.569 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46448 10 6452 1 2025-11-20 17:41:05.337 00:05:55.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:46:28.393 00:00:10.366 TCP 23.104.0.1:42114 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:46:28.393 00:00:10.366 TCP 23.104.0.1:42114 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:46:31.791 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43972 10 6452 1 2025-11-20 17:46:31.790 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43972 10 6452 1 2025-11-20 17:43:01.029 00:05:04.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:47:28.791 00:00:10.365 TCP 23.104.0.1:37410 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:47:28.791 00:00:10.364 TCP 23.104.0.1:37410 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:47:32.024 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50458 10 6452 1 2025-11-20 17:47:32.025 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50458 10 6452 1 2025-11-20 17:43:05.343 00:05:55.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:48:29.202 00:00:10.368 TCP 23.104.0.1:49064 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:48:29.201 00:00:10.368 TCP 23.104.0.1:49064 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:48:32.198 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46636 10 6452 1 2025-11-20 17:48:32.198 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46636 10 6452 1 2025-11-20 17:49:29.602 00:00:10.325 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:49:29.602 00:00:10.325 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:49:32.414 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60652 10 6452 1 2025-11-20 17:49:32.415 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60652 10 6452 1 2025-11-20 17:50:25.458 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:50:25.886 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:50:25.886 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:50:25.459 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:50:29.972 00:00:10.367 TCP 23.104.0.1:56952 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:50:32.644 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53754 10 6452 1 2025-11-20 17:50:29.972 00:00:10.367 TCP 23.104.0.1:56952 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:50:32.645 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53754 10 6452 1 2025-11-20 17:47:01.038 00:05:04.304 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:51:30.376 00:00:10.361 TCP 23.104.0.1:47598 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:51:30.378 00:00:10.360 TCP 23.104.0.1:47598 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:51:32.856 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35442 10 6452 1 2025-11-20 17:51:32.856 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35442 10 6452 1 2025-11-20 17:47:05.341 00:05:55.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:52:33.086 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38238 10 6452 1 2025-11-20 17:52:30.776 00:00:10.370 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:52:33.087 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38238 10 6452 1 2025-11-20 17:52:30.777 00:00:10.371 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:49:01.036 00:05:04.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:53:33.303 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51578 10 6452 1 2025-11-20 17:53:31.186 00:00:10.365 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:53:33.301 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51578 10 6452 1 2025-11-20 17:53:31.184 00:00:10.365 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:49:05.345 00:05:55.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:54:31.588 00:00:10.381 TCP 23.104.0.1:33144 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:54:33.479 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55848 10 6452 1 2025-11-20 17:54:31.588 00:00:10.381 TCP 23.104.0.1:33144 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:54:33.479 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55848 10 6452 1 2025-11-20 17:55:25.114 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:55:25.149 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:55:25.149 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:55:25.115 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:55:32.018 00:00:10.366 TCP 23.104.0.1:44612 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:55:33.687 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43412 10 6452 1 2025-11-20 17:55:33.687 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43412 10 6452 1 2025-11-20 17:55:32.018 00:00:10.368 TCP 23.104.0.1:44612 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:56:33.901 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59052 10 6452 1 2025-11-20 17:56:32.428 00:00:10.367 TCP 23.104.0.1:37766 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:56:33.901 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59052 10 6452 1 2025-11-20 17:56:32.429 00:00:10.367 TCP 23.104.0.1:37766 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:53:01.040 00:05:04.306 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:57:32.835 00:00:10.351 TCP 23.104.0.1:56746 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:57:34.115 00:00:10.612 TCP 1.101.0.1:3000 -> 22.102.0.1:55490 11 6504 1 2025-11-20 17:57:32.836 00:00:10.350 TCP 23.104.0.1:56746 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:57:34.115 00:00:10.613 TCP 1.101.0.1:3000 -> 22.102.0.1:55490 11 6504 1 2025-11-20 17:53:05.342 00:05:55.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:58:33.236 00:00:10.335 TCP 23.104.0.1:52680 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:58:34.767 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53038 10 6452 1 2025-11-20 17:58:34.768 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53038 10 6452 1 2025-11-20 17:58:33.237 00:00:10.334 TCP 23.104.0.1:52680 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 328, total bytes: 996677, total packets: 3144, avg bps: 2076, avg pps: 0, avg bpp: 317 Time window: 2025-11-20 16:55:00 - 2025-11-20 17:59:01 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0050s User: 0.0030s Wall: 0.0037s flows/second: 89009.6 Runtime: 0.0037s