Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 11:54:07.384 00:05:55.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:54:07.385 00:05:55.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:58:59.512 00:00:10.324 TCP 23.104.0.1:39500 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:58:59.513 00:00:10.324 TCP 23.104.0.1:39500 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:59:37.782 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57924 10 6452 1 2025-11-24 11:59:37.781 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57924 10 6452 1 2025-11-24 11:59:59.875 00:00:10.392 TCP 23.104.0.1:32880 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:59:59.876 00:00:10.392 TCP 23.104.0.1:32880 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:00:38.003 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48106 10 6452 1 2025-11-24 12:00:38.004 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48106 10 6452 1 2025-11-24 12:01:00.307 00:00:10.325 TCP 23.104.0.1:39826 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:01:00.306 00:00:10.325 TCP 23.104.0.1:39826 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:01:38.231 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37862 10 6452 1 2025-11-24 12:01:38.230 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37862 10 6452 1 2025-11-24 11:57:07.383 00:05:55.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 11:57:07.383 00:05:55.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:02:13.586 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:02:13.473 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:02:13.586 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:02:13.473 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:02:00.675 00:00:26.350 TCP 23.104.0.1:45688 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:02:00.673 00:00:26.351 TCP 23.104.0.1:45688 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:02:38.443 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41168 10 6452 1 2025-11-24 12:02:38.442 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41168 10 6452 1 2025-11-24 12:03:17.109 00:00:10.359 TCP 23.104.0.1:50328 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:03:17.108 00:00:10.358 TCP 23.104.0.1:50328 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:03:38.661 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:44214 10 6452 1 2025-11-24 12:03:38.662 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44214 10 6452 1 2025-11-24 12:04:17.507 00:00:10.365 TCP 23.104.0.1:57670 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:04:17.506 00:00:10.364 TCP 23.104.0.1:57670 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:04:38.837 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52718 10 6452 1 2025-11-24 12:04:38.837 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52718 10 6452 1 2025-11-24 12:00:07.388 00:05:55.731 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:00:07.386 00:05:55.731 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:05:17.912 00:00:10.363 TCP 23.104.0.1:39746 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:05:17.913 00:00:10.362 TCP 23.104.0.1:39746 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:05:39.072 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-11-24 12:05:39.070 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-11-24 12:06:18.317 00:00:10.363 TCP 23.104.0.1:43652 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:06:18.317 00:00:10.364 TCP 23.104.0.1:43652 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:06:39.296 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51192 10 6452 1 2025-11-24 12:06:39.295 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51192 10 6452 1 2025-11-24 12:07:13.728 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:07:13.639 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:07:13.637 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:07:13.728 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:07:18.720 00:00:10.325 TCP 23.104.0.1:41864 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:07:18.721 00:00:10.325 TCP 23.104.0.1:41864 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:07:39.518 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45162 10 6452 1 2025-11-24 12:07:39.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45162 10 6452 1 2025-11-24 12:03:07.386 00:05:55.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:03:07.385 00:05:55.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:08:19.106 00:00:10.324 TCP 23.104.0.1:56046 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:08:19.105 00:00:10.325 TCP 23.104.0.1:56046 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:08:39.734 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-11-24 12:08:39.734 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-11-24 12:09:19.471 00:00:10.360 TCP 23.104.0.1:52638 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:09:19.470 00:00:10.360 TCP 23.104.0.1:52638 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:09:39.952 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53638 10 6452 1 2025-11-24 12:09:39.949 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53638 10 6452 1 2025-11-24 12:10:19.870 00:00:10.367 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:10:19.870 00:00:10.368 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:10:40.175 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50904 10 6452 1 2025-11-24 12:10:40.175 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50904 10 6452 1 2025-11-24 12:06:07.388 00:05:55.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:06:07.389 00:05:55.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:11:20.278 00:00:10.392 TCP 23.104.0.1:38694 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:11:20.278 00:00:10.392 TCP 23.104.0.1:38694 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:11:40.387 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39770 10 6452 1 2025-11-24 12:11:40.388 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39770 10 6452 1 2025-11-24 12:12:13.907 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:12:13.805 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:12:13.805 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:12:13.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:12:20.720 00:00:10.375 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:12:20.721 00:00:10.375 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:12:40.606 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50648 10 6452 1 2025-11-24 12:12:40.606 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50648 10 6452 1 2025-11-24 12:13:21.139 00:00:10.340 TCP 23.104.0.1:42622 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:13:21.138 00:00:10.340 TCP 23.104.0.1:42622 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:13:40.815 00:00:10.494 TCP 1.101.0.1:3000 -> 22.102.0.1:39224 10 6452 1 2025-11-24 12:13:40.816 00:00:10.494 TCP 1.101.0.1:3000 -> 22.102.0.1:39224 10 6452 1 2025-11-24 12:09:07.387 00:05:55.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:09:07.386 00:05:55.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:14:21.519 00:00:10.369 TCP 23.104.0.1:44504 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:14:21.519 00:00:10.370 TCP 23.104.0.1:44504 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:14:41.353 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58480 10 6452 1 2025-11-24 12:14:41.352 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58480 10 6452 1 2025-11-24 12:15:21.932 00:00:10.381 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:15:21.931 00:00:10.381 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:15:41.566 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 10 6452 1 2025-11-24 12:15:41.567 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 10 6452 1 2025-11-24 12:16:22.350 00:00:10.366 TCP 23.104.0.1:59882 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:16:22.350 00:00:10.367 TCP 23.104.0.1:59882 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:16:41.783 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35312 10 6452 1 2025-11-24 12:16:41.784 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35312 10 6452 1 2025-11-24 12:12:07.391 00:05:55.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:12:07.392 00:05:55.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:17:13.855 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:17:13.797 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:17:13.796 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:17:13.855 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:17:22.759 00:00:10.378 TCP 23.104.0.1:41940 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:17:22.757 00:00:10.378 TCP 23.104.0.1:41940 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:17:42.003 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52160 10 6452 1 2025-11-24 12:17:42.003 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52160 10 6452 1 2025-11-24 12:18:23.175 00:00:10.357 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:18:23.173 00:00:10.357 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:18:42.242 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57100 10 6452 1 2025-11-24 12:18:42.242 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57100 10 6452 1 2025-11-24 12:19:23.573 00:00:10.366 TCP 23.104.0.1:34612 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:19:23.575 00:00:10.366 TCP 23.104.0.1:34612 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:19:42.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50466 10 6452 1 2025-11-24 12:19:42.467 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50466 10 6452 1 2025-11-24 12:15:07.390 00:05:55.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:15:07.390 00:05:55.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:20:23.979 00:00:10.375 TCP 23.104.0.1:54326 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:20:23.979 00:00:10.375 TCP 23.104.0.1:54326 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:20:42.681 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44274 10 6452 1 2025-11-24 12:20:42.681 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44274 10 6452 1 2025-11-24 12:21:24.400 00:00:10.328 TCP 23.104.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:21:24.399 00:00:10.328 TCP 23.104.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:21:42.893 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50984 10 6452 1 2025-11-24 12:21:42.891 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50984 10 6452 1 2025-11-24 12:22:13.747 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:22:13.997 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:22:13.747 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:22:13.997 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:22:24.760 00:00:10.375 TCP 23.104.0.1:39090 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:22:24.762 00:00:10.375 TCP 23.104.0.1:39090 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:22:43.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43512 10 6452 1 2025-11-24 12:22:43.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43512 10 6452 1 2025-11-24 12:18:07.393 00:05:55.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:18:07.393 00:05:55.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:23:25.176 00:00:10.365 TCP 23.104.0.1:39482 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:23:25.176 00:00:10.365 TCP 23.104.0.1:39482 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:23:43.314 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 10 6452 1 2025-11-24 12:23:43.314 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 10 6452 1 2025-11-24 12:24:25.582 00:00:10.369 TCP 23.104.0.1:53502 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:24:25.581 00:00:10.368 TCP 23.104.0.1:53502 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:24:43.523 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56218 10 6452 1 2025-11-24 12:24:43.522 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56218 10 6452 1 2025-11-24 12:25:25.992 00:00:10.321 TCP 23.104.0.1:56668 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:25:25.994 00:00:10.321 TCP 23.104.0.1:56668 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:25:43.703 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53926 10 6452 1 2025-11-24 12:25:43.702 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53926 10 6452 1 2025-11-24 12:21:07.390 00:05:55.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:21:07.391 00:05:55.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:26:26.351 00:00:10.359 TCP 23.104.0.1:51048 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:26:26.352 00:00:10.359 TCP 23.104.0.1:51048 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:26:43.910 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-11-24 12:26:43.909 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-11-24 12:27:14.082 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:27:14.025 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:27:14.082 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:27:14.025 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:27:26.753 00:00:11.650 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:27:26.754 00:00:11.650 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:27:44.120 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38234 10 6452 1 2025-11-24 12:27:44.121 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38234 10 6452 1 2025-11-24 12:28:28.444 00:00:10.362 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:28:28.443 00:00:10.361 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:28:44.337 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37494 10 6452 1 2025-11-24 12:28:44.336 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37494 10 6452 1 2025-11-24 12:24:07.394 00:05:55.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:24:07.393 00:05:55.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:29:28.856 00:00:10.375 TCP 23.104.0.1:53820 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:29:28.856 00:00:10.375 TCP 23.104.0.1:53820 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:29:44.545 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48712 10 6452 1 2025-11-24 12:29:44.544 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48712 10 6452 1 2025-11-24 12:30:29.270 00:00:10.369 TCP 23.104.0.1:38126 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:30:29.272 00:00:10.368 TCP 23.104.0.1:38126 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:30:44.769 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34676 10 6452 1 2025-11-24 12:30:44.768 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34676 10 6452 1 2025-11-24 12:31:29.677 00:00:10.371 TCP 23.104.0.1:59158 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:31:29.678 00:00:10.371 TCP 23.104.0.1:59158 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:31:44.997 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42334 10 6452 1 2025-11-24 12:31:44.997 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42334 10 6452 1 2025-11-24 12:27:07.392 00:05:55.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:27:07.392 00:05:55.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:32:14.253 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:32:14.314 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:32:14.314 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:32:14.253 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:32:30.113 00:00:10.367 TCP 23.104.0.1:51180 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:32:30.112 00:00:10.368 TCP 23.104.0.1:51180 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:32:45.221 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47596 10 6452 1 2025-11-24 12:32:45.222 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47596 10 6452 1 2025-11-24 12:33:30.515 00:00:10.367 TCP 23.104.0.1:50672 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:33:30.515 00:00:10.367 TCP 23.104.0.1:50672 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:33:45.433 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49042 10 6452 1 2025-11-24 12:33:45.433 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49042 10 6452 1 2025-11-24 12:34:30.916 00:00:10.398 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:34:30.917 00:00:10.398 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:34:45.648 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55400 10 6452 1 2025-11-24 12:34:45.647 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55400 10 6452 1 2025-11-24 12:30:07.394 00:05:55.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:30:07.394 00:05:55.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:35:31.352 00:00:10.365 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:35:31.351 00:00:10.365 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:35:45.829 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56296 10 6452 1 2025-11-24 12:35:45.830 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56296 10 6452 1 2025-11-24 12:36:31.751 00:00:10.390 TCP 23.104.0.1:54382 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:36:31.752 00:00:10.390 TCP 23.104.0.1:54382 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:36:46.066 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39714 10 6452 1 2025-11-24 12:36:46.066 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39714 10 6452 1 2025-11-24 12:37:14.473 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:37:14.347 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:37:14.347 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:37:14.474 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:37:32.192 00:00:10.423 TCP 23.104.0.1:58154 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:37:32.192 00:00:10.422 TCP 23.104.0.1:58154 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:37:46.239 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38488 10 6452 1 2025-11-24 12:37:46.240 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38488 10 6452 1 2025-11-24 12:33:07.391 00:05:55.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:33:07.392 00:05:55.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:38:32.660 00:00:10.367 TCP 23.104.0.1:48452 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:38:32.662 00:00:10.366 TCP 23.104.0.1:48452 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:38:46.454 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34728 10 6452 1 2025-11-24 12:38:46.455 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34728 10 6452 1 2025-11-24 12:39:33.095 00:00:10.370 TCP 23.104.0.1:44770 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:39:33.094 00:00:10.370 TCP 23.104.0.1:44770 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:39:46.671 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 10 6452 1 2025-11-24 12:39:46.670 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 10 6452 1 2025-11-24 12:40:33.502 00:00:10.367 TCP 23.104.0.1:60540 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:40:33.500 00:00:10.368 TCP 23.104.0.1:60540 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:40:46.898 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48892 10 6452 1 2025-11-24 12:40:46.899 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48892 10 6452 1 2025-11-24 12:36:07.395 00:05:55.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:36:07.395 00:05:55.732 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:41:33.910 00:00:10.385 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:41:33.909 00:00:10.385 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:41:47.117 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49142 10 6452 1 2025-11-24 12:41:47.115 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49142 10 6452 1 2025-11-24 12:42:14.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:42:14.413 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:42:14.448 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:42:14.412 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:42:34.334 00:00:10.369 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:42:34.335 00:00:10.369 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:42:47.327 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39228 10 6452 1 2025-11-24 12:42:47.329 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39228 10 6452 1 2025-11-24 12:43:34.743 00:00:10.326 TCP 23.104.0.1:43916 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:43:34.744 00:00:10.326 TCP 23.104.0.1:43916 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:43:47.512 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46088 10 6452 1 2025-11-24 12:43:47.513 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46088 10 6452 1 2025-11-24 12:39:07.393 00:05:55.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:39:07.393 00:05:55.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:44:35.113 00:00:10.372 TCP 23.104.0.1:42528 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:44:35.111 00:00:10.372 TCP 23.104.0.1:42528 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:44:47.730 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45674 10 6452 1 2025-11-24 12:44:47.731 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45674 10 6452 1 2025-11-24 12:45:35.522 00:00:10.416 TCP 23.104.0.1:48902 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:45:35.523 00:00:10.416 TCP 23.104.0.1:48902 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:45:47.911 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53902 10 6452 1 2025-11-24 12:45:47.910 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53902 10 6452 1 2025-11-24 12:46:35.980 00:00:10.366 TCP 23.104.0.1:54230 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:46:35.980 00:00:10.366 TCP 23.104.0.1:54230 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:46:48.128 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-11-24 12:46:48.128 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-11-24 12:42:07.396 00:05:55.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:42:07.395 00:05:55.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:47:14.544 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:47:14.405 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:47:14.405 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:47:14.544 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:47:36.389 00:00:10.364 TCP 23.104.0.1:43650 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:47:36.389 00:00:10.363 TCP 23.104.0.1:43650 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:47:48.344 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46188 10 6452 1 2025-11-24 12:47:48.346 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46188 10 6452 1 2025-11-24 12:48:36.790 00:00:10.372 TCP 23.104.0.1:56566 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:48:36.790 00:00:10.372 TCP 23.104.0.1:56566 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:48:48.564 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 6452 1 2025-11-24 12:48:48.564 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 6452 1 2025-11-24 12:49:37.203 00:00:10.978 TCP 23.104.0.1:53158 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:49:37.203 00:00:10.977 TCP 23.104.0.1:53158 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:49:48.800 00:00:10.757 TCP 1.101.0.1:3000 -> 22.102.0.1:42152 10 6452 1 2025-11-24 12:49:48.800 00:00:10.757 TCP 1.101.0.1:3000 -> 22.102.0.1:42152 10 6452 1 2025-11-24 12:45:07.393 00:05:55.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:45:07.394 00:05:55.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:50:38.218 00:00:10.367 TCP 23.104.0.1:33994 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:50:38.217 00:00:10.368 TCP 23.104.0.1:33994 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:50:49.600 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48290 10 6452 1 2025-11-24 12:50:49.600 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48290 10 6452 1 2025-11-24 12:51:38.623 00:00:10.367 TCP 23.104.0.1:53230 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:51:38.624 00:00:10.366 TCP 23.104.0.1:53230 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:51:49.773 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42826 10 6452 1 2025-11-24 12:51:49.774 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42826 10 6452 1 2025-11-24 12:52:14.682 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:52:14.634 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:52:14.634 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:52:14.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:52:39.034 00:00:10.363 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:52:39.033 00:00:10.363 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:52:50.001 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59066 10 6452 1 2025-11-24 12:48:07.396 00:05:55.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:52:50.001 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59066 10 6452 1 2025-11-24 12:48:07.396 00:05:55.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:53:39.434 00:00:10.364 TCP 23.104.0.1:42584 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:53:39.434 00:00:10.364 TCP 23.104.0.1:42584 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:53:50.215 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41066 10 6452 1 2025-11-24 12:53:50.215 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41066 10 6452 1 2025-11-24 12:54:39.833 00:00:10.370 TCP 23.104.0.1:41160 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:54:39.834 00:00:10.370 TCP 23.104.0.1:41160 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:54:50.433 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59952 10 6452 1 2025-11-24 12:54:50.433 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59952 10 6452 1 2025-11-24 12:55:40.250 00:00:10.470 TCP 23.104.0.1:57344 -> 1.101.0.1:3000 17 2241 1 2025-11-24 12:55:40.249 00:00:10.471 TCP 23.104.0.1:57344 -> 1.101.0.1:3000 17 2241 1 2025-11-24 12:55:50.603 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:54648 14 14298 1 2025-11-24 12:55:50.602 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:54648 14 14298 1 2025-11-24 12:51:07.395 00:05:55.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:51:07.395 00:05:55.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:56:40.770 00:00:10.370 TCP 23.104.0.1:49244 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:56:40.771 00:00:10.370 TCP 23.104.0.1:49244 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:56:50.888 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58250 10 6452 1 2025-11-24 12:56:50.887 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58250 10 6452 1 2025-11-24 12:57:14.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:57:14.672 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:57:14.673 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:57:14.763 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:57:41.178 00:00:10.330 TCP 23.104.0.1:45584 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:57:41.179 00:00:10.330 TCP 23.104.0.1:45584 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:57:51.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55898 10 6452 1 2025-11-24 12:57:51.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55898 10 6452 1 Summary: total flows: 324, total bytes: 997938, total packets: 3122, avg bps: 2082, avg pps: 0, avg bpp: 319 Time window: 2025-11-24 11:54:07 - 2025-11-24 12:58:01 Total flows processed: 324, passed: 324, Blocks skipped: 0, Bytes read: 33760 Sys: 0.0034s User: 0.0034s Wall: 0.0047s flows/second: 69632.8 Runtime: 0.0047s