Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 12:58:57.566 00:00:10.360 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-11-26 12:58:57.566 00:00:10.360 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-11-26 12:59:22.193 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6452 1 2025-11-26 12:59:22.192 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6452 1 2025-11-26 12:59:57.965 00:00:10.343 TCP 23.104.0.1:34610 -> 1.101.0.1:3000 11 1507 1 2025-11-26 12:59:57.965 00:00:10.344 TCP 23.104.0.1:34610 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:00:22.401 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50968 10 6452 1 2025-11-26 13:00:22.401 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50968 10 6452 1 2025-11-26 12:56:08.434 00:05:55.569 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 12:56:08.435 00:05:55.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:00:58.345 00:00:10.362 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:00:58.346 00:00:10.362 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:01:22.574 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48424 10 6452 1 2025-11-26 13:01:22.574 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48424 10 6452 1 2025-11-26 13:01:58.746 00:00:10.364 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:01:58.745 00:00:10.364 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:02:22.793 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37790 10 6452 1 2025-11-26 13:02:22.792 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37790 10 6452 1 2025-11-26 13:02:59.150 00:00:10.369 TCP 23.104.0.1:60452 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:02:59.151 00:00:10.369 TCP 23.104.0.1:60452 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:03:12.536 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:03:12.580 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:03:12.537 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:03:12.581 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:03:23.006 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51090 10 6452 1 2025-11-26 13:03:23.007 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51090 10 6452 1 2025-11-26 13:00:04.000 00:05:04.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:03:59.559 00:00:10.366 TCP 23.104.0.1:46596 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:00:04.000 00:05:04.439 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:03:59.558 00:00:10.366 TCP 23.104.0.1:46596 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:04:23.225 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39548 10 6452 1 2025-11-26 13:04:23.225 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39548 10 6452 1 2025-11-26 13:04:59.966 00:00:10.367 TCP 23.104.0.1:44170 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:04:59.967 00:00:10.367 TCP 23.104.0.1:44170 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:05:23.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57072 10 6452 1 2025-11-26 13:05:23.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57072 10 6452 1 2025-11-26 13:06:00.375 00:00:10.324 TCP 23.104.0.1:35626 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:06:00.373 00:00:10.324 TCP 23.104.0.1:35626 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:06:23.651 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41882 10 6452 1 2025-11-26 13:06:23.652 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41882 10 6452 1 2025-11-26 13:02:08.435 00:05:55.569 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:02:08.436 00:05:55.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:07:00.736 00:00:10.365 TCP 23.104.0.1:56078 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:07:00.735 00:00:10.365 TCP 23.104.0.1:56078 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:07:23.822 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34774 10 6452 1 2025-11-26 13:07:23.822 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34774 10 6452 1 2025-11-26 13:08:12.787 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:08:01.137 00:00:10.331 TCP 23.104.0.1:51994 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:08:12.804 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:08:12.804 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:08:01.137 00:00:10.331 TCP 23.104.0.1:51994 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:08:12.787 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:08:23.997 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50318 10 6452 1 2025-11-26 13:08:23.997 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50318 10 6452 1 2025-11-26 13:09:01.499 00:00:10.366 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:09:01.499 00:00:10.367 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:09:24.224 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6452 1 2025-11-26 13:09:24.222 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6452 1 2025-11-26 13:06:04.001 00:05:04.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:06:04.001 00:05:04.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:10:01.908 00:00:10.363 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:10:01.908 00:00:10.363 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:10:24.435 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40384 10 6452 1 2025-11-26 13:10:24.434 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40384 10 6452 1 2025-11-26 13:11:02.309 00:00:10.366 TCP 23.104.0.1:49140 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:11:02.307 00:00:10.366 TCP 23.104.0.1:49140 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:11:24.657 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6452 1 2025-11-26 13:11:24.658 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6452 1 2025-11-26 13:12:02.711 00:00:10.332 TCP 23.104.0.1:52140 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:12:02.710 00:00:10.333 TCP 23.104.0.1:52140 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:12:24.873 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34352 10 6452 1 2025-11-26 13:12:24.874 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34352 10 6452 1 2025-11-26 13:08:08.439 00:05:55.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:08:08.439 00:05:55.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:13:12.908 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:13:03.105 00:00:10.362 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:13:12.838 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:13:12.909 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:13:12.838 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:13:03.105 00:00:10.362 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:13:25.104 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58684 10 6452 1 2025-11-26 13:13:25.104 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58684 10 6452 1 2025-11-26 13:14:03.509 00:00:10.323 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:14:03.508 00:00:10.324 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:14:25.319 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37288 10 6452 1 2025-11-26 13:14:25.319 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37288 10 6452 1 2025-11-26 13:15:03.871 00:00:10.363 TCP 23.104.0.1:33972 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:15:03.871 00:00:10.363 TCP 23.104.0.1:33972 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:15:25.544 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-11-26 13:15:25.544 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-11-26 13:12:04.031 00:05:04.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:12:04.031 00:05:04.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:16:04.271 00:00:10.365 TCP 23.104.0.1:40740 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:16:04.270 00:00:10.365 TCP 23.104.0.1:40740 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:16:25.761 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49502 10 6452 1 2025-11-26 13:16:25.761 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49502 10 6452 1 2025-11-26 13:17:04.675 00:00:10.366 TCP 23.104.0.1:42442 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:17:04.676 00:00:10.366 TCP 23.104.0.1:42442 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:17:25.981 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:35330 10 6452 1 2025-11-26 13:17:25.983 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35330 10 6452 1 2025-11-26 13:18:12.909 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:18:12.963 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:18:12.909 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:18:12.964 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:18:05.107 00:00:10.361 TCP 23.104.0.1:36974 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:18:05.107 00:00:10.360 TCP 23.104.0.1:36974 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:18:26.228 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42954 10 6452 1 2025-11-26 13:18:26.230 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42954 10 6452 1 2025-11-26 13:14:08.443 00:05:55.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:14:08.444 00:05:55.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:19:05.509 00:00:10.324 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:19:05.508 00:00:10.324 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:19:26.452 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36298 10 6452 1 2025-11-26 13:19:26.452 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36298 10 6452 1 2025-11-26 13:20:05.871 00:00:10.367 TCP 23.104.0.1:50356 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:20:05.871 00:00:10.367 TCP 23.104.0.1:50356 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:20:26.671 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-11-26 13:20:26.670 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-11-26 13:21:06.277 00:00:10.366 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:21:06.278 00:00:10.365 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:21:26.854 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37518 10 6452 1 2025-11-26 13:21:26.854 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37518 10 6452 1 2025-11-26 13:18:04.036 00:05:04.411 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:18:04.037 00:05:04.411 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:22:06.679 00:00:10.367 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:22:06.678 00:00:10.367 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:22:27.082 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48138 10 6452 1 2025-11-26 13:22:27.080 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48138 10 6452 1 2025-11-26 13:23:13.192 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:23:12.947 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:23:13.192 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:23:12.945 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:23:07.101 00:00:10.366 TCP 23.104.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:23:07.100 00:00:10.367 TCP 23.104.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:23:27.300 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58000 10 6452 1 2025-11-26 13:23:27.300 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58000 10 6452 1 2025-11-26 13:24:07.505 00:00:10.370 TCP 23.104.0.1:59646 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:24:07.505 00:00:10.370 TCP 23.104.0.1:59646 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:24:27.517 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53672 10 6452 1 2025-11-26 13:24:27.518 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53672 10 6452 1 2025-11-26 13:20:08.445 00:05:55.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:20:08.444 00:05:55.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:25:07.907 00:00:10.374 TCP 23.104.0.1:46588 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:25:07.907 00:00:10.374 TCP 23.104.0.1:46588 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:25:27.735 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-11-26 13:25:27.734 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-11-26 13:26:08.320 00:00:10.374 TCP 23.104.0.1:44554 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:26:08.320 00:00:10.374 TCP 23.104.0.1:44554 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:26:27.958 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:34462 12 6556 1 2025-11-26 13:26:27.958 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:34462 12 6556 1 2025-11-26 13:27:08.735 00:00:10.371 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:27:08.736 00:00:10.370 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:27:28.202 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34222 10 6452 1 2025-11-26 13:27:28.203 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34222 10 6452 1 2025-11-26 13:24:04.037 00:05:04.412 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:24:04.038 00:05:04.412 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:28:13.173 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:28:13.061 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:28:13.172 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:28:13.062 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:28:09.142 00:00:10.367 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:28:09.142 00:00:10.366 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:28:28.417 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36934 10 6452 1 2025-11-26 13:28:28.417 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36934 10 6452 1 2025-11-26 13:29:09.546 00:00:10.367 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:29:09.547 00:00:10.367 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:29:28.635 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-11-26 13:29:28.634 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-11-26 13:30:09.952 00:00:10.374 TCP 23.104.0.1:43620 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:30:09.952 00:00:10.374 TCP 23.104.0.1:43620 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:30:28.847 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34946 10 6452 1 2025-11-26 13:30:28.847 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34946 10 6452 1 2025-11-26 13:26:08.446 00:05:55.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:26:08.446 00:05:55.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:31:10.356 00:00:10.374 TCP 23.104.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:31:10.356 00:00:10.374 TCP 23.104.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:31:29.090 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48350 10 6452 1 2025-11-26 13:31:29.090 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48350 10 6452 1 2025-11-26 13:32:10.768 00:00:10.332 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:32:10.768 00:00:10.332 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:32:29.302 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42438 10 6452 1 2025-11-26 13:32:29.302 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42438 10 6452 1 2025-11-26 13:33:13.296 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:33:13.082 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:33:13.083 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:33:13.295 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:33:11.135 00:00:10.363 TCP 23.104.0.1:44394 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:33:11.135 00:00:10.363 TCP 23.104.0.1:44394 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:33:29.514 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-11-26 13:33:29.514 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-11-26 13:30:04.038 00:05:04.413 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:30:04.040 00:05:04.412 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:34:11.538 00:00:10.421 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:34:11.537 00:00:10.421 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:34:29.735 00:00:10.920 TCP 1.101.0.1:3000 -> 22.102.0.1:38276 10 6452 1 2025-11-26 13:34:29.734 00:00:10.921 TCP 1.101.0.1:3000 -> 22.102.0.1:38276 10 6452 1 2025-11-26 13:35:11.999 00:00:10.363 TCP 23.104.0.1:54650 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:35:12.001 00:00:10.362 TCP 23.104.0.1:54650 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:35:30.700 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52572 10 6452 1 2025-11-26 13:35:30.698 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52572 10 6452 1 2025-11-26 13:36:12.402 00:00:10.366 TCP 23.104.0.1:44260 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:36:12.402 00:00:10.366 TCP 23.104.0.1:44260 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:36:30.910 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34606 10 6452 1 2025-11-26 13:36:30.910 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34606 10 6452 1 2025-11-26 13:32:08.448 00:05:55.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:32:08.447 00:05:55.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:37:12.809 00:00:10.367 TCP 23.104.0.1:57390 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:37:12.809 00:00:10.366 TCP 23.104.0.1:57390 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:37:31.116 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37972 10 6452 1 2025-11-26 13:37:31.116 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37972 10 6452 1 2025-11-26 13:38:13.448 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:38:13.411 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:38:13.448 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:38:13.412 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:38:13.216 00:00:10.367 TCP 23.104.0.1:55864 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:38:13.216 00:00:10.366 TCP 23.104.0.1:55864 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:38:31.337 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44708 10 6452 1 2025-11-26 13:38:31.337 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44708 10 6452 1 2025-11-26 13:39:13.618 00:00:10.364 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:39:13.618 00:00:10.364 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:39:31.512 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57750 10 6452 1 2025-11-26 13:39:31.512 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57750 10 6452 1 2025-11-26 13:36:04.041 00:05:04.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:36:04.041 00:05:04.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:40:14.025 00:00:10.362 TCP 23.104.0.1:36688 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:40:14.024 00:00:10.362 TCP 23.104.0.1:36688 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:40:31.739 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45776 10 6452 1 2025-11-26 13:40:31.739 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45776 10 6452 1 2025-11-26 13:41:14.429 00:00:10.364 TCP 23.104.0.1:43298 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:41:14.429 00:00:10.364 TCP 23.104.0.1:43298 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:41:31.955 00:00:10.392 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-11-26 13:41:31.954 00:00:10.392 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-11-26 13:42:14.829 00:00:10.394 TCP 23.104.0.1:46988 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:42:14.830 00:00:10.393 TCP 23.104.0.1:46988 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:42:32.389 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 10 6452 1 2025-11-26 13:42:32.389 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 10 6452 1 2025-11-26 13:38:08.451 00:05:55.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:38:08.451 00:05:55.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:43:13.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:43:13.316 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:43:13.429 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:43:13.314 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:43:15.257 00:00:10.360 TCP 23.104.0.1:43300 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:43:15.256 00:00:10.360 TCP 23.104.0.1:43300 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:43:32.568 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40358 10 6452 1 2025-11-26 13:43:32.569 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40358 10 6452 1 2025-11-26 13:44:15.652 00:00:10.362 TCP 23.104.0.1:58714 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:44:15.651 00:00:10.362 TCP 23.104.0.1:58714 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:44:32.792 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:51704 11 6813 1 2025-11-26 13:44:32.794 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:51704 11 6813 1 2025-11-26 13:45:16.056 00:00:10.365 TCP 23.104.0.1:37392 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:45:16.056 00:00:10.365 TCP 23.104.0.1:37392 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:45:32.958 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34952 10 6452 1 2025-11-26 13:45:32.958 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34952 10 6452 1 2025-11-26 13:42:04.043 00:05:04.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:42:04.042 00:05:04.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:46:16.454 00:00:10.365 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:46:16.454 00:00:10.366 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:46:33.196 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49818 10 6452 1 2025-11-26 13:46:33.196 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49818 10 6452 1 2025-11-26 13:47:16.855 00:00:10.371 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:47:16.855 00:00:10.372 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:47:33.367 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43418 10 6452 1 2025-11-26 13:47:33.368 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43418 10 6452 1 2025-11-26 13:48:13.361 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:48:13.476 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:48:13.361 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:48:13.476 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:48:17.267 00:00:10.358 TCP 23.104.0.1:42336 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:48:17.267 00:00:10.357 TCP 23.104.0.1:42336 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:48:33.581 00:00:11.430 TCP 1.101.0.1:3000 -> 22.102.0.1:45594 10 6452 1 2025-11-26 13:48:33.582 00:00:11.429 TCP 1.101.0.1:3000 -> 22.102.0.1:45594 10 6452 1 2025-11-26 13:44:08.455 00:05:55.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:44:08.453 00:05:55.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:49:17.666 00:00:10.365 TCP 23.104.0.1:45104 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:49:17.666 00:00:10.365 TCP 23.104.0.1:45104 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:49:35.076 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51504 10 6452 1 2025-11-26 13:49:35.077 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51504 10 6452 1 2025-11-26 13:50:18.102 00:00:10.362 TCP 23.104.0.1:38014 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:50:18.102 00:00:10.362 TCP 23.104.0.1:38014 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:50:35.287 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-11-26 13:50:35.287 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-11-26 13:51:18.506 00:00:10.364 TCP 23.104.0.1:36204 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:51:18.506 00:00:10.364 TCP 23.104.0.1:36204 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:51:35.502 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60806 10 6452 1 2025-11-26 13:51:35.501 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60806 10 6452 1 2025-11-26 13:48:04.044 00:05:04.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:48:04.045 00:05:04.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:52:18.909 00:00:10.701 TCP 23.104.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:52:18.910 00:00:10.701 TCP 23.104.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:52:35.715 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33866 10 6452 1 2025-11-26 13:52:35.715 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33866 10 6452 1 2025-11-26 13:53:13.872 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:53:13.864 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:53:13.864 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:53:13.871 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:53:19.649 00:00:10.363 TCP 23.104.0.1:42202 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:53:19.650 00:00:10.362 TCP 23.104.0.1:42202 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:53:35.927 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:40642 10 6452 1 2025-11-26 13:53:35.926 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:40642 10 6452 1 2025-11-26 13:54:20.060 00:00:10.366 TCP 23.104.0.1:47466 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:54:20.060 00:00:10.366 TCP 23.104.0.1:47466 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:54:36.168 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43278 10 6452 1 2025-11-26 13:54:36.168 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43278 10 6452 1 2025-11-26 13:50:08.457 00:05:55.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:50:08.459 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-11-26 13:55:20.470 00:00:10.336 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:55:20.471 00:00:10.336 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:55:36.383 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-11-26 13:55:36.382 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-11-26 13:56:20.856 00:00:10.372 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:56:20.856 00:00:10.371 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:56:36.600 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59294 10 6452 1 2025-11-26 13:56:36.599 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59294 10 6452 1 2025-11-26 13:57:21.288 00:00:10.369 TCP 23.104.0.1:44040 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:57:21.289 00:00:10.369 TCP 23.104.0.1:44040 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:57:36.811 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50180 10 6452 1 2025-11-26 13:57:36.810 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50180 10 6452 1 2025-11-26 13:54:04.046 00:05:04.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:58:13.610 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:58:13.421 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:58:13.422 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:54:04.046 00:05:04.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:58:13.610 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:58:21.694 00:00:10.369 TCP 23.104.0.1:55472 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:58:21.695 00:00:10.369 TCP 23.104.0.1:55472 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:58:37.036 00:00:10.123 TCP 1.101.0.1:3000 -> 22.102.0.1:58558 10 6452 1 2025-11-26 13:58:37.036 00:00:10.123 TCP 1.101.0.1:3000 -> 22.102.0.1:58558 10 6452 1 Summary: total flows: 328, total bytes: 997697, total packets: 3151, avg bps: 2111, avg pps: 0, avg bpp: 316 Time window: 2025-11-26 12:56:08 - 2025-11-26 13:59:08 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0036s User: 0.0036s Wall: 0.0077s flows/second: 42399.4 Runtime: 0.0078s