Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 13:59:11.306 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 13:59:11.184 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 13:59:11.183 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 13:59:11.306 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 13:59:05.419 00:00:10.324 TCP 23.104.0.1:52746 -> 1.101.0.1:3000 11 1507 1 2025-11-28 13:59:05.419 00:00:10.323 TCP 23.104.0.1:52746 -> 1.101.0.1:3000 11 1507 1 2025-11-28 13:59:18.946 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:48746 10 6452 1 2025-11-28 13:59:18.944 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48746 10 6452 1 2025-11-28 13:56:04.941 00:05:04.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:00:05.781 00:00:10.364 TCP 23.104.0.1:35346 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:00:05.781 00:00:10.364 TCP 23.104.0.1:35346 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:00:19.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47766 10 6452 1 2025-11-28 14:00:19.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47766 10 6452 1 2025-11-28 13:57:04.941 00:05:04.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:01:06.183 00:00:10.337 TCP 23.104.0.1:40154 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:01:06.183 00:00:10.337 TCP 23.104.0.1:40154 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:01:19.390 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57926 10 6452 1 2025-11-28 14:01:19.391 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57926 10 6452 1 2025-11-28 14:02:06.560 00:00:10.326 TCP 23.104.0.1:57932 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:02:06.560 00:00:10.326 TCP 23.104.0.1:57932 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:02:19.602 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52008 10 6452 1 2025-11-28 14:02:19.602 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52008 10 6452 1 2025-11-28 14:03:06.928 00:00:10.361 TCP 23.104.0.1:36670 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:03:06.927 00:00:10.361 TCP 23.104.0.1:36670 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:03:19.810 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39416 10 6452 1 2025-11-28 14:03:19.809 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39416 10 6452 1 2025-11-28 14:00:04.941 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:00:04.940 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:04:11.570 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:04:11.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:04:11.569 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:04:07.354 00:00:10.322 TCP 23.104.0.1:42318 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:04:11.712 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:04:07.354 00:00:10.322 TCP 23.104.0.1:42318 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:04:20.013 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58600 10 6452 1 2025-11-28 14:04:20.014 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58600 10 6452 1 2025-11-28 14:05:07.717 00:00:10.386 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:05:07.717 00:00:10.386 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:05:20.224 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36936 10 6452 1 2025-11-28 14:05:20.225 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36936 10 6452 1 2025-11-28 14:02:04.944 00:05:04.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:06:08.143 00:00:10.363 TCP 23.104.0.1:35442 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:06:08.143 00:00:10.362 TCP 23.104.0.1:35442 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:06:20.445 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51570 10 6452 1 2025-11-28 14:06:20.444 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51570 10 6452 1 2025-11-28 14:03:04.944 00:05:04.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:07:08.544 00:00:10.363 TCP 23.104.0.1:52556 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:07:08.544 00:00:10.363 TCP 23.104.0.1:52556 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:07:20.653 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-11-28 14:07:20.652 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-11-28 14:08:08.943 00:00:10.330 TCP 23.104.0.1:42606 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:08:08.943 00:00:10.330 TCP 23.104.0.1:42606 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:08:20.830 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60616 10 6452 1 2025-11-28 14:08:20.829 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60616 10 6452 1 2025-11-28 14:09:11.645 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:09:11.645 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:09:11.651 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:09:09.312 00:00:10.326 TCP 23.104.0.1:56828 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:09:11.651 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:09:09.313 00:00:10.326 TCP 23.104.0.1:56828 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:09:21.055 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41442 10 6452 1 2025-11-28 14:09:21.056 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41442 10 6452 1 2025-11-28 14:06:04.944 00:05:04.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:06:04.944 00:05:04.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:10:09.677 00:00:10.684 TCP 23.104.0.1:55280 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:10:09.675 00:00:10.684 TCP 23.104.0.1:55280 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:10:21.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34014 10 6452 1 2025-11-28 14:10:21.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34014 10 6452 1 2025-11-28 14:11:10.403 00:00:10.366 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:11:10.402 00:00:10.366 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:11:21.433 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37194 10 6452 1 2025-11-28 14:11:21.433 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37194 10 6452 1 2025-11-28 14:08:04.947 00:05:04.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:12:10.801 00:00:10.331 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:12:10.802 00:00:10.331 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:12:21.649 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60588 10 6452 1 2025-11-28 14:12:21.648 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60588 10 6452 1 2025-11-28 14:09:04.947 00:05:04.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:13:11.165 00:00:10.368 TCP 23.104.0.1:51602 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:13:11.165 00:00:10.367 TCP 23.104.0.1:51602 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:13:21.872 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47282 10 6452 1 2025-11-28 14:13:21.871 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47282 10 6452 1 2025-11-28 14:14:11.852 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:14:11.870 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:14:11.852 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:14:11.871 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:14:11.573 00:00:10.324 TCP 23.104.0.1:41702 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:14:11.574 00:00:10.324 TCP 23.104.0.1:41702 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:14:22.109 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36126 10 6452 1 2025-11-28 14:14:22.110 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36126 10 6452 1 2025-11-28 14:15:11.938 00:00:10.379 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:15:11.938 00:00:10.379 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:15:22.320 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52990 10 6452 1 2025-11-28 14:15:22.319 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52990 10 6452 1 2025-11-28 14:12:04.944 00:05:04.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:12:04.945 00:05:04.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:16:12.355 00:00:10.374 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:16:12.354 00:00:10.374 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:16:22.537 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46122 10 6452 1 2025-11-28 14:16:22.537 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46122 10 6452 1 2025-11-28 14:17:12.763 00:00:10.373 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:17:12.764 00:00:10.373 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:17:22.750 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40592 10 6452 1 2025-11-28 14:17:22.749 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40592 10 6452 1 2025-11-28 14:14:04.949 00:05:04.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:18:13.174 00:00:10.367 TCP 23.104.0.1:53946 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:18:13.175 00:00:10.367 TCP 23.104.0.1:53946 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:18:22.964 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50106 12 6556 1 2025-11-28 14:18:22.964 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50106 12 6556 1 2025-11-28 14:19:11.511 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:15:04.948 00:05:04.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:19:11.805 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:19:11.805 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:19:11.511 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:19:13.576 00:00:10.365 TCP 23.104.0.1:49934 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:19:13.577 00:00:10.365 TCP 23.104.0.1:49934 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:19:23.197 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6452 1 2025-11-28 14:19:23.199 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6452 1 2025-11-28 14:20:13.982 00:00:10.370 TCP 23.104.0.1:39684 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:20:13.982 00:00:10.371 TCP 23.104.0.1:39684 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:20:23.423 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44170 10 6452 1 2025-11-28 14:20:23.423 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44170 10 6452 1 2025-11-28 14:21:14.390 00:00:10.363 TCP 23.104.0.1:51636 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:21:14.391 00:00:10.363 TCP 23.104.0.1:51636 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:21:23.645 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52426 12 10375 1 2025-11-28 14:21:23.647 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52426 12 10375 1 2025-11-28 14:18:04.946 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:18:04.946 00:05:04.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:22:14.787 00:00:10.431 TCP 23.104.0.1:34768 -> 1.101.0.1:3000 15 1926 1 2025-11-28 14:22:14.789 00:00:10.430 TCP 23.104.0.1:34768 -> 1.101.0.1:3000 15 1926 1 2025-11-28 14:22:23.882 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58556 10 6452 1 2025-11-28 14:22:23.881 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58556 10 6452 1 2025-11-28 14:23:15.259 00:00:10.365 TCP 23.104.0.1:38454 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:23:15.260 00:00:10.364 TCP 23.104.0.1:38454 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:23:24.101 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44030 10 6452 1 2025-11-28 14:23:24.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44030 10 6452 1 2025-11-28 14:20:04.948 00:05:04.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:24:12.059 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:24:11.979 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:24:11.979 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:24:12.059 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:24:15.662 00:00:10.368 TCP 23.104.0.1:37828 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:24:15.662 00:00:10.367 TCP 23.104.0.1:37828 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:24:24.314 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58804 10 6452 1 2025-11-28 14:24:24.313 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58804 10 6452 1 2025-11-28 14:21:04.949 00:05:04.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:25:16.093 00:00:10.369 TCP 23.104.0.1:37780 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:25:16.093 00:00:10.369 TCP 23.104.0.1:37780 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:25:24.487 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44242 10 6452 1 2025-11-28 14:25:24.488 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44242 10 6452 1 2025-11-28 14:26:16.499 00:00:10.365 TCP 23.104.0.1:41386 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:26:16.498 00:00:10.365 TCP 23.104.0.1:41386 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:26:24.700 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38514 10 6452 1 2025-11-28 14:26:24.700 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38514 10 6452 1 2025-11-28 14:27:16.903 00:00:10.363 TCP 23.104.0.1:58922 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:27:16.901 00:00:10.363 TCP 23.104.0.1:58922 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:27:24.913 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50306 10 6452 1 2025-11-28 14:27:24.912 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50306 10 6452 1 2025-11-28 14:24:04.949 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:24:04.947 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:28:17.305 00:00:10.365 TCP 23.104.0.1:48920 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:28:17.305 00:00:10.364 TCP 23.104.0.1:48920 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:28:25.131 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33964 10 6452 1 2025-11-28 14:28:25.132 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33964 10 6452 1 2025-11-28 14:29:12.159 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:29:11.909 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:29:11.909 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:29:12.160 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:29:17.711 00:00:10.334 TCP 23.104.0.1:35230 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:29:17.710 00:00:10.335 TCP 23.104.0.1:35230 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:29:25.301 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36064 10 6452 1 2025-11-28 14:29:25.301 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36064 10 6452 1 2025-11-28 14:26:04.951 00:05:04.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:30:18.104 00:00:10.365 TCP 23.104.0.1:39882 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:30:18.103 00:00:10.365 TCP 23.104.0.1:39882 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:30:25.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39912 10 6452 1 2025-11-28 14:30:25.511 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39912 10 6452 1 2025-11-28 14:27:04.951 00:05:04.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:31:18.510 00:00:10.363 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:31:18.509 00:00:10.364 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:31:25.732 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42836 10 6452 1 2025-11-28 14:31:25.731 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42836 10 6452 1 2025-11-28 14:32:18.911 00:00:10.363 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:32:18.910 00:00:10.362 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:32:25.917 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51460 10 6452 1 2025-11-28 14:32:25.918 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51460 10 6452 1 2025-11-28 14:33:19.316 00:00:10.363 TCP 23.104.0.1:37574 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:33:19.315 00:00:10.362 TCP 23.104.0.1:37574 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:33:26.133 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-11-28 14:33:26.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-11-28 14:30:04.950 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:34:12.203 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:34:12.306 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:30:04.950 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:34:12.308 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:34:12.203 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:34:19.716 00:00:10.384 TCP 23.104.0.1:35880 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:34:19.716 00:00:10.385 TCP 23.104.0.1:35880 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:34:26.343 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50878 10 6452 1 2025-11-28 14:34:26.343 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50878 10 6452 1 2025-11-28 14:35:20.146 00:00:10.363 TCP 23.104.0.1:35166 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:35:20.146 00:00:10.363 TCP 23.104.0.1:35166 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:35:26.516 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41584 10 6452 1 2025-11-28 14:35:26.517 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41584 10 6452 1 2025-11-28 14:32:04.952 00:05:04.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:36:20.551 00:00:10.364 TCP 23.104.0.1:45542 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:36:20.550 00:00:10.364 TCP 23.104.0.1:45542 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:36:26.688 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34936 10 6452 1 2025-11-28 14:36:26.688 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34936 10 6452 1 2025-11-28 14:33:04.952 00:05:04.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:37:20.954 00:00:10.365 TCP 23.104.0.1:49106 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:37:20.955 00:00:10.365 TCP 23.104.0.1:49106 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:37:26.904 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39380 10 6452 1 2025-11-28 14:37:26.906 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39380 10 6452 1 2025-11-28 14:38:21.360 00:00:10.362 TCP 23.104.0.1:41778 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:38:21.360 00:00:10.362 TCP 23.104.0.1:41778 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:38:27.119 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58030 10 6452 1 2025-11-28 14:38:27.119 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58030 10 6452 1 2025-11-28 14:39:12.287 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:39:11.951 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:39:12.287 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:39:11.951 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:39:21.762 00:00:10.375 TCP 23.104.0.1:45744 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:39:21.761 00:00:10.376 TCP 23.104.0.1:45744 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:39:27.333 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49788 10 6452 1 2025-11-28 14:39:27.334 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49788 10 6452 1 2025-11-28 14:36:04.952 00:05:04.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:36:04.951 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:40:22.178 00:00:10.367 TCP 23.104.0.1:54486 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:40:22.178 00:00:10.367 TCP 23.104.0.1:54486 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:40:27.548 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59674 10 6452 1 2025-11-28 14:40:27.547 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59674 10 6452 1 2025-11-28 14:41:22.584 00:00:10.367 TCP 23.104.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:41:22.584 00:00:10.368 TCP 23.104.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:41:27.722 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49984 10 6452 1 2025-11-28 14:41:27.722 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49984 10 6452 1 2025-11-28 14:38:04.955 00:05:04.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:42:22.989 00:00:10.324 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:42:22.990 00:00:10.324 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:42:27.936 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:35240 13 6608 1 2025-11-28 14:42:27.936 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:35240 13 6608 1 2025-11-28 14:39:04.956 00:05:04.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:43:23.355 00:00:10.360 TCP 23.104.0.1:53160 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:43:23.353 00:00:10.360 TCP 23.104.0.1:53160 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:43:28.227 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57234 10 6452 1 2025-11-28 14:43:28.227 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57234 10 6452 1 2025-11-28 14:44:12.424 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:44:12.475 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:44:12.422 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:44:12.475 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:44:23.755 00:00:10.348 TCP 23.104.0.1:60566 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:44:23.756 00:00:10.348 TCP 23.104.0.1:60566 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:44:28.439 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47252 10 6452 1 2025-11-28 14:44:28.439 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47252 10 6452 1 2025-11-28 14:45:24.138 00:00:10.363 TCP 23.104.0.1:35992 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:45:24.140 00:00:10.362 TCP 23.104.0.1:35992 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:45:28.646 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57248 10 6452 1 2025-11-28 14:45:28.646 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57248 10 6452 1 2025-11-28 14:42:04.954 00:05:04.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:42:04.954 00:05:04.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:46:24.540 00:00:10.369 TCP 23.104.0.1:58040 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:46:24.540 00:00:10.368 TCP 23.104.0.1:58040 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:46:28.825 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33710 10 6452 1 2025-11-28 14:46:28.825 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33710 10 6452 1 2025-11-28 14:47:24.948 00:00:10.368 TCP 23.104.0.1:58668 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:47:29.049 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42578 10 6452 1 2025-11-28 14:47:24.948 00:00:10.368 TCP 23.104.0.1:58668 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:47:29.049 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42578 10 6452 1 2025-11-28 14:44:04.956 00:05:04.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:48:25.354 00:00:10.364 TCP 23.104.0.1:37110 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:48:25.355 00:00:10.364 TCP 23.104.0.1:37110 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:48:29.265 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39992 10 6452 1 2025-11-28 14:48:29.266 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39992 10 6452 1 2025-11-28 14:49:12.461 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:49:12.415 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:45:04.957 00:05:04.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:49:12.461 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:49:12.417 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:49:25.754 00:00:10.369 TCP 23.104.0.1:54054 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:49:29.482 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37930 10 6452 1 2025-11-28 14:49:25.755 00:00:10.369 TCP 23.104.0.1:54054 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:49:29.483 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37930 10 6452 1 2025-11-28 14:50:29.696 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38338 10 6452 1 2025-11-28 14:50:26.160 00:00:10.322 TCP 23.104.0.1:42840 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:50:29.696 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38338 10 6452 1 2025-11-28 14:50:26.161 00:00:10.322 TCP 23.104.0.1:42840 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:51:26.518 00:00:10.370 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:51:26.517 00:00:10.370 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:51:29.909 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:53352 10 6452 1 2025-11-28 14:51:29.910 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:53352 10 6452 1 2025-11-28 14:48:04.957 00:05:04.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:48:04.957 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:52:26.925 00:00:10.395 TCP 23.104.0.1:59352 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:52:30.096 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58184 10 6452 1 2025-11-28 14:52:26.925 00:00:10.395 TCP 23.104.0.1:59352 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:52:30.095 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58184 10 6452 1 2025-11-28 14:53:27.359 00:00:10.363 TCP 23.104.0.1:52394 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:53:27.359 00:00:10.363 TCP 23.104.0.1:52394 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:53:30.307 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36098 10 6452 1 2025-11-28 14:53:30.308 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36098 10 6452 1 2025-11-28 14:54:12.368 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:54:12.477 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:54:12.477 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:50:04.958 00:05:04.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:54:12.369 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:54:27.767 00:00:10.380 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:54:30.526 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45802 10 6452 1 2025-11-28 14:54:27.766 00:00:10.381 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:54:30.526 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45802 10 6452 1 2025-11-28 14:51:04.958 00:05:04.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:55:28.187 00:00:10.362 TCP 23.104.0.1:45868 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:55:30.703 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35594 10 6452 1 2025-11-28 14:55:28.186 00:00:10.362 TCP 23.104.0.1:45868 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:55:30.702 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35594 10 6452 1 2025-11-28 14:56:28.592 00:00:10.438 TCP 23.104.0.1:54704 -> 1.101.0.1:3000 15 1926 1 2025-11-28 14:56:28.592 00:00:10.438 TCP 23.104.0.1:54704 -> 1.101.0.1:3000 15 1926 1 2025-11-28 14:56:30.914 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:32884 12 10369 1 2025-11-28 14:56:30.914 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:32884 12 10369 1 2025-11-28 14:57:29.093 00:00:10.365 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:57:29.093 00:00:10.365 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:57:31.162 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42214 10 6452 1 2025-11-28 14:57:31.162 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42214 10 6452 1 2025-11-28 14:54:04.956 00:05:04.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:54:04.957 00:05:04.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:58:29.490 00:00:10.372 TCP 23.104.0.1:39396 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:58:29.490 00:00:10.372 TCP 23.104.0.1:39396 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:58:31.373 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60750 10 6452 1 2025-11-28 14:58:31.373 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60750 10 6452 1 Summary: total flows: 328, total bytes: 1.0 M, total packets: 3178, avg bps: 2144, avg pps: 0, avg bpp: 319 Time window: 2025-11-28 13:56:04 - 2025-11-28 14:59:09 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0054s User: 0.0027s Wall: 0.0043s flows/second: 76994.2 Runtime: 0.0043s