Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 11:54:07.867 00:05:55.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 11:54:07.867 00:05:55.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 11:59:04.685 00:00:10.362 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-11-25 11:59:09.189 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55938 10 6452 1 2025-11-25 11:59:04.684 00:00:10.363 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-11-25 11:59:09.190 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55938 10 6452 1 2025-11-25 12:00:05.103 00:00:10.367 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:00:09.403 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59102 10 6452 1 2025-11-25 12:00:05.103 00:00:10.367 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:00:09.403 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59102 10 6452 1 2025-11-25 12:01:05.508 00:00:10.368 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:01:05.508 00:00:10.368 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:01:09.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35542 10 6452 1 2025-11-25 12:01:09.628 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35542 10 6452 1 2025-11-25 11:57:07.866 00:05:55.718 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 11:57:07.866 00:05:55.718 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:02:05.918 00:00:10.344 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:02:09.840 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40538 10 6452 1 2025-11-25 12:02:05.916 00:00:10.344 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:02:09.841 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40538 10 6452 1 2025-11-25 12:02:42.308 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:02:42.356 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:02:42.356 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:02:42.307 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:03:06.299 00:00:10.364 TCP 23.104.0.1:47740 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:03:06.300 00:00:10.363 TCP 23.104.0.1:47740 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:03:10.082 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-11-25 12:03:10.082 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-11-25 12:04:06.698 00:00:10.325 TCP 23.104.0.1:45890 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:04:10.298 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52814 10 6452 1 2025-11-25 12:04:06.697 00:00:10.324 TCP 23.104.0.1:45890 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:04:10.300 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52814 10 6452 1 2025-11-25 12:00:07.869 00:05:55.715 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:00:07.870 00:05:55.715 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:05:07.066 00:00:10.332 TCP 23.104.0.1:60786 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:05:10.523 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56442 10 6452 1 2025-11-25 12:05:07.066 00:00:10.331 TCP 23.104.0.1:60786 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:05:10.524 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56442 10 6452 1 2025-11-25 12:06:07.427 00:00:10.401 TCP 23.104.0.1:52278 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:06:10.752 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34880 12 10375 1 2025-11-25 12:06:07.428 00:00:10.401 TCP 23.104.0.1:52278 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:06:10.752 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34880 12 10375 1 2025-11-25 12:07:07.866 00:00:10.377 TCP 23.104.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:07:07.864 00:00:10.377 TCP 23.104.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:07:11.001 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37760 10 6452 1 2025-11-25 12:07:10.999 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37760 10 6452 1 2025-11-25 12:07:42.596 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:07:42.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:07:42.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:07:42.596 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:03:07.868 00:05:55.718 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:03:07.869 00:05:55.717 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:08:08.292 00:00:10.363 TCP 23.104.0.1:52072 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:08:08.293 00:00:10.363 TCP 23.104.0.1:52072 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:08:11.219 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45220 10 6452 1 2025-11-25 12:08:11.220 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45220 10 6452 1 2025-11-25 12:09:08.698 00:00:10.364 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:09:08.698 00:00:10.364 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:09:11.394 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46418 10 6452 1 2025-11-25 12:09:11.395 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46418 10 6452 1 2025-11-25 12:10:09.109 00:00:10.327 TCP 23.104.0.1:46030 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:10:09.108 00:00:10.327 TCP 23.104.0.1:46030 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:10:11.624 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-11-25 12:10:11.623 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-11-25 12:06:07.870 00:05:55.713 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:06:07.871 00:05:55.712 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:11:09.474 00:00:10.380 TCP 23.104.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:11:09.474 00:00:10.380 TCP 23.104.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:11:11.866 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38392 10 6452 1 2025-11-25 12:11:11.865 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38392 10 6452 1 2025-11-25 12:12:09.889 00:00:11.290 TCP 23.104.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:12:12.107 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39588 10 6452 1 2025-11-25 12:12:12.108 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39588 10 6452 1 2025-11-25 12:12:09.887 00:00:11.290 TCP 23.104.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:12:42.672 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:12:42.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:12:42.673 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:12:42.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:13:11.214 00:00:10.363 TCP 23.104.0.1:53046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:13:12.317 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 10 6452 1 2025-11-25 12:13:11.215 00:00:10.363 TCP 23.104.0.1:53046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:13:12.318 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 10 6452 1 2025-11-25 12:09:07.871 00:05:55.715 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:09:07.871 00:05:55.715 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:14:11.616 00:00:10.369 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:14:12.491 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 2025-11-25 12:14:11.616 00:00:10.369 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:14:12.491 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 2025-11-25 12:15:12.022 00:00:10.343 TCP 23.104.0.1:48678 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:15:12.710 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 10 6452 1 2025-11-25 12:15:12.711 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 10 6452 1 2025-11-25 12:15:12.023 00:00:10.342 TCP 23.104.0.1:48678 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:16:12.397 00:00:10.363 TCP 23.104.0.1:39180 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:16:12.885 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41992 10 6452 1 2025-11-25 12:16:12.884 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41992 10 6452 1 2025-11-25 12:16:12.398 00:00:10.362 TCP 23.104.0.1:39180 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:12:07.875 00:05:55.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:12:07.875 00:05:55.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:17:13.110 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57324 10 6452 1 2025-11-25 12:17:12.793 00:00:10.343 TCP 23.104.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:17:12.793 00:00:10.342 TCP 23.104.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:17:13.110 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57324 10 6452 1 2025-11-25 12:17:42.647 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:17:42.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:17:42.825 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:17:42.647 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:18:13.172 00:00:10.364 TCP 23.104.0.1:47808 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:18:13.333 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58818 10 6452 1 2025-11-25 12:18:13.333 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58818 10 6452 1 2025-11-25 12:18:13.172 00:00:10.364 TCP 23.104.0.1:47808 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:19:13.574 00:00:10.362 TCP 23.104.0.1:46046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:19:13.553 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49498 10 6452 1 2025-11-25 12:19:13.574 00:00:10.362 TCP 23.104.0.1:46046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:19:13.553 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49498 10 6452 1 2025-11-25 12:15:07.873 00:05:55.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:15:07.874 00:05:55.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:20:13.975 00:00:10.371 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:20:13.770 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60614 10 6452 1 2025-11-25 12:20:13.974 00:00:10.371 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:20:13.768 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60614 10 6452 1 2025-11-25 12:21:14.384 00:00:10.363 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:21:13.984 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:39274 10 6452 1 2025-11-25 12:21:13.983 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:39274 10 6452 1 2025-11-25 12:21:14.382 00:00:10.364 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:22:14.222 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54574 10 6452 1 2025-11-25 12:22:14.786 00:00:10.368 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:22:14.221 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54574 10 6452 1 2025-11-25 12:22:14.787 00:00:10.368 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:22:42.987 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:22:43.078 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:22:42.989 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:22:43.078 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:18:07.876 00:05:55.709 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:18:07.876 00:05:55.709 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:23:14.440 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43364 10 6452 1 2025-11-25 12:23:14.439 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43364 10 6452 1 2025-11-25 12:23:15.195 00:00:10.324 TCP 23.104.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:23:15.194 00:00:10.324 TCP 23.104.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:24:14.656 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34418 10 6452 1 2025-11-25 12:24:15.560 00:00:10.361 TCP 23.104.0.1:39078 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:24:14.655 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34418 10 6452 1 2025-11-25 12:24:15.560 00:00:10.361 TCP 23.104.0.1:39078 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:25:14.838 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35098 10 6452 1 2025-11-25 12:25:14.837 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35098 10 6452 1 2025-11-25 12:25:15.960 00:00:10.366 TCP 23.104.0.1:51074 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:25:15.959 00:00:10.367 TCP 23.104.0.1:51074 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:21:07.875 00:05:55.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:21:07.875 00:05:55.715 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:26:15.081 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:60282 10 6452 1 2025-11-25 12:26:16.358 00:00:10.364 TCP 23.104.0.1:36178 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:26:15.081 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:60282 10 6452 1 2025-11-25 12:26:16.358 00:00:10.363 TCP 23.104.0.1:36178 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:27:15.334 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52540 10 6452 1 2025-11-25 12:27:15.334 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52540 10 6452 1 2025-11-25 12:27:16.767 00:00:10.381 TCP 23.104.0.1:53852 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:27:16.767 00:00:10.380 TCP 23.104.0.1:53852 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:27:43.097 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:27:43.074 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:27:43.098 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:27:43.072 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:28:15.543 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42658 10 6452 1 2025-11-25 12:28:17.191 00:00:10.363 TCP 23.104.0.1:41570 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:28:15.543 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42658 10 6452 1 2025-11-25 12:28:17.191 00:00:10.363 TCP 23.104.0.1:41570 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:24:07.878 00:05:55.709 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:24:07.878 00:05:55.709 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:29:15.755 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44440 10 6452 1 2025-11-25 12:29:17.594 00:00:10.363 TCP 23.104.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:29:15.753 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44440 10 6452 1 2025-11-25 12:29:17.593 00:00:10.363 TCP 23.104.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:30:15.963 00:00:10.363 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-11-25 12:30:17.994 00:00:10.888 TCP 23.104.0.1:37496 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:30:15.965 00:00:10.362 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-11-25 12:30:17.996 00:00:10.889 TCP 23.104.0.1:37496 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:31:16.366 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:36428 10 6452 1 2025-11-25 12:31:18.921 00:00:10.387 TCP 23.104.0.1:55664 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:31:18.920 00:00:10.388 TCP 23.104.0.1:55664 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:31:16.366 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:36428 10 6452 1 2025-11-25 12:27:07.877 00:05:55.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:27:07.876 00:05:55.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:32:19.351 00:00:10.366 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:32:16.553 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56848 10 6452 1 2025-11-25 12:32:19.352 00:00:10.366 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:32:16.554 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56848 10 6452 1 2025-11-25 12:32:43.101 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:32:43.231 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:32:43.231 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:32:43.102 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:33:16.764 00:00:11.385 TCP 1.101.0.1:3000 -> 22.102.0.1:38732 10 6452 1 2025-11-25 12:33:19.755 00:00:10.692 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:33:16.764 00:00:11.385 TCP 1.101.0.1:3000 -> 22.102.0.1:38732 10 6452 1 2025-11-25 12:33:19.757 00:00:10.692 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:34:18.196 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47546 10 6452 1 2025-11-25 12:34:20.493 00:00:10.367 TCP 23.104.0.1:58770 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:34:18.198 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47546 10 6452 1 2025-11-25 12:34:20.493 00:00:10.367 TCP 23.104.0.1:58770 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:30:07.880 00:05:55.709 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:30:07.880 00:05:55.709 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:35:18.369 00:00:10.816 TCP 1.101.0.1:3000 -> 22.102.0.1:33082 10 6452 1 2025-11-25 12:35:18.368 00:00:10.816 TCP 1.101.0.1:3000 -> 22.102.0.1:33082 10 6452 1 2025-11-25 12:35:20.899 00:00:10.727 TCP 23.104.0.1:57750 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:35:20.898 00:00:10.727 TCP 23.104.0.1:57750 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:36:19.218 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:38592 12 10375 1 2025-11-25 12:36:19.218 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:38592 12 10375 1 2025-11-25 12:36:21.665 00:00:10.451 TCP 23.104.0.1:53370 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:36:21.663 00:00:10.451 TCP 23.104.0.1:53370 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:37:19.416 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37092 10 6452 1 2025-11-25 12:37:19.417 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37092 10 6452 1 2025-11-25 12:37:22.155 00:00:10.360 TCP 23.104.0.1:37486 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:37:22.154 00:00:10.360 TCP 23.104.0.1:37486 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:37:43.030 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:37:43.039 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:37:43.029 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:37:43.039 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:33:07.878 00:05:55.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:33:07.878 00:05:55.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:38:19.631 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 10 6452 1 2025-11-25 12:38:19.631 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 10 6452 1 2025-11-25 12:38:22.553 00:00:10.359 TCP 23.104.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:38:22.553 00:00:10.359 TCP 23.104.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:39:19.842 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33578 10 6452 1 2025-11-25 12:39:22.951 00:00:10.373 TCP 23.104.0.1:51720 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:39:19.842 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33578 10 6452 1 2025-11-25 12:39:22.951 00:00:10.373 TCP 23.104.0.1:51720 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:40:20.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52682 10 6452 1 2025-11-25 12:40:20.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52682 10 6452 1 2025-11-25 12:40:23.361 00:00:10.371 TCP 23.104.0.1:42646 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:40:23.362 00:00:10.371 TCP 23.104.0.1:42646 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:36:07.881 00:05:55.708 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:36:07.881 00:05:55.709 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:41:20.296 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-11-25 12:41:23.765 00:00:10.372 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:41:20.297 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-11-25 12:41:23.765 00:00:10.373 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:42:20.465 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37544 10 6452 1 2025-11-25 12:42:24.174 00:00:10.335 TCP 23.104.0.1:46776 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:42:20.465 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37544 10 6452 1 2025-11-25 12:42:24.175 00:00:10.335 TCP 23.104.0.1:46776 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:42:43.147 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:42:43.298 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:42:43.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:42:43.299 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:43:20.678 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59726 10 6452 1 2025-11-25 12:43:20.677 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59726 10 6452 1 2025-11-25 12:43:24.561 00:00:10.371 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:43:24.560 00:00:10.371 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:39:07.880 00:05:55.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:39:07.882 00:05:55.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:44:20.849 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:38524 10 6452 1 2025-11-25 12:44:20.850 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:38524 10 6452 1 2025-11-25 12:44:24.968 00:00:10.376 TCP 23.104.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:44:24.970 00:00:10.376 TCP 23.104.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:45:21.029 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46872 10 6452 1 2025-11-25 12:45:25.377 00:00:10.365 TCP 23.104.0.1:59556 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:45:21.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46872 10 6452 1 2025-11-25 12:45:25.377 00:00:10.364 TCP 23.104.0.1:59556 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:46:21.239 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38160 10 6452 1 2025-11-25 12:46:21.240 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38160 10 6452 1 2025-11-25 12:46:25.774 00:00:10.373 TCP 23.104.0.1:47404 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:46:25.774 00:00:10.373 TCP 23.104.0.1:47404 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:42:07.889 00:05:55.701 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:42:07.889 00:05:55.701 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:47:21.455 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43564 10 6452 1 2025-11-25 12:47:21.454 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43564 10 6452 1 2025-11-25 12:47:26.190 00:00:10.328 TCP 23.104.0.1:45128 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:47:43.616 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:47:26.192 00:00:10.327 TCP 23.104.0.1:45128 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:47:43.545 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:47:43.617 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:47:43.545 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:48:21.664 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47752 10 6452 1 2025-11-25 12:48:21.663 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47752 10 6452 1 2025-11-25 12:48:26.552 00:00:10.359 TCP 23.104.0.1:43062 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:48:26.551 00:00:10.359 TCP 23.104.0.1:43062 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:49:21.875 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35654 10 6452 1 2025-11-25 12:49:21.875 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35654 10 6452 1 2025-11-25 12:49:26.957 00:00:10.321 TCP 23.104.0.1:54406 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:49:26.957 00:00:10.322 TCP 23.104.0.1:54406 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:45:07.889 00:05:55.704 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:45:07.889 00:05:55.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:50:22.112 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6452 1 2025-11-25 12:50:22.112 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6452 1 2025-11-25 12:50:27.320 00:00:10.367 TCP 23.104.0.1:40990 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:50:27.319 00:00:10.367 TCP 23.104.0.1:40990 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:51:22.330 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37180 10 6452 1 2025-11-25 12:51:22.329 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37180 10 6452 1 2025-11-25 12:51:27.722 00:00:11.033 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:51:27.723 00:00:11.033 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:52:22.551 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59202 10 6452 1 2025-11-25 12:52:22.550 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59202 10 6452 1 2025-11-25 12:52:28.795 00:00:10.365 TCP 23.104.0.1:54648 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:52:43.567 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:52:28.794 00:00:10.366 TCP 23.104.0.1:54648 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:52:43.544 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:52:43.545 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:52:43.566 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:48:07.892 00:05:55.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:48:07.892 00:05:55.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:53:22.768 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35132 10 6452 1 2025-11-25 12:53:22.768 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35132 10 6452 1 2025-11-25 12:53:29.201 00:00:10.363 TCP 23.104.0.1:59094 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:53:29.202 00:00:10.363 TCP 23.104.0.1:59094 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:54:23.004 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53070 10 6452 1 2025-11-25 12:54:23.003 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53070 10 6452 1 2025-11-25 12:54:29.603 00:00:10.325 TCP 23.104.0.1:38466 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:54:29.605 00:00:10.324 TCP 23.104.0.1:38466 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:55:23.243 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 10 6452 1 2025-11-25 12:55:23.243 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 10 6452 1 2025-11-25 12:55:29.977 00:00:10.366 TCP 23.104.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:55:29.977 00:00:10.366 TCP 23.104.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:51:07.890 00:05:55.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:51:07.889 00:05:55.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:56:23.481 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:40898 12 10375 1 2025-11-25 12:56:23.481 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:40898 12 10375 1 2025-11-25 12:56:30.381 00:00:10.431 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:56:30.382 00:00:10.431 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:57:23.679 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47556 10 6452 1 2025-11-25 12:57:23.678 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47556 10 6452 1 2025-11-25 12:57:43.482 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:57:30.854 00:00:10.370 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:57:43.714 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:57:30.854 00:00:10.371 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:57:43.482 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:57:43.714 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:58:23.886 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51546 10 6452 1 2025-11-25 12:58:23.886 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51546 10 6452 1 2025-11-25 12:58:31.268 00:00:10.362 TCP 23.104.0.1:60538 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:58:31.270 00:00:10.362 TCP 23.104.0.1:60538 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 328, total bytes: 1.0 M, total packets: 3180, avg bps: 2112, avg pps: 0, avg bpp: 321 Time window: 2025-11-25 11:54:07 - 2025-11-25 12:58:41 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0057s User: 0.0009s Wall: 0.0034s flows/second: 96868.9 Runtime: 0.0034s