Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 19:58:43.794 00:00:10.360 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-11-25 19:58:43.794 00:00:10.360 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-11-25 19:59:11.041 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-11-25 19:59:11.040 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-11-25 19:59:44.196 00:00:10.361 TCP 23.104.0.1:56208 -> 1.101.0.1:3000 11 1507 1 2025-11-25 19:59:44.196 00:00:10.362 TCP 23.104.0.1:56208 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:00:11.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55790 10 6452 1 2025-11-25 20:00:11.249 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55790 10 6452 1 2025-11-25 20:00:44.594 00:00:10.326 TCP 23.104.0.1:48644 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:00:44.595 00:00:10.325 TCP 23.104.0.1:48644 -> 1.101.0.1:3000 11 1507 1 2025-11-25 19:57:03.720 00:05:04.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 19:57:03.721 00:05:04.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:01:11.463 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40418 10 6452 1 2025-11-25 20:01:11.462 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40418 10 6452 1 2025-11-25 20:01:44.958 00:00:10.365 TCP 23.104.0.1:46750 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:01:44.958 00:00:10.365 TCP 23.104.0.1:46750 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:02:11.672 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57174 10 6452 1 2025-11-25 20:02:11.673 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57174 10 6452 1 2025-11-25 20:02:52.200 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:02:52.465 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:02:52.463 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:02:52.199 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:02:45.363 00:00:10.370 TCP 23.104.0.1:40072 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:02:45.363 00:00:10.371 TCP 23.104.0.1:40072 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:03:11.880 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48500 10 6452 1 2025-11-25 20:03:11.881 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48500 10 6452 1 2025-11-25 20:03:45.768 00:00:10.364 TCP 23.104.0.1:53204 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:03:45.768 00:00:10.365 TCP 23.104.0.1:53204 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:00:03.718 00:05:04.347 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:00:03.717 00:05:04.347 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:04:12.109 00:00:11.045 TCP 1.101.0.1:3000 -> 22.102.0.1:56736 10 6452 1 2025-11-25 20:04:12.109 00:00:11.046 TCP 1.101.0.1:3000 -> 22.102.0.1:56736 10 6452 1 2025-11-25 20:04:46.169 00:00:10.321 TCP 23.104.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:04:46.170 00:00:10.321 TCP 23.104.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:05:13.189 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51170 10 6452 1 2025-11-25 20:05:13.189 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51170 10 6452 1 2025-11-25 20:05:46.531 00:00:10.366 TCP 23.104.0.1:57878 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:05:46.531 00:00:10.367 TCP 23.104.0.1:57878 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:06:13.408 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:47138 10 6452 1 2025-11-25 20:06:13.407 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:47138 10 6452 1 2025-11-25 20:06:46.936 00:00:10.382 TCP 23.104.0.1:40594 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:06:46.936 00:00:10.382 TCP 23.104.0.1:40594 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:03:03.723 00:05:04.341 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:03:03.722 00:05:04.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:07:13.626 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44822 10 6452 1 2025-11-25 20:07:13.626 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44822 10 6452 1 2025-11-25 20:07:52.259 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:07:52.259 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:07:51.988 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:07:51.988 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:07:47.356 00:00:10.325 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:07:47.357 00:00:10.325 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:08:13.853 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-11-25 20:08:13.854 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-11-25 20:08:47.722 00:00:10.387 TCP 23.104.0.1:38574 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:08:47.722 00:00:10.388 TCP 23.104.0.1:38574 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:09:14.088 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 6452 1 2025-11-25 20:09:14.088 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 6452 1 2025-11-25 20:09:48.146 00:00:10.369 TCP 23.104.0.1:48136 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:09:48.147 00:00:10.369 TCP 23.104.0.1:48136 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:06:03.721 00:05:04.346 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:06:03.722 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:10:14.310 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58238 10 6452 1 2025-11-25 20:10:14.310 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58238 10 6452 1 2025-11-25 20:10:48.552 00:00:10.322 TCP 23.104.0.1:44070 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:10:48.553 00:00:10.322 TCP 23.104.0.1:44070 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:11:14.536 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44886 10 6452 1 2025-11-25 20:11:14.536 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44886 10 6452 1 2025-11-25 20:11:48.912 00:00:10.378 TCP 23.104.0.1:50426 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:11:48.913 00:00:10.378 TCP 23.104.0.1:50426 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:12:14.753 00:00:10.777 TCP 1.101.0.1:3000 -> 22.102.0.1:40754 11 6504 1 2025-11-25 20:12:14.753 00:00:10.776 TCP 1.101.0.1:3000 -> 22.102.0.1:40754 11 6504 1 2025-11-25 20:12:52.297 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:12:52.348 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:12:52.348 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:12:52.298 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:12:49.322 00:00:11.046 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:12:49.322 00:00:11.047 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:09:03.723 00:05:04.341 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:09:03.723 00:05:04.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:13:15.571 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43596 10 6452 1 2025-11-25 20:13:15.570 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43596 10 6452 1 2025-11-25 20:13:50.418 00:00:10.320 TCP 23.104.0.1:46930 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:13:50.416 00:00:10.321 TCP 23.104.0.1:46930 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:14:15.746 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52238 10 6452 1 2025-11-25 20:14:15.745 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52238 10 6452 1 2025-11-25 20:14:50.778 00:00:10.366 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:14:50.778 00:00:10.366 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:15:15.962 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34894 12 6556 1 2025-11-25 20:15:15.964 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34894 12 6556 1 2025-11-25 20:15:51.191 00:00:10.364 TCP 23.104.0.1:39374 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:15:51.192 00:00:10.363 TCP 23.104.0.1:39374 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:12:03.722 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:12:03.722 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:16:16.198 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33176 10 6452 1 2025-11-25 20:16:16.196 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33176 10 6452 1 2025-11-25 20:16:51.591 00:00:10.330 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:16:51.591 00:00:10.330 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:17:16.407 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-11-25 20:17:16.407 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-11-25 20:17:52.427 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:17:52.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:17:52.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:17:52.372 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:17:51.966 00:00:10.336 TCP 23.104.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:17:51.967 00:00:10.336 TCP 23.104.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:18:16.618 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58556 10 6452 1 2025-11-25 20:18:16.617 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58556 10 6452 1 2025-11-25 20:18:52.339 00:00:10.321 TCP 23.104.0.1:49596 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:18:52.339 00:00:10.321 TCP 23.104.0.1:49596 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:15:03.728 00:05:04.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:15:03.728 00:05:04.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:19:16.830 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56862 10 6452 1 2025-11-25 20:19:16.831 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56862 10 6452 1 2025-11-25 20:19:52.696 00:00:10.372 TCP 23.104.0.1:36356 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:19:52.696 00:00:10.372 TCP 23.104.0.1:36356 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:20:17.071 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 10 6452 1 2025-11-25 20:20:17.071 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 10 6452 1 2025-11-25 20:20:53.107 00:00:10.372 TCP 23.104.0.1:55438 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:20:53.106 00:00:10.373 TCP 23.104.0.1:55438 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:21:17.283 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 10 6452 1 2025-11-25 20:21:17.282 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 10 6452 1 2025-11-25 20:21:53.519 00:00:10.370 TCP 23.104.0.1:52096 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:21:53.519 00:00:10.371 TCP 23.104.0.1:52096 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:18:03.724 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:18:03.724 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:22:17.497 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57214 10 6452 1 2025-11-25 20:22:17.497 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57214 10 6452 1 2025-11-25 20:22:52.599 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:22:52.592 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:22:52.600 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:22:52.591 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:22:53.930 00:00:10.328 TCP 23.104.0.1:34148 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:22:53.930 00:00:10.329 TCP 23.104.0.1:34148 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:23:17.710 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33022 10 6452 1 2025-11-25 20:23:17.709 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33022 10 6452 1 2025-11-25 20:23:54.296 00:00:10.374 TCP 23.104.0.1:50074 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:23:54.297 00:00:10.374 TCP 23.104.0.1:50074 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:24:17.878 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47030 10 6452 1 2025-11-25 20:24:17.878 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47030 10 6452 1 2025-11-25 20:24:54.707 00:00:10.365 TCP 23.104.0.1:53000 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:21:03.729 00:05:04.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:24:54.708 00:00:10.366 TCP 23.104.0.1:53000 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:21:03.728 00:05:04.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:25:18.101 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50864 10 6452 1 2025-11-25 20:25:18.101 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50864 10 6452 1 2025-11-25 20:25:55.108 00:00:10.363 TCP 23.104.0.1:50324 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:25:55.108 00:00:10.362 TCP 23.104.0.1:50324 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:26:18.278 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54218 10 6452 1 2025-11-25 20:26:18.277 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54218 10 6452 1 2025-11-25 20:26:55.510 00:00:10.368 TCP 23.104.0.1:49156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:26:55.512 00:00:10.368 TCP 23.104.0.1:49156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:27:18.504 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:37498 10 6452 1 2025-11-25 20:27:18.504 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:37498 10 6452 1 2025-11-25 20:27:52.911 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:27:52.745 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:27:52.910 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:27:52.745 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:24:03.727 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:27:55.915 00:00:10.326 TCP 23.104.0.1:46802 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:24:03.726 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:27:55.914 00:00:10.327 TCP 23.104.0.1:46802 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:28:18.688 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-11-25 20:28:18.688 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-11-25 20:28:56.272 00:00:10.367 TCP 23.104.0.1:47444 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:28:56.272 00:00:10.367 TCP 23.104.0.1:47444 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:29:18.901 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33844 10 6452 1 2025-11-25 20:29:18.900 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33844 10 6452 1 2025-11-25 20:29:56.674 00:00:10.363 TCP 23.104.0.1:41612 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:29:56.674 00:00:10.362 TCP 23.104.0.1:41612 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:30:19.115 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44014 10 6452 1 2025-11-25 20:30:19.116 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44014 10 6452 1 2025-11-25 20:27:03.730 00:05:04.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:30:57.104 00:00:10.362 TCP 23.104.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:27:03.730 00:05:04.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:30:57.103 00:00:10.363 TCP 23.104.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:31:19.292 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 10 6452 1 2025-11-25 20:31:19.294 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 10 6452 1 2025-11-25 20:31:57.506 00:00:10.373 TCP 23.104.0.1:46040 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:31:57.507 00:00:10.373 TCP 23.104.0.1:46040 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:32:19.483 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 10 6452 1 2025-11-25 20:32:19.483 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 10 6452 1 2025-11-25 20:32:52.587 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:32:52.635 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:32:52.635 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:32:52.587 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:32:57.918 00:00:10.384 TCP 23.104.0.1:45094 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:32:57.917 00:00:10.384 TCP 23.104.0.1:45094 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:33:19.706 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38806 10 6452 1 2025-11-25 20:33:19.704 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38806 10 6452 1 2025-11-25 20:33:58.344 00:00:10.368 TCP 23.104.0.1:60456 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:30:03.729 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:30:03.728 00:05:04.344 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:33:58.344 00:00:10.368 TCP 23.104.0.1:60456 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:34:19.933 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59260 10 6452 1 2025-11-25 20:34:19.933 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59260 10 6452 1 2025-11-25 20:34:58.753 00:00:10.370 TCP 23.104.0.1:43774 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:34:58.753 00:00:10.369 TCP 23.104.0.1:43774 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:35:20.179 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 10 6452 1 2025-11-25 20:35:20.179 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 10 6452 1 2025-11-25 20:35:59.165 00:00:10.320 TCP 23.104.0.1:44202 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:35:59.166 00:00:10.320 TCP 23.104.0.1:44202 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:36:20.356 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35716 10 6452 1 2025-11-25 20:36:20.356 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35716 10 6452 1 2025-11-25 20:33:03.732 00:05:04.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:36:59.525 00:00:10.366 TCP 23.104.0.1:52572 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:33:03.731 00:05:04.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:36:59.525 00:00:10.366 TCP 23.104.0.1:52572 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:37:20.586 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57742 10 6452 1 2025-11-25 20:37:20.586 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57742 10 6452 1 2025-11-25 20:37:53.004 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:37:52.924 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:37:52.923 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:37:53.004 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:37:59.931 00:00:10.380 TCP 23.104.0.1:54922 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:37:59.929 00:00:10.380 TCP 23.104.0.1:54922 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:38:20.804 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41246 10 6452 1 2025-11-25 20:38:20.803 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41246 10 6452 1 2025-11-25 20:39:00.348 00:00:10.322 TCP 23.104.0.1:49248 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:39:00.347 00:00:10.322 TCP 23.104.0.1:49248 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:39:21.032 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60702 10 6452 1 2025-11-25 20:39:21.033 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60702 10 6452 1 2025-11-25 20:36:03.730 00:05:04.347 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:36:03.729 00:05:04.347 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:40:00.719 00:00:10.381 TCP 23.104.0.1:47050 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:40:00.718 00:00:10.381 TCP 23.104.0.1:47050 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:40:21.261 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-11-25 20:40:21.260 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-11-25 20:41:01.143 00:00:10.329 TCP 23.104.0.1:39258 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:41:01.142 00:00:10.329 TCP 23.104.0.1:39258 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:41:21.472 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34866 10 6452 1 2025-11-25 20:41:21.472 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34866 10 6452 1 2025-11-25 20:42:01.531 00:00:10.366 TCP 23.104.0.1:56872 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:42:01.531 00:00:10.365 TCP 23.104.0.1:56872 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:42:21.680 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-11-25 20:42:21.680 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-11-25 20:42:52.730 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:42:52.844 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:42:52.842 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:42:52.730 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:39:03.734 00:05:04.341 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:39:03.733 00:05:04.342 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:43:01.930 00:00:10.341 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:43:01.932 00:00:10.341 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:43:21.893 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:53366 11 6504 1 2025-11-25 20:43:21.893 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:53366 11 6504 1 2025-11-25 20:44:02.313 00:00:10.369 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:44:02.313 00:00:10.369 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:44:22.166 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48548 10 6452 1 2025-11-25 20:44:22.166 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48548 10 6452 1 2025-11-25 20:45:02.720 00:00:10.378 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:45:02.719 00:00:10.378 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:45:22.332 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60542 10 6452 1 2025-11-25 20:45:22.332 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60542 10 6452 1 2025-11-25 20:42:03.731 00:05:04.347 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:42:03.731 00:05:04.347 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:46:03.125 00:00:10.365 TCP 23.104.0.1:34168 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:46:03.125 00:00:10.365 TCP 23.104.0.1:34168 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:46:22.543 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-11-25 20:46:22.543 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-11-25 20:47:03.531 00:00:10.330 TCP 23.104.0.1:47496 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:47:03.532 00:00:10.330 TCP 23.104.0.1:47496 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:47:22.768 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58464 10 6452 1 2025-11-25 20:47:22.768 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58464 10 6452 1 2025-11-25 20:47:53.156 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:47:52.760 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:47:52.759 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:47:53.156 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:48:03.906 00:00:10.324 TCP 23.104.0.1:44220 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:48:03.906 00:00:10.325 TCP 23.104.0.1:44220 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:48:22.988 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-11-25 20:48:22.988 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-11-25 20:45:03.734 00:05:04.347 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:45:03.734 00:05:04.347 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:49:04.266 00:00:10.367 TCP 23.104.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:49:04.267 00:00:10.366 TCP 23.104.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:49:23.224 00:00:11.292 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-11-25 20:49:23.225 00:00:11.292 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-11-25 20:50:04.673 00:00:10.361 TCP 23.104.0.1:42876 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:50:04.672 00:00:10.361 TCP 23.104.0.1:42876 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:50:24.555 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44640 10 6452 1 2025-11-25 20:50:24.556 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44640 10 6452 1 2025-11-25 20:51:05.099 00:00:10.633 TCP 23.104.0.1:38240 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:51:05.100 00:00:10.632 TCP 23.104.0.1:38240 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:51:24.771 00:00:11.001 TCP 1.101.0.1:3000 -> 22.102.0.1:33946 10 6452 1 2025-11-25 20:51:24.771 00:00:11.002 TCP 1.101.0.1:3000 -> 22.102.0.1:33946 10 6452 1 2025-11-25 20:48:03.733 00:05:04.351 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:48:03.733 00:05:04.351 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:52:05.771 00:00:10.374 TCP 23.104.0.1:41564 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:52:05.771 00:00:10.374 TCP 23.104.0.1:41564 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:52:25.811 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39528 10 6452 1 2025-11-25 20:52:25.810 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39528 10 6452 1 2025-11-25 20:52:53.153 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:52:52.887 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:52:53.154 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:52:52.888 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:53:06.184 00:00:10.828 TCP 23.104.0.1:48952 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:53:06.183 00:00:10.828 TCP 23.104.0.1:48952 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:53:26.027 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:55286 10 6452 1 2025-11-25 20:53:26.028 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55286 10 6452 1 2025-11-25 20:54:07.059 00:00:10.360 TCP 23.104.0.1:54600 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:54:07.058 00:00:10.359 TCP 23.104.0.1:54600 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:54:26.274 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:42224 10 6452 1 2025-11-25 20:54:26.273 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:42224 10 6452 1 2025-11-25 20:51:03.737 00:05:04.345 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:51:03.736 00:05:04.345 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:55:07.459 00:00:10.364 TCP 23.104.0.1:60048 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:55:07.458 00:00:10.364 TCP 23.104.0.1:60048 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:55:26.523 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34944 10 6452 1 2025-11-25 20:55:26.524 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34944 10 6452 1 2025-11-25 20:56:07.859 00:00:10.449 TCP 23.104.0.1:58764 -> 1.101.0.1:3000 15 1926 1 2025-11-25 20:56:07.859 00:00:10.449 TCP 23.104.0.1:58764 -> 1.101.0.1:3000 15 1926 1 2025-11-25 20:56:26.744 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58860 12 10375 1 2025-11-25 20:56:26.745 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58860 12 10375 1 2025-11-25 20:57:08.348 00:00:10.357 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:57:08.348 00:00:10.356 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:57:26.983 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:60488 10 6452 1 2025-11-25 20:57:26.984 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:60488 10 6452 1 2025-11-25 20:57:53.090 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:57:53.044 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:57:53.090 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:57:53.044 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:54:03.733 00:05:04.351 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:54:03.733 00:05:04.351 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:58:08.745 00:00:10.365 TCP 23.104.0.1:59888 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:58:08.745 00:00:10.365 TCP 23.104.0.1:59888 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:58:27.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40170 10 6452 1 2025-11-25 20:58:27.180 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40170 10 6452 1 Summary: total flows: 328, total bytes: 1.0 M, total packets: 3164, avg bps: 2160, avg pps: 0, avg bpp: 317 Time window: 2025-11-25 19:57:03 - 2025-11-25 20:59:08 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0063s User: 0.0010s Wall: 0.0028s flows/second: 116144.5 Runtime: 0.0028s