Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 17:58:44.273 00:00:10.328 TCP 23.104.0.1:34208 -> 1.101.0.1:3000 11 1507 1 2025-11-28 17:58:44.273 00:00:10.328 TCP 23.104.0.1:34208 -> 1.101.0.1:3000 11 1507 1 2025-11-28 17:59:16.422 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 17:59:16.419 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 17:59:16.419 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 17:59:16.421 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 17:59:18.358 00:00:10.523 TCP 1.101.0.1:3000 -> 22.102.0.1:36184 10 6452 1 2025-11-28 17:59:18.358 00:00:10.522 TCP 1.101.0.1:3000 -> 22.102.0.1:36184 10 6452 1 2025-11-28 17:59:44.641 00:00:10.322 TCP 23.104.0.1:41000 -> 1.101.0.1:3000 11 1507 1 2025-11-28 17:59:44.641 00:00:10.322 TCP 23.104.0.1:41000 -> 1.101.0.1:3000 11 1507 1 2025-11-28 17:55:09.630 00:05:55.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:00:18.921 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56698 10 6452 1 2025-11-28 18:00:18.920 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56698 10 6452 1 2025-11-28 18:00:45.003 00:00:10.375 TCP 23.104.0.1:49796 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:00:45.002 00:00:10.375 TCP 23.104.0.1:49796 -> 1.101.0.1:3000 11 1507 1 2025-11-28 17:57:05.044 00:05:04.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:01:19.138 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56916 10 6452 1 2025-11-28 18:01:19.139 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56916 10 6452 1 2025-11-28 18:01:45.418 00:00:10.370 TCP 23.104.0.1:42288 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:01:45.417 00:00:10.370 TCP 23.104.0.1:42288 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:02:19.354 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41310 10 6452 1 2025-11-28 18:02:19.353 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41310 10 6452 1 2025-11-28 18:02:45.827 00:00:10.324 TCP 23.104.0.1:42008 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:02:45.827 00:00:10.325 TCP 23.104.0.1:42008 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:03:19.528 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50834 10 6452 1 2025-11-28 18:03:19.528 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50834 10 6452 1 2025-11-28 18:03:46.192 00:00:10.365 TCP 23.104.0.1:41324 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:03:46.192 00:00:10.366 TCP 23.104.0.1:41324 -> 1.101.0.1:3000 11 1507 1 2025-11-28 17:59:09.633 00:05:55.408 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:00:05.040 00:05:04.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:04:16.601 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:04:16.582 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:04:16.581 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:04:16.601 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:04:19.745 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35122 10 6452 1 2025-11-28 18:04:19.745 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35122 10 6452 1 2025-11-28 18:04:46.597 00:00:10.363 TCP 23.104.0.1:38356 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:04:46.596 00:00:10.363 TCP 23.104.0.1:38356 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:05:19.952 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50248 10 6452 1 2025-11-28 18:05:19.953 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50248 10 6452 1 2025-11-28 18:05:46.998 00:00:10.377 TCP 23.104.0.1:54542 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:05:46.997 00:00:10.378 TCP 23.104.0.1:54542 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:01:09.631 00:05:55.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:06:20.187 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51084 10 6452 1 2025-11-28 18:06:20.186 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51084 10 6452 1 2025-11-28 18:06:47.416 00:00:10.380 TCP 23.104.0.1:54340 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:06:47.416 00:00:10.380 TCP 23.104.0.1:54340 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:03:05.044 00:05:04.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:07:20.402 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 10 6452 1 2025-11-28 18:07:20.402 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 10 6452 1 2025-11-28 18:07:47.831 00:00:10.387 TCP 23.104.0.1:39738 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:07:47.832 00:00:10.387 TCP 23.104.0.1:39738 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:08:20.632 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47004 10 6452 1 2025-11-28 18:08:20.632 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47004 10 6452 1 2025-11-28 18:08:48.255 00:00:10.325 TCP 23.104.0.1:39132 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:08:48.256 00:00:10.326 TCP 23.104.0.1:39132 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:09:16.431 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:09:16.359 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:09:16.357 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:09:16.431 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:09:20.859 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:47366 11 6504 1 2025-11-28 18:09:20.858 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:47366 11 6504 1 2025-11-28 18:09:48.621 00:00:10.360 TCP 23.104.0.1:56140 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:09:48.621 00:00:10.360 TCP 23.104.0.1:56140 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:05:09.634 00:05:55.413 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:06:05.041 00:05:04.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:10:21.144 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33662 10 6452 1 2025-11-28 18:10:21.145 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33662 10 6452 1 2025-11-28 18:10:49.017 00:00:10.811 TCP 23.104.0.1:47762 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:10:49.017 00:00:10.811 TCP 23.104.0.1:47762 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:11:21.368 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41326 10 6452 1 2025-11-28 18:11:21.368 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41326 10 6452 1 2025-11-28 18:11:49.869 00:00:10.367 TCP 23.104.0.1:37750 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:11:49.868 00:00:10.367 TCP 23.104.0.1:37750 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:07:09.631 00:05:55.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:12:21.576 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43578 10 6452 1 2025-11-28 18:12:21.577 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43578 10 6452 1 2025-11-28 18:12:50.282 00:00:10.323 TCP 23.104.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:12:50.281 00:00:10.323 TCP 23.104.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:09:05.050 00:05:04.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:13:21.791 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34318 10 6452 1 2025-11-28 18:13:21.789 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34318 10 6452 1 2025-11-28 18:13:50.643 00:00:10.360 TCP 23.104.0.1:42518 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:13:50.643 00:00:10.360 TCP 23.104.0.1:42518 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:14:16.383 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:14:16.517 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:14:16.382 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:14:16.517 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:14:21.997 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40578 10 6452 1 2025-11-28 18:14:21.996 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40578 10 6452 1 2025-11-28 18:14:51.055 00:00:10.375 TCP 23.104.0.1:42522 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:14:51.055 00:00:10.374 TCP 23.104.0.1:42522 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:15:22.218 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33994 10 6452 1 2025-11-28 18:15:22.218 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33994 10 6452 1 2025-11-28 18:15:51.467 00:00:10.323 TCP 23.104.0.1:37376 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:11:09.635 00:05:55.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:15:51.467 00:00:10.324 TCP 23.104.0.1:37376 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:12:05.047 00:05:04.590 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:16:22.394 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41976 10 6452 1 2025-11-28 18:16:22.394 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41976 10 6452 1 2025-11-28 18:16:51.827 00:00:10.362 TCP 23.104.0.1:51550 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:16:51.826 00:00:10.363 TCP 23.104.0.1:51550 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:17:22.603 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53578 10 6452 1 2025-11-28 18:17:22.604 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53578 10 6452 1 2025-11-28 18:17:52.227 00:00:10.366 TCP 23.104.0.1:52544 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:17:52.227 00:00:10.365 TCP 23.104.0.1:52544 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:13:09.633 00:05:55.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:18:22.818 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59570 10 6452 1 2025-11-28 18:18:22.818 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59570 10 6452 1 2025-11-28 18:18:52.630 00:00:10.328 TCP 23.104.0.1:42164 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:18:52.629 00:00:10.328 TCP 23.104.0.1:42164 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:15:05.053 00:05:04.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:19:16.469 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:19:16.814 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:19:16.468 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:19:16.814 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:19:23.037 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35824 10 6452 1 2025-11-28 18:19:23.037 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35824 10 6452 1 2025-11-28 18:19:52.998 00:00:10.357 TCP 23.104.0.1:59972 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:19:52.998 00:00:10.357 TCP 23.104.0.1:59972 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:20:23.252 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56382 10 6452 1 2025-11-28 18:20:23.251 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56382 10 6452 1 2025-11-28 18:20:53.400 00:00:10.369 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:20:53.399 00:00:10.369 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:21:23.469 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55712 10 6452 1 2025-11-28 18:21:23.469 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55712 10 6452 1 2025-11-28 18:21:53.805 00:00:10.344 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:17:09.637 00:05:55.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:21:53.807 00:00:10.343 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:18:05.050 00:05:04.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:22:23.681 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54922 10 6452 1 2025-11-28 18:22:23.682 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54922 10 6452 1 2025-11-28 18:22:54.189 00:00:10.357 TCP 23.104.0.1:50748 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:22:54.189 00:00:10.358 TCP 23.104.0.1:50748 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:23:23.891 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59734 10 6452 1 2025-11-28 18:23:23.891 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59734 10 6452 1 2025-11-28 18:23:54.585 00:00:10.336 TCP 23.104.0.1:49068 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:19:09.635 00:05:55.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:23:54.585 00:00:10.337 TCP 23.104.0.1:49068 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:24:16.818 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:24:16.909 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:24:16.818 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:24:16.910 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:24:24.105 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55210 10 6452 1 2025-11-28 18:24:24.105 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55210 10 6452 1 2025-11-28 18:21:05.054 00:05:04.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:24:54.962 00:00:21.331 TCP 23.104.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:24:54.963 00:00:21.331 TCP 23.104.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:25:24.328 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34910 10 6452 1 2025-11-28 18:25:24.327 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34910 10 6452 1 2025-11-28 18:26:06.337 00:00:10.366 TCP 23.104.0.1:60878 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:26:06.337 00:00:10.366 TCP 23.104.0.1:60878 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:26:24.548 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37402 10 6452 1 2025-11-28 18:26:24.547 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37402 10 6452 1 2025-11-28 18:27:06.744 00:00:10.367 TCP 23.104.0.1:44660 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:27:06.744 00:00:10.367 TCP 23.104.0.1:44660 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:27:24.763 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33354 10 6452 1 2025-11-28 18:27:24.763 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33354 10 6452 1 2025-11-28 18:23:09.640 00:05:55.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:24:05.051 00:05:04.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:28:07.150 00:00:10.329 TCP 23.104.0.1:48358 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:28:07.150 00:00:10.329 TCP 23.104.0.1:48358 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:28:24.972 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37186 10 6452 1 2025-11-28 18:28:24.973 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37186 10 6452 1 2025-11-28 18:29:16.535 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:29:16.601 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:29:07.519 00:00:10.358 TCP 23.104.0.1:55596 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:29:16.601 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:29:07.519 00:00:10.358 TCP 23.104.0.1:55596 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:29:16.535 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:29:25.204 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34932 10 6452 1 2025-11-28 18:29:25.202 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34932 10 6452 1 2025-11-28 18:25:09.636 00:05:55.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:30:07.917 00:00:10.370 TCP 23.104.0.1:53466 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:30:07.917 00:00:10.370 TCP 23.104.0.1:53466 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:30:25.425 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49692 10 6452 1 2025-11-28 18:30:25.425 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49692 10 6452 1 2025-11-28 18:27:05.056 00:05:04.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:31:08.318 00:00:10.363 TCP 23.104.0.1:55708 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:31:08.318 00:00:10.362 TCP 23.104.0.1:55708 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:31:25.636 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35162 10 6452 1 2025-11-28 18:31:25.635 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35162 10 6452 1 2025-11-28 18:32:08.721 00:00:10.373 TCP 23.104.0.1:37812 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:32:08.721 00:00:10.373 TCP 23.104.0.1:37812 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:32:25.855 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33228 10 6452 1 2025-11-28 18:32:25.855 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33228 10 6452 1 2025-11-28 18:33:09.131 00:00:10.365 TCP 23.104.0.1:45004 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:33:09.131 00:00:10.364 TCP 23.104.0.1:45004 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:33:26.088 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 2025-11-28 18:33:26.089 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 2025-11-28 18:29:09.640 00:05:55.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:34:09.538 00:00:10.362 TCP 23.104.0.1:60092 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:34:16.666 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:30:05.054 00:05:04.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:34:16.977 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:34:16.976 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:34:16.668 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:34:09.540 00:00:10.362 TCP 23.104.0.1:60092 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:34:26.269 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39754 10 6452 1 2025-11-28 18:34:26.269 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39754 10 6452 1 2025-11-28 18:35:09.941 00:00:10.371 TCP 23.104.0.1:36384 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:35:09.942 00:00:10.371 TCP 23.104.0.1:36384 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:35:26.448 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:53558 10 6452 1 2025-11-28 18:35:26.446 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:53558 10 6452 1 2025-11-28 18:31:09.637 00:05:55.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:36:10.356 00:00:10.373 TCP 23.104.0.1:36152 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:36:10.355 00:00:10.374 TCP 23.104.0.1:36152 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:36:26.641 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53260 10 6452 1 2025-11-28 18:36:26.642 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53260 10 6452 1 2025-11-28 18:33:05.056 00:05:04.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:37:10.765 00:00:10.379 TCP 23.104.0.1:35820 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:37:10.766 00:00:10.379 TCP 23.104.0.1:35820 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:37:26.857 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38792 10 6452 1 2025-11-28 18:37:26.857 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38792 10 6452 1 2025-11-28 18:38:11.188 00:00:10.365 TCP 23.104.0.1:54386 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:38:11.188 00:00:10.365 TCP 23.104.0.1:54386 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:38:27.094 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 10 6452 1 2025-11-28 18:38:27.093 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 10 6452 1 2025-11-28 18:39:17.021 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:39:17.197 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:39:17.196 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:39:11.592 00:00:10.318 TCP 23.104.0.1:43226 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:39:17.021 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:39:11.591 00:00:10.319 TCP 23.104.0.1:43226 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:39:27.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51024 10 6452 1 2025-11-28 18:39:27.308 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51024 10 6452 1 2025-11-28 18:35:09.642 00:05:55.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:36:05.056 00:05:04.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:40:11.951 00:00:10.367 TCP 23.104.0.1:44146 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:40:11.951 00:00:10.368 TCP 23.104.0.1:44146 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:40:27.524 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59756 10 6452 1 2025-11-28 18:40:27.524 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59756 10 6452 1 2025-11-28 18:41:12.361 00:00:10.323 TCP 23.104.0.1:52684 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:41:12.360 00:00:10.323 TCP 23.104.0.1:52684 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:41:27.700 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43066 10 6452 1 2025-11-28 18:41:27.701 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43066 10 6452 1 2025-11-28 18:37:09.639 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-11-28 18:42:12.725 00:00:10.378 TCP 23.104.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:42:12.725 00:00:10.378 TCP 23.104.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:42:27.914 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56012 10 6452 1 2025-11-28 18:42:27.914 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56012 10 6452 1 2025-11-28 18:39:05.060 00:05:04.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:43:13.139 00:00:11.423 TCP 23.104.0.1:52814 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:43:13.139 00:00:11.423 TCP 23.104.0.1:52814 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:43:28.127 00:00:14.700 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-11-28 18:43:28.128 00:00:14.699 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-11-28 18:44:17.139 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:44:17.202 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:44:17.201 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:44:17.139 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:44:14.600 00:00:10.325 TCP 23.104.0.1:57360 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:44:14.601 00:00:10.325 TCP 23.104.0.1:57360 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:44:32.870 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47998 10 6452 1 2025-11-28 18:44:32.870 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47998 10 6452 1 2025-11-28 18:45:14.964 00:00:10.369 TCP 23.104.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:45:14.963 00:00:10.369 TCP 23.104.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:45:33.097 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:58502 10 6452 1 2025-11-28 18:45:33.097 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:58502 10 6452 1 2025-11-28 18:41:09.642 00:05:55.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:42:05.058 00:05:04.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:46:15.371 00:00:10.360 TCP 23.104.0.1:46850 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:46:15.372 00:00:10.360 TCP 23.104.0.1:46850 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:46:33.307 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37480 10 6452 1 2025-11-28 18:46:33.307 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37480 10 6452 1 2025-11-28 18:47:15.773 00:00:10.370 TCP 23.104.0.1:47898 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:47:15.774 00:00:10.370 TCP 23.104.0.1:47898 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:47:33.520 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38940 10 6452 1 2025-11-28 18:47:33.519 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38940 10 6452 1 2025-11-28 18:44:05.063 00:05:04.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:48:16.179 00:00:10.380 TCP 23.104.0.1:45738 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:48:16.180 00:00:10.380 TCP 23.104.0.1:45738 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:48:33.734 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48408 10 6452 1 2025-11-28 18:48:33.735 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48408 10 6452 1 2025-11-28 18:45:05.061 00:05:04.581 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:49:17.164 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:49:17.057 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:49:17.058 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:49:17.163 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:49:16.606 00:00:11.141 TCP 23.104.0.1:41360 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:49:16.606 00:00:11.141 TCP 23.104.0.1:41360 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:49:33.911 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35168 10 6452 1 2025-11-28 18:49:33.911 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35168 10 6452 1 2025-11-28 18:50:17.786 00:00:10.324 TCP 23.104.0.1:48270 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:50:17.785 00:00:10.324 TCP 23.104.0.1:48270 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:50:34.135 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6452 1 2025-11-28 18:50:34.136 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6452 1 2025-11-28 18:51:18.150 00:00:10.366 TCP 23.104.0.1:44422 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:51:18.150 00:00:10.366 TCP 23.104.0.1:44422 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:51:34.309 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58624 10 6452 1 2025-11-28 18:51:34.309 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58624 10 6452 1 2025-11-28 18:47:09.645 00:05:55.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:48:05.060 00:05:04.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:52:18.553 00:00:10.324 TCP 23.104.0.1:34902 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:52:18.553 00:00:10.324 TCP 23.104.0.1:34902 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:52:34.523 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54260 10 6452 1 2025-11-28 18:52:34.522 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54260 10 6452 1 2025-11-28 18:53:18.917 00:00:10.371 TCP 23.104.0.1:46132 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:53:18.918 00:00:10.371 TCP 23.104.0.1:46132 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:53:34.741 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33024 10 6452 1 2025-11-28 18:53:34.741 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33024 10 6452 1 2025-11-28 18:50:05.062 00:05:04.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:54:17.427 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:54:17.042 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:54:17.042 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 18:54:17.428 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 18:54:19.328 00:00:10.324 TCP 23.104.0.1:43960 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:54:19.329 00:00:10.324 TCP 23.104.0.1:43960 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:54:34.961 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57928 10 6452 1 2025-11-28 18:54:34.960 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57928 10 6452 1 2025-11-28 18:51:05.063 00:05:04.581 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 18:55:19.690 00:00:10.368 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:55:19.690 00:00:10.367 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:55:35.181 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34732 10 6452 1 2025-11-28 18:55:35.181 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34732 10 6452 1 2025-11-28 18:56:20.101 00:00:10.320 TCP 23.104.0.1:52388 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:56:20.100 00:00:10.320 TCP 23.104.0.1:52388 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:56:35.402 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52262 10 6452 1 2025-11-28 18:56:35.401 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52262 10 6452 1 2025-11-28 18:57:20.463 00:00:10.327 TCP 23.104.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:57:20.463 00:00:10.326 TCP 23.104.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:57:35.626 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50838 10 6452 1 2025-11-28 18:57:35.626 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50838 10 6452 1 2025-11-28 18:53:09.645 00:05:55.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:54:05.061 00:05:04.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 18:58:20.828 00:00:10.386 TCP 23.104.0.1:35056 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:58:20.827 00:00:10.386 TCP 23.104.0.1:35056 -> 1.101.0.1:3000 11 1507 1 2025-11-28 18:58:35.846 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56788 10 6452 1 2025-11-28 18:58:35.847 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56788 10 6452 1 Summary: total flows: 328, total bytes: 996871, total packets: 3147, avg bps: 2076, avg pps: 0, avg bpp: 316 Time window: 2025-11-28 17:55:09 - 2025-11-28 18:59:09 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0035s User: 0.0044s Wall: 0.0044s flows/second: 73742.1 Runtime: 0.0045s