Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 19:58:46.930 00:00:10.381 TCP 23.104.0.1:44940 -> 1.101.0.1:3000 11 1507 1 2025-11-28 19:58:46.929 00:00:10.382 TCP 23.104.0.1:44940 -> 1.101.0.1:3000 11 1507 1 2025-11-28 19:58:52.758 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55874 10 6452 1 2025-11-28 19:58:52.758 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55874 10 6452 1 2025-11-28 19:59:18.527 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 19:59:18.596 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 19:59:18.527 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 19:59:18.595 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 19:59:47.348 00:00:10.327 TCP 23.104.0.1:32856 -> 1.101.0.1:3000 11 1507 1 2025-11-28 19:59:47.348 00:00:10.328 TCP 23.104.0.1:32856 -> 1.101.0.1:3000 11 1507 1 2025-11-28 19:59:52.972 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:54646 10 6452 1 2025-11-28 19:59:52.971 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:54646 10 6452 1 2025-11-28 19:56:05.076 00:05:04.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:00:47.711 00:00:10.323 TCP 23.104.0.1:42450 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:00:47.712 00:00:10.323 TCP 23.104.0.1:42450 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:00:53.213 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34378 10 6452 1 2025-11-28 20:00:53.214 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34378 10 6452 1 2025-11-28 19:57:05.078 00:05:04.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:01:48.096 00:00:10.370 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:01:48.096 00:00:10.370 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:01:53.383 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58528 10 6452 1 2025-11-28 20:01:53.383 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58528 10 6452 1 2025-11-28 20:02:48.501 00:00:10.365 TCP 23.104.0.1:47264 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:02:48.501 00:00:10.365 TCP 23.104.0.1:47264 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:02:53.600 00:00:10.958 TCP 1.101.0.1:3000 -> 22.102.0.1:52948 10 6452 1 2025-11-28 20:02:53.600 00:00:10.958 TCP 1.101.0.1:3000 -> 22.102.0.1:52948 10 6452 1 2025-11-28 20:03:48.909 00:00:10.419 TCP 23.104.0.1:53070 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:03:48.909 00:00:10.418 TCP 23.104.0.1:53070 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:03:54.600 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37142 10 6452 1 2025-11-28 20:03:54.601 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37142 10 6452 1 2025-11-28 20:00:05.075 00:05:04.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:00:05.074 00:05:04.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:04:18.842 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:04:18.835 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:04:18.835 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:04:18.842 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:04:49.377 00:00:10.366 TCP 23.104.0.1:36180 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:04:49.378 00:00:10.366 TCP 23.104.0.1:36180 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:04:54.808 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47536 10 6452 1 2025-11-28 20:04:54.809 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47536 10 6452 1 2025-11-28 20:05:49.783 00:00:10.368 TCP 23.104.0.1:42690 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:05:49.784 00:00:10.369 TCP 23.104.0.1:42690 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:05:55.039 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57166 10 6452 1 2025-11-28 20:05:55.040 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57166 10 6452 1 2025-11-28 20:02:05.080 00:05:04.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:06:50.190 00:00:10.364 TCP 23.104.0.1:53862 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:06:50.190 00:00:10.364 TCP 23.104.0.1:53862 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:06:55.258 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:34878 10 6452 1 2025-11-28 20:06:55.258 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:34878 10 6452 1 2025-11-28 20:03:05.080 00:05:04.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:07:50.598 00:00:10.361 TCP 23.104.0.1:36450 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:07:50.598 00:00:10.361 TCP 23.104.0.1:36450 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:07:55.458 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57810 10 6452 1 2025-11-28 20:07:55.458 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57810 10 6452 1 2025-11-28 20:08:50.992 00:00:10.361 TCP 23.104.0.1:37936 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:08:55.645 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37210 10 6452 1 2025-11-28 20:08:50.993 00:00:10.360 TCP 23.104.0.1:37936 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:08:55.644 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37210 10 6452 1 2025-11-28 20:09:18.927 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:09:18.629 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:09:18.928 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:09:18.628 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:09:51.391 00:00:10.365 TCP 23.104.0.1:45808 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:09:51.391 00:00:10.364 TCP 23.104.0.1:45808 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:09:55.813 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48928 10 6452 1 2025-11-28 20:09:55.812 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48928 10 6452 1 2025-11-28 20:06:05.078 00:05:04.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:06:05.077 00:05:04.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:10:51.793 00:00:10.366 TCP 23.104.0.1:57220 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:10:51.793 00:00:10.366 TCP 23.104.0.1:57220 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:10:55.989 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48860 10 6452 1 2025-11-28 20:10:55.990 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48860 10 6452 1 2025-11-28 20:11:52.195 00:00:10.366 TCP 23.104.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:11:56.215 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50506 11 6492 1 2025-11-28 20:11:56.215 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50506 11 6492 1 2025-11-28 20:11:52.195 00:00:10.366 TCP 23.104.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:08:05.081 00:05:04.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:12:52.600 00:00:10.367 TCP 23.104.0.1:54984 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:12:52.600 00:00:10.367 TCP 23.104.0.1:54984 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:12:56.384 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:50540 10 6452 1 2025-11-28 20:12:56.385 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:50540 10 6452 1 2025-11-28 20:09:05.080 00:05:04.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:13:53.005 00:00:10.364 TCP 23.104.0.1:48528 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:13:53.005 00:00:10.365 TCP 23.104.0.1:48528 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:13:56.550 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41106 10 6452 1 2025-11-28 20:13:56.550 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41106 10 6452 1 2025-11-28 20:14:18.846 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:14:19.009 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:14:18.846 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:14:19.009 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:14:53.410 00:00:10.363 TCP 23.104.0.1:47316 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:14:53.410 00:00:10.363 TCP 23.104.0.1:47316 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:14:56.763 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55678 10 6452 1 2025-11-28 20:14:56.763 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55678 10 6452 1 2025-11-28 20:15:53.814 00:00:10.371 TCP 23.104.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:15:53.814 00:00:10.371 TCP 23.104.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:15:56.975 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:40480 10 6452 1 2025-11-28 20:12:05.084 00:05:04.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:15:56.974 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:40480 10 6452 1 2025-11-28 20:12:05.083 00:05:04.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:16:54.226 00:00:10.359 TCP 23.104.0.1:53364 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:16:54.227 00:00:10.359 TCP 23.104.0.1:53364 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:16:57.175 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-11-28 20:16:57.177 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-11-28 20:17:54.629 00:00:10.367 TCP 23.104.0.1:33888 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:17:54.630 00:00:10.367 TCP 23.104.0.1:33888 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:17:57.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37006 10 6452 1 2025-11-28 20:17:57.392 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37006 10 6452 1 2025-11-28 20:14:05.086 00:05:04.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:18:55.033 00:00:10.370 TCP 23.104.0.1:33592 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:18:55.033 00:00:10.370 TCP 23.104.0.1:33592 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:18:57.604 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52902 10 6452 1 2025-11-28 20:18:57.603 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52902 10 6452 1 2025-11-28 20:15:05.087 00:05:04.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:19:18.896 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:19:18.978 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:19:18.896 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:19:18.978 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:19:55.454 00:00:10.365 TCP 23.104.0.1:39006 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:19:57.817 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34250 10 6452 1 2025-11-28 20:19:55.453 00:00:10.365 TCP 23.104.0.1:39006 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:19:57.818 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34250 10 6452 1 2025-11-28 20:20:55.853 00:00:10.345 TCP 23.104.0.1:41488 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:20:58.042 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44334 10 6452 1 2025-11-28 20:20:58.042 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44334 10 6452 1 2025-11-28 20:20:55.854 00:00:10.344 TCP 23.104.0.1:41488 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:21:58.253 00:00:10.400 TCP 1.101.0.1:3000 -> 22.102.0.1:46990 10 6452 1 2025-11-28 20:21:56.236 00:00:10.365 TCP 23.104.0.1:51898 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:21:56.236 00:00:10.366 TCP 23.104.0.1:51898 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:21:58.253 00:00:10.400 TCP 1.101.0.1:3000 -> 22.102.0.1:46990 10 6452 1 2025-11-28 20:18:05.086 00:05:04.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:18:05.085 00:05:04.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:22:56.637 00:00:10.364 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:22:58.696 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-11-28 20:22:58.695 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-11-28 20:22:56.636 00:00:10.364 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:23:57.037 00:00:10.367 TCP 23.104.0.1:37418 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:23:58.911 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45112 10 6452 1 2025-11-28 20:23:58.912 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45112 10 6452 1 2025-11-28 20:23:57.037 00:00:10.368 TCP 23.104.0.1:37418 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:20:05.090 00:05:04.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:24:19.305 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:24:19.235 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:24:19.306 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:24:19.236 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:21:05.088 00:05:04.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:24:57.442 00:00:10.332 TCP 23.104.0.1:59726 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:24:59.121 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55444 10 6452 1 2025-11-28 20:24:57.442 00:00:10.332 TCP 23.104.0.1:59726 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:24:59.119 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55444 10 6452 1 2025-11-28 20:25:59.333 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47398 10 6452 1 2025-11-28 20:25:57.817 00:00:10.365 TCP 23.104.0.1:51458 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:25:59.333 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47398 10 6452 1 2025-11-28 20:25:57.818 00:00:10.365 TCP 23.104.0.1:51458 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:26:59.503 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51360 10 6452 1 2025-11-28 20:26:58.221 00:00:10.365 TCP 23.104.0.1:36640 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:26:59.502 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51360 10 6452 1 2025-11-28 20:26:58.220 00:00:10.365 TCP 23.104.0.1:36640 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:27:58.623 00:00:10.361 TCP 23.104.0.1:46078 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:27:59.719 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48384 10 6452 1 2025-11-28 20:24:05.086 00:05:04.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:27:58.623 00:00:10.361 TCP 23.104.0.1:46078 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:27:59.720 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48384 10 6452 1 2025-11-28 20:24:05.087 00:05:04.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:28:59.026 00:00:10.365 TCP 23.104.0.1:54560 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:28:59.930 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:57984 10 6452 1 2025-11-28 20:28:59.025 00:00:10.366 TCP 23.104.0.1:54560 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:28:59.929 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:57984 10 6452 1 2025-11-28 20:29:19.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:29:19.343 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:29:19.342 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:29:19.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:29:59.431 00:00:10.368 TCP 23.104.0.1:55562 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:30:00.126 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:33284 10 6452 1 2025-11-28 20:26:05.089 00:05:04.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:29:59.431 00:00:10.368 TCP 23.104.0.1:55562 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:30:00.125 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:33284 10 6452 1 2025-11-28 20:31:00.327 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40210 10 6452 1 2025-11-28 20:30:59.841 00:00:10.346 TCP 23.104.0.1:38110 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:31:00.328 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40210 10 6452 1 2025-11-28 20:27:05.089 00:05:04.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:30:59.840 00:00:10.346 TCP 23.104.0.1:38110 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:32:00.223 00:00:10.365 TCP 23.104.0.1:42992 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:32:00.539 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51114 10 6452 1 2025-11-28 20:32:00.223 00:00:10.365 TCP 23.104.0.1:42992 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:32:00.540 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51114 10 6452 1 2025-11-28 20:33:00.727 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59530 10 6452 1 2025-11-28 20:33:00.727 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59530 10 6452 1 2025-11-28 20:33:00.626 00:00:10.375 TCP 23.104.0.1:46466 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:33:00.626 00:00:10.375 TCP 23.104.0.1:46466 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:30:05.087 00:05:04.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:34:01.046 00:00:10.364 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:30:05.087 00:05:04.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:34:00.947 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:44510 10 6452 1 2025-11-28 20:34:01.047 00:00:10.364 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:34:19.204 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:34:19.514 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:34:19.515 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:34:00.946 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:44510 10 6452 1 2025-11-28 20:34:19.204 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:35:01.131 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33896 10 6452 1 2025-11-28 20:35:01.449 00:00:10.323 TCP 23.104.0.1:52276 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:35:01.132 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33896 10 6452 1 2025-11-28 20:35:01.449 00:00:10.323 TCP 23.104.0.1:52276 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:32:05.092 00:05:04.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:36:01.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54096 10 6452 1 2025-11-28 20:36:01.813 00:00:10.366 TCP 23.104.0.1:44902 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:36:01.813 00:00:10.365 TCP 23.104.0.1:44902 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:36:01.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54096 10 6452 1 2025-11-28 20:33:05.092 00:05:04.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:37:02.221 00:00:10.367 TCP 23.104.0.1:48584 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:37:01.555 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48576 10 6452 1 2025-11-28 20:37:02.221 00:00:10.367 TCP 23.104.0.1:48584 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:37:01.557 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48576 10 6452 1 2025-11-28 20:38:02.625 00:00:10.364 TCP 23.104.0.1:41740 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:38:01.773 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35958 10 6452 1 2025-11-28 20:38:01.773 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35958 10 6452 1 2025-11-28 20:38:02.624 00:00:10.364 TCP 23.104.0.1:41740 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:39:01.988 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58476 10 6452 1 2025-11-28 20:39:01.988 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58476 10 6452 1 2025-11-28 20:39:03.027 00:00:10.366 TCP 23.104.0.1:40848 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:39:19.635 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:39:03.028 00:00:10.365 TCP 23.104.0.1:40848 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:39:19.530 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:39:19.530 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:39:19.634 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:36:05.088 00:05:04.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:40:03.434 00:00:10.366 TCP 23.104.0.1:45684 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:36:05.088 00:05:04.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:40:02.215 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43716 10 6452 1 2025-11-28 20:40:03.434 00:00:10.366 TCP 23.104.0.1:45684 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:40:02.216 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43716 10 6452 1 2025-11-28 20:41:03.839 00:00:10.391 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:41:02.394 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44110 10 6452 1 2025-11-28 20:41:03.839 00:00:10.391 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:41:02.394 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44110 10 6452 1 2025-11-28 20:42:02.624 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40868 10 6452 1 2025-11-28 20:42:04.267 00:00:10.367 TCP 23.104.0.1:34366 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:42:02.624 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40868 10 6452 1 2025-11-28 20:38:05.092 00:05:04.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:42:04.267 00:00:10.367 TCP 23.104.0.1:34366 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:39:05.091 00:05:04.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:43:04.671 00:00:10.322 TCP 23.104.0.1:59366 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:43:02.838 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33306 10 6452 1 2025-11-28 20:43:02.840 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33306 10 6452 1 2025-11-28 20:43:04.672 00:00:10.322 TCP 23.104.0.1:59366 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:44:03.078 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43526 10 6452 1 2025-11-28 20:44:05.034 00:00:10.361 TCP 23.104.0.1:40434 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:44:03.079 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43526 10 6452 1 2025-11-28 20:44:19.837 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:44:19.862 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:44:05.033 00:00:10.361 TCP 23.104.0.1:40434 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:44:19.837 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:44:19.864 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:45:03.295 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43014 10 6452 1 2025-11-28 20:45:03.295 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43014 10 6452 1 2025-11-28 20:45:05.436 00:00:10.374 TCP 23.104.0.1:54888 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:45:05.435 00:00:10.374 TCP 23.104.0.1:54888 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:42:05.090 00:05:04.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:42:05.089 00:05:04.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:46:03.464 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 6452 1 2025-11-28 20:46:03.464 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 6452 1 2025-11-28 20:46:05.852 00:00:10.384 TCP 23.104.0.1:43972 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:46:05.852 00:00:10.384 TCP 23.104.0.1:43972 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:47:03.675 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-11-28 20:47:03.673 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-11-28 20:47:06.274 00:00:10.372 TCP 23.104.0.1:60550 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:47:06.274 00:00:10.372 TCP 23.104.0.1:60550 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:44:05.092 00:05:04.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:48:03.890 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43852 10 6452 1 2025-11-28 20:48:03.890 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43852 10 6452 1 2025-11-28 20:48:06.683 00:00:10.369 TCP 23.104.0.1:34934 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:48:06.683 00:00:10.369 TCP 23.104.0.1:34934 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:49:04.109 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33830 10 6452 1 2025-11-28 20:45:05.092 00:05:04.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:49:04.109 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33830 10 6452 1 2025-11-28 20:49:19.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:49:07.106 00:00:10.368 TCP 23.104.0.1:44926 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:49:19.609 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:49:19.609 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:49:07.107 00:00:10.368 TCP 23.104.0.1:44926 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:49:19.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:50:04.316 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35582 10 6452 1 2025-11-28 20:50:04.316 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35582 10 6452 1 2025-11-28 20:50:07.512 00:00:10.325 TCP 23.104.0.1:39820 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:50:07.512 00:00:10.325 TCP 23.104.0.1:39820 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:51:04.532 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-11-28 20:51:04.533 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-11-28 20:51:07.874 00:00:10.366 TCP 23.104.0.1:46398 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:51:07.874 00:00:10.366 TCP 23.104.0.1:46398 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:48:05.090 00:05:04.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:48:05.092 00:05:04.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:52:04.758 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50242 10 6452 1 2025-11-28 20:52:04.758 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50242 10 6452 1 2025-11-28 20:52:08.282 00:00:10.361 TCP 23.104.0.1:56770 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:52:08.283 00:00:10.361 TCP 23.104.0.1:56770 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:53:04.965 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:32888 10 6452 1 2025-11-28 20:53:04.966 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:32888 10 6452 1 2025-11-28 20:53:08.682 00:00:10.327 TCP 23.104.0.1:37902 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:53:08.682 00:00:10.327 TCP 23.104.0.1:37902 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:50:05.095 00:05:04.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:54:05.196 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41690 10 6452 1 2025-11-28 20:54:09.045 00:00:10.364 TCP 23.104.0.1:43110 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:54:19.795 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:54:05.195 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41690 10 6452 1 2025-11-28 20:54:19.675 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:54:19.794 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 20:54:09.045 00:00:10.364 TCP 23.104.0.1:43110 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:54:19.675 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 20:51:05.094 00:05:04.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 20:55:05.364 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-11-28 20:55:09.448 00:00:10.368 TCP 23.104.0.1:41410 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:55:05.364 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-11-28 20:55:09.449 00:00:10.368 TCP 23.104.0.1:41410 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:56:05.538 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52416 10 6452 1 2025-11-28 20:56:05.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52416 10 6452 1 2025-11-28 20:56:09.851 00:00:10.385 TCP 23.104.0.1:53098 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:56:09.852 00:00:10.384 TCP 23.104.0.1:53098 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:57:05.750 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33850 10 6452 1 2025-11-28 20:57:05.750 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33850 10 6452 1 2025-11-28 20:57:10.272 00:00:10.376 TCP 23.104.0.1:49076 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:57:10.271 00:00:10.376 TCP 23.104.0.1:49076 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:54:05.093 00:05:04.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:54:05.093 00:05:04.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 20:58:05.963 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48428 10 6452 1 2025-11-28 20:58:05.963 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48428 10 6452 1 2025-11-28 20:58:10.682 00:00:10.368 TCP 23.104.0.1:57164 -> 1.101.0.1:3000 11 1507 1 2025-11-28 20:58:10.683 00:00:10.367 TCP 23.104.0.1:57164 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 328, total bytes: 996776, total packets: 3146, avg bps: 2106, avg pps: 0, avg bpp: 316 Time window: 2025-11-28 19:56:05 - 2025-11-28 20:59:09 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0062s User: 0.0018s Wall: 0.0035s flows/second: 93983.6 Runtime: 0.0035s