Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 14:58:43.673 00:00:10.368 TCP 23.104.0.1:55386 -> 1.101.0.1:3000 11 1507 1 2025-11-15 14:58:43.672 00:00:10.368 TCP 23.104.0.1:55386 -> 1.101.0.1:3000 11 1507 1 2025-11-15 14:59:03.206 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38766 10 6452 1 2025-11-15 14:59:03.207 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38766 10 6452 1 2025-11-15 14:59:44.100 00:00:10.366 TCP 23.104.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-11-15 14:59:44.101 00:00:10.366 TCP 23.104.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-11-15 14:55:02.185 00:05:55.337 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 14:55:57.520 00:05:04.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:00:03.433 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36654 10 6452 1 2025-11-15 15:00:03.433 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36654 10 6452 1 2025-11-15 15:00:44.506 00:00:10.366 TCP 23.104.0.1:45644 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:00:44.507 00:00:10.366 TCP 23.104.0.1:45644 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:01:03.676 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39016 12 6556 1 2025-11-15 15:01:03.676 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39016 12 6556 1 2025-11-15 15:01:44.906 00:00:10.329 TCP 23.104.0.1:34160 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:01:44.906 00:00:10.329 TCP 23.104.0.1:34160 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:02:03.888 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58982 10 6452 1 2025-11-15 15:02:03.889 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58982 10 6452 1 2025-11-15 15:02:45.275 00:00:10.363 TCP 23.104.0.1:47154 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:02:55.509 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:02:55.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:02:55.509 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:02:45.275 00:00:10.364 TCP 23.104.0.1:47154 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:02:55.741 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:03:04.127 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60536 10 6452 1 2025-11-15 15:03:04.127 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60536 10 6452 1 2025-11-15 15:03:45.676 00:00:10.370 TCP 23.104.0.1:56586 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:03:45.675 00:00:10.370 TCP 23.104.0.1:56586 -> 1.101.0.1:3000 11 1507 1 2025-11-15 14:59:57.523 00:05:04.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 14:59:57.523 00:05:04.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:04:04.344 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52650 10 6452 1 2025-11-15 15:04:04.343 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52650 10 6452 1 2025-11-15 15:04:46.103 00:00:10.324 TCP 23.104.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:04:46.103 00:00:10.325 TCP 23.104.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:05:04.572 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49214 10 6452 1 2025-11-15 15:05:04.570 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49214 10 6452 1 2025-11-15 15:01:02.186 00:05:55.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:05:46.467 00:00:10.326 TCP 23.104.0.1:34012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:05:46.466 00:00:10.326 TCP 23.104.0.1:34012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:01:57.521 00:05:04.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:06:04.788 00:00:10.906 TCP 1.101.0.1:3000 -> 22.102.0.1:41534 10 6452 1 2025-11-15 15:06:04.789 00:00:10.907 TCP 1.101.0.1:3000 -> 22.102.0.1:41534 10 6452 1 2025-11-15 15:06:46.834 00:00:10.383 TCP 23.104.0.1:55786 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:06:46.835 00:00:10.383 TCP 23.104.0.1:55786 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:07:05.743 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49682 10 6452 1 2025-11-15 15:07:05.743 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49682 10 6452 1 2025-11-15 15:07:55.729 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:07:55.570 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:07:55.729 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:07:47.256 00:00:10.365 TCP 23.104.0.1:56590 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:07:55.570 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:07:47.255 00:00:10.366 TCP 23.104.0.1:56590 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:08:05.922 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41038 10 6452 1 2025-11-15 15:08:05.923 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41038 10 6452 1 2025-11-15 15:08:47.659 00:00:10.363 TCP 23.104.0.1:60324 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:08:47.659 00:00:10.364 TCP 23.104.0.1:60324 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:09:06.159 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39414 10 6452 1 2025-11-15 15:09:06.158 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39414 10 6452 1 2025-11-15 15:09:48.090 00:00:10.365 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:09:48.090 00:00:10.364 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:05:57.523 00:05:04.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:05:57.524 00:05:04.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:10:06.384 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56780 10 6452 1 2025-11-15 15:10:06.384 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56780 10 6452 1 2025-11-15 15:10:48.494 00:00:10.365 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:10:48.496 00:00:10.365 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:11:06.600 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34312 10 6452 1 2025-11-15 15:11:06.601 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34312 10 6452 1 2025-11-15 15:11:48.897 00:00:10.351 TCP 23.104.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:07:02.189 00:05:55.332 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:11:48.897 00:00:10.351 TCP 23.104.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:07:57.521 00:05:04.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:12:06.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37920 10 6452 1 2025-11-15 15:12:06.818 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37920 10 6452 1 2025-11-15 15:12:55.745 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:12:55.793 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:12:55.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:12:55.793 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:12:49.286 00:00:10.323 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:12:49.286 00:00:10.322 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:13:07.054 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34094 10 6452 1 2025-11-15 15:13:07.053 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34094 10 6452 1 2025-11-15 15:13:49.650 00:00:10.372 TCP 23.104.0.1:51764 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:13:49.652 00:00:10.372 TCP 23.104.0.1:51764 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:14:07.222 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53250 10 6452 1 2025-11-15 15:14:07.224 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53250 10 6452 1 2025-11-15 15:14:50.084 00:00:10.323 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:14:50.084 00:00:10.322 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:15:07.444 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42468 10 6452 1 2025-11-15 15:15:07.444 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42468 10 6452 1 2025-11-15 15:15:50.463 00:00:10.367 TCP 23.104.0.1:44166 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:15:50.462 00:00:10.367 TCP 23.104.0.1:44166 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:11:57.524 00:05:04.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:11:57.525 00:05:04.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:16:07.665 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43996 10 6452 1 2025-11-15 15:16:07.665 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43996 10 6452 1 2025-11-15 15:16:50.868 00:00:10.370 TCP 23.104.0.1:46040 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:16:50.867 00:00:10.370 TCP 23.104.0.1:46040 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:17:07.887 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34610 10 6452 1 2025-11-15 15:17:07.888 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34610 10 6452 1 2025-11-15 15:13:02.190 00:05:55.332 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:17:56.440 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:17:56.441 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:17:56.442 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:17:56.440 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:17:51.270 00:00:10.368 TCP 23.104.0.1:42028 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:17:51.270 00:00:10.368 TCP 23.104.0.1:42028 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:13:57.522 00:05:04.671 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:18:08.116 00:00:11.094 TCP 1.101.0.1:3000 -> 22.102.0.1:38002 10 6452 1 2025-11-15 15:18:08.116 00:00:11.093 TCP 1.101.0.1:3000 -> 22.102.0.1:38002 10 6452 1 2025-11-15 15:18:51.677 00:00:10.381 TCP 23.104.0.1:34546 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:18:51.678 00:00:10.381 TCP 23.104.0.1:34546 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:19:09.251 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43148 10 6452 1 2025-11-15 15:19:09.251 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43148 10 6452 1 2025-11-15 15:19:52.118 00:00:10.359 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:19:52.117 00:00:10.359 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:20:09.473 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53566 10 6452 1 2025-11-15 15:20:09.472 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53566 10 6452 1 2025-11-15 15:20:52.517 00:00:10.369 TCP 23.104.0.1:55074 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:20:52.518 00:00:10.369 TCP 23.104.0.1:55074 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:21:09.693 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50630 10 6452 1 2025-11-15 15:21:09.692 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50630 10 6452 1 2025-11-15 15:21:52.923 00:00:10.383 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:17:57.525 00:05:04.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:17:57.525 00:05:04.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:21:52.923 00:00:10.383 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:22:09.909 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45364 10 6452 1 2025-11-15 15:22:09.908 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45364 10 6452 1 2025-11-15 15:22:56.156 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:22:56.087 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:22:56.156 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:22:56.088 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:22:53.345 00:00:10.364 TCP 23.104.0.1:44174 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:22:53.345 00:00:10.364 TCP 23.104.0.1:44174 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:23:10.114 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 10 6452 1 2025-11-15 15:23:10.114 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 10 6452 1 2025-11-15 15:19:02.193 00:05:55.331 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:23:53.753 00:00:10.388 TCP 23.104.0.1:58128 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:19:57.523 00:05:04.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:23:53.752 00:00:10.389 TCP 23.104.0.1:58128 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:24:10.327 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43650 10 6452 1 2025-11-15 15:24:10.328 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43650 10 6452 1 2025-11-15 15:24:54.180 00:00:10.365 TCP 23.104.0.1:40108 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:24:54.180 00:00:10.365 TCP 23.104.0.1:40108 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:25:10.539 00:00:10.700 TCP 1.101.0.1:3000 -> 22.102.0.1:48186 10 6452 1 2025-11-15 15:25:10.539 00:00:10.699 TCP 1.101.0.1:3000 -> 22.102.0.1:48186 10 6452 1 2025-11-15 15:25:54.586 00:00:10.324 TCP 23.104.0.1:59320 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:25:54.584 00:00:10.324 TCP 23.104.0.1:59320 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:26:11.280 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:56458 10 6452 1 2025-11-15 15:26:11.279 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:56458 10 6452 1 2025-11-15 15:26:54.948 00:00:10.368 TCP 23.104.0.1:47658 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:26:54.950 00:00:10.368 TCP 23.104.0.1:47658 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:27:11.533 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42112 10 6452 1 2025-11-15 15:27:11.533 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42112 10 6452 1 2025-11-15 15:27:55.824 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:27:56.032 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:27:56.031 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:27:55.823 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:23:57.526 00:05:04.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:27:55.354 00:00:10.373 TCP 23.104.0.1:45052 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:23:57.527 00:05:04.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:27:55.353 00:00:10.373 TCP 23.104.0.1:45052 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:28:11.705 00:00:10.777 TCP 1.101.0.1:3000 -> 22.102.0.1:54710 10 6452 1 2025-11-15 15:28:11.705 00:00:10.776 TCP 1.101.0.1:3000 -> 22.102.0.1:54710 10 6452 1 2025-11-15 15:28:55.763 00:00:10.377 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:28:55.762 00:00:10.378 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:29:12.521 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43676 10 6452 1 2025-11-15 15:29:12.521 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43676 10 6452 1 2025-11-15 15:25:02.222 00:05:55.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:25:57.524 00:05:04.703 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:29:56.179 00:00:10.364 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:29:56.177 00:00:10.365 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:30:12.694 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-11-15 15:30:12.695 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-11-15 15:30:56.590 00:00:10.366 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:30:56.590 00:00:10.367 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:31:12.912 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39930 10 6452 1 2025-11-15 15:31:12.912 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39930 10 6452 1 2025-11-15 15:31:56.988 00:00:10.367 TCP 23.104.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:31:56.989 00:00:10.367 TCP 23.104.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:32:13.127 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43270 10 6452 1 2025-11-15 15:32:13.127 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43270 10 6452 1 2025-11-15 15:32:56.288 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:32:56.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:32:56.430 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:32:56.288 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:32:57.405 00:00:10.365 TCP 23.104.0.1:44638 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:32:57.406 00:00:10.365 TCP 23.104.0.1:44638 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:33:13.347 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37108 10 6452 1 2025-11-15 15:33:13.347 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37108 10 6452 1 2025-11-15 15:29:57.531 00:05:04.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:29:57.532 00:05:04.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:33:57.808 00:00:10.333 TCP 23.104.0.1:50830 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:33:57.808 00:00:10.332 TCP 23.104.0.1:50830 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:34:13.564 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55786 10 6452 1 2025-11-15 15:34:13.565 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55786 10 6452 1 2025-11-15 15:34:58.173 00:00:10.365 TCP 23.104.0.1:35094 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:34:58.174 00:00:10.365 TCP 23.104.0.1:35094 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:35:13.781 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41010 10 6452 1 2025-11-15 15:35:13.782 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41010 10 6452 1 2025-11-15 15:31:02.226 00:05:55.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:31:57.529 00:05:04.700 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:35:58.574 00:00:10.382 TCP 23.104.0.1:45218 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:35:58.574 00:00:10.382 TCP 23.104.0.1:45218 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:36:14.004 00:00:10.764 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-11-15 15:36:14.004 00:00:10.763 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-11-15 15:36:59.003 00:00:10.360 TCP 23.104.0.1:40394 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:36:59.005 00:00:10.359 TCP 23.104.0.1:40394 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:37:14.803 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37382 10 6452 1 2025-11-15 15:37:14.804 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37382 10 6452 1 2025-11-15 15:37:56.411 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:37:56.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:37:56.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:37:56.412 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:37:59.410 00:00:10.382 TCP 23.104.0.1:60662 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:37:59.411 00:00:10.382 TCP 23.104.0.1:60662 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:38:15.025 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45252 10 6452 1 2025-11-15 15:38:15.024 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45252 10 6452 1 2025-11-15 15:38:59.839 00:00:10.386 TCP 23.104.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:38:59.839 00:00:10.386 TCP 23.104.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:39:15.239 00:00:10.962 TCP 1.101.0.1:3000 -> 22.102.0.1:32918 10 6452 1 2025-11-15 15:39:15.241 00:00:10.962 TCP 1.101.0.1:3000 -> 22.102.0.1:32918 10 6452 1 2025-11-15 15:35:57.538 00:05:04.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:35:57.537 00:05:04.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:40:00.274 00:00:10.364 TCP 23.104.0.1:39370 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:40:00.274 00:00:10.364 TCP 23.104.0.1:39370 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:40:16.231 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46974 10 6452 1 2025-11-15 15:40:16.231 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46974 10 6452 1 2025-11-15 15:41:00.676 00:00:10.367 TCP 23.104.0.1:41928 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:41:00.676 00:00:10.367 TCP 23.104.0.1:41928 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:41:16.441 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43514 10 6452 1 2025-11-15 15:41:16.442 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43514 10 6452 1 2025-11-15 15:37:02.229 00:05:55.311 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:37:57.537 00:05:04.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:42:01.104 00:00:10.919 TCP 23.104.0.1:33602 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:42:01.103 00:00:10.920 TCP 23.104.0.1:33602 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:42:16.650 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55904 10 6452 1 2025-11-15 15:42:16.651 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55904 10 6452 1 2025-11-15 15:42:56.412 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:42:56.362 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:42:56.412 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:42:56.360 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:43:02.079 00:00:10.369 TCP 23.104.0.1:42012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:43:02.079 00:00:10.369 TCP 23.104.0.1:42012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:43:16.861 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42654 10 6452 1 2025-11-15 15:43:16.861 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42654 10 6452 1 2025-11-15 15:44:02.482 00:00:10.319 TCP 23.104.0.1:53258 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:44:02.482 00:00:10.319 TCP 23.104.0.1:53258 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:44:17.090 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:32860 10 6452 1 2025-11-15 15:44:17.089 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:32860 10 6452 1 2025-11-15 15:45:02.839 00:00:10.384 TCP 23.104.0.1:39990 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:45:02.839 00:00:10.384 TCP 23.104.0.1:39990 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:45:17.384 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52586 10 6452 1 2025-11-15 15:45:17.385 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52586 10 6452 1 2025-11-15 15:41:57.541 00:05:04.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:41:57.542 00:05:04.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:46:03.263 00:00:10.365 TCP 23.104.0.1:33926 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:46:03.262 00:00:10.366 TCP 23.104.0.1:33926 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:46:17.599 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36406 10 6452 1 2025-11-15 15:46:17.599 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36406 10 6452 1 2025-11-15 15:47:03.666 00:00:10.370 TCP 23.104.0.1:44624 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:47:03.666 00:00:10.371 TCP 23.104.0.1:44624 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:47:17.816 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 10 6452 1 2025-11-15 15:47:17.815 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 10 6452 1 2025-11-15 15:43:02.231 00:05:55.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:47:56.831 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:47:56.680 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:47:56.679 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:47:56.831 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:43:57.539 00:05:04.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:48:04.105 00:00:10.370 TCP 23.104.0.1:37220 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:48:04.105 00:00:10.371 TCP 23.104.0.1:37220 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:48:18.056 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41182 10 6452 1 2025-11-15 15:48:18.056 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41182 10 6452 1 2025-11-15 15:49:04.515 00:00:10.366 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:49:04.514 00:00:10.366 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:49:18.269 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41552 10 6452 1 2025-11-15 15:49:18.269 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41552 10 6452 1 2025-11-15 15:50:04.918 00:00:10.370 TCP 23.104.0.1:48800 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:50:04.916 00:00:10.371 TCP 23.104.0.1:48800 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:50:18.483 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55916 10 6452 1 2025-11-15 15:50:18.483 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55916 10 6452 1 2025-11-15 15:51:05.326 00:00:10.442 TCP 23.104.0.1:54308 -> 1.101.0.1:3000 15 1926 1 2025-11-15 15:51:05.325 00:00:10.442 TCP 23.104.0.1:54308 -> 1.101.0.1:3000 15 1926 1 2025-11-15 15:51:18.695 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:50318 12 10375 1 2025-11-15 15:51:18.694 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:50318 12 10375 1 2025-11-15 15:47:57.543 00:05:04.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:47:57.544 00:05:04.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:52:05.806 00:00:10.364 TCP 23.104.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:52:05.806 00:00:10.364 TCP 23.104.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:52:18.892 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51110 10 6452 1 2025-11-15 15:52:18.892 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51110 10 6452 1 2025-11-15 15:52:56.440 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:52:56.610 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:52:56.439 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:52:56.610 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:53:06.208 00:00:10.364 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:53:06.206 00:00:10.365 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:53:19.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51030 10 6452 1 2025-11-15 15:53:19.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51030 10 6452 1 2025-11-15 15:49:02.235 00:05:55.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:49:57.541 00:05:04.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:54:06.609 00:00:10.325 TCP 23.104.0.1:36676 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:54:06.610 00:00:10.324 TCP 23.104.0.1:36676 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:54:19.316 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56458 10 6452 1 2025-11-15 15:54:19.315 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56458 10 6452 1 2025-11-15 15:55:06.971 00:00:10.382 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:55:06.970 00:00:10.383 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:55:19.526 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34436 10 6452 1 2025-11-15 15:55:19.526 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34436 10 6452 1 2025-11-15 15:56:07.398 00:00:10.448 TCP 23.104.0.1:39196 -> 1.101.0.1:3000 15 1926 1 2025-11-15 15:56:07.399 00:00:10.447 TCP 23.104.0.1:39196 -> 1.101.0.1:3000 15 1926 1 2025-11-15 15:56:19.746 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35072 12 10375 1 2025-11-15 15:56:19.745 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35072 12 10375 1 2025-11-15 15:57:07.884 00:00:10.394 TCP 23.104.0.1:58484 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:57:07.885 00:00:10.394 TCP 23.104.0.1:58484 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:57:19.983 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-11-15 15:57:19.983 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-11-15 15:57:56.870 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:57:56.763 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:57:56.871 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:57:56.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:53:57.547 00:05:04.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:53:57.547 00:05:04.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:58:08.321 00:00:12.533 TCP 23.104.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:58:08.321 00:00:12.532 TCP 23.104.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:58:20.217 00:00:19.851 TCP 1.101.0.1:3000 -> 22.102.0.1:39974 10 6452 1 2025-11-15 15:58:20.217 00:00:19.851 TCP 1.101.0.1:3000 -> 22.102.0.1:39974 10 6452 1 Summary: total flows: 328, total bytes: 1.0 M, total packets: 3172, avg bps: 2113, avg pps: 0, avg bpp: 319 Time window: 2025-11-15 14:55:02 - 2025-11-15 15:59:02 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0028s User: 0.0046s Wall: 0.0047s flows/second: 69271.5 Runtime: 0.0048s