Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 15:59:10.918 00:00:10.394 TCP 23.104.0.1:46068 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:59:10.917 00:00:10.395 TCP 23.104.0.1:46068 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:59:30.110 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52710 10 6452 1 2025-11-15 15:59:30.109 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52710 10 6452 1 2025-11-15 15:55:02.236 00:05:55.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:55:57.544 00:05:04.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:00:11.351 00:00:10.359 TCP 23.104.0.1:59930 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:00:11.351 00:00:10.359 TCP 23.104.0.1:59930 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:00:30.289 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37012 10 6452 1 2025-11-15 16:00:30.289 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37012 10 6452 1 2025-11-15 16:01:11.750 00:00:10.361 TCP 23.104.0.1:55020 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:01:11.750 00:00:10.360 TCP 23.104.0.1:55020 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:01:30.498 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58706 10 6452 1 2025-11-15 16:01:30.498 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58706 10 6452 1 2025-11-15 16:02:12.150 00:00:10.324 TCP 23.104.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:02:12.151 00:00:10.324 TCP 23.104.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:02:30.724 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44318 10 6452 1 2025-11-15 16:02:30.724 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44318 10 6452 1 2025-11-15 16:02:56.669 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:02:56.759 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:02:56.760 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:02:56.667 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:03:12.514 00:00:10.321 TCP 23.104.0.1:59102 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:03:12.515 00:00:10.321 TCP 23.104.0.1:59102 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:03:30.939 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:47160 10 6452 1 2025-11-15 16:03:30.938 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:47160 10 6452 1 2025-11-15 15:59:57.547 00:05:04.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:59:57.548 00:05:04.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:04:12.877 00:00:10.360 TCP 23.104.0.1:44388 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:04:12.878 00:00:10.360 TCP 23.104.0.1:44388 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:04:31.187 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40396 10 6452 1 2025-11-15 16:04:31.188 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40396 10 6452 1 2025-11-15 16:05:13.288 00:00:10.364 TCP 23.104.0.1:51378 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:05:13.289 00:00:10.364 TCP 23.104.0.1:51378 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:05:31.403 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54064 10 6452 1 2025-11-15 16:05:31.404 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54064 10 6452 1 2025-11-15 16:01:02.239 00:05:55.308 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:01:57.545 00:05:04.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:06:13.694 00:00:10.362 TCP 23.104.0.1:40580 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:06:13.694 00:00:10.362 TCP 23.104.0.1:40580 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:06:31.619 00:00:10.554 TCP 1.101.0.1:3000 -> 22.102.0.1:52126 10 6452 1 2025-11-15 16:06:31.619 00:00:10.554 TCP 1.101.0.1:3000 -> 22.102.0.1:52126 10 6452 1 2025-11-15 16:07:14.109 00:00:10.324 TCP 23.104.0.1:36052 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:07:14.108 00:00:10.323 TCP 23.104.0.1:36052 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:07:32.215 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47830 10 6452 1 2025-11-15 16:07:32.213 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47830 10 6452 1 2025-11-15 16:07:57.025 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:07:56.701 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:07:57.024 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:07:56.701 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:08:14.471 00:00:10.367 TCP 23.104.0.1:33802 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:08:14.472 00:00:10.367 TCP 23.104.0.1:33802 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:08:32.429 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51346 10 6452 1 2025-11-15 16:08:32.429 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51346 10 6452 1 2025-11-15 16:09:14.875 00:00:10.365 TCP 23.104.0.1:41216 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:09:14.876 00:00:10.364 TCP 23.104.0.1:41216 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:09:32.678 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47468 10 6452 1 2025-11-15 16:09:32.677 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47468 10 6452 1 2025-11-15 16:05:57.548 00:05:04.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:05:57.547 00:05:04.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:10:15.278 00:00:10.369 TCP 23.104.0.1:49736 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:10:15.279 00:00:10.368 TCP 23.104.0.1:49736 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:10:32.902 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57786 10 6452 1 2025-11-15 16:10:32.902 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57786 10 6452 1 2025-11-15 16:11:15.681 00:00:10.368 TCP 23.104.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:11:15.682 00:00:10.368 TCP 23.104.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:11:33.121 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36700 10 6452 1 2025-11-15 16:11:33.123 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36700 10 6452 1 2025-11-15 16:07:02.238 00:05:55.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:07:57.546 00:05:04.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:12:16.107 00:00:10.324 TCP 23.104.0.1:44674 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:12:16.106 00:00:10.324 TCP 23.104.0.1:44674 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:12:33.348 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-11-15 16:12:33.348 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-11-15 16:12:56.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:12:56.982 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:12:56.979 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:12:56.981 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:13:16.469 00:00:10.360 TCP 23.104.0.1:49098 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:13:16.468 00:00:10.361 TCP 23.104.0.1:49098 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:13:33.559 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48336 12 6556 1 2025-11-15 16:13:33.559 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48336 12 6556 1 2025-11-15 16:14:16.868 00:00:10.366 TCP 23.104.0.1:53788 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:14:16.868 00:00:10.366 TCP 23.104.0.1:53788 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:14:33.779 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58134 10 6452 1 2025-11-15 16:14:33.779 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58134 10 6452 1 2025-11-15 16:15:17.274 00:00:10.370 TCP 23.104.0.1:34374 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:15:17.275 00:00:10.369 TCP 23.104.0.1:34374 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:15:33.999 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55076 10 6452 1 2025-11-15 16:15:33.998 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55076 10 6452 1 2025-11-15 16:11:57.550 00:05:04.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:11:57.550 00:05:04.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:16:17.680 00:00:10.367 TCP 23.104.0.1:47240 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:16:17.680 00:00:10.366 TCP 23.104.0.1:47240 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:16:34.232 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49834 10 6452 1 2025-11-15 16:16:34.231 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49834 10 6452 1 2025-11-15 16:17:18.110 00:00:10.324 TCP 23.104.0.1:59820 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:17:18.109 00:00:10.324 TCP 23.104.0.1:59820 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:17:34.459 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36646 10 6452 1 2025-11-15 16:17:34.460 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36646 10 6452 1 2025-11-15 16:17:56.998 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:13:02.243 00:05:55.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:17:57.204 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:17:57.204 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:17:56.998 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:13:57.548 00:05:04.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:18:18.474 00:00:10.367 TCP 23.104.0.1:56436 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:18:18.475 00:00:10.367 TCP 23.104.0.1:56436 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:18:34.673 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38918 10 6452 1 2025-11-15 16:18:34.673 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38918 10 6452 1 2025-11-15 16:19:18.882 00:00:10.334 TCP 23.104.0.1:43338 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:19:18.882 00:00:10.334 TCP 23.104.0.1:43338 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:19:34.896 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41192 10 6452 1 2025-11-15 16:19:34.896 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41192 10 6452 1 2025-11-15 16:20:19.259 00:00:10.365 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:20:19.259 00:00:10.365 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:20:35.120 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:58658 10 6452 1 2025-11-15 16:20:35.119 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:58658 10 6452 1 2025-11-15 16:21:19.664 00:00:10.368 TCP 23.104.0.1:51480 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:21:19.664 00:00:10.368 TCP 23.104.0.1:51480 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:21:35.498 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36310 10 6452 1 2025-11-15 16:21:35.496 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36310 10 6452 1 2025-11-15 16:17:57.550 00:05:04.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:17:57.551 00:05:04.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:22:20.097 00:00:10.365 TCP 23.104.0.1:56408 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:22:20.097 00:00:10.366 TCP 23.104.0.1:56408 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:22:35.719 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36504 10 6452 1 2025-11-15 16:22:35.720 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36504 10 6452 1 2025-11-15 16:22:56.900 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:22:57.154 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:22:56.901 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:22:57.154 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:23:20.501 00:00:10.376 TCP 23.104.0.1:40826 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:23:20.501 00:00:10.376 TCP 23.104.0.1:40826 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:23:35.938 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:60996 10 6452 1 2025-11-15 16:23:35.938 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:60996 10 6452 1 2025-11-15 16:19:02.244 00:05:55.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:19:57.549 00:05:04.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:24:20.916 00:00:10.708 TCP 23.104.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:24:20.916 00:00:10.709 TCP 23.104.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:24:36.184 00:00:12.605 TCP 1.101.0.1:3000 -> 22.102.0.1:54898 10 6452 1 2025-11-15 16:24:36.186 00:00:12.605 TCP 1.101.0.1:3000 -> 22.102.0.1:54898 10 6452 1 2025-11-15 16:25:21.675 00:00:10.368 TCP 23.104.0.1:42038 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:25:21.675 00:00:10.369 TCP 23.104.0.1:42038 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:25:38.828 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33892 10 6452 1 2025-11-15 16:25:38.828 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33892 10 6452 1 2025-11-15 16:26:22.103 00:00:10.364 TCP 23.104.0.1:49524 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:26:22.103 00:00:10.363 TCP 23.104.0.1:49524 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:26:39.059 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45192 10 6452 1 2025-11-15 16:26:39.060 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45192 10 6452 1 2025-11-15 16:27:22.506 00:00:10.363 TCP 23.104.0.1:36928 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:27:22.507 00:00:10.362 TCP 23.104.0.1:36928 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:27:39.266 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60876 10 6452 1 2025-11-15 16:27:39.266 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60876 10 6452 1 2025-11-15 16:27:57.509 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:27:57.477 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:27:57.475 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:27:57.509 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:23:57.552 00:05:04.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:23:57.551 00:05:04.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:28:22.909 00:00:10.364 TCP 23.104.0.1:59966 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:28:22.911 00:00:10.364 TCP 23.104.0.1:59966 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:28:39.443 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47090 10 6452 1 2025-11-15 16:28:39.443 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47090 10 6452 1 2025-11-15 16:29:23.312 00:00:10.366 TCP 23.104.0.1:59316 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:29:23.311 00:00:10.366 TCP 23.104.0.1:59316 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:29:39.662 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41500 10 6452 1 2025-11-15 16:29:39.663 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41500 10 6452 1 2025-11-15 16:25:02.244 00:05:55.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:25:57.550 00:05:04.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:30:23.719 00:00:10.373 TCP 23.104.0.1:42986 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:30:23.719 00:00:10.373 TCP 23.104.0.1:42986 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:30:39.877 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54484 10 6452 1 2025-11-15 16:30:39.877 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54484 10 6452 1 2025-11-15 16:31:24.130 00:00:10.370 TCP 23.104.0.1:59080 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:31:24.130 00:00:10.370 TCP 23.104.0.1:59080 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:31:40.102 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43498 10 6452 1 2025-11-15 16:31:40.101 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43498 10 6452 1 2025-11-15 16:32:24.536 00:00:10.324 TCP 23.104.0.1:46514 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:32:24.537 00:00:10.324 TCP 23.104.0.1:46514 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:32:40.312 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44004 10 6452 1 2025-11-15 16:32:40.311 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44004 10 6452 1 2025-11-15 16:32:57.407 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:32:57.575 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:32:57.406 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:32:57.576 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:33:24.905 00:00:10.372 TCP 23.104.0.1:35862 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:33:24.904 00:00:10.373 TCP 23.104.0.1:35862 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:33:40.523 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40780 10 6452 1 2025-11-15 16:33:40.524 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40780 10 6452 1 2025-11-15 16:29:57.553 00:05:04.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:29:57.553 00:05:04.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:34:25.315 00:00:10.367 TCP 23.104.0.1:52156 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:34:25.315 00:00:10.367 TCP 23.104.0.1:52156 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:34:40.736 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50594 10 6452 1 2025-11-15 16:34:40.736 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50594 10 6452 1 2025-11-15 16:35:25.720 00:00:10.375 TCP 23.104.0.1:54744 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:35:25.719 00:00:10.376 TCP 23.104.0.1:54744 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:35:40.908 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37336 10 6452 1 2025-11-15 16:35:40.908 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37336 10 6452 1 2025-11-15 16:31:02.248 00:05:55.304 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:31:57.551 00:05:04.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:36:26.136 00:00:10.686 TCP 23.104.0.1:46978 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:36:26.135 00:00:10.687 TCP 23.104.0.1:46978 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:36:41.124 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33850 10 6452 1 2025-11-15 16:36:41.122 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33850 10 6452 1 2025-11-15 16:37:26.859 00:00:10.380 TCP 23.104.0.1:47762 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:37:26.860 00:00:10.381 TCP 23.104.0.1:47762 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:37:41.339 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35552 10 6452 1 2025-11-15 16:37:41.338 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35552 10 6452 1 2025-11-15 16:37:57.569 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:37:57.638 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:37:57.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:37:57.569 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:38:27.278 00:00:10.363 TCP 23.104.0.1:55438 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:38:27.278 00:00:10.363 TCP 23.104.0.1:55438 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:38:41.547 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43398 10 6452 1 2025-11-15 16:38:41.547 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43398 10 6452 1 2025-11-15 16:39:27.678 00:00:10.515 TCP 23.104.0.1:58302 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:39:27.678 00:00:10.515 TCP 23.104.0.1:58302 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:35:57.553 00:05:04.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:39:41.760 00:00:21.147 TCP 1.101.0.1:3000 -> 22.102.0.1:47356 10 6452 1 2025-11-15 16:39:41.760 00:00:21.147 TCP 1.101.0.1:3000 -> 22.102.0.1:47356 10 6452 1 2025-11-15 16:35:57.553 00:05:04.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:40:28.235 00:00:10.367 TCP 23.104.0.1:40830 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:40:28.234 00:00:10.367 TCP 23.104.0.1:40830 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:40:52.962 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:59732 12 10375 1 2025-11-15 16:40:52.963 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:59732 12 10375 1 2025-11-15 16:41:28.642 00:00:10.402 TCP 23.104.0.1:54690 -> 1.101.0.1:3000 15 1926 1 2025-11-15 16:41:28.642 00:00:10.403 TCP 23.104.0.1:54690 -> 1.101.0.1:3000 15 1926 1 2025-11-15 16:37:02.250 00:05:55.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:41:53.223 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:59016 10 6452 1 2025-11-15 16:41:53.222 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59016 10 6452 1 2025-11-15 16:37:57.551 00:05:04.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:42:29.110 00:00:10.325 TCP 23.104.0.1:39556 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:42:29.110 00:00:10.325 TCP 23.104.0.1:39556 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:42:57.752 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:42:57.655 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:42:57.753 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:42:57.655 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:42:53.402 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:47934 10 6452 1 2025-11-15 16:42:53.402 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:47934 10 6452 1 2025-11-15 16:43:29.469 00:00:10.367 TCP 23.104.0.1:55870 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:43:29.469 00:00:10.366 TCP 23.104.0.1:55870 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:43:53.661 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51718 10 6452 1 2025-11-15 16:43:53.661 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51718 10 6452 1 2025-11-15 16:44:29.875 00:00:10.364 TCP 23.104.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:44:29.876 00:00:10.364 TCP 23.104.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:44:53.875 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54152 10 6452 1 2025-11-15 16:44:53.875 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54152 10 6452 1 2025-11-15 16:45:30.279 00:00:10.364 TCP 23.104.0.1:59080 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:45:30.280 00:00:10.364 TCP 23.104.0.1:59080 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:41:57.556 00:05:04.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:45:54.099 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42484 10 6452 1 2025-11-15 16:41:57.557 00:05:04.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:45:54.099 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42484 10 6452 1 2025-11-15 16:46:30.683 00:00:10.371 TCP 23.104.0.1:55196 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:46:30.683 00:00:10.370 TCP 23.104.0.1:55196 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:46:54.310 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56500 10 6452 1 2025-11-15 16:46:54.310 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56500 10 6452 1 2025-11-15 16:47:31.100 00:00:10.364 TCP 23.104.0.1:37080 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:47:31.099 00:00:10.364 TCP 23.104.0.1:37080 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:43:02.250 00:05:55.308 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:47:57.584 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:47:57.857 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:47:57.584 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:47:57.857 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:47:54.521 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40954 10 6452 1 2025-11-15 16:47:54.522 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40954 10 6452 1 2025-11-15 16:43:57.555 00:05:04.700 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:48:31.500 00:00:10.378 TCP 23.104.0.1:54560 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:48:31.500 00:00:10.378 TCP 23.104.0.1:54560 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:48:54.738 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41814 10 6452 1 2025-11-15 16:48:54.738 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41814 10 6452 1 2025-11-15 16:49:31.908 00:00:10.365 TCP 23.104.0.1:43128 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:49:31.908 00:00:10.365 TCP 23.104.0.1:43128 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:49:54.958 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49870 10 6452 1 2025-11-15 16:49:54.958 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49870 10 6452 1 2025-11-15 16:50:32.309 00:00:10.367 TCP 23.104.0.1:45444 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:50:32.310 00:00:10.366 TCP 23.104.0.1:45444 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:50:55.186 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48196 10 6452 1 2025-11-15 16:50:55.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48196 10 6452 1 2025-11-15 16:51:32.715 00:00:10.329 TCP 23.104.0.1:57608 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:51:32.715 00:00:10.329 TCP 23.104.0.1:57608 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:47:57.560 00:05:04.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:47:57.560 00:05:04.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:51:55.399 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48678 10 6452 1 2025-11-15 16:51:55.399 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48678 10 6452 1 2025-11-15 16:52:33.116 00:00:10.372 TCP 23.104.0.1:52194 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:52:33.115 00:00:10.372 TCP 23.104.0.1:52194 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:52:57.717 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:52:57.610 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:52:57.611 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:52:57.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:52:55.609 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47490 10 6452 1 2025-11-15 16:52:55.610 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47490 10 6452 1 2025-11-15 16:53:33.526 00:00:10.371 TCP 23.104.0.1:55068 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:53:33.526 00:00:10.371 TCP 23.104.0.1:55068 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:49:02.256 00:05:55.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:53:55.819 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48930 10 6452 1 2025-11-15 16:49:57.559 00:05:04.706 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 16:53:55.819 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48930 10 6452 1 2025-11-15 16:54:33.930 00:00:10.385 TCP 23.104.0.1:48014 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:54:33.930 00:00:10.385 TCP 23.104.0.1:48014 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:54:56.042 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39128 10 6452 1 2025-11-15 16:54:56.042 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39128 10 6452 1 2025-11-15 16:55:34.355 00:00:10.365 TCP 23.104.0.1:41912 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:55:34.355 00:00:10.364 TCP 23.104.0.1:41912 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:55:56.258 00:00:11.028 TCP 1.101.0.1:3000 -> 22.102.0.1:40954 10 6452 1 2025-11-15 16:55:56.258 00:00:11.027 TCP 1.101.0.1:3000 -> 22.102.0.1:40954 10 6452 1 2025-11-15 16:56:34.757 00:00:10.382 TCP 23.104.0.1:54492 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:56:34.757 00:00:10.382 TCP 23.104.0.1:54492 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:56:57.322 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49346 10 6452 1 2025-11-15 16:56:57.322 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49346 10 6452 1 2025-11-15 16:57:35.180 00:00:10.367 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:57:35.180 00:00:10.366 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:57:58.004 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:57:57.984 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:57:58.005 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 16:57:57.985 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 16:53:57.562 00:05:04.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:53:57.562 00:05:04.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 16:57:57.538 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60990 10 6452 1 2025-11-15 16:57:57.539 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60990 10 6452 1 2025-11-15 16:58:35.583 00:00:10.363 TCP 23.104.0.1:41166 -> 1.101.0.1:3000 11 1507 1 2025-11-15 16:58:35.583 00:00:10.363 TCP 23.104.0.1:41166 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 326, total bytes: 992684, total packets: 3140, avg bps: 2068, avg pps: 0, avg bpp: 316 Time window: 2025-11-15 15:55:02 - 2025-11-15 16:59:02 Total flows processed: 326, passed: 326, Blocks skipped: 0, Bytes read: 33968 Sys: 0.0043s User: 0.0034s Wall: 0.0036s flows/second: 89779.6 Runtime: 0.0036s