Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 18:58:41.286 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50716 10 6452 1 2025-11-15 18:58:39.951 00:00:10.371 TCP 23.104.0.1:40130 -> 1.101.0.1:3000 11 1507 1 2025-11-15 18:58:41.286 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50716 10 6452 1 2025-11-15 18:55:02.319 00:05:55.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 18:59:40.359 00:00:23.619 TCP 23.104.0.1:59556 -> 1.101.0.1:3000 11 1507 1 2025-11-15 18:59:41.496 00:00:22.426 TCP 1.101.0.1:3000 -> 22.102.0.1:36828 10 6452 1 2025-11-15 18:59:41.498 00:00:22.427 TCP 1.101.0.1:3000 -> 22.102.0.1:36828 10 6452 1 2025-11-15 18:55:57.614 00:05:04.712 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 18:59:40.361 00:00:23.619 TCP 23.104.0.1:59556 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:00:53.967 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60174 10 6452 1 2025-11-15 19:00:54.018 00:00:10.363 TCP 23.104.0.1:44882 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:00:53.968 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60174 10 6452 1 2025-11-15 19:00:54.018 00:00:10.363 TCP 23.104.0.1:44882 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:01:54.200 00:00:13.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58908 10 6452 1 2025-11-15 19:01:54.425 00:00:13.033 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:01:54.200 00:00:13.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58908 10 6452 1 2025-11-15 19:01:54.425 00:00:13.033 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:03:00.558 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:03:00.493 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:03:00.558 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:02:57.499 00:00:10.366 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:03:00.492 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:02:57.426 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48694 10 6452 1 2025-11-15 19:02:57.499 00:00:10.366 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:02:57.427 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48694 10 6452 1 2025-11-15 18:59:57.615 00:05:04.704 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 18:59:57.615 00:05:04.704 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:03:57.899 00:00:10.369 TCP 23.104.0.1:51250 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:03:57.641 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-11-15 19:03:57.640 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-11-15 19:03:57.899 00:00:10.369 TCP 23.104.0.1:51250 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:04:58.307 00:00:10.361 TCP 23.104.0.1:55010 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:04:57.869 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:41362 10 6452 1 2025-11-15 19:04:57.869 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:41362 10 6452 1 2025-11-15 19:04:58.307 00:00:10.361 TCP 23.104.0.1:55010 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:01:02.325 00:05:55.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:01:57.613 00:05:04.709 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:05:58.120 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33478 10 6452 1 2025-11-15 19:05:58.707 00:00:10.321 TCP 23.104.0.1:45196 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:05:58.120 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33478 10 6452 1 2025-11-15 19:05:58.708 00:00:10.321 TCP 23.104.0.1:45196 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:06:59.093 00:00:10.328 TCP 23.104.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:06:58.338 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45488 10 6452 1 2025-11-15 19:06:58.337 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45488 10 6452 1 2025-11-15 19:06:59.094 00:00:10.328 TCP 23.104.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:08:00.376 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:08:00.581 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:08:00.582 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:08:00.376 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:07:58.508 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36484 10 6452 1 2025-11-15 19:07:59.456 00:00:10.363 TCP 23.104.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:07:59.455 00:00:10.363 TCP 23.104.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:07:58.508 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36484 10 6452 1 2025-11-15 19:08:58.717 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58760 10 6452 1 2025-11-15 19:08:59.857 00:00:10.569 TCP 23.104.0.1:36348 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:08:58.715 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58760 10 6452 1 2025-11-15 19:08:59.858 00:00:10.569 TCP 23.104.0.1:36348 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:05:57.616 00:05:04.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:05:57.616 00:05:04.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:09:58.927 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:49256 10 6452 1 2025-11-15 19:10:00.462 00:00:10.364 TCP 23.104.0.1:60640 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:09:58.928 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:49256 10 6452 1 2025-11-15 19:10:00.462 00:00:10.364 TCP 23.104.0.1:60640 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:10:59.125 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39474 10 6452 1 2025-11-15 19:10:59.124 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39474 10 6452 1 2025-11-15 19:11:00.870 00:00:10.363 TCP 23.104.0.1:40752 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:11:00.870 00:00:10.362 TCP 23.104.0.1:40752 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:07:02.322 00:05:55.293 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:07:57.615 00:05:04.716 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:11:59.306 00:00:10.577 TCP 1.101.0.1:3000 -> 22.102.0.1:39770 10 6452 1 2025-11-15 19:11:59.304 00:00:10.577 TCP 1.101.0.1:3000 -> 22.102.0.1:39770 10 6452 1 2025-11-15 19:12:01.271 00:00:10.953 TCP 23.104.0.1:41758 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:12:01.271 00:00:10.953 TCP 23.104.0.1:41758 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:13:00.594 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:13:00.751 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:13:00.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:13:00.595 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:12:59.918 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52628 10 6452 1 2025-11-15 19:12:59.919 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52628 10 6452 1 2025-11-15 19:13:02.263 00:00:10.323 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:13:02.262 00:00:10.323 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:14:00.142 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34532 10 6452 1 2025-11-15 19:14:00.142 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34532 10 6452 1 2025-11-15 19:14:02.619 00:00:10.325 TCP 23.104.0.1:53978 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:14:02.620 00:00:10.324 TCP 23.104.0.1:53978 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:15:00.360 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53484 10 6452 1 2025-11-15 19:15:02.978 00:00:10.389 TCP 23.104.0.1:42286 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:15:00.361 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53484 10 6452 1 2025-11-15 19:15:02.978 00:00:10.388 TCP 23.104.0.1:42286 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:11:57.618 00:05:04.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:11:57.617 00:05:04.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:16:00.548 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57574 10 6452 1 2025-11-15 19:16:03.408 00:00:10.323 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:16:00.550 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57574 10 6452 1 2025-11-15 19:16:03.408 00:00:10.324 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:17:00.769 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:33634 12 10375 1 2025-11-15 19:17:00.768 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:33634 12 10375 1 2025-11-15 19:17:03.771 00:00:10.424 TCP 23.104.0.1:54410 -> 1.101.0.1:3000 15 1926 1 2025-11-15 19:17:03.770 00:00:10.424 TCP 23.104.0.1:54410 -> 1.101.0.1:3000 15 1926 1 2025-11-15 19:18:00.460 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:18:00.935 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:13:02.330 00:05:55.286 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:18:00.460 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:18:00.936 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:13:57.615 00:05:04.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:18:01.012 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44518 10 6452 1 2025-11-15 19:18:04.233 00:00:10.364 TCP 23.104.0.1:52584 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:18:01.012 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44518 10 6452 1 2025-11-15 19:18:04.234 00:00:10.364 TCP 23.104.0.1:52584 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:19:01.226 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38466 10 6452 1 2025-11-15 19:19:01.226 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38466 10 6452 1 2025-11-15 19:19:04.641 00:00:10.369 TCP 23.104.0.1:51626 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:19:04.640 00:00:10.369 TCP 23.104.0.1:51626 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:20:01.433 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49486 10 6452 1 2025-11-15 19:20:01.433 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49486 10 6452 1 2025-11-15 19:20:05.047 00:00:10.375 TCP 23.104.0.1:55878 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:20:05.048 00:00:10.374 TCP 23.104.0.1:55878 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:21:01.609 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51924 10 6452 1 2025-11-15 19:21:01.610 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51924 10 6452 1 2025-11-15 19:21:05.454 00:00:10.374 TCP 23.104.0.1:55556 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:21:05.453 00:00:10.374 TCP 23.104.0.1:55556 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:17:57.620 00:05:04.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:17:57.619 00:05:04.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:22:01.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50592 10 6452 1 2025-11-15 19:22:01.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50592 10 6452 1 2025-11-15 19:22:05.872 00:00:10.367 TCP 23.104.0.1:38206 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:22:05.872 00:00:10.367 TCP 23.104.0.1:38206 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:23:00.912 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:23:00.912 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:23:01.084 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:23:01.084 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:23:02.049 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58874 10 6452 1 2025-11-15 19:23:02.049 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58874 10 6452 1 2025-11-15 19:23:06.281 00:00:10.365 TCP 23.104.0.1:39376 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:23:06.281 00:00:10.366 TCP 23.104.0.1:39376 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:19:02.334 00:05:55.284 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:19:57.616 00:05:04.724 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:24:02.292 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59638 10 6452 1 2025-11-15 19:24:02.293 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59638 10 6452 1 2025-11-15 19:24:06.688 00:00:10.367 TCP 23.104.0.1:58194 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:24:06.688 00:00:10.368 TCP 23.104.0.1:58194 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:25:02.523 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42326 10 6452 1 2025-11-15 19:25:02.524 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42326 10 6452 1 2025-11-15 19:25:07.102 00:00:10.366 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:25:07.102 00:00:10.367 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:26:02.699 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-11-15 19:26:02.699 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-11-15 19:26:07.506 00:00:10.420 TCP 23.104.0.1:36096 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:26:07.507 00:00:10.419 TCP 23.104.0.1:36096 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:27:02.911 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38318 10 6452 1 2025-11-15 19:27:02.911 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38318 10 6452 1 2025-11-15 19:27:07.970 00:00:10.338 TCP 23.104.0.1:38476 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:27:07.970 00:00:10.338 TCP 23.104.0.1:38476 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:28:00.769 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:28:01.019 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:28:00.770 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:23:57.620 00:05:04.719 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:23:57.620 00:05:04.719 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:28:01.020 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:28:03.125 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59002 10 6452 1 2025-11-15 19:28:03.123 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59002 10 6452 1 2025-11-15 19:28:08.352 00:00:10.366 TCP 23.104.0.1:49670 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:28:08.352 00:00:10.367 TCP 23.104.0.1:49670 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:29:03.336 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 6452 1 2025-11-15 19:29:03.335 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 6452 1 2025-11-15 19:29:08.757 00:00:10.378 TCP 23.104.0.1:55432 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:29:08.758 00:00:10.378 TCP 23.104.0.1:55432 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:25:02.342 00:05:55.278 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:25:57.617 00:05:04.725 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:30:03.557 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46002 10 6452 1 2025-11-15 19:30:03.556 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46002 10 6452 1 2025-11-15 19:30:09.168 00:00:10.379 TCP 23.104.0.1:44260 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:30:09.166 00:00:10.380 TCP 23.104.0.1:44260 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:31:03.770 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38948 10 6452 1 2025-11-15 19:31:03.769 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38948 10 6452 1 2025-11-15 19:31:09.591 00:00:10.441 TCP 23.104.0.1:33958 -> 1.101.0.1:3000 15 1926 1 2025-11-15 19:31:09.591 00:00:10.440 TCP 23.104.0.1:33958 -> 1.101.0.1:3000 15 1926 1 2025-11-15 19:32:03.987 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:38354 12 10369 1 2025-11-15 19:32:03.987 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:38354 12 10369 1 2025-11-15 19:32:10.099 00:00:10.472 TCP 23.104.0.1:40058 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:32:10.098 00:00:10.472 TCP 23.104.0.1:40058 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:33:01.504 00:00:00.219 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:33:01.987 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:33:01.505 00:00:00.219 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:33:01.987 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:33:04.228 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53270 10 6452 1 2025-11-15 19:33:04.228 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53270 10 6452 1 2025-11-15 19:33:10.605 00:00:10.323 TCP 23.104.0.1:49994 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:33:10.606 00:00:10.322 TCP 23.104.0.1:49994 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:29:57.620 00:05:04.720 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:29:57.620 00:05:04.719 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:34:04.444 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58886 10 6452 1 2025-11-15 19:34:04.444 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58886 10 6452 1 2025-11-15 19:34:10.970 00:00:10.370 TCP 23.104.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:34:10.971 00:00:10.369 TCP 23.104.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:35:04.673 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34910 10 6452 1 2025-11-15 19:35:04.673 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34910 10 6452 1 2025-11-15 19:35:11.381 00:00:10.364 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:35:11.380 00:00:10.364 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:31:02.342 00:05:55.279 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:31:57.618 00:05:04.724 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:36:04.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40928 10 6452 1 2025-11-15 19:36:04.846 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40928 10 6452 1 2025-11-15 19:36:11.784 00:00:10.377 TCP 23.104.0.1:40556 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:36:11.784 00:00:10.377 TCP 23.104.0.1:40556 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:37:05.093 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41622 10 6452 1 2025-11-15 19:37:05.092 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41622 10 6452 1 2025-11-15 19:37:12.192 00:00:10.327 TCP 23.104.0.1:57738 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:37:12.192 00:00:10.327 TCP 23.104.0.1:57738 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:38:00.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:38:01.025 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:38:00.834 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:38:01.026 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:38:05.307 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:44900 10 6452 1 2025-11-15 19:38:05.309 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:44900 10 6452 1 2025-11-15 19:38:12.558 00:00:10.362 TCP 23.104.0.1:44286 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:38:12.558 00:00:10.362 TCP 23.104.0.1:44286 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:39:05.484 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49348 10 6452 1 2025-11-15 19:39:05.483 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49348 10 6452 1 2025-11-15 19:39:12.958 00:00:10.382 TCP 23.104.0.1:46070 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:39:12.959 00:00:10.382 TCP 23.104.0.1:46070 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:35:57.622 00:05:04.718 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:35:57.622 00:05:04.719 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:40:05.716 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58244 10 6452 1 2025-11-15 19:40:05.717 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58244 10 6452 1 2025-11-15 19:40:13.392 00:00:10.359 TCP 23.104.0.1:48510 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:40:13.392 00:00:10.360 TCP 23.104.0.1:48510 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:41:05.935 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:50416 10 6452 1 2025-11-15 19:41:05.934 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:50416 10 6452 1 2025-11-15 19:41:13.801 00:00:10.368 TCP 23.104.0.1:57170 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:41:13.801 00:00:10.368 TCP 23.104.0.1:57170 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:37:02.343 00:05:55.278 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:37:57.619 00:05:04.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:42:06.169 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35786 10 6452 1 2025-11-15 19:42:06.169 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35786 10 6452 1 2025-11-15 19:42:14.212 00:00:10.371 TCP 23.104.0.1:49302 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:42:14.211 00:00:10.371 TCP 23.104.0.1:49302 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:43:01.003 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:43:01.169 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:43:01.167 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:43:01.003 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:43:06.384 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-11-15 19:43:06.385 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-11-15 19:43:14.627 00:00:10.421 TCP 23.104.0.1:39652 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:43:14.626 00:00:10.421 TCP 23.104.0.1:39652 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:44:06.597 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49010 10 6452 1 2025-11-15 19:44:06.598 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49010 10 6452 1 2025-11-15 19:44:15.104 00:00:10.364 TCP 23.104.0.1:34814 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:44:15.105 00:00:10.364 TCP 23.104.0.1:34814 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:45:06.785 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47536 10 6452 1 2025-11-15 19:45:06.784 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47536 10 6452 1 2025-11-15 19:45:15.506 00:00:10.367 TCP 23.104.0.1:43432 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:45:15.507 00:00:10.367 TCP 23.104.0.1:43432 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:41:57.623 00:05:04.720 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:41:57.624 00:05:04.721 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:46:06.958 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52690 12 6556 1 2025-11-15 19:46:06.958 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52690 12 6556 1 2025-11-15 19:46:15.913 00:00:10.326 TCP 23.104.0.1:34720 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:46:15.912 00:00:10.326 TCP 23.104.0.1:34720 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:47:07.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35440 10 6452 1 2025-11-15 19:47:07.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35440 10 6452 1 2025-11-15 19:47:16.277 00:00:17.329 TCP 23.104.0.1:60692 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:47:16.278 00:00:17.329 TCP 23.104.0.1:60692 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:43:02.346 00:05:55.276 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:48:01.159 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:48:01.456 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:48:01.456 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:48:01.160 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:43:57.623 00:05:04.725 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:48:07.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60720 10 6452 1 2025-11-15 19:48:07.393 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60720 10 6452 1 2025-11-15 19:48:23.656 00:00:10.359 TCP 23.104.0.1:56562 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:48:23.657 00:00:10.359 TCP 23.104.0.1:56562 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:49:07.611 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53804 10 6452 1 2025-11-15 19:49:07.611 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53804 10 6452 1 2025-11-15 19:49:24.058 00:00:10.321 TCP 23.104.0.1:51756 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:49:24.058 00:00:10.321 TCP 23.104.0.1:51756 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:50:07.782 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37576 10 6452 1 2025-11-15 19:50:07.782 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37576 10 6452 1 2025-11-15 19:50:24.414 00:00:10.363 TCP 23.104.0.1:38970 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:50:24.414 00:00:10.362 TCP 23.104.0.1:38970 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:51:07.962 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:51458 12 10375 1 2025-11-15 19:51:07.960 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:51458 12 10375 1 2025-11-15 19:51:24.820 00:00:10.438 TCP 23.104.0.1:49236 -> 1.101.0.1:3000 15 1926 1 2025-11-15 19:51:24.821 00:00:10.438 TCP 23.104.0.1:49236 -> 1.101.0.1:3000 15 1926 1 2025-11-15 19:47:57.625 00:05:04.721 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:47:57.625 00:05:04.721 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:52:08.231 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53734 10 6452 1 2025-11-15 19:52:08.231 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53734 10 6452 1 2025-11-15 19:52:25.298 00:00:10.365 TCP 23.104.0.1:59466 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:52:25.298 00:00:10.365 TCP 23.104.0.1:59466 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:53:01.504 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:53:01.603 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:53:01.503 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:53:01.602 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:53:08.444 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54082 10 6452 1 2025-11-15 19:53:08.446 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54082 10 6452 1 2025-11-15 19:53:25.704 00:00:10.361 TCP 23.104.0.1:59774 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:53:25.703 00:00:10.361 TCP 23.104.0.1:59774 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:49:02.347 00:05:55.276 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:49:57.623 00:05:04.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 19:54:08.615 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59270 10 6452 1 2025-11-15 19:54:08.615 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59270 10 6452 1 2025-11-15 19:54:26.105 00:00:10.327 TCP 23.104.0.1:57216 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:54:26.105 00:00:10.327 TCP 23.104.0.1:57216 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:55:08.829 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:39750 10 6452 1 2025-11-15 19:55:08.829 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:39750 10 6452 1 2025-11-15 19:55:26.474 00:00:10.365 TCP 23.104.0.1:50416 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:55:26.474 00:00:10.365 TCP 23.104.0.1:50416 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:56:09.001 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:40116 10 6452 1 2025-11-15 19:56:09.002 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:40116 10 6452 1 2025-11-15 19:56:26.874 00:00:10.328 TCP 23.104.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:56:26.874 00:00:10.329 TCP 23.104.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:57:09.193 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41312 10 6452 1 2025-11-15 19:57:09.193 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41312 10 6452 1 2025-11-15 19:57:27.240 00:00:10.379 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:57:27.239 00:00:10.380 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:58:01.511 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:58:01.382 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:53:57.625 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:53:57.626 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 19:58:01.383 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 19:58:01.512 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 19:58:09.414 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40128 10 6452 1 2025-11-15 19:58:09.415 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40128 10 6452 1 2025-11-15 19:58:27.653 00:00:10.366 TCP 23.104.0.1:40198 -> 1.101.0.1:3000 11 1507 1 2025-11-15 19:58:27.653 00:00:10.366 TCP 23.104.0.1:40198 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 327, total bytes: 1.0 M, total packets: 3173, avg bps: 2127, avg pps: 0, avg bpp: 321 Time window: 2025-11-15 18:55:02 - 2025-11-15 19:59:02 Total flows processed: 327, passed: 327, Blocks skipped: 0, Bytes read: 34072 Sys: 0.0045s User: 0.0022s Wall: 0.0040s flows/second: 81829.1 Runtime: 0.0040s