Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 14:58:54.910 00:00:10.365 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:58:54.911 00:00:10.365 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:59:10.500 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57826 10 6452 1 2025-11-16 14:59:10.500 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57826 10 6452 1 2025-11-16 14:55:02.853 00:05:55.271 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:55:02.855 00:05:55.271 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:59:55.311 00:00:10.366 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:59:55.312 00:00:10.365 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:00:10.722 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49880 10 6452 1 2025-11-16 15:00:10.722 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49880 10 6452 1 2025-11-16 15:00:55.716 00:00:10.375 TCP 23.104.0.1:47788 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:00:55.717 00:00:10.375 TCP 23.104.0.1:47788 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:01:10.900 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:57670 10 6452 1 2025-11-16 15:01:10.899 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:57670 10 6452 1 2025-11-16 15:01:56.123 00:00:10.368 TCP 23.104.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:01:56.124 00:00:10.368 TCP 23.104.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:02:11.172 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-11-16 15:02:11.173 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-11-16 15:02:56.527 00:00:10.364 TCP 23.104.0.1:49250 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:02:56.527 00:00:10.364 TCP 23.104.0.1:49250 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:03:11.388 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:34912 10 6452 1 2025-11-16 15:03:24.565 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:03:24.686 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:03:24.686 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:03:11.388 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:34912 10 6452 1 2025-11-16 15:03:24.565 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:59:58.126 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 14:59:58.127 00:05:04.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:03:56.928 00:00:10.379 TCP 23.104.0.1:33238 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:03:56.928 00:00:10.378 TCP 23.104.0.1:33238 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:04:11.679 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57770 10 6452 1 2025-11-16 15:04:11.678 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57770 10 6452 1 2025-11-16 15:04:57.351 00:00:10.326 TCP 23.104.0.1:52472 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:04:57.351 00:00:10.325 TCP 23.104.0.1:52472 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:05:11.884 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43102 10 6452 1 2025-11-16 15:05:11.886 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43102 10 6452 1 2025-11-16 15:01:02.855 00:05:55.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:01:02.857 00:05:55.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:05:57.717 00:00:10.381 TCP 23.104.0.1:33604 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:05:57.717 00:00:10.382 TCP 23.104.0.1:33604 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:06:12.119 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36798 10 6452 1 2025-11-16 15:06:12.119 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36798 10 6452 1 2025-11-16 15:06:58.133 00:00:10.367 TCP 23.104.0.1:58566 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:06:58.134 00:00:10.367 TCP 23.104.0.1:58566 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:07:12.339 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41428 10 6452 1 2025-11-16 15:07:12.338 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41428 10 6452 1 2025-11-16 15:07:58.539 00:00:10.324 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:07:58.539 00:00:10.325 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:08:12.564 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44500 10 6452 1 2025-11-16 15:08:24.586 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:08:24.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:08:24.567 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:08:12.564 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44500 10 6452 1 2025-11-16 15:08:24.586 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:08:58.901 00:00:10.367 TCP 23.104.0.1:36596 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:08:58.902 00:00:10.367 TCP 23.104.0.1:36596 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:09:12.773 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59796 10 6452 1 2025-11-16 15:09:12.775 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59796 10 6452 1 2025-11-16 15:05:58.127 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:05:58.127 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:09:59.312 00:00:10.360 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:09:59.311 00:00:10.361 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:10:12.986 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-11-16 15:10:12.987 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-11-16 15:10:59.716 00:00:10.465 TCP 23.104.0.1:57006 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:10:59.717 00:00:10.465 TCP 23.104.0.1:57006 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:11:13.202 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58606 10 6452 1 2025-11-16 15:11:13.202 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58606 10 6452 1 2025-11-16 15:07:02.855 00:05:55.270 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:07:02.858 00:05:55.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:12:00.219 00:00:10.361 TCP 23.104.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:12:00.219 00:00:10.360 TCP 23.104.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:12:13.413 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36736 10 6452 1 2025-11-16 15:12:13.413 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36736 10 6452 1 2025-11-16 15:13:00.623 00:00:10.321 TCP 23.104.0.1:57386 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:13:00.623 00:00:10.320 TCP 23.104.0.1:57386 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:13:24.668 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:13:13.636 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40422 10 6452 1 2025-11-16 15:13:24.834 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:13:13.636 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40422 10 6452 1 2025-11-16 15:13:24.668 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:13:24.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:14:00.986 00:00:10.361 TCP 23.104.0.1:59282 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:14:00.986 00:00:10.360 TCP 23.104.0.1:59282 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:14:13.860 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-11-16 15:14:13.859 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-11-16 15:15:01.385 00:00:10.362 TCP 23.104.0.1:49868 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:15:01.387 00:00:10.361 TCP 23.104.0.1:49868 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:15:14.104 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40546 10 6452 1 2025-11-16 15:15:14.104 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40546 10 6452 1 2025-11-16 15:11:58.129 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:11:58.129 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:16:01.786 00:00:10.372 TCP 23.104.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:16:01.786 00:00:10.373 TCP 23.104.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:16:14.282 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43142 10 6452 1 2025-11-16 15:16:14.281 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43142 10 6452 1 2025-11-16 15:17:02.197 00:00:10.439 TCP 23.104.0.1:54322 -> 1.101.0.1:3000 15 1926 1 2025-11-16 15:17:02.196 00:00:10.439 TCP 23.104.0.1:54322 -> 1.101.0.1:3000 15 1926 1 2025-11-16 15:17:14.493 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36444 12 10578 1 2025-11-16 15:17:14.493 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36444 12 10578 1 2025-11-16 15:13:02.858 00:05:55.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:13:02.859 00:05:55.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:18:02.676 00:00:10.364 TCP 23.104.0.1:49546 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:18:02.677 00:00:10.364 TCP 23.104.0.1:49546 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:18:14.729 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6661 1 2025-11-16 15:18:24.715 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:18:24.778 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:18:24.778 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:18:14.731 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6661 1 2025-11-16 15:18:24.716 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:19:03.106 00:00:11.178 TCP 23.104.0.1:45982 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:19:03.106 00:00:11.177 TCP 23.104.0.1:45982 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:19:14.944 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:40084 10 6661 1 2025-11-16 15:19:14.945 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:40084 10 6661 1 2025-11-16 15:20:04.317 00:00:10.374 TCP 23.104.0.1:57084 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:20:04.315 00:00:10.374 TCP 23.104.0.1:57084 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:20:15.304 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33910 10 6661 1 2025-11-16 15:20:15.303 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33910 10 6661 1 2025-11-16 15:21:04.725 00:00:10.368 TCP 23.104.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:21:04.726 00:00:10.369 TCP 23.104.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:21:15.517 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52748 10 6661 1 2025-11-16 15:21:15.518 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52748 10 6661 1 2025-11-16 15:17:58.129 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:17:58.129 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:22:05.129 00:00:11.181 TCP 23.104.0.1:39640 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:22:05.130 00:00:11.181 TCP 23.104.0.1:39640 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:22:15.733 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6661 1 2025-11-16 15:22:15.735 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6661 1 2025-11-16 15:23:06.365 00:00:10.366 TCP 23.104.0.1:58492 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:23:06.366 00:00:10.365 TCP 23.104.0.1:58492 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:23:25.019 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:23:25.138 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:23:25.020 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:23:15.953 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33546 10 6661 1 2025-11-16 15:23:25.138 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:23:15.954 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33546 10 6661 1 2025-11-16 15:19:02.858 00:05:55.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:19:02.860 00:05:55.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:24:06.771 00:00:10.369 TCP 23.104.0.1:56418 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:24:06.771 00:00:10.369 TCP 23.104.0.1:56418 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:24:16.178 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50026 10 6661 1 2025-11-16 15:24:16.178 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50026 10 6661 1 2025-11-16 15:25:07.175 00:00:10.366 TCP 23.104.0.1:53112 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:25:07.175 00:00:10.366 TCP 23.104.0.1:53112 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:25:16.351 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41468 10 6661 1 2025-11-16 15:25:16.352 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41468 10 6661 1 2025-11-16 15:26:07.587 00:00:10.364 TCP 23.104.0.1:32982 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:26:07.586 00:00:10.364 TCP 23.104.0.1:32982 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:26:16.524 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49066 10 6661 1 2025-11-16 15:26:16.524 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49066 10 6661 1 2025-11-16 15:27:07.993 00:00:10.473 TCP 23.104.0.1:53028 -> 1.101.0.1:3000 17 2241 1 2025-11-16 15:27:07.994 00:00:10.473 TCP 23.104.0.1:53028 -> 1.101.0.1:3000 17 2241 1 2025-11-16 15:27:16.737 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:49078 14 14925 1 2025-11-16 15:27:16.738 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:49078 14 14925 1 2025-11-16 15:23:58.129 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:23:58.129 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:28:08.510 00:00:10.804 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:28:24.705 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:28:08.509 00:00:10.804 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:28:25.028 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:28:25.027 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:28:17.009 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58388 10 7079 1 2025-11-16 15:28:24.706 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:28:17.010 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58388 10 7079 1 2025-11-16 15:29:09.352 00:00:10.365 TCP 23.104.0.1:45740 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:29:09.352 00:00:10.365 TCP 23.104.0.1:45740 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:29:17.225 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35724 10 7079 1 2025-11-16 15:29:17.225 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35724 10 7079 1 2025-11-16 15:25:02.860 00:05:55.270 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:25:02.860 00:05:55.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:30:09.764 00:00:10.340 TCP 23.104.0.1:45590 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:30:09.762 00:00:10.340 TCP 23.104.0.1:45590 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:30:17.447 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:33512 10 7079 1 2025-11-16 15:30:17.448 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:33512 10 7079 1 2025-11-16 15:31:10.173 00:00:10.366 TCP 23.104.0.1:46558 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:31:10.174 00:00:10.366 TCP 23.104.0.1:46558 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:31:17.651 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41776 10 7079 1 2025-11-16 15:31:17.650 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41776 10 7079 1 2025-11-16 15:32:10.575 00:00:11.005 TCP 23.104.0.1:36836 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:32:10.575 00:00:11.005 TCP 23.104.0.1:36836 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:32:17.862 00:00:10.591 TCP 1.101.0.1:3000 -> 22.102.0.1:59252 13 7518 1 2025-11-16 15:32:17.861 00:00:10.591 TCP 1.101.0.1:3000 -> 22.102.0.1:59252 13 7518 1 2025-11-16 15:33:11.615 00:00:10.373 TCP 23.104.0.1:52552 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:33:24.840 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:33:25.037 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:33:11.615 00:00:10.373 TCP 23.104.0.1:52552 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:33:25.037 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:33:24.839 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:33:18.491 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39176 10 7079 1 2025-11-16 15:33:18.492 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39176 10 7079 1 2025-11-16 15:29:58.132 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:29:58.132 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:34:12.026 00:00:10.365 TCP 23.104.0.1:51896 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:34:12.025 00:00:10.365 TCP 23.104.0.1:51896 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:34:18.705 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 7079 1 2025-11-16 15:34:18.705 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 7079 1 2025-11-16 15:35:12.430 00:00:10.324 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:35:12.432 00:00:10.323 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:35:18.927 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:41770 10 7079 1 2025-11-16 15:35:18.927 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:41770 10 7079 1 2025-11-16 15:31:02.862 00:05:55.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:31:02.862 00:05:55.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:36:12.797 00:00:11.101 TCP 23.104.0.1:39554 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:36:12.799 00:00:11.100 TCP 23.104.0.1:39554 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:36:19.186 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50192 10 7079 1 2025-11-16 15:36:19.186 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50192 10 7079 1 2025-11-16 15:37:13.937 00:00:10.384 TCP 23.104.0.1:46488 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:37:13.937 00:00:10.384 TCP 23.104.0.1:46488 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:37:19.360 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50236 10 7079 1 2025-11-16 15:37:19.361 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50236 10 7079 1 2025-11-16 15:38:14.349 00:00:10.365 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:38:25.193 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:38:14.349 00:00:10.365 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:38:25.193 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:38:25.009 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:38:19.577 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 7079 1 2025-11-16 15:38:25.008 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:38:19.576 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 7079 1 2025-11-16 15:39:14.753 00:00:10.377 TCP 23.104.0.1:34400 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:39:14.753 00:00:10.376 TCP 23.104.0.1:34400 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:39:19.801 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55962 10 7079 1 2025-11-16 15:39:19.801 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55962 10 7079 1 2025-11-16 15:35:58.136 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:35:58.138 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:40:15.169 00:00:10.364 TCP 23.104.0.1:53946 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:40:15.169 00:00:10.364 TCP 23.104.0.1:53946 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:40:20.033 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 7079 1 2025-11-16 15:40:20.032 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 7079 1 2025-11-16 15:41:15.575 00:00:13.686 TCP 23.104.0.1:45754 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:41:20.251 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43738 10 7079 1 2025-11-16 15:41:15.576 00:00:13.686 TCP 23.104.0.1:45754 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:41:20.250 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:43738 10 7079 1 2025-11-16 15:37:02.863 00:05:55.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:37:02.863 00:05:55.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:42:19.310 00:00:10.369 TCP 23.104.0.1:50268 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:42:20.435 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41658 10 7079 1 2025-11-16 15:42:19.310 00:00:10.369 TCP 23.104.0.1:50268 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:42:20.435 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41658 10 7079 1 2025-11-16 15:43:25.672 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:43:20.652 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49088 10 7079 1 2025-11-16 15:43:25.637 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:43:19.714 00:00:10.363 TCP 23.104.0.1:58284 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:43:25.637 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:43:19.714 00:00:10.363 TCP 23.104.0.1:58284 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:43:25.674 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:43:20.653 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49088 10 7079 1 2025-11-16 15:44:20.118 00:00:10.330 TCP 23.104.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:44:20.869 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48794 10 7079 1 2025-11-16 15:44:20.118 00:00:10.330 TCP 23.104.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:44:20.869 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48794 10 7079 1 2025-11-16 15:45:20.492 00:00:10.368 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:45:20.491 00:00:10.369 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:45:21.102 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50326 10 7079 1 2025-11-16 15:45:21.103 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50326 10 7079 1 2025-11-16 15:41:58.138 00:05:04.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:41:58.137 00:05:04.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:46:20.896 00:00:10.628 TCP 23.104.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:46:21.283 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47158 10 7079 1 2025-11-16 15:46:21.283 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47158 10 7079 1 2025-11-16 15:46:20.894 00:00:10.629 TCP 23.104.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:47:21.561 00:00:10.361 TCP 23.104.0.1:39718 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:47:21.500 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48446 10 7079 1 2025-11-16 15:47:21.500 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48446 10 7079 1 2025-11-16 15:47:21.560 00:00:10.362 TCP 23.104.0.1:39718 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:43:02.864 00:05:55.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:43:02.863 00:05:55.274 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:48:25.430 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:48:25.431 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:48:25.431 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:48:25.430 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:48:21.964 00:00:10.368 TCP 23.104.0.1:59498 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:48:21.721 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45080 10 7079 1 2025-11-16 15:48:21.722 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45080 10 7079 1 2025-11-16 15:48:21.964 00:00:10.368 TCP 23.104.0.1:59498 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:49:22.372 00:00:10.362 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:49:21.941 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:35560 10 7079 1 2025-11-16 15:49:22.372 00:00:10.362 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:49:21.941 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:35560 10 7079 1 2025-11-16 15:50:22.769 00:00:10.378 TCP 23.104.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:50:22.138 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53108 10 7079 1 2025-11-16 15:50:22.771 00:00:10.377 TCP 23.104.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:50:22.139 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53108 10 7079 1 2025-11-16 15:51:23.188 00:00:10.325 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:51:22.352 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 7079 1 2025-11-16 15:51:22.351 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 7079 1 2025-11-16 15:51:23.186 00:00:10.325 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:47:58.138 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:47:58.139 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:52:22.568 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33286 10 7079 1 2025-11-16 15:52:23.549 00:00:10.365 TCP 23.104.0.1:46370 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:52:22.566 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33286 10 7079 1 2025-11-16 15:52:23.550 00:00:10.365 TCP 23.104.0.1:46370 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:53:25.150 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:53:25.503 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:53:25.149 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:53:25.502 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:53:22.787 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38912 10 7079 1 2025-11-16 15:53:23.954 00:00:11.279 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:53:22.786 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38912 10 7079 1 2025-11-16 15:53:23.954 00:00:11.280 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:49:02.867 00:05:55.277 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:49:02.866 00:05:55.278 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:54:23.013 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 7079 1 2025-11-16 15:54:23.013 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 7079 1 2025-11-16 15:54:25.268 00:00:10.328 TCP 23.104.0.1:60290 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:54:25.268 00:00:10.327 TCP 23.104.0.1:60290 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:55:23.232 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49674 10 7079 1 2025-11-16 15:55:23.232 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49674 10 7079 1 2025-11-16 15:55:25.637 00:00:10.363 TCP 23.104.0.1:50400 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:55:25.636 00:00:10.363 TCP 23.104.0.1:50400 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:56:23.450 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39996 10 7079 1 2025-11-16 15:56:23.450 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39996 10 7079 1 2025-11-16 15:56:26.057 00:00:10.364 TCP 23.104.0.1:33814 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:56:26.057 00:00:10.365 TCP 23.104.0.1:33814 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:57:23.670 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57752 12 7183 1 2025-11-16 15:57:23.670 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57752 12 7183 1 2025-11-16 15:57:26.462 00:00:10.362 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:57:26.462 00:00:10.362 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:53:58.145 00:05:04.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:53:58.145 00:05:04.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:58:25.391 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:58:25.550 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:58:25.549 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:58:25.391 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:58:23.886 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46308 10 7079 1 2025-11-16 15:58:23.886 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46308 10 7079 1 2025-11-16 15:58:26.862 00:00:10.333 TCP 23.104.0.1:50810 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:58:26.862 00:00:10.333 TCP 23.104.0.1:50810 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 328, total bytes: 1.1 M, total packets: 3186, avg bps: 2224, avg pps: 0, avg bpp: 335 Time window: 2025-11-16 14:55:02 - 2025-11-16 15:59:02 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0030s User: 0.0040s Wall: 0.0036s flows/second: 90064.3 Runtime: 0.0037s