Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 15:58:45.301 00:00:10.370 TCP 23.104.0.1:35136 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:58:45.300 00:00:10.370 TCP 23.104.0.1:35136 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:54:07.952 00:05:55.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:54:07.952 00:05:55.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:59:07.876 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6452 1 2025-11-25 15:59:07.875 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6452 1 2025-11-25 15:59:45.711 00:00:10.540 TCP 23.104.0.1:33766 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:59:45.711 00:00:10.540 TCP 23.104.0.1:33766 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:00:08.091 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-11-25 16:00:08.090 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-11-25 16:00:46.288 00:00:10.369 TCP 23.104.0.1:40230 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:00:46.289 00:00:10.369 TCP 23.104.0.1:40230 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:01:08.305 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:37568 12 10369 1 2025-11-25 16:01:08.305 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:37568 12 10369 1 2025-11-25 16:01:46.695 00:00:10.449 TCP 23.104.0.1:55460 -> 1.101.0.1:3000 15 1926 1 2025-11-25 15:57:07.951 00:05:55.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:01:46.695 00:00:10.448 TCP 23.104.0.1:55460 -> 1.101.0.1:3000 15 1926 1 2025-11-25 15:57:07.950 00:05:55.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:02:08.542 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60274 10 6452 1 2025-11-25 16:02:08.543 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60274 10 6452 1 2025-11-25 16:02:47.217 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.119 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:02:47.217 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.118 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:02:47.177 00:00:10.366 TCP 23.104.0.1:37852 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:02:47.179 00:00:10.366 TCP 23.104.0.1:37852 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:03:08.753 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34330 10 6452 1 2025-11-25 16:03:08.753 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34330 10 6452 1 2025-11-25 16:03:47.580 00:00:10.323 TCP 23.104.0.1:46848 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:03:47.580 00:00:10.323 TCP 23.104.0.1:46848 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:04:08.976 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:54894 10 6452 1 2025-11-25 16:04:08.975 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:54894 10 6452 1 2025-11-25 16:04:47.947 00:00:10.384 TCP 23.104.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:04:47.946 00:00:10.385 TCP 23.104.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:00:07.955 00:05:55.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:00:07.955 00:05:55.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:05:09.220 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39434 10 6452 1 2025-11-25 16:05:09.219 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39434 10 6452 1 2025-11-25 16:05:48.372 00:00:10.364 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:05:48.372 00:00:10.364 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:06:09.440 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48876 10 6452 1 2025-11-25 16:06:09.442 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48876 10 6452 1 2025-11-25 16:06:48.772 00:00:10.369 TCP 23.104.0.1:36890 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:06:48.771 00:00:10.368 TCP 23.104.0.1:36890 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:07:09.663 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48144 10 6452 1 2025-11-25 16:07:09.663 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48144 10 6452 1 2025-11-25 16:07:47.977 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:07:48.038 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:07:47.977 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:07:48.037 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:07:49.180 00:00:10.367 TCP 23.104.0.1:35456 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:07:49.179 00:00:10.368 TCP 23.104.0.1:35456 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:03:07.952 00:05:55.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:03:07.953 00:05:55.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:08:09.887 00:00:10.594 TCP 1.101.0.1:3000 -> 22.102.0.1:44022 10 6452 1 2025-11-25 16:08:09.886 00:00:10.595 TCP 1.101.0.1:3000 -> 22.102.0.1:44022 10 6452 1 2025-11-25 16:08:49.585 00:00:10.367 TCP 23.104.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:08:49.585 00:00:10.366 TCP 23.104.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:09:10.524 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58198 10 6452 1 2025-11-25 16:09:10.524 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58198 10 6452 1 2025-11-25 16:09:49.989 00:00:10.325 TCP 23.104.0.1:38944 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:09:49.989 00:00:10.326 TCP 23.104.0.1:38944 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:10:10.745 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54502 10 6452 1 2025-11-25 16:10:10.745 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54502 10 6452 1 2025-11-25 16:10:50.351 00:00:10.369 TCP 23.104.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:06:07.954 00:05:55.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:10:50.351 00:00:10.368 TCP 23.104.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:06:07.956 00:05:55.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:11:10.965 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60088 10 6452 1 2025-11-25 16:11:10.964 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60088 10 6452 1 2025-11-25 16:11:50.761 00:00:10.364 TCP 23.104.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:11:50.761 00:00:10.364 TCP 23.104.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:12:11.190 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-11-25 16:12:11.188 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-11-25 16:12:47.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.363 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:12:47.363 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:12:47.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:12:51.165 00:00:10.494 TCP 23.104.0.1:60758 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:12:51.165 00:00:10.494 TCP 23.104.0.1:60758 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:13:11.401 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39008 10 6452 1 2025-11-25 16:13:11.400 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39008 10 6452 1 2025-11-25 16:09:07.954 00:05:55.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:13:51.698 00:00:10.364 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:13:51.698 00:00:10.364 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:09:07.954 00:05:55.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:14:11.616 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58636 10 6452 1 2025-11-25 16:14:11.615 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58636 10 6452 1 2025-11-25 16:14:52.109 00:00:10.364 TCP 23.104.0.1:57166 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:14:52.108 00:00:10.365 TCP 23.104.0.1:57166 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:15:11.842 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46518 10 6452 1 2025-11-25 16:15:11.841 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46518 10 6452 1 2025-11-25 16:15:52.514 00:00:10.363 TCP 23.104.0.1:44006 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:15:52.514 00:00:10.363 TCP 23.104.0.1:44006 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:16:12.078 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55000 10 6452 1 2025-11-25 16:16:12.078 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55000 10 6452 1 2025-11-25 16:12:07.963 00:05:55.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:16:52.921 00:00:10.382 TCP 23.104.0.1:34004 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:16:52.920 00:00:10.382 TCP 23.104.0.1:34004 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:12:07.965 00:05:55.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:17:12.298 00:00:11.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 10 6452 1 2025-11-25 16:17:12.297 00:00:11.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 10 6452 1 2025-11-25 16:17:47.674 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:17:47.548 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.548 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:17:47.673 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:17:53.340 00:00:10.364 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:17:53.340 00:00:10.364 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:18:13.527 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42654 10 6452 1 2025-11-25 16:18:13.528 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42654 10 6452 1 2025-11-25 16:18:53.748 00:00:10.380 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:18:53.748 00:00:10.379 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:19:13.752 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47578 10 6452 1 2025-11-25 16:19:13.752 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47578 10 6452 1 2025-11-25 16:15:07.959 00:05:55.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:19:54.166 00:00:10.331 TCP 23.104.0.1:48194 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:19:54.168 00:00:10.331 TCP 23.104.0.1:48194 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:15:07.960 00:05:55.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:20:13.967 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56198 10 6452 1 2025-11-25 16:20:13.967 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56198 10 6452 1 2025-11-25 16:20:54.536 00:00:10.370 TCP 23.104.0.1:38202 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:20:54.536 00:00:10.371 TCP 23.104.0.1:38202 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:21:14.190 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49956 10 6452 1 2025-11-25 16:21:14.191 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49956 10 6452 1 2025-11-25 16:21:54.955 00:00:10.371 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:21:54.954 00:00:10.371 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:22:14.403 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39444 10 6452 1 2025-11-25 16:22:14.404 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39444 10 6452 1 2025-11-25 16:22:47.550 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:22:47.580 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:22:47.580 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:22:47.549 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:18:07.962 00:05:55.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:22:55.362 00:00:10.369 TCP 23.104.0.1:58900 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:18:07.964 00:05:55.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:22:55.362 00:00:10.369 TCP 23.104.0.1:58900 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:23:14.571 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36548 10 6452 1 2025-11-25 16:23:14.570 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36548 10 6452 1 2025-11-25 16:23:55.770 00:00:10.373 TCP 23.104.0.1:39912 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:23:55.770 00:00:10.373 TCP 23.104.0.1:39912 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:24:14.744 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34994 10 6452 1 2025-11-25 16:24:14.743 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34994 10 6452 1 2025-11-25 16:24:56.174 00:00:10.367 TCP 23.104.0.1:60220 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:24:56.174 00:00:10.366 TCP 23.104.0.1:60220 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:25:14.955 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:54080 12 6556 1 2025-11-25 16:25:14.954 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:54080 12 6556 1 2025-11-25 16:21:07.961 00:05:55.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:21:07.961 00:05:55.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:25:56.577 00:00:10.568 TCP 23.104.0.1:53078 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:25:56.577 00:00:10.568 TCP 23.104.0.1:53078 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:26:15.208 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36368 10 6452 1 2025-11-25 16:26:15.209 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36368 10 6452 1 2025-11-25 16:26:57.179 00:00:10.364 TCP 23.104.0.1:54156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:26:57.180 00:00:10.365 TCP 23.104.0.1:54156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:27:15.428 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53358 10 6452 1 2025-11-25 16:27:15.427 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53358 10 6452 1 2025-11-25 16:27:47.801 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:27:48.007 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:27:48.007 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:27:47.801 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:27:57.584 00:00:10.325 TCP 23.104.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:27:57.583 00:00:10.325 TCP 23.104.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:28:15.647 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41760 10 6452 1 2025-11-25 16:28:15.646 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41760 10 6452 1 2025-11-25 16:24:07.965 00:05:55.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:24:07.964 00:05:55.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:28:57.947 00:00:10.333 TCP 23.104.0.1:35830 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:28:57.949 00:00:10.332 TCP 23.104.0.1:35830 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:29:15.883 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35696 10 6452 1 2025-11-25 16:29:15.880 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35696 10 6452 1 2025-11-25 16:29:58.316 00:00:10.363 TCP 23.104.0.1:41434 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:29:58.317 00:00:10.363 TCP 23.104.0.1:41434 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:30:16.101 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6452 1 2025-11-25 16:30:16.102 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6452 1 2025-11-25 16:30:58.715 00:00:10.509 TCP 23.104.0.1:56390 -> 1.101.0.1:3000 15 1926 1 2025-11-25 16:30:58.714 00:00:10.509 TCP 23.104.0.1:56390 -> 1.101.0.1:3000 15 1926 1 2025-11-25 16:31:16.324 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44956 12 10369 1 2025-11-25 16:31:16.324 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44956 12 10369 1 2025-11-25 16:27:07.962 00:05:55.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:27:07.963 00:05:55.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:31:59.263 00:00:10.326 TCP 23.104.0.1:35888 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:31:59.262 00:00:10.326 TCP 23.104.0.1:35888 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:32:16.568 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58642 10 6452 1 2025-11-25 16:32:16.569 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58642 10 6452 1 2025-11-25 16:32:48.064 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:32:47.629 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:32:47.628 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:32:48.064 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:32:59.628 00:00:10.363 TCP 23.104.0.1:56946 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:32:59.629 00:00:10.362 TCP 23.104.0.1:56946 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:33:16.785 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36542 10 6452 1 2025-11-25 16:33:16.785 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36542 10 6452 1 2025-11-25 16:34:00.030 00:00:10.323 TCP 23.104.0.1:56416 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:34:00.031 00:00:10.323 TCP 23.104.0.1:56416 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:34:16.996 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41088 10 6452 1 2025-11-25 16:34:16.996 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41088 10 6452 1 2025-11-25 16:30:07.965 00:05:55.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:30:07.965 00:05:55.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:35:00.390 00:00:10.367 TCP 23.104.0.1:43950 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:35:00.390 00:00:10.367 TCP 23.104.0.1:43950 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:35:17.216 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44964 10 6452 1 2025-11-25 16:35:17.216 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44964 10 6452 1 2025-11-25 16:36:00.800 00:00:10.368 TCP 23.104.0.1:35168 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:36:00.800 00:00:10.368 TCP 23.104.0.1:35168 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:36:17.445 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43658 10 6452 1 2025-11-25 16:36:17.444 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43658 10 6452 1 2025-11-25 16:37:01.207 00:00:10.366 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:37:01.206 00:00:10.366 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:37:17.662 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-11-25 16:37:17.662 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-11-25 16:37:47.858 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:37:47.963 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:37:47.963 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:37:47.859 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:33:07.962 00:05:55.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:33:07.963 00:05:55.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:38:01.614 00:00:10.364 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:38:01.614 00:00:10.364 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:38:17.875 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6452 1 2025-11-25 16:38:17.875 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6452 1 2025-11-25 16:39:02.017 00:00:10.361 TCP 23.104.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:39:02.018 00:00:10.361 TCP 23.104.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:39:18.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51164 10 6452 1 2025-11-25 16:39:18.079 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51164 10 6452 1 2025-11-25 16:40:02.416 00:00:10.364 TCP 23.104.0.1:44208 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:40:02.416 00:00:10.364 TCP 23.104.0.1:44208 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:40:18.289 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44096 11 6492 1 2025-11-25 16:40:18.290 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44096 11 6492 1 2025-11-25 16:36:07.966 00:05:55.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:36:07.966 00:05:55.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:41:02.823 00:00:10.362 TCP 23.104.0.1:41156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:41:02.822 00:00:10.363 TCP 23.104.0.1:41156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:41:18.521 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52352 10 6452 1 2025-11-25 16:41:18.521 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52352 10 6452 1 2025-11-25 16:42:03.223 00:00:10.967 TCP 23.104.0.1:56224 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:42:03.222 00:00:10.968 TCP 23.104.0.1:56224 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:42:18.739 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 10 6452 1 2025-11-25 16:42:18.739 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 10 6452 1 2025-11-25 16:42:48.033 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.347 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:42:48.032 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.345 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:43:04.229 00:00:10.363 TCP 23.104.0.1:58882 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:43:04.230 00:00:10.363 TCP 23.104.0.1:58882 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:43:18.967 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41060 10 6452 1 2025-11-25 16:43:18.966 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41060 10 6452 1 2025-11-25 16:39:07.965 00:05:55.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:39:07.964 00:05:55.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:44:04.630 00:00:10.359 TCP 23.104.0.1:32946 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:44:04.630 00:00:10.359 TCP 23.104.0.1:32946 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:44:19.192 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34922 10 6452 1 2025-11-25 16:44:19.191 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34922 10 6452 1 2025-11-25 16:45:05.026 00:00:10.371 TCP 23.104.0.1:52008 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:45:05.026 00:00:10.370 TCP 23.104.0.1:52008 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:45:19.405 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49334 10 6452 1 2025-11-25 16:45:19.406 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49334 10 6452 1 2025-11-25 16:46:05.436 00:00:10.360 TCP 23.104.0.1:35236 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:46:05.436 00:00:10.359 TCP 23.104.0.1:35236 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:46:19.615 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-11-25 16:46:19.614 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-11-25 16:42:07.972 00:05:55.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:42:07.970 00:05:55.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:47:05.839 00:00:10.373 TCP 23.104.0.1:55652 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:47:05.838 00:00:10.372 TCP 23.104.0.1:55652 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:47:19.830 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34772 10 6452 1 2025-11-25 16:47:19.831 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34772 10 6452 1 2025-11-25 16:47:48.560 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.477 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:47:48.560 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.477 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:48:06.247 00:00:10.719 TCP 23.104.0.1:58530 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:48:06.247 00:00:10.719 TCP 23.104.0.1:58530 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:48:20.007 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60208 10 6452 1 2025-11-25 16:48:20.008 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60208 10 6452 1 2025-11-25 16:49:07.014 00:00:10.366 TCP 23.104.0.1:39428 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:49:07.015 00:00:10.365 TCP 23.104.0.1:39428 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:49:20.232 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 10 6452 1 2025-11-25 16:49:20.232 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 10 6452 1 2025-11-25 16:45:07.968 00:05:55.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:45:07.968 00:05:55.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:50:07.420 00:00:10.380 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:50:07.420 00:00:10.380 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:50:20.458 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:37606 10 6452 1 2025-11-25 16:50:20.458 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:37606 10 6452 1 2025-11-25 16:51:07.839 00:00:10.345 TCP 23.104.0.1:51750 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:51:07.839 00:00:10.345 TCP 23.104.0.1:51750 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:51:20.761 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49892 10 6452 1 2025-11-25 16:51:20.761 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49892 10 6452 1 2025-11-25 16:52:08.233 00:00:10.330 TCP 23.104.0.1:35534 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:52:08.233 00:00:10.331 TCP 23.104.0.1:35534 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:52:20.981 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53586 10 6452 1 2025-11-25 16:52:20.981 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53586 10 6452 1 2025-11-25 16:52:48.347 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:52:48.135 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.136 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.349 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:48:07.973 00:05:55.683 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:48:07.974 00:05:55.682 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:53:08.598 00:00:10.367 TCP 23.104.0.1:47552 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:53:08.597 00:00:10.367 TCP 23.104.0.1:47552 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:53:21.220 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-11-25 16:53:21.220 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-11-25 16:54:09.001 00:00:10.328 TCP 23.104.0.1:43912 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:54:09.000 00:00:10.329 TCP 23.104.0.1:43912 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:54:21.442 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44064 10 6452 1 2025-11-25 16:54:21.443 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44064 10 6452 1 2025-11-25 16:55:09.360 00:00:10.367 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:55:09.360 00:00:10.366 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:55:21.666 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35046 10 6452 1 2025-11-25 16:55:21.665 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35046 10 6452 1 2025-11-25 16:51:07.972 00:05:55.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:51:07.972 00:05:55.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:56:09.765 00:00:10.373 TCP 23.104.0.1:48542 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:56:09.765 00:00:10.373 TCP 23.104.0.1:48542 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:56:21.841 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53448 10 6452 1 2025-11-25 16:56:21.841 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53448 10 6452 1 2025-11-25 16:57:10.178 00:00:10.375 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:57:10.177 00:00:10.375 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:57:22.078 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59504 10 6452 1 2025-11-25 16:57:22.079 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59504 10 6452 1 2025-11-25 16:57:48.449 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:57:48.372 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.448 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:57:48.371 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:58:10.596 00:00:10.364 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:58:10.596 00:00:10.364 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:58:22.305 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58342 10 6452 1 2025-11-25 16:58:22.305 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58342 10 6452 1 Summary: total flows: 328, total bytes: 1.0 M, total packets: 3174, avg bps: 2099, avg pps: 0, avg bpp: 319 Time window: 2025-11-25 15:54:07 - 2025-11-25 16:58:32 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0031s User: 0.0042s Wall: 0.0044s flows/second: 74480.6 Runtime: 0.0044s