Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 10:58:53.293 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42516 10 6452 1 2025-08-02 10:58:53.294 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42516 10 6452 1 2025-08-02 10:58:58.983 00:00:10.364 TCP 23.104.0.1:46000 -> 1.101.0.1:3000 11 1507 1 2025-08-02 10:58:58.984 00:00:10.363 TCP 23.104.0.1:46000 -> 1.101.0.1:3000 11 1507 1 2025-08-02 10:59:53.505 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58988 10 6452 1 2025-08-02 10:59:53.503 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58988 10 6452 1 2025-08-02 10:59:59.388 00:00:10.376 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-08-02 10:59:59.388 00:00:10.375 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:00:53.714 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60692 10 6452 1 2025-08-02 11:00:53.714 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60692 10 6452 1 2025-08-02 10:56:05.139 00:06:00.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:00:59.801 00:00:10.366 TCP 23.104.0.1:37810 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:00:59.801 00:00:10.366 TCP 23.104.0.1:37810 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:01:53.940 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-08-02 10:58:05.141 00:04:00.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-02 11:02:00.207 00:00:10.357 TCP 23.104.0.1:44364 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:02:10.313 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:01:53.940 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-08-02 11:02:10.457 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:02:10.315 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:02:00.208 00:00:10.358 TCP 23.104.0.1:44364 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:02:10.457 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:02:54.177 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56044 10 6452 1 2025-08-02 11:02:54.177 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56044 10 6452 1 2025-08-02 10:58:05.139 00:06:00.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:03:00.605 00:00:10.361 TCP 23.104.0.1:47166 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:03:00.604 00:00:10.361 TCP 23.104.0.1:47166 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:03:54.348 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-08-02 11:03:54.349 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-08-02 11:04:01.008 00:00:10.359 TCP 23.104.0.1:50510 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:04:01.008 00:00:10.359 TCP 23.104.0.1:50510 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:04:54.565 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47212 10 6452 1 2025-08-02 11:04:54.564 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47212 10 6452 1 2025-08-02 11:00:05.143 00:06:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:05:01.409 00:00:10.369 TCP 23.104.0.1:58594 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:05:01.408 00:00:10.369 TCP 23.104.0.1:58594 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:05:54.741 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51920 10 6452 1 2025-08-02 11:05:54.740 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51920 10 6452 1 2025-08-02 11:06:01.815 00:00:10.367 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:06:01.816 00:00:10.366 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:06:54.953 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40088 10 6452 1 2025-08-02 11:06:54.952 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40088 10 6452 1 2025-08-02 11:03:05.140 00:04:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-02 11:07:10.592 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:03:05.142 00:04:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-02 11:07:10.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:07:10.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:07:02.221 00:00:10.320 TCP 23.104.0.1:43636 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:07:10.592 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:07:02.222 00:00:10.320 TCP 23.104.0.1:43636 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:07:55.184 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-08-02 11:07:55.183 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-08-02 11:08:02.582 00:00:10.376 TCP 23.104.0.1:35208 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:08:02.582 00:00:10.376 TCP 23.104.0.1:35208 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:08:55.404 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54084 10 6452 1 2025-08-02 11:08:55.404 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54084 10 6452 1 2025-08-02 11:09:03.001 00:00:10.362 TCP 23.104.0.1:44666 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:09:02.999 00:00:10.362 TCP 23.104.0.1:44666 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:09:55.619 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58540 10 6452 1 2025-08-02 11:05:05.142 00:06:00.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:09:55.618 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58540 10 6452 1 2025-08-02 11:10:03.399 00:00:10.366 TCP 23.104.0.1:52022 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:10:03.398 00:00:10.367 TCP 23.104.0.1:52022 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:10:55.831 00:00:10.326 TCP 1.101.0.1:3000 -> 22.102.0.1:55908 10 6452 1 2025-08-02 11:10:55.831 00:00:10.326 TCP 1.101.0.1:3000 -> 22.102.0.1:55908 10 6452 1 2025-08-02 11:11:03.813 00:00:10.338 TCP 23.104.0.1:46112 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:11:03.813 00:00:10.339 TCP 23.104.0.1:46112 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:08:05.146 00:04:00.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-02 11:08:05.142 00:04:00.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-02 11:11:56.199 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54548 10 6452 1 2025-08-02 11:12:10.467 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:11:56.200 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54548 10 6452 1 2025-08-02 11:12:10.598 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:12:10.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:07:05.145 00:06:00.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:12:10.466 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:12:04.189 00:00:10.367 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:12:04.190 00:00:10.366 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:12:56.375 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51724 10 6452 1 2025-08-02 11:12:56.374 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51724 10 6452 1 2025-08-02 11:13:04.595 00:00:10.371 TCP 23.104.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:13:04.594 00:00:10.371 TCP 23.104.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:13:56.586 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47960 10 6452 1 2025-08-02 11:13:56.586 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47960 10 6452 1 2025-08-02 11:14:05.004 00:00:10.364 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:14:05.003 00:00:10.364 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:14:56.811 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48080 10 6452 1 2025-08-02 11:14:56.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48080 10 6452 1 2025-08-02 11:15:05.406 00:00:10.363 TCP 23.104.0.1:50568 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:15:05.406 00:00:10.363 TCP 23.104.0.1:50568 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:15:57.031 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39160 10 6452 1 2025-08-02 11:15:57.029 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39160 10 6452 1 2025-08-02 11:16:05.808 00:00:10.371 TCP 23.104.0.1:44030 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:16:05.808 00:00:10.371 TCP 23.104.0.1:44030 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:13:05.146 00:04:00.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-02 11:13:05.145 00:04:00.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-02 11:16:57.245 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6452 1 2025-08-02 11:12:05.144 00:06:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:16:57.245 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6452 1 2025-08-02 11:17:11.125 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:17:11.101 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:17:11.101 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:17:11.124 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:17:06.215 00:00:10.364 TCP 23.104.0.1:38374 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:17:06.215 00:00:10.364 TCP 23.104.0.1:38374 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:17:57.459 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48896 10 6452 1 2025-08-02 11:17:57.459 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48896 10 6452 1 2025-08-02 11:18:06.622 00:00:10.326 TCP 23.104.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:18:06.623 00:00:10.325 TCP 23.104.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:14:05.147 00:06:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:18:57.673 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46484 10 6452 1 2025-08-02 11:18:57.673 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46484 10 6452 1 2025-08-02 11:19:06.990 00:00:10.374 TCP 23.104.0.1:52704 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:19:06.989 00:00:10.374 TCP 23.104.0.1:52704 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:19:57.842 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44628 10 6452 1 2025-08-02 11:19:57.843 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44628 10 6452 1 2025-08-02 11:20:07.397 00:00:10.362 TCP 23.104.0.1:37174 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:20:07.397 00:00:10.362 TCP 23.104.0.1:37174 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:20:58.069 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40280 10 6452 1 2025-08-02 11:20:58.070 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40280 10 6452 1 2025-08-02 11:21:07.798 00:00:10.368 TCP 23.104.0.1:39046 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:21:07.797 00:00:10.369 TCP 23.104.0.1:39046 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:18:05.146 00:04:00.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-02 11:21:58.251 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38850 10 6452 1 2025-08-02 11:22:10.902 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:21:58.250 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38850 10 6452 1 2025-08-02 11:22:10.800 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:22:10.800 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:22:10.904 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:22:08.203 00:00:10.364 TCP 23.104.0.1:41058 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:22:08.203 00:00:10.364 TCP 23.104.0.1:41058 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:18:05.149 00:06:00.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:22:58.457 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2025-08-02 11:22:58.458 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2025-08-02 11:23:08.608 00:00:10.384 TCP 23.104.0.1:33094 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:23:08.608 00:00:10.385 TCP 23.104.0.1:33094 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:19:05.146 00:06:00.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:23:58.664 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-08-02 11:23:58.665 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-08-02 11:24:09.043 00:00:10.361 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:24:09.044 00:00:10.361 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:24:58.882 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56196 10 6452 1 2025-08-02 11:24:58.882 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56196 10 6452 1 2025-08-02 11:25:09.441 00:00:10.363 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:25:09.442 00:00:10.363 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:21:05.149 00:06:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:25:59.087 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44718 10 6452 1 2025-08-02 11:25:59.086 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44718 10 6452 1 2025-08-02 11:26:09.840 00:00:10.392 TCP 23.104.0.1:34618 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:26:09.839 00:00:10.392 TCP 23.104.0.1:34618 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:23:05.147 00:04:00.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-02 11:26:59.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39232 10 6452 1 2025-08-02 11:26:59.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39232 10 6452 1 2025-08-02 11:27:10.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:27:10.903 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:27:10.985 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:27:10.987 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:27:10.275 00:00:10.325 TCP 23.104.0.1:33632 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:27:10.275 00:00:10.325 TCP 23.104.0.1:33632 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:27:59.518 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58108 10 6452 1 2025-08-02 11:27:59.518 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58108 10 6452 1 2025-08-02 11:28:10.642 00:00:10.364 TCP 23.104.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:28:10.642 00:00:10.364 TCP 23.104.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:25:05.150 00:04:00.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-02 11:28:59.734 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51238 10 6452 1 2025-08-02 11:28:59.735 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51238 10 6452 1 2025-08-02 11:29:11.059 00:00:10.373 TCP 23.104.0.1:48766 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:29:11.060 00:00:10.372 TCP 23.104.0.1:48766 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:29:59.944 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35034 10 6452 1 2025-08-02 11:29:59.945 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35034 10 6452 1 2025-08-02 11:30:11.474 00:00:10.364 TCP 23.104.0.1:55154 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:30:11.474 00:00:10.364 TCP 23.104.0.1:55154 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:26:05.148 00:06:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:31:00.178 00:00:10.415 TCP 1.101.0.1:3000 -> 22.102.0.1:42992 10 6452 1 2025-08-02 11:31:00.178 00:00:10.414 TCP 1.101.0.1:3000 -> 22.102.0.1:42992 10 6452 1 2025-08-02 11:31:11.877 00:00:10.324 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:31:11.876 00:00:10.324 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:32:00.639 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36868 10 6452 1 2025-08-02 11:32:00.638 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36868 10 6452 1 2025-08-02 11:32:10.987 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:32:11.188 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:32:11.187 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:32:10.987 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:32:12.238 00:00:10.373 TCP 23.104.0.1:52570 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:32:12.237 00:00:10.373 TCP 23.104.0.1:52570 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:28:05.149 00:06:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:28:05.150 00:06:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:33:00.869 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-08-02 11:33:00.871 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-08-02 11:33:12.652 00:00:10.368 TCP 23.104.0.1:49504 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:33:12.652 00:00:10.367 TCP 23.104.0.1:49504 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:30:05.151 00:04:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-02 11:34:01.102 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57136 10 6452 1 2025-08-02 11:34:01.103 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57136 10 6452 1 2025-08-02 11:34:13.061 00:00:10.399 TCP 23.104.0.1:60690 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:34:13.060 00:00:10.399 TCP 23.104.0.1:60690 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:35:01.319 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36542 10 6452 1 2025-08-02 11:35:01.319 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36542 10 6452 1 2025-08-02 11:35:13.498 00:00:10.371 TCP 23.104.0.1:57926 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:35:13.498 00:00:10.372 TCP 23.104.0.1:57926 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:36:01.530 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53772 10 6452 1 2025-08-02 11:36:01.530 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53772 10 6452 1 2025-08-02 11:36:13.906 00:00:10.364 TCP 23.104.0.1:33100 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:36:13.905 00:00:10.363 TCP 23.104.0.1:33100 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:37:11.768 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:37:01.701 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-08-02 11:37:11.934 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:37:11.934 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:37:01.701 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-08-02 11:37:11.768 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:37:14.308 00:00:10.378 TCP 23.104.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:37:14.308 00:00:10.378 TCP 23.104.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:33:05.148 00:06:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:38:01.880 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51226 10 6452 1 2025-08-02 11:38:01.879 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51226 10 6452 1 2025-08-02 11:38:14.719 00:00:10.379 TCP 23.104.0.1:50072 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:38:14.721 00:00:10.379 TCP 23.104.0.1:50072 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:35:05.160 00:04:00.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-02 11:35:05.159 00:04:00.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-02 11:39:02.103 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33432 10 6452 1 2025-08-02 11:39:02.104 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33432 10 6452 1 2025-08-02 11:39:15.134 00:00:10.363 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:39:15.133 00:00:10.363 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:35:05.161 00:06:00.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:40:02.317 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-08-02 11:40:02.314 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-08-02 11:40:15.534 00:00:10.378 TCP 23.104.0.1:59014 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:40:15.535 00:00:10.378 TCP 23.104.0.1:59014 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:41:02.535 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45028 10 6452 1 2025-08-02 11:41:02.536 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45028 10 6452 1 2025-08-02 11:41:15.939 00:00:10.391 TCP 23.104.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:41:15.939 00:00:10.392 TCP 23.104.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:42:02.749 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44048 10 6452 1 2025-08-02 11:42:11.127 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:42:11.345 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:42:11.128 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:42:02.751 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44048 10 6452 1 2025-08-02 11:42:11.345 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:42:16.379 00:00:10.371 TCP 23.104.0.1:43636 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:42:16.381 00:00:10.372 TCP 23.104.0.1:43636 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:43:02.962 00:00:10.270 TCP 1.101.0.1:3000 -> 22.102.0.1:57142 10 6452 1 2025-08-02 11:43:02.961 00:00:10.271 TCP 1.101.0.1:3000 -> 22.102.0.1:57142 10 6452 1 2025-08-02 11:43:16.790 00:00:10.366 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:43:16.792 00:00:10.366 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:40:05.161 00:04:00.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-02 11:40:05.160 00:04:00.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-02 11:44:03.268 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49510 10 6452 1 2025-08-02 11:44:03.269 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49510 10 6452 1 2025-08-02 11:44:17.194 00:00:10.373 TCP 23.104.0.1:49494 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:44:17.195 00:00:10.373 TCP 23.104.0.1:49494 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:40:05.160 00:06:00.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:45:03.483 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-08-02 11:45:03.484 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-08-02 11:45:17.605 00:00:10.361 TCP 23.104.0.1:33944 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:45:17.605 00:00:10.361 TCP 23.104.0.1:33944 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:46:03.692 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-08-02 11:46:03.692 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-08-02 11:46:18.009 00:00:10.365 TCP 23.104.0.1:55598 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:46:18.009 00:00:10.366 TCP 23.104.0.1:55598 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:42:05.163 00:06:00.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:47:11.322 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:47:11.526 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:47:03.902 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58718 10 6452 1 2025-08-02 11:47:03.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58718 10 6452 1 2025-08-02 11:47:11.525 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:47:11.322 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:47:18.421 00:00:10.322 TCP 23.104.0.1:52006 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:47:18.420 00:00:10.322 TCP 23.104.0.1:52006 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:48:04.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46050 10 6452 1 2025-08-02 11:48:04.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46050 10 6452 1 2025-08-02 11:48:18.777 00:00:10.373 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:48:18.778 00:00:10.374 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:45:05.164 00:04:00.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-02 11:45:05.161 00:04:00.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-02 11:49:04.333 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-08-02 11:49:04.334 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-08-02 11:49:19.193 00:00:10.365 TCP 23.104.0.1:37732 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:49:19.194 00:00:10.365 TCP 23.104.0.1:37732 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:50:04.548 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:47860 10 6452 1 2025-08-02 11:50:04.548 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:47860 10 6452 1 2025-08-02 11:50:19.597 00:00:10.367 TCP 23.104.0.1:42616 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:50:19.598 00:00:10.366 TCP 23.104.0.1:42616 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:51:04.739 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51080 10 6452 1 2025-08-02 11:51:04.739 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51080 10 6452 1 2025-08-02 11:51:20.006 00:00:10.318 TCP 23.104.0.1:46456 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:51:20.005 00:00:10.319 TCP 23.104.0.1:46456 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:47:05.160 00:06:00.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 11:52:11.556 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:52:11.329 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:52:11.557 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:52:04.954 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:34560 10 6452 1 2025-08-02 11:52:11.331 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:52:04.952 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:34560 10 6452 1 2025-08-02 11:52:20.364 00:00:10.372 TCP 23.104.0.1:56818 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:52:20.363 00:00:10.373 TCP 23.104.0.1:56818 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:53:05.154 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49156 10 6452 1 2025-08-02 11:53:05.153 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49156 10 6452 1 2025-08-02 11:53:20.773 00:00:10.365 TCP 23.104.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:53:20.773 00:00:10.365 TCP 23.104.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:50:05.164 00:04:00.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-02 11:50:05.161 00:04:00.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-02 11:49:05.164 00:06:00.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 11:54:05.365 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37168 10 6452 1 2025-08-02 11:54:05.366 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37168 10 6452 1 2025-08-02 11:54:21.177 00:00:10.370 TCP 23.104.0.1:50438 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:54:21.177 00:00:10.370 TCP 23.104.0.1:50438 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:55:05.580 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48310 10 6452 1 2025-08-02 11:55:05.579 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48310 10 6452 1 2025-08-02 11:55:21.581 00:00:10.366 TCP 23.104.0.1:58074 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:55:21.579 00:00:10.367 TCP 23.104.0.1:58074 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:56:05.796 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-08-02 11:56:05.794 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-08-02 11:56:21.985 00:00:10.368 TCP 23.104.0.1:54882 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:56:21.986 00:00:10.368 TCP 23.104.0.1:54882 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:57:11.678 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:57:11.475 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:57:11.678 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 11:57:11.475 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 11:57:06.009 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33834 10 6452 1 2025-08-02 11:57:06.009 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33834 10 6452 1 2025-08-02 11:57:22.394 00:00:10.365 TCP 23.104.0.1:40424 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:57:22.394 00:00:10.364 TCP 23.104.0.1:40424 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:58:06.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45386 10 6452 1 2025-08-02 11:58:06.179 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45386 10 6452 1 2025-08-02 11:58:22.801 00:00:10.364 TCP 23.104.0.1:50102 -> 1.101.0.1:3000 11 1507 1 2025-08-02 11:58:22.800 00:00:10.364 TCP 23.104.0.1:50102 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 326, total bytes: 995220, total packets: 3120, avg bps: 2124, avg pps: 0, avg bpp: 318 Time window: 2025-08-02 10:56:05 - 2025-08-02 11:58:33 Total flows processed: 326, passed: 326, Blocks skipped: 0, Bytes read: 33968 Sys: 0.0031s User: 0.0031s Wall: 0.0038s flows/second: 85608.8 Runtime: 0.0038s