Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 01:58:49.115 00:00:10.361 TCP 23.104.0.1:34952 -> 1.101.0.1:3000 11 1507 1 2025-08-04 01:58:49.116 00:00:10.361 TCP 23.104.0.1:34952 -> 1.101.0.1:3000 11 1507 1 2025-08-04 01:55:05.990 00:05:00.261 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 01:55:05.989 00:05:00.260 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 01:59:28.342 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59982 10 6452 1 2025-08-04 01:59:28.343 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59982 10 6452 1 2025-08-04 01:59:49.516 00:00:10.368 TCP 23.104.0.1:34324 -> 1.101.0.1:3000 11 1507 1 2025-08-04 01:59:49.516 00:00:10.368 TCP 23.104.0.1:34324 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:00:28.562 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35270 10 6452 1 2025-08-04 02:00:28.563 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35270 10 6452 1 2025-08-04 02:00:49.923 00:00:10.350 TCP 23.104.0.1:54442 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:00:49.923 00:00:10.351 TCP 23.104.0.1:54442 -> 1.101.0.1:3000 11 1507 1 2025-08-04 01:57:05.993 00:05:00.256 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:01:28.794 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60090 10 6452 1 2025-08-04 02:01:28.794 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60090 10 6452 1 2025-08-04 02:01:50.313 00:00:10.366 TCP 23.104.0.1:40466 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:01:50.314 00:00:10.365 TCP 23.104.0.1:40466 -> 1.101.0.1:3000 11 1507 1 2025-08-04 01:58:05.993 00:05:00.255 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:02:29.027 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41972 10 6452 1 2025-08-04 02:02:29.027 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41972 10 6452 1 2025-08-04 02:02:57.267 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:02:57.366 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:02:57.266 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:02:57.366 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:02:50.718 00:00:10.330 TCP 23.104.0.1:35092 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:02:50.718 00:00:10.331 TCP 23.104.0.1:35092 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:03:29.240 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41414 10 6452 1 2025-08-04 02:03:29.238 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41414 10 6452 1 2025-08-04 02:03:51.101 00:00:10.367 TCP 23.104.0.1:59862 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:03:51.102 00:00:10.367 TCP 23.104.0.1:59862 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:04:29.407 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36994 10 6452 1 2025-08-04 02:04:29.408 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36994 10 6452 1 2025-08-04 02:04:51.516 00:00:10.323 TCP 23.104.0.1:50876 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:04:51.517 00:00:10.323 TCP 23.104.0.1:50876 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:01:05.990 00:05:00.263 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:01:05.991 00:05:00.263 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:05:29.626 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44338 10 6452 1 2025-08-04 02:05:29.628 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44338 10 6452 1 2025-08-04 02:05:51.879 00:00:10.390 TCP 23.104.0.1:49984 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:05:51.879 00:00:10.391 TCP 23.104.0.1:49984 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:06:29.841 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45278 10 6452 1 2025-08-04 02:06:29.841 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45278 10 6452 1 2025-08-04 02:06:52.304 00:00:10.365 TCP 23.104.0.1:42068 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:06:52.304 00:00:10.365 TCP 23.104.0.1:42068 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:03:05.993 00:05:00.258 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:07:30.080 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33962 10 6452 1 2025-08-04 02:07:30.081 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33962 10 6452 1 2025-08-04 02:07:57.712 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:07:57.415 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:07:57.713 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:07:57.416 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:07:52.711 00:00:10.363 TCP 23.104.0.1:36392 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:07:52.710 00:00:10.364 TCP 23.104.0.1:36392 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:04:05.994 00:05:00.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:08:30.302 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42776 10 6452 1 2025-08-04 02:08:30.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42776 10 6452 1 2025-08-04 02:08:53.115 00:00:10.326 TCP 23.104.0.1:33918 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:08:53.115 00:00:10.326 TCP 23.104.0.1:33918 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:09:30.515 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34012 10 6452 1 2025-08-04 02:09:30.517 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34012 10 6452 1 2025-08-04 02:09:53.479 00:00:10.364 TCP 23.104.0.1:43966 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:09:53.479 00:00:10.364 TCP 23.104.0.1:43966 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:10:30.694 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46478 10 6452 1 2025-08-04 02:10:30.693 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46478 10 6452 1 2025-08-04 02:10:53.878 00:00:10.395 TCP 23.104.0.1:34860 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:10:53.878 00:00:10.396 TCP 23.104.0.1:34860 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:07:05.993 00:05:00.261 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:07:05.992 00:05:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:11:30.903 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44452 10 6452 1 2025-08-04 02:11:30.902 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44452 10 6452 1 2025-08-04 02:11:54.308 00:00:10.372 TCP 23.104.0.1:60838 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:11:54.308 00:00:10.372 TCP 23.104.0.1:60838 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:12:31.119 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52922 10 6452 1 2025-08-04 02:12:31.119 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52922 10 6452 1 2025-08-04 02:12:58.744 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:12:58.363 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:12:58.743 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:12:58.362 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:12:54.716 00:00:10.372 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:09:05.993 00:05:00.258 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:12:54.715 00:00:10.372 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:13:31.335 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36130 10 6452 1 2025-08-04 02:13:31.337 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36130 10 6452 1 2025-08-04 02:13:55.122 00:00:10.329 TCP 23.104.0.1:53940 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:13:55.121 00:00:10.329 TCP 23.104.0.1:53940 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:10:05.994 00:05:00.258 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:14:31.553 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45598 10 6452 1 2025-08-04 02:14:31.553 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45598 10 6452 1 2025-08-04 02:14:55.484 00:00:10.367 TCP 23.104.0.1:37440 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:14:55.485 00:00:10.367 TCP 23.104.0.1:37440 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:15:31.765 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60634 10 6452 1 2025-08-04 02:15:31.764 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60634 10 6452 1 2025-08-04 02:15:55.877 00:00:10.372 TCP 23.104.0.1:44586 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:15:55.877 00:00:10.371 TCP 23.104.0.1:44586 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:16:31.946 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38766 10 6452 1 2025-08-04 02:16:31.946 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38766 10 6452 1 2025-08-04 02:13:05.992 00:05:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:16:56.285 00:00:10.367 TCP 23.104.0.1:48248 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:13:05.992 00:05:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:16:56.285 00:00:10.368 TCP 23.104.0.1:48248 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:17:32.179 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48084 10 6452 1 2025-08-04 02:17:32.178 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48084 10 6452 1 2025-08-04 02:17:57.728 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:17:57.841 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:17:57.729 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:17:57.840 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:17:56.681 00:00:10.366 TCP 23.104.0.1:46876 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:17:56.680 00:00:10.366 TCP 23.104.0.1:46876 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:18:32.392 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59918 10 6452 1 2025-08-04 02:18:32.393 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59918 10 6452 1 2025-08-04 02:15:05.994 00:05:00.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:18:57.105 00:00:10.361 TCP 23.104.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:18:57.106 00:00:10.361 TCP 23.104.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:19:32.611 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41248 10 6452 1 2025-08-04 02:19:32.611 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41248 10 6452 1 2025-08-04 02:19:57.505 00:00:10.321 TCP 23.104.0.1:42488 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:19:57.505 00:00:10.321 TCP 23.104.0.1:42488 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:16:05.995 00:05:00.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:20:32.826 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39296 10 6452 1 2025-08-04 02:20:32.826 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39296 10 6452 1 2025-08-04 02:20:57.868 00:00:10.366 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:20:57.869 00:00:10.366 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:21:33.063 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40738 10 6452 1 2025-08-04 02:21:33.063 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40738 10 6452 1 2025-08-04 02:21:58.278 00:00:10.365 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:21:58.276 00:00:10.365 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:22:33.277 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53770 10 6452 1 2025-08-04 02:22:33.277 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53770 10 6452 1 2025-08-04 02:22:57.960 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:22:57.755 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:22:57.755 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:22:57.960 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:19:05.994 00:05:00.261 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:22:58.682 00:00:10.380 TCP 23.104.0.1:33234 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:19:05.993 00:05:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:22:58.681 00:00:10.380 TCP 23.104.0.1:33234 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:23:33.495 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55306 10 6452 1 2025-08-04 02:23:33.496 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55306 10 6452 1 2025-08-04 02:23:59.104 00:00:10.322 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:23:59.104 00:00:10.323 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:24:33.711 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53436 10 6452 1 2025-08-04 02:24:33.713 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53436 10 6452 1 2025-08-04 02:24:59.466 00:00:10.360 TCP 23.104.0.1:58220 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:21:05.996 00:05:00.256 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:24:59.468 00:00:10.360 TCP 23.104.0.1:58220 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:25:33.881 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33322 10 6452 1 2025-08-04 02:25:33.881 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33322 10 6452 1 2025-08-04 02:22:05.997 00:05:00.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:25:59.877 00:00:10.324 TCP 23.104.0.1:53568 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:25:59.875 00:00:10.325 TCP 23.104.0.1:53568 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:26:34.114 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41606 10 6452 1 2025-08-04 02:26:34.114 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41606 10 6452 1 2025-08-04 02:27:00.238 00:00:10.371 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:27:00.237 00:00:10.371 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:27:34.351 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52128 10 6452 1 2025-08-04 02:27:34.353 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52128 10 6452 1 2025-08-04 02:27:57.905 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:27:57.862 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:27:57.906 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:27:57.863 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:28:00.648 00:00:10.357 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:28:00.649 00:00:10.357 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:28:34.567 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38676 10 6452 1 2025-08-04 02:28:34.567 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38676 10 6452 1 2025-08-04 02:25:05.995 00:05:00.261 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:25:05.994 00:05:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:29:01.053 00:00:10.371 TCP 23.104.0.1:50600 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:29:01.052 00:00:10.372 TCP 23.104.0.1:50600 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:29:34.790 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36942 10 6452 1 2025-08-04 02:29:34.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36942 10 6452 1 2025-08-04 02:30:01.461 00:00:10.371 TCP 23.104.0.1:49524 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:30:01.461 00:00:10.370 TCP 23.104.0.1:49524 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:30:35.003 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6452 1 2025-08-04 02:30:35.002 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6452 1 2025-08-04 02:27:05.997 00:05:00.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 02:31:01.867 00:00:10.368 TCP 23.104.0.1:41178 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:31:01.867 00:00:10.368 TCP 23.104.0.1:41178 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:31:35.215 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45956 10 6452 1 2025-08-04 02:31:35.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45956 10 6452 1 2025-08-04 02:32:02.277 00:00:10.360 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:32:02.278 00:00:10.360 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:32:35.426 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35608 10 6452 1 2025-08-04 02:32:35.426 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35608 10 6452 1 2025-08-04 02:32:58.226 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:32:58.014 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:32:58.014 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:32:58.226 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:28:06.004 00:06:00.251 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 02:33:02.677 00:00:10.362 TCP 23.104.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:33:02.677 00:00:10.362 TCP 23.104.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:33:35.597 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-08-04 02:33:35.598 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-08-04 02:34:03.104 00:00:10.370 TCP 23.104.0.1:40644 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:34:03.104 00:00:10.370 TCP 23.104.0.1:40644 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:34:35.812 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-08-04 02:34:35.812 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-08-04 02:31:05.997 00:05:00.260 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:31:05.996 00:05:00.260 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 02:35:03.513 00:00:10.374 TCP 23.104.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:35:03.513 00:00:10.375 TCP 23.104.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:35:35.982 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52140 10 6452 1 2025-08-04 02:35:35.982 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52140 10 6452 1 2025-08-04 02:36:03.927 00:00:10.688 TCP 23.104.0.1:41362 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:36:03.927 00:00:10.688 TCP 23.104.0.1:41362 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:36:36.220 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52706 10 6452 1 2025-08-04 02:36:36.219 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52706 10 6452 1 2025-08-04 02:37:04.643 00:00:10.368 TCP 23.104.0.1:47304 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:37:04.643 00:00:10.369 TCP 23.104.0.1:47304 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:37:36.450 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44320 10 6452 1 2025-08-04 02:37:36.451 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44320 10 6452 1 2025-08-04 02:37:58.019 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:37:58.031 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:37:58.019 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:37:58.031 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:33:06.000 00:06:00.265 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 02:38:05.062 00:00:10.366 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:38:05.063 00:00:10.367 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:38:36.622 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51272 10 6452 1 2025-08-04 02:38:36.622 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51272 10 6452 1 2025-08-04 02:39:05.465 00:00:10.361 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:39:05.465 00:00:10.361 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:39:36.836 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57060 10 6452 1 2025-08-04 02:39:36.835 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57060 10 6452 1 2025-08-04 02:35:06.002 00:06:00.265 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 02:40:05.865 00:00:10.366 TCP 23.104.0.1:40752 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:40:05.864 00:00:10.366 TCP 23.104.0.1:40752 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:40:37.010 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36170 10 6452 1 2025-08-04 02:40:37.010 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36170 10 6452 1 2025-08-04 02:41:06.273 00:00:10.361 TCP 23.104.0.1:59728 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:41:06.271 00:00:10.361 TCP 23.104.0.1:59728 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:41:37.225 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36546 10 6452 1 2025-08-04 02:41:37.224 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36546 10 6452 1 2025-08-04 02:37:06.001 00:06:00.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 02:37:06.000 00:06:00.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 02:42:06.670 00:00:10.362 TCP 23.104.0.1:43272 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:42:06.671 00:00:10.362 TCP 23.104.0.1:43272 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:42:37.433 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-08-04 02:42:37.433 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-08-04 02:42:58.171 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:42:58.319 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:42:58.172 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:42:58.318 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:43:07.099 00:00:10.365 TCP 23.104.0.1:43104 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:43:07.099 00:00:10.365 TCP 23.104.0.1:43104 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:43:37.611 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54302 10 6452 1 2025-08-04 02:43:37.610 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54302 10 6452 1 2025-08-04 02:44:07.502 00:00:10.363 TCP 23.104.0.1:46178 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:44:07.503 00:00:10.362 TCP 23.104.0.1:46178 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:44:37.820 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59502 10 6452 1 2025-08-04 02:44:37.820 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59502 10 6452 1 2025-08-04 02:40:06.004 00:06:00.263 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 02:45:07.902 00:00:10.370 TCP 23.104.0.1:51728 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:45:07.902 00:00:10.370 TCP 23.104.0.1:51728 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:45:37.993 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48452 10 6452 1 2025-08-04 02:45:37.994 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48452 10 6452 1 2025-08-04 02:46:08.312 00:00:10.363 TCP 23.104.0.1:33506 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:46:08.312 00:00:10.364 TCP 23.104.0.1:33506 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:46:38.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34156 10 6452 1 2025-08-04 02:46:38.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34156 10 6452 1 2025-08-04 02:42:06.006 00:06:00.264 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 02:47:08.716 00:00:10.336 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:47:08.716 00:00:10.337 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:47:38.436 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51992 10 6452 1 2025-08-04 02:47:38.436 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51992 10 6452 1 2025-08-04 02:47:58.262 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:47:58.463 00:00:00.019 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:47:58.262 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:47:58.464 00:00:00.018 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:48:09.104 00:00:10.365 TCP 23.104.0.1:54926 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:48:09.103 00:00:10.366 TCP 23.104.0.1:54926 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:48:38.650 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48400 10 6452 1 2025-08-04 02:48:38.650 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48400 10 6452 1 2025-08-04 02:44:06.002 00:06:00.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 02:44:06.003 00:06:00.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 02:49:09.511 00:00:10.328 TCP 23.104.0.1:42262 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:49:09.510 00:00:10.328 TCP 23.104.0.1:42262 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:49:38.862 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48316 10 6452 1 2025-08-04 02:49:38.861 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48316 10 6452 1 2025-08-04 02:50:09.880 00:00:10.384 TCP 23.104.0.1:59534 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:50:09.881 00:00:10.384 TCP 23.104.0.1:59534 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:50:39.085 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6452 1 2025-08-04 02:50:39.086 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6452 1 2025-08-04 02:51:10.304 00:00:10.323 TCP 23.104.0.1:47574 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:51:10.304 00:00:10.323 TCP 23.104.0.1:47574 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:51:39.257 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35490 10 6452 1 2025-08-04 02:51:39.256 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35490 10 6452 1 2025-08-04 02:47:06.035 00:06:00.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 02:52:10.662 00:00:10.365 TCP 23.104.0.1:56408 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:52:10.663 00:00:10.365 TCP 23.104.0.1:56408 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:52:39.471 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51388 10 6452 1 2025-08-04 02:52:39.472 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51388 10 6452 1 2025-08-04 02:52:58.331 00:00:00.054 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:52:58.184 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:52:58.330 00:00:00.054 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:52:58.186 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:53:11.099 00:00:10.363 TCP 23.104.0.1:53014 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:53:11.098 00:00:10.363 TCP 23.104.0.1:53014 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:53:39.701 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:52210 12 10365 1 2025-08-04 02:53:39.702 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:52210 12 10365 1 2025-08-04 02:49:06.028 00:06:00.245 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 02:54:11.502 00:00:10.449 TCP 23.104.0.1:54170 -> 1.101.0.1:3000 15 1926 1 2025-08-04 02:54:11.502 00:00:10.449 TCP 23.104.0.1:54170 -> 1.101.0.1:3000 15 1926 1 2025-08-04 02:54:39.951 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37730 10 6452 1 2025-08-04 02:54:39.950 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37730 10 6452 1 2025-08-04 02:55:11.994 00:00:10.385 TCP 23.104.0.1:48732 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:55:11.995 00:00:10.386 TCP 23.104.0.1:48732 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:55:40.177 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45844 10 6452 1 2025-08-04 02:55:40.177 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45844 10 6452 1 2025-08-04 02:51:06.039 00:06:00.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 02:51:06.039 00:06:00.240 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 02:56:12.421 00:00:12.987 TCP 23.104.0.1:40882 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:56:12.421 00:00:12.986 TCP 23.104.0.1:40882 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:56:40.343 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52354 10 6452 1 2025-08-04 02:56:40.342 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52354 10 6452 1 2025-08-04 02:57:15.480 00:00:10.359 TCP 23.104.0.1:48530 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:57:15.479 00:00:10.360 TCP 23.104.0.1:48530 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:57:40.550 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-08-04 02:57:40.549 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-08-04 02:57:58.580 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:57:58.650 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:57:58.650 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 02:57:58.580 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 02:58:15.878 00:00:10.363 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:58:15.879 00:00:10.363 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:58:40.767 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49614 11 6492 1 Summary: total flows: 325, total bytes: 999071, total packets: 3149, avg bps: 2089, avg pps: 0, avg bpp: 317 Time window: 2025-08-04 01:55:05 - 2025-08-04 02:58:50 Total flows processed: 325, passed: 325, Blocks skipped: 0, Bytes read: 33864 Sys: 0.0039s User: 0.0020s Wall: 0.0044s flows/second: 73248.2 Runtime: 0.0045s