Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 19:58:43.116 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6452 1 2025-08-25 19:58:43.116 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6452 1 2025-08-25 19:59:03.708 00:00:10.326 TCP 23.104.0.1:60274 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:59:03.708 00:00:10.326 TCP 23.104.0.1:60274 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:59:43.327 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-08-25 19:59:43.327 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-08-25 20:00:04.103 00:00:10.322 TCP 23.104.0.1:36136 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:00:04.103 00:00:10.321 TCP 23.104.0.1:36136 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:00:43.499 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44486 10 6452 1 2025-08-25 20:00:43.500 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44486 10 6452 1 2025-08-25 20:01:04.467 00:00:10.330 TCP 23.104.0.1:37346 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:01:04.467 00:00:10.330 TCP 23.104.0.1:37346 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:01:43.668 00:00:10.360 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 10 6452 1 2025-08-25 20:01:43.668 00:00:10.360 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 10 6452 1 2025-08-25 20:02:04.853 00:00:10.370 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:02:04.853 00:00:10.370 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:02:44.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44540 10 6452 1 2025-08-25 20:02:44.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44540 10 6452 1 2025-08-25 20:03:05.259 00:00:10.363 TCP 23.104.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:58:17.684 00:06:00.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 19:58:17.686 00:06:00.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:03:05.259 00:00:10.363 TCP 23.104.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-08-25 19:58:17.684 00:06:00.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 19:58:17.686 00:06:00.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:03:25.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:03:25.571 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:03:25.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:03:25.570 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:03:44.294 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48226 10 6452 1 2025-08-25 20:03:44.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48226 10 6452 1 2025-08-25 20:04:05.672 00:00:10.370 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:04:05.672 00:00:10.370 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:04:44.512 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-08-25 20:04:44.511 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-08-25 20:05:06.110 00:00:10.325 TCP 23.104.0.1:49370 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:05:06.110 00:00:10.325 TCP 23.104.0.1:49370 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:05:44.729 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38134 10 6452 1 2025-08-25 20:05:44.729 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38134 10 6452 1 2025-08-25 20:06:06.474 00:00:10.372 TCP 23.104.0.1:60426 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:06:06.474 00:00:10.373 TCP 23.104.0.1:60426 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:06:44.937 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38010 10 6452 1 2025-08-25 20:06:44.936 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38010 10 6452 1 2025-08-25 20:07:06.890 00:00:10.378 TCP 23.104.0.1:53482 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:07:06.890 00:00:10.378 TCP 23.104.0.1:53482 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:07:45.174 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51686 10 6452 1 2025-08-25 20:07:45.174 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51686 10 6452 1 2025-08-25 20:08:07.306 00:00:10.363 TCP 23.104.0.1:57234 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:08:07.305 00:00:10.363 TCP 23.104.0.1:57234 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:08:25.665 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:08:25.707 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:08:25.665 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:08:25.706 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:08:45.344 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44346 10 6452 1 2025-08-25 20:08:45.344 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44346 10 6452 1 2025-08-25 20:09:07.708 00:00:10.375 TCP 23.104.0.1:54142 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:09:07.708 00:00:10.375 TCP 23.104.0.1:54142 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:09:45.561 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60374 10 6452 1 2025-08-25 20:09:45.561 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60374 10 6452 1 2025-08-25 20:05:17.688 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:10:08.125 00:00:10.361 TCP 23.104.0.1:45504 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:05:17.685 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:10:08.124 00:00:10.362 TCP 23.104.0.1:45504 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:05:17.688 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:05:17.685 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:10:45.786 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6452 1 2025-08-25 20:10:45.786 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6452 1 2025-08-25 20:11:08.523 00:00:10.369 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:11:08.523 00:00:10.370 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:11:46.014 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34598 10 6452 1 2025-08-25 20:11:46.013 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34598 10 6452 1 2025-08-25 20:12:08.928 00:00:10.526 TCP 23.104.0.1:47318 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:12:08.929 00:00:10.527 TCP 23.104.0.1:47318 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:12:46.228 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57972 10 6452 1 2025-08-25 20:12:46.229 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57972 10 6452 1 2025-08-25 20:13:09.493 00:00:10.363 TCP 23.104.0.1:50244 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:13:09.492 00:00:10.364 TCP 23.104.0.1:50244 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:13:25.711 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:13:25.784 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:13:25.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:13:25.711 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:13:46.437 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60710 10 6452 1 2025-08-25 20:13:46.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60710 10 6452 1 2025-08-25 20:14:09.896 00:00:10.335 TCP 23.104.0.1:48048 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:14:09.894 00:00:10.335 TCP 23.104.0.1:48048 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:14:46.654 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48972 10 6452 1 2025-08-25 20:14:46.654 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48972 10 6452 1 2025-08-25 20:15:10.267 00:00:10.369 TCP 23.104.0.1:37606 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:15:10.266 00:00:10.369 TCP 23.104.0.1:37606 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:15:46.828 00:00:10.346 TCP 1.101.0.1:3000 -> 22.102.0.1:57372 10 6452 1 2025-08-25 20:15:46.827 00:00:10.346 TCP 1.101.0.1:3000 -> 22.102.0.1:57372 10 6452 1 2025-08-25 20:16:10.673 00:00:10.334 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:16:10.672 00:00:10.335 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:16:47.212 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6452 1 2025-08-25 20:16:47.212 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6452 1 2025-08-25 20:12:17.691 00:06:00.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:12:17.688 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:12:17.690 00:06:00.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:12:17.688 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:17:11.062 00:00:10.322 TCP 23.104.0.1:58628 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:17:11.062 00:00:10.322 TCP 23.104.0.1:58628 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:17:47.391 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53452 10 6452 1 2025-08-25 20:17:47.391 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53452 10 6452 1 2025-08-25 20:18:11.424 00:00:10.365 TCP 23.104.0.1:57036 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:18:11.424 00:00:10.365 TCP 23.104.0.1:57036 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:18:26.159 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:18:26.210 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:18:26.159 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:18:26.211 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:18:47.611 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41390 10 6452 1 2025-08-25 20:18:47.612 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41390 10 6452 1 2025-08-25 20:19:11.826 00:00:10.366 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:19:11.825 00:00:10.366 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:19:47.781 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43242 10 6452 1 2025-08-25 20:19:47.783 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43242 10 6452 1 2025-08-25 20:20:12.225 00:00:10.328 TCP 23.104.0.1:54156 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:20:12.224 00:00:10.328 TCP 23.104.0.1:54156 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:20:47.998 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49488 10 6452 1 2025-08-25 20:20:47.998 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49488 10 6452 1 2025-08-25 20:21:12.585 00:00:10.380 TCP 23.104.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:21:12.584 00:00:10.380 TCP 23.104.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:21:48.218 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55724 10 6452 1 2025-08-25 20:21:48.217 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55724 10 6452 1 2025-08-25 20:22:12.999 00:00:10.369 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:22:12.998 00:00:10.369 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:22:48.401 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43472 10 6452 1 2025-08-25 20:22:48.401 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43472 10 6452 1 2025-08-25 20:23:13.406 00:00:10.325 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:23:25.665 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:23:13.406 00:00:10.325 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:23:26.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:23:25.666 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:23:26.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:23:48.614 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6452 1 2025-08-25 20:23:48.614 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6452 1 2025-08-25 20:19:17.690 00:06:00.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:19:17.692 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:19:17.690 00:06:00.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:19:17.688 00:06:00.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:24:13.771 00:00:10.330 TCP 23.104.0.1:56624 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:24:13.771 00:00:10.330 TCP 23.104.0.1:56624 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:24:48.820 00:00:14.730 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-08-25 20:24:48.820 00:00:14.730 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-08-25 20:25:14.135 00:00:10.323 TCP 23.104.0.1:46860 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:25:14.136 00:00:10.323 TCP 23.104.0.1:46860 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:25:53.597 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56088 10 6452 1 2025-08-25 20:25:53.597 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56088 10 6452 1 2025-08-25 20:26:14.498 00:00:10.369 TCP 23.104.0.1:55976 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:26:14.498 00:00:10.369 TCP 23.104.0.1:55976 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:26:53.810 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36896 10 6452 1 2025-08-25 20:26:53.808 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36896 10 6452 1 2025-08-25 20:27:14.902 00:00:10.368 TCP 23.104.0.1:59718 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:27:14.902 00:00:10.368 TCP 23.104.0.1:59718 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:27:54.016 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45794 10 6452 1 2025-08-25 20:27:54.016 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45794 10 6452 1 2025-08-25 20:28:15.309 00:00:10.324 TCP 23.104.0.1:58350 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:28:25.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:28:25.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:28:15.308 00:00:10.325 TCP 23.104.0.1:58350 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:28:26.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:28:26.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:28:54.232 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:49664 10 6452 1 2025-08-25 20:28:54.231 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:49664 10 6452 1 2025-08-25 20:29:15.670 00:00:10.326 TCP 23.104.0.1:42332 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:29:15.670 00:00:10.326 TCP 23.104.0.1:42332 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:29:54.401 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34134 10 6452 1 2025-08-25 20:29:54.400 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34134 10 6452 1 2025-08-25 20:30:16.037 00:00:10.366 TCP 23.104.0.1:56640 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:30:16.035 00:00:10.367 TCP 23.104.0.1:56640 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:30:54.606 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48730 10 6452 1 2025-08-25 20:30:54.607 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48730 10 6452 1 2025-08-25 20:26:17.688 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:26:17.690 00:06:00.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:26:17.692 00:06:00.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:26:17.689 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:31:16.442 00:00:10.365 TCP 23.104.0.1:46804 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:31:16.440 00:00:10.366 TCP 23.104.0.1:46804 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:31:54.816 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 10 6452 1 2025-08-25 20:31:54.817 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 10 6452 1 2025-08-25 20:32:16.847 00:00:10.340 TCP 23.104.0.1:44896 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:32:16.846 00:00:10.340 TCP 23.104.0.1:44896 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:32:55.035 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47852 10 6452 1 2025-08-25 20:32:55.036 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47852 10 6452 1 2025-08-25 20:33:26.164 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:33:17.227 00:00:10.369 TCP 23.104.0.1:50384 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:33:26.232 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:33:26.231 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:33:17.227 00:00:10.369 TCP 23.104.0.1:50384 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:33:26.164 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:33:55.258 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2025-08-25 20:33:55.258 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2025-08-25 20:34:17.630 00:00:10.325 TCP 23.104.0.1:47324 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:34:17.629 00:00:10.325 TCP 23.104.0.1:47324 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:34:55.469 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-08-25 20:34:55.470 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-08-25 20:35:18.009 00:00:10.326 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:35:18.007 00:00:10.326 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:35:55.688 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 10 6452 1 2025-08-25 20:35:55.689 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 10 6452 1 2025-08-25 20:36:18.381 00:00:10.361 TCP 23.104.0.1:56470 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:36:18.381 00:00:10.361 TCP 23.104.0.1:56470 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:36:55.902 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45518 10 6452 1 2025-08-25 20:36:55.902 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45518 10 6452 1 2025-08-25 20:37:18.782 00:00:10.373 TCP 23.104.0.1:56136 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:37:18.781 00:00:10.373 TCP 23.104.0.1:56136 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:37:56.117 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34296 10 6452 1 2025-08-25 20:37:56.116 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34296 10 6452 1 2025-08-25 20:33:17.701 00:06:00.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:33:17.704 00:06:00.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:33:17.701 00:06:00.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:33:17.704 00:06:00.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:38:26.447 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:38:19.196 00:00:10.363 TCP 23.104.0.1:55908 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:38:26.520 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:38:26.520 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:38:26.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:38:19.196 00:00:10.363 TCP 23.104.0.1:55908 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:38:56.347 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57916 10 6452 1 2025-08-25 20:38:56.347 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57916 10 6452 1 2025-08-25 20:39:19.599 00:00:10.366 TCP 23.104.0.1:41120 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:39:19.598 00:00:10.366 TCP 23.104.0.1:41120 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:39:56.563 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 10 6452 1 2025-08-25 20:39:56.562 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 10 6452 1 2025-08-25 20:40:20.006 00:00:10.321 TCP 23.104.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:40:20.006 00:00:10.321 TCP 23.104.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:40:56.790 00:00:17.362 TCP 1.101.0.1:3000 -> 22.102.0.1:52732 10 6452 1 2025-08-25 20:40:56.790 00:00:17.363 TCP 1.101.0.1:3000 -> 22.102.0.1:52732 10 6452 1 2025-08-25 20:41:20.361 00:00:10.363 TCP 23.104.0.1:53040 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:41:20.361 00:00:10.363 TCP 23.104.0.1:53040 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:42:04.202 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42552 10 6452 1 2025-08-25 20:42:04.203 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42552 10 6452 1 2025-08-25 20:42:20.766 00:00:10.371 TCP 23.104.0.1:49312 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:42:20.765 00:00:10.371 TCP 23.104.0.1:49312 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:43:04.419 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44570 10 6452 1 2025-08-25 20:43:04.420 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44570 10 6452 1 2025-08-25 20:43:26.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:43:26.293 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:43:26.314 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:43:26.314 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:43:21.176 00:00:10.365 TCP 23.104.0.1:60856 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:43:21.177 00:00:10.365 TCP 23.104.0.1:60856 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:44:04.643 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35626 10 6452 1 2025-08-25 20:44:04.644 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35626 10 6452 1 2025-08-25 20:44:21.580 00:00:10.371 TCP 23.104.0.1:50000 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:44:21.580 00:00:10.370 TCP 23.104.0.1:50000 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:40:17.702 00:06:00.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:45:04.853 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35146 10 6452 1 2025-08-25 20:40:17.705 00:06:00.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:40:17.706 00:06:00.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:45:04.854 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35146 10 6452 1 2025-08-25 20:40:17.703 00:06:00.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:45:21.986 00:00:10.373 TCP 23.104.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:45:21.984 00:00:10.374 TCP 23.104.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:46:05.079 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36876 10 6452 1 2025-08-25 20:46:05.080 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36876 10 6452 1 2025-08-25 20:46:22.397 00:00:10.373 TCP 23.104.0.1:51414 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:46:22.398 00:00:10.373 TCP 23.104.0.1:51414 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:47:05.295 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-08-25 20:47:05.294 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-08-25 20:47:22.811 00:00:10.367 TCP 23.104.0.1:41376 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:47:22.810 00:00:10.367 TCP 23.104.0.1:41376 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:48:05.465 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43284 10 6452 1 2025-08-25 20:48:05.464 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43284 10 6452 1 2025-08-25 20:48:26.631 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:48:26.830 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:48:26.633 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:48:26.830 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:48:23.214 00:00:10.324 TCP 23.104.0.1:42118 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:48:23.214 00:00:10.324 TCP 23.104.0.1:42118 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:49:05.673 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37376 10 6452 1 2025-08-25 20:49:05.673 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37376 10 6452 1 2025-08-25 20:49:23.575 00:00:10.367 TCP 23.104.0.1:44712 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:49:23.574 00:00:10.367 TCP 23.104.0.1:44712 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:50:05.892 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56906 10 6452 1 2025-08-25 20:50:05.892 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56906 10 6452 1 2025-08-25 20:50:23.977 00:00:10.364 TCP 23.104.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:50:23.977 00:00:10.364 TCP 23.104.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:51:06.110 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-08-25 20:51:06.109 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-08-25 20:51:24.378 00:00:10.365 TCP 23.104.0.1:39558 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:51:24.379 00:00:10.365 TCP 23.104.0.1:39558 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:47:17.706 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:47:17.703 00:06:00.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:52:06.326 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47532 10 6452 1 2025-08-25 20:52:06.326 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47532 10 6452 1 2025-08-25 20:47:17.703 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:47:17.706 00:06:00.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:52:24.792 00:00:10.370 TCP 23.104.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:52:24.792 00:00:10.371 TCP 23.104.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:53:06.499 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55990 10 6452 1 2025-08-25 20:53:06.499 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55990 10 6452 1 2025-08-25 20:53:26.743 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:53:26.643 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:53:26.743 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:53:26.643 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:53:25.201 00:00:10.376 TCP 23.104.0.1:57522 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:53:25.202 00:00:10.376 TCP 23.104.0.1:57522 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:54:06.705 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-08-25 20:54:06.704 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-08-25 20:54:25.627 00:00:10.323 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:54:25.627 00:00:10.324 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:55:06.872 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37128 10 6452 1 2025-08-25 20:55:06.871 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37128 10 6452 1 2025-08-25 20:55:25.990 00:00:10.329 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:55:25.991 00:00:10.330 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:56:07.094 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 10 6452 1 2025-08-25 20:56:07.094 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 10 6452 1 2025-08-25 20:56:26.356 00:00:10.366 TCP 23.104.0.1:52624 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:56:26.356 00:00:10.366 TCP 23.104.0.1:52624 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:57:07.314 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33960 10 6452 1 2025-08-25 20:57:07.315 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33960 10 6452 1 2025-08-25 20:57:26.760 00:00:10.436 TCP 23.104.0.1:36512 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:57:26.759 00:00:10.437 TCP 23.104.0.1:36512 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:58:07.524 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36412 10 6452 1 2025-08-25 20:58:07.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36412 10 6452 1 2025-08-25 20:58:26.669 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:58:26.744 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:58:26.743 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 20:58:26.668 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 20:58:27.236 00:00:10.367 TCP 23.104.0.1:56176 -> 1.101.0.1:3000 11 1507 1 2025-08-25 20:58:27.237 00:00:10.367 TCP 23.104.0.1:56176 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 320, total bytes: 994728, total packets: 3112, avg bps: 2198, avg pps: 0, avg bpp: 319 Time window: 2025-08-25 19:58:17 - 2025-08-25 20:58:37 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0030s User: 0.0039s Wall: 0.0039s flows/second: 81255.4 Runtime: 0.0040s