Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 10:58:53.590 00:00:10.330 TCP 23.104.0.1:47134 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:58:53.591 00:00:10.331 TCP 23.104.0.1:47134 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:59:21.413 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51696 10 6452 1 2025-09-12 10:59:21.413 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51696 10 6452 1 2025-09-12 10:59:53.960 00:00:10.368 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:59:53.960 00:00:10.368 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:56:27.285 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 10:56:27.285 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:00:21.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35726 10 6452 1 2025-09-12 11:00:21.628 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35726 10 6452 1 2025-09-12 11:00:54.367 00:00:10.364 TCP 23.104.0.1:45444 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:00:54.367 00:00:10.364 TCP 23.104.0.1:45444 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:57:27.282 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:01:21.835 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36710 10 6452 1 2025-09-12 11:01:21.835 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36710 10 6452 1 2025-09-12 11:02:02.354 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:02:02.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:01:54.764 00:00:10.377 TCP 23.104.0.1:50284 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:02:02.355 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:02:02.371 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:01:54.764 00:00:10.377 TCP 23.104.0.1:50284 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:02:22.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43886 10 6452 1 2025-09-12 11:02:22.079 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43886 10 6452 1 2025-09-12 11:02:55.183 00:00:10.367 TCP 23.104.0.1:34320 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:02:55.183 00:00:10.366 TCP 23.104.0.1:34320 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:03:22.289 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56262 10 6452 1 2025-09-12 11:03:22.289 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56262 10 6452 1 2025-09-12 11:03:55.587 00:00:10.327 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:03:55.585 00:00:10.327 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:00:27.288 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:04:22.505 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55430 10 6452 1 2025-09-12 11:04:22.504 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55430 10 6452 1 2025-09-12 11:04:55.956 00:00:10.365 TCP 23.104.0.1:45808 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:04:55.957 00:00:10.365 TCP 23.104.0.1:45808 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:05:22.720 00:00:10.280 TCP 1.101.0.1:3000 -> 22.102.0.1:58672 10 6452 1 2025-09-12 11:05:22.720 00:00:10.280 TCP 1.101.0.1:3000 -> 22.102.0.1:58672 10 6452 1 2025-09-12 11:05:56.361 00:00:20.504 TCP 23.104.0.1:35012 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:05:56.362 00:00:20.503 TCP 23.104.0.1:35012 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:02:27.291 00:05:00.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:02:27.290 00:05:00.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:06:23.040 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50928 10 6452 1 2025-09-12 11:06:23.040 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50928 10 6452 1 2025-09-12 11:07:02.246 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:07:02.072 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:07:02.072 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:07:02.247 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:07:06.911 00:00:10.370 TCP 23.104.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:07:06.912 00:00:10.370 TCP 23.104.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:07:23.257 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-09-12 11:03:27.292 00:05:00.893 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:07:23.259 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-09-12 11:08:07.324 00:00:10.324 TCP 23.104.0.1:36742 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:08:07.322 00:00:10.325 TCP 23.104.0.1:36742 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:08:23.431 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35750 10 6452 1 2025-09-12 11:08:23.430 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35750 10 6452 1 2025-09-12 11:09:07.689 00:00:10.365 TCP 23.104.0.1:59648 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:09:07.688 00:00:10.365 TCP 23.104.0.1:59648 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:09:23.652 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36620 10 6452 1 2025-09-12 11:09:23.652 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36620 10 6452 1 2025-09-12 11:10:08.106 00:00:10.365 TCP 23.104.0.1:40878 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:10:08.106 00:00:10.365 TCP 23.104.0.1:40878 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:06:27.292 00:05:00.893 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:10:23.865 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48022 10 6452 1 2025-09-12 11:10:23.867 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48022 10 6452 1 2025-09-12 11:11:08.511 00:00:10.322 TCP 23.104.0.1:55942 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:11:08.512 00:00:10.322 TCP 23.104.0.1:55942 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:11:24.093 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:46316 10 6452 1 2025-09-12 11:11:24.093 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:46316 10 6452 1 2025-09-12 11:12:02.504 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:12:02.532 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:12:02.504 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:12:02.535 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:12:08.876 00:00:10.373 TCP 23.104.0.1:60184 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:12:08.877 00:00:10.373 TCP 23.104.0.1:60184 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:08:27.296 00:05:00.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:08:27.295 00:05:00.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:12:24.341 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6452 1 2025-09-12 11:12:24.342 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6452 1 2025-09-12 11:13:09.287 00:00:10.369 TCP 23.104.0.1:44806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:13:09.286 00:00:10.369 TCP 23.104.0.1:44806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:09:27.293 00:05:00.893 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:13:24.556 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:60478 12 10367 1 2025-09-12 11:13:24.556 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:60478 12 10367 1 2025-09-12 11:14:09.690 00:00:10.582 TCP 23.104.0.1:35358 -> 1.101.0.1:3000 15 1926 1 2025-09-12 11:14:09.690 00:00:10.583 TCP 23.104.0.1:35358 -> 1.101.0.1:3000 15 1926 1 2025-09-12 11:14:24.757 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6452 1 2025-09-12 11:14:24.755 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6452 1 2025-09-12 11:15:10.314 00:00:10.364 TCP 23.104.0.1:38604 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:15:10.313 00:00:10.364 TCP 23.104.0.1:38604 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:15:24.961 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:32792 10 6452 1 2025-09-12 11:15:24.959 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:32792 10 6452 1 2025-09-12 11:16:10.718 00:00:10.374 TCP 23.104.0.1:53806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:16:10.718 00:00:10.374 TCP 23.104.0.1:53806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:12:27.294 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:16:25.195 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55730 10 6452 1 2025-09-12 11:16:25.195 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55730 10 6452 1 2025-09-12 11:17:02.529 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:17:02.395 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:17:02.395 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:17:02.528 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:17:11.132 00:00:10.500 TCP 23.104.0.1:36966 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:17:11.132 00:00:10.500 TCP 23.104.0.1:36966 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:17:25.436 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46978 10 6452 1 2025-09-12 11:17:25.437 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46978 10 6452 1 2025-09-12 11:18:11.673 00:00:10.367 TCP 23.104.0.1:57778 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:18:11.672 00:00:10.367 TCP 23.104.0.1:57778 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:14:27.297 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:14:27.297 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:18:25.659 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54152 10 6452 1 2025-09-12 11:18:25.659 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54152 10 6452 1 2025-09-12 11:19:12.103 00:00:10.363 TCP 23.104.0.1:35218 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:19:12.104 00:00:10.363 TCP 23.104.0.1:35218 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:15:27.294 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:19:25.883 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:32894 10 6452 1 2025-09-12 11:19:25.883 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:32894 10 6452 1 2025-09-12 11:20:12.507 00:00:10.326 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:20:12.507 00:00:10.326 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:20:26.113 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:58800 10 6452 1 2025-09-12 11:20:26.113 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:58800 10 6452 1 2025-09-12 11:21:12.871 00:00:10.369 TCP 23.104.0.1:49116 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:21:12.871 00:00:10.369 TCP 23.104.0.1:49116 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:21:26.362 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38898 10 6452 1 2025-09-12 11:21:26.363 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38898 10 6452 1 2025-09-12 11:22:02.913 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:22:02.670 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:22:02.913 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:22:02.669 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:22:13.279 00:00:10.365 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:22:13.280 00:00:10.364 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:18:27.294 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:22:26.598 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-09-12 11:22:26.598 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-09-12 11:23:13.689 00:00:10.368 TCP 23.104.0.1:33494 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:23:13.688 00:00:10.368 TCP 23.104.0.1:33494 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:23:26.809 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56646 10 6452 1 2025-09-12 11:23:26.809 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56646 10 6452 1 2025-09-12 11:24:14.107 00:00:10.362 TCP 23.104.0.1:44946 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:20:27.297 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:24:14.107 00:00:10.362 TCP 23.104.0.1:44946 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:20:27.297 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:24:27.032 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39762 10 6452 1 2025-09-12 11:24:27.032 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39762 10 6452 1 2025-09-12 11:25:14.515 00:00:10.370 TCP 23.104.0.1:38632 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:25:14.515 00:00:10.370 TCP 23.104.0.1:38632 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:21:27.295 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:25:27.244 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44566 10 6452 1 2025-09-12 11:25:27.245 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44566 10 6452 1 2025-09-12 11:26:14.925 00:00:10.389 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:26:14.926 00:00:10.388 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:26:27.459 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43778 10 6452 1 2025-09-12 11:26:27.460 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43778 10 6452 1 2025-09-12 11:27:02.832 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:27:02.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:27:02.873 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:27:02.832 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:27:15.359 00:00:10.365 TCP 23.104.0.1:47272 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:27:15.360 00:00:10.364 TCP 23.104.0.1:47272 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:27:27.633 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54444 10 6452 1 2025-09-12 11:27:27.634 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54444 10 6452 1 2025-09-12 11:28:15.760 00:00:10.335 TCP 23.104.0.1:43832 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:24:27.296 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:28:15.761 00:00:10.335 TCP 23.104.0.1:43832 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:28:27.841 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43450 10 6452 1 2025-09-12 11:28:27.840 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43450 10 6452 1 2025-09-12 11:29:16.136 00:00:10.371 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:29:16.135 00:00:10.372 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:29:28.081 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41738 10 6452 1 2025-09-12 11:29:28.081 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41738 10 6452 1 2025-09-12 11:30:16.547 00:00:10.368 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:26:27.299 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:30:16.547 00:00:10.368 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:26:27.299 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:30:28.298 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-09-12 11:30:28.298 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-09-12 11:31:16.952 00:00:10.332 TCP 23.104.0.1:38476 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:31:16.952 00:00:10.332 TCP 23.104.0.1:38476 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:27:27.300 00:05:00.891 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:31:28.535 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52832 10 6452 1 2025-09-12 11:31:28.535 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52832 10 6452 1 2025-09-12 11:32:02.803 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:32:02.759 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:32:02.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:32:02.758 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:32:17.319 00:00:10.397 TCP 23.104.0.1:38732 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:32:17.318 00:00:10.397 TCP 23.104.0.1:38732 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:32:28.750 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36070 10 6452 1 2025-09-12 11:32:28.751 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36070 10 6452 1 2025-09-12 11:33:17.729 00:00:10.378 TCP 23.104.0.1:60390 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:33:17.729 00:00:10.378 TCP 23.104.0.1:60390 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:33:28.972 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:44022 13 6608 1 2025-09-12 11:33:28.972 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:44022 13 6608 1 2025-09-12 11:30:27.301 00:05:00.890 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:34:18.166 00:00:10.367 TCP 23.104.0.1:40566 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:34:18.165 00:00:10.367 TCP 23.104.0.1:40566 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:34:29.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50758 10 6452 1 2025-09-12 11:34:29.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50758 10 6452 1 2025-09-12 11:35:18.570 00:00:10.367 TCP 23.104.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:35:18.571 00:00:10.367 TCP 23.104.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:35:29.430 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49154 10 6452 1 2025-09-12 11:35:29.431 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49154 10 6452 1 2025-09-12 11:32:27.303 00:05:00.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:36:18.976 00:00:10.371 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:32:27.303 00:05:00.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:36:18.977 00:00:10.371 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:36:29.601 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36482 10 6452 1 2025-09-12 11:36:29.599 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36482 10 6452 1 2025-09-12 11:37:02.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:37:02.716 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:37:02.908 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:37:02.716 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:37:19.385 00:00:10.373 TCP 23.104.0.1:51558 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:37:19.384 00:00:10.373 TCP 23.104.0.1:51558 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:33:27.304 00:05:00.890 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:37:29.815 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-09-12 11:37:29.814 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-09-12 11:38:19.799 00:00:10.371 TCP 23.104.0.1:59388 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:38:19.799 00:00:10.371 TCP 23.104.0.1:59388 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:38:30.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41062 10 6452 1 2025-09-12 11:38:30.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41062 10 6452 1 2025-09-12 11:39:20.211 00:00:10.363 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:39:20.211 00:00:10.363 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:39:30.242 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33764 10 6452 1 2025-09-12 11:39:30.242 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33764 10 6452 1 2025-09-12 11:36:27.303 00:05:00.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:40:20.616 00:00:10.425 TCP 23.104.0.1:49618 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:40:20.617 00:00:10.425 TCP 23.104.0.1:49618 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:40:30.459 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 10 6452 1 2025-09-12 11:40:30.457 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 10 6452 1 2025-09-12 11:41:21.112 00:00:10.367 TCP 23.104.0.1:39400 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:41:21.112 00:00:10.368 TCP 23.104.0.1:39400 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:41:30.671 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38658 10 6452 1 2025-09-12 11:41:30.671 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38658 10 6452 1 2025-09-12 11:42:03.295 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:42:03.420 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:42:03.421 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:42:03.296 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:38:27.306 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:38:27.307 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:42:21.516 00:00:10.367 TCP 23.104.0.1:55444 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:42:21.516 00:00:10.367 TCP 23.104.0.1:55444 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:42:30.896 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45264 10 6452 1 2025-09-12 11:42:30.895 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45264 10 6452 1 2025-09-12 11:39:27.305 00:05:00.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:43:21.919 00:00:10.378 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:43:21.919 00:00:10.378 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:43:31.130 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-09-12 11:43:31.130 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-09-12 11:44:22.330 00:00:10.360 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:44:22.331 00:00:10.361 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:44:31.375 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34068 10 6452 1 2025-09-12 11:44:31.375 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34068 10 6452 1 2025-09-12 11:45:22.731 00:00:10.379 TCP 23.104.0.1:35574 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:45:22.732 00:00:10.379 TCP 23.104.0.1:35574 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:45:31.589 00:00:10.941 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-09-12 11:45:31.589 00:00:10.941 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-09-12 11:42:27.307 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:46:23.138 00:00:10.370 TCP 23.104.0.1:38836 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:46:23.140 00:00:10.370 TCP 23.104.0.1:38836 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:46:32.570 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35132 10 6452 1 2025-09-12 11:46:32.569 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35132 10 6452 1 2025-09-12 11:47:03.057 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:47:03.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:47:03.056 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:47:03.227 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:47:23.548 00:00:10.365 TCP 23.104.0.1:37360 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:47:23.548 00:00:10.365 TCP 23.104.0.1:37360 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:47:32.781 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58304 10 6452 1 2025-09-12 11:47:32.780 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58304 10 6452 1 2025-09-12 11:44:27.311 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:44:27.310 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:48:23.952 00:00:10.365 TCP 23.104.0.1:56432 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:48:23.952 00:00:10.365 TCP 23.104.0.1:56432 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:48:33.005 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:49922 10 6452 1 2025-09-12 11:48:33.005 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:49922 10 6452 1 2025-09-12 11:45:27.340 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:49:24.360 00:00:10.365 TCP 23.104.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:49:24.360 00:00:10.365 TCP 23.104.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:49:33.205 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50052 10 6452 1 2025-09-12 11:49:33.206 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50052 10 6452 1 2025-09-12 11:50:24.760 00:00:10.379 TCP 23.104.0.1:49186 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:50:24.760 00:00:10.379 TCP 23.104.0.1:49186 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:50:33.416 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52468 10 6452 1 2025-09-12 11:50:33.415 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52468 10 6452 1 2025-09-12 11:51:25.180 00:00:10.930 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:51:25.180 00:00:10.930 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:51:33.588 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58230 10 6452 1 2025-09-12 11:51:33.587 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58230 10 6452 1 2025-09-12 11:52:03.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:52:03.175 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:52:03.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:52:03.176 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:48:27.342 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:52:26.150 00:00:10.323 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:52:26.148 00:00:10.323 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:52:33.810 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45598 10 6452 1 2025-09-12 11:52:33.811 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45598 10 6452 1 2025-09-12 11:53:26.511 00:00:10.370 TCP 23.104.0.1:34222 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:53:26.511 00:00:10.370 TCP 23.104.0.1:34222 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:53:34.029 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41114 10 6452 1 2025-09-12 11:53:34.028 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41114 10 6452 1 2025-09-12 11:50:27.345 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:50:27.345 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:54:26.915 00:00:10.366 TCP 23.104.0.1:48788 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:54:26.915 00:00:10.366 TCP 23.104.0.1:48788 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:54:34.237 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51840 10 6452 1 2025-09-12 11:54:34.237 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51840 10 6452 1 2025-09-12 11:51:27.342 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:55:27.320 00:00:10.344 TCP 23.104.0.1:53890 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:55:27.320 00:00:10.344 TCP 23.104.0.1:53890 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:55:34.457 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54360 10 6452 1 2025-09-12 11:55:34.456 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54360 10 6452 1 2025-09-12 11:56:27.714 00:00:10.380 TCP 23.104.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:56:27.715 00:00:10.379 TCP 23.104.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:56:34.667 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-09-12 11:56:34.668 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-09-12 11:57:03.264 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:57:03.269 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:57:03.269 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:57:03.265 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:57:28.131 00:00:10.370 TCP 23.104.0.1:51510 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:57:28.131 00:00:10.370 TCP 23.104.0.1:51510 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:57:34.878 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45026 10 6452 1 2025-09-12 11:57:34.879 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45026 10 6452 1 2025-09-12 11:54:27.342 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:58:28.538 00:00:10.443 TCP 23.104.0.1:56644 -> 1.101.0.1:3000 15 1926 1 2025-09-12 11:58:28.539 00:00:10.444 TCP 23.104.0.1:56644 -> 1.101.0.1:3000 15 1926 1 2025-09-12 11:58:35.106 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 12 10367 1 2025-09-12 11:58:35.106 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 12 10367 1 Summary: total flows: 328, total bytes: 1.0 M, total packets: 3174, avg bps: 2146, avg pps: 0, avg bpp: 319 Time window: 2025-09-12 10:56:27 - 2025-09-12 11:59:28 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0039s User: 0.0031s Wall: 0.0045s flows/second: 72357.4 Runtime: 0.0046s