Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 19:58:58.772 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52768 10 6452 1 2025-09-13 19:58:58.773 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52768 10 6452 1 2025-09-13 19:54:28.001 00:06:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 19:59:39.552 00:00:10.368 TCP 23.104.0.1:48132 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:59:39.551 00:00:10.367 TCP 23.104.0.1:48132 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:59:58.986 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48728 10 6452 1 2025-09-13 19:59:58.985 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48728 10 6452 1 2025-09-13 20:00:39.957 00:00:10.368 TCP 23.104.0.1:59366 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:00:39.957 00:00:10.367 TCP 23.104.0.1:59366 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:00:59.219 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39546 10 6452 1 2025-09-13 20:00:59.220 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39546 10 6452 1 2025-09-13 20:01:40.363 00:00:10.368 TCP 23.104.0.1:58386 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:01:40.364 00:00:10.368 TCP 23.104.0.1:58386 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:01:59.428 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49884 10 6452 1 2025-09-13 20:01:59.429 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49884 10 6452 1 2025-09-13 19:57:28.002 00:06:00.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 19:57:28.003 00:06:00.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 19:57:28.000 00:06:00.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:02:41.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:02:41.813 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:02:41.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:02:41.814 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:02:40.769 00:00:10.374 TCP 23.104.0.1:42592 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:02:40.769 00:00:10.375 TCP 23.104.0.1:42592 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:02:59.645 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:56562 10 6452 1 2025-09-13 20:02:59.644 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:56562 10 6452 1 2025-09-13 20:03:41.182 00:00:10.476 TCP 23.104.0.1:52642 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:03:41.182 00:00:10.477 TCP 23.104.0.1:52642 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:03:59.828 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 10 6452 1 2025-09-13 20:03:59.828 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 10 6452 1 2025-09-13 20:04:41.697 00:00:10.367 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:04:41.696 00:00:10.367 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:05:00.061 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45382 10 6452 1 2025-09-13 20:05:00.061 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45382 10 6452 1 2025-09-13 20:05:42.106 00:00:10.328 TCP 23.104.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:05:42.107 00:00:10.327 TCP 23.104.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:06:00.309 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48036 10 6452 1 2025-09-13 20:06:00.309 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48036 10 6452 1 2025-09-13 20:01:28.000 00:06:00.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:06:42.480 00:00:10.365 TCP 23.104.0.1:48898 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:06:42.480 00:00:10.365 TCP 23.104.0.1:48898 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:07:00.522 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-09-13 20:07:00.520 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-09-13 20:07:41.816 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:07:42.041 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:07:42.040 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:07:41.817 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:07:42.888 00:00:10.332 TCP 23.104.0.1:45012 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:07:42.888 00:00:10.333 TCP 23.104.0.1:45012 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:08:00.693 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51962 10 6452 1 2025-09-13 20:08:00.693 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51962 10 6452 1 2025-09-13 20:08:43.258 00:00:10.365 TCP 23.104.0.1:35930 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:08:43.258 00:00:10.365 TCP 23.104.0.1:35930 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:09:00.865 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52878 10 6452 1 2025-09-13 20:09:00.866 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52878 10 6452 1 2025-09-13 20:04:28.035 00:06:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:04:28.033 00:06:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:04:28.035 00:06:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:09:43.662 00:00:10.367 TCP 23.104.0.1:54550 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:09:43.663 00:00:10.367 TCP 23.104.0.1:54550 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:10:01.091 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36844 11 6504 1 2025-09-13 20:10:01.092 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36844 11 6504 1 2025-09-13 20:10:44.083 00:00:10.325 TCP 23.104.0.1:35082 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:10:44.082 00:00:10.325 TCP 23.104.0.1:35082 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:11:01.324 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46996 10 6452 1 2025-09-13 20:11:01.324 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46996 10 6452 1 2025-09-13 20:11:44.448 00:00:10.363 TCP 23.104.0.1:43986 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:11:44.447 00:00:10.364 TCP 23.104.0.1:43986 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:12:01.531 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55042 10 6452 1 2025-09-13 20:12:01.530 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55042 10 6452 1 2025-09-13 20:12:42.373 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:12:42.019 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:12:42.371 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:12:42.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:12:44.856 00:00:10.371 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:12:44.855 00:00:10.372 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:13:01.736 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-09-13 20:13:01.737 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-09-13 20:08:28.041 00:06:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:13:45.263 00:00:10.365 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:13:45.264 00:00:10.365 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:14:01.927 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37102 10 6452 1 2025-09-13 20:14:01.927 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37102 10 6452 1 2025-09-13 20:14:45.667 00:00:10.373 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:14:45.667 00:00:10.374 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:15:02.104 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44148 10 6452 1 2025-09-13 20:15:02.105 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44148 10 6452 1 2025-09-13 20:15:46.113 00:00:10.368 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 12 1559 1 2025-09-13 20:15:46.113 00:00:10.368 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 12 1559 1 2025-09-13 20:16:02.272 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52138 10 6452 1 2025-09-13 20:16:02.272 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52138 10 6452 1 2025-09-13 20:11:28.043 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:11:28.039 00:06:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:11:28.043 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:16:46.523 00:00:10.366 TCP 23.104.0.1:44706 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:16:46.523 00:00:10.366 TCP 23.104.0.1:44706 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:17:02.485 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39710 10 6452 1 2025-09-13 20:17:02.484 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39710 10 6452 1 2025-09-13 20:17:42.493 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:17:42.474 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:17:42.493 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:17:42.475 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:17:46.935 00:00:10.382 TCP 23.104.0.1:60192 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:17:46.935 00:00:10.382 TCP 23.104.0.1:60192 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:18:02.697 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56028 10 6452 1 2025-09-13 20:18:02.698 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56028 10 6452 1 2025-09-13 20:18:47.371 00:00:10.322 TCP 23.104.0.1:55044 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:18:47.372 00:00:10.322 TCP 23.104.0.1:55044 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:19:02.924 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:36076 10 6452 1 2025-09-13 20:19:02.923 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:36076 10 6452 1 2025-09-13 20:19:47.734 00:00:10.505 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:19:47.734 00:00:10.505 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:20:03.127 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58986 10 6452 1 2025-09-13 20:20:03.126 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58986 10 6452 1 2025-09-13 20:15:28.040 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:20:48.281 00:00:10.362 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:20:48.282 00:00:10.362 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:21:03.306 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48628 10 6452 1 2025-09-13 20:21:03.306 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48628 10 6452 1 2025-09-13 20:21:48.682 00:00:10.362 TCP 23.104.0.1:55262 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:21:48.681 00:00:10.363 TCP 23.104.0.1:55262 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:22:03.521 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60960 10 6452 1 2025-09-13 20:22:03.521 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60960 10 6452 1 2025-09-13 20:22:42.275 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:22:42.293 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:22:42.294 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:22:42.275 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:22:49.101 00:00:10.365 TCP 23.104.0.1:49568 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:22:49.102 00:00:10.364 TCP 23.104.0.1:49568 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:23:03.732 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60518 10 6452 1 2025-09-13 20:23:03.732 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60518 10 6452 1 2025-09-13 20:18:28.044 00:06:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:18:28.044 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:18:28.041 00:06:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:23:49.505 00:00:10.381 TCP 23.104.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:23:49.506 00:00:10.380 TCP 23.104.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:24:03.947 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:45410 10 6452 1 2025-09-13 20:24:03.948 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45410 10 6452 1 2025-09-13 20:24:49.934 00:00:10.382 TCP 23.104.0.1:47940 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:24:49.935 00:00:10.382 TCP 23.104.0.1:47940 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:25:04.184 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 10 6452 1 2025-09-13 20:25:04.184 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 10 6452 1 2025-09-13 20:25:50.356 00:00:10.366 TCP 23.104.0.1:36752 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:25:50.356 00:00:10.367 TCP 23.104.0.1:36752 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:26:04.356 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-09-13 20:26:04.357 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-09-13 20:26:50.760 00:00:10.379 TCP 23.104.0.1:44458 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:26:50.762 00:00:10.379 TCP 23.104.0.1:44458 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:27:04.569 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58592 10 6452 1 2025-09-13 20:27:04.570 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58592 10 6452 1 2025-09-13 20:22:28.043 00:06:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:27:42.598 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:27:42.370 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:27:42.370 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:27:42.599 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:27:51.179 00:00:10.363 TCP 23.104.0.1:49956 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:27:51.178 00:00:10.363 TCP 23.104.0.1:49956 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:28:04.745 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52510 10 6452 1 2025-09-13 20:28:04.744 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52510 10 6452 1 2025-09-13 20:28:51.579 00:00:10.363 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:28:51.579 00:00:10.362 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:29:04.953 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48868 10 6452 1 2025-09-13 20:29:04.955 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48868 10 6452 1 2025-09-13 20:29:51.979 00:00:10.321 TCP 23.104.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:29:51.979 00:00:10.321 TCP 23.104.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:30:05.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-09-13 20:30:05.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-09-13 20:25:28.046 00:06:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:25:28.045 00:06:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:25:28.042 00:06:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:30:52.339 00:00:10.366 TCP 23.104.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:30:52.339 00:00:10.366 TCP 23.104.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:31:05.388 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41076 10 6452 1 2025-09-13 20:31:05.388 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41076 10 6452 1 2025-09-13 20:31:52.747 00:00:10.360 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:31:52.748 00:00:10.359 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:32:05.557 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51198 10 6452 1 2025-09-13 20:32:05.556 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51198 10 6452 1 2025-09-13 20:32:42.336 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:32:42.622 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:32:42.336 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:32:42.624 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:32:53.148 00:00:10.366 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:32:53.147 00:00:10.367 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:33:05.776 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55526 10 6452 1 2025-09-13 20:33:05.777 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55526 10 6452 1 2025-09-13 20:33:53.552 00:00:10.363 TCP 23.104.0.1:34002 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:33:53.553 00:00:10.363 TCP 23.104.0.1:34002 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:34:05.990 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47328 10 6452 1 2025-09-13 20:34:05.990 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47328 10 6452 1 2025-09-13 20:29:28.045 00:06:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:34:53.955 00:00:10.368 TCP 23.104.0.1:39586 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:34:53.954 00:00:10.368 TCP 23.104.0.1:39586 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:35:06.220 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-09-13 20:35:06.222 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-09-13 20:35:54.364 00:00:10.361 TCP 23.104.0.1:54240 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:35:54.364 00:00:10.361 TCP 23.104.0.1:54240 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:36:06.436 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35974 10 6452 1 2025-09-13 20:36:06.437 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35974 10 6452 1 2025-09-13 20:36:54.761 00:00:10.344 TCP 23.104.0.1:46236 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:36:54.762 00:00:10.344 TCP 23.104.0.1:46236 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:37:06.613 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49092 10 6452 1 2025-09-13 20:37:06.614 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49092 10 6452 1 2025-09-13 20:32:28.048 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:32:28.045 00:06:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:32:28.048 00:06:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:37:42.547 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:37:42.588 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:37:42.588 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:37:42.548 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:37:55.147 00:00:10.368 TCP 23.104.0.1:40286 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:37:55.146 00:00:10.368 TCP 23.104.0.1:40286 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:38:06.796 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 10 6452 1 2025-09-13 20:38:06.796 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 10 6452 1 2025-09-13 20:38:55.551 00:00:10.363 TCP 23.104.0.1:37072 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:38:55.551 00:00:10.363 TCP 23.104.0.1:37072 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:39:07.009 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35836 10 6452 1 2025-09-13 20:39:07.010 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35836 10 6452 1 2025-09-13 20:39:55.956 00:00:10.374 TCP 23.104.0.1:35708 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:39:55.957 00:00:10.373 TCP 23.104.0.1:35708 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:40:07.191 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 10 6452 1 2025-09-13 20:40:07.190 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 10 6452 1 2025-09-13 20:40:56.365 00:00:10.361 TCP 23.104.0.1:51060 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:40:56.365 00:00:10.361 TCP 23.104.0.1:51060 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:41:07.424 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52098 10 6452 1 2025-09-13 20:41:07.426 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52098 10 6452 1 2025-09-13 20:36:28.046 00:06:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:41:56.762 00:00:10.375 TCP 23.104.0.1:50278 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:41:56.762 00:00:10.375 TCP 23.104.0.1:50278 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:42:07.637 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58884 10 6452 1 2025-09-13 20:42:07.638 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58884 10 6452 1 2025-09-13 20:42:42.642 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:42:42.782 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:42:42.782 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:42:42.642 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:42:57.177 00:00:10.374 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:42:57.177 00:00:10.373 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:43:07.849 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52718 10 6452 1 2025-09-13 20:43:07.847 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52718 10 6452 1 2025-09-13 20:43:57.580 00:00:10.346 TCP 23.104.0.1:50988 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:43:57.579 00:00:10.346 TCP 23.104.0.1:50988 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:44:08.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40348 10 6452 1 2025-09-13 20:44:08.086 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40348 10 6452 1 2025-09-13 20:39:28.048 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:39:28.046 00:06:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:39:28.048 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:44:57.972 00:00:10.333 TCP 23.104.0.1:38054 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:44:57.973 00:00:10.332 TCP 23.104.0.1:38054 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:45:08.300 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42466 10 6452 1 2025-09-13 20:45:08.299 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42466 10 6452 1 2025-09-13 20:45:58.343 00:00:10.365 TCP 23.104.0.1:36790 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:45:58.343 00:00:10.365 TCP 23.104.0.1:36790 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:46:08.515 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-09-13 20:46:08.515 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-09-13 20:46:58.748 00:00:10.371 TCP 23.104.0.1:48284 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:46:58.748 00:00:10.371 TCP 23.104.0.1:48284 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:47:08.728 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50392 10 6452 1 2025-09-13 20:47:08.729 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50392 10 6452 1 2025-09-13 20:47:42.608 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:47:42.698 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:47:42.698 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:47:42.610 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:47:59.162 00:00:10.359 TCP 23.104.0.1:40302 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:47:59.162 00:00:10.360 TCP 23.104.0.1:40302 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:48:08.940 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:37720 10 6452 1 2025-09-13 20:48:08.939 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:37720 10 6452 1 2025-09-13 20:43:28.047 00:06:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:48:59.565 00:00:11.051 TCP 23.104.0.1:48774 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:48:59.566 00:00:11.051 TCP 23.104.0.1:48774 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:49:09.192 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55802 10 6452 1 2025-09-13 20:49:09.193 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55802 10 6452 1 2025-09-13 20:50:00.657 00:00:10.367 TCP 23.104.0.1:49864 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:50:00.656 00:00:10.368 TCP 23.104.0.1:49864 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:50:09.364 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60204 10 6452 1 2025-09-13 20:50:09.363 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60204 10 6452 1 2025-09-13 20:51:01.088 00:00:10.365 TCP 23.104.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:51:01.089 00:00:10.365 TCP 23.104.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:51:09.578 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40110 10 6452 1 2025-09-13 20:51:09.577 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40110 10 6452 1 2025-09-13 20:46:28.049 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:46:28.049 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:46:28.047 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:52:01.491 00:00:10.368 TCP 23.104.0.1:55802 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:52:01.491 00:00:10.369 TCP 23.104.0.1:55802 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:52:09.791 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34392 10 6452 1 2025-09-13 20:52:09.791 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34392 10 6452 1 2025-09-13 20:52:42.569 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:52:42.800 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:52:42.801 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:52:42.570 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:53:01.903 00:00:10.380 TCP 23.104.0.1:55878 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:53:01.902 00:00:10.381 TCP 23.104.0.1:55878 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:53:10.000 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41454 10 6452 1 2025-09-13 20:53:10.001 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41454 10 6452 1 2025-09-13 20:54:02.310 00:00:10.330 TCP 23.104.0.1:53720 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:54:02.310 00:00:10.330 TCP 23.104.0.1:53720 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:54:10.218 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34988 10 6452 1 2025-09-13 20:54:10.219 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34988 10 6452 1 2025-09-13 20:55:02.678 00:00:10.370 TCP 23.104.0.1:58650 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:55:02.678 00:00:10.370 TCP 23.104.0.1:58650 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:55:10.424 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50852 10 6452 1 2025-09-13 20:55:10.425 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50852 10 6452 1 2025-09-13 20:50:28.047 00:06:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:56:03.116 00:00:10.331 TCP 23.104.0.1:53346 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:56:03.114 00:00:10.331 TCP 23.104.0.1:53346 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:56:10.643 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46798 10 6452 1 2025-09-13 20:56:10.642 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46798 10 6452 1 2025-09-13 20:57:03.495 00:00:10.408 TCP 23.104.0.1:53652 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:57:03.494 00:00:10.409 TCP 23.104.0.1:53652 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:57:10.855 00:00:10.646 TCP 1.101.0.1:3000 -> 22.102.0.1:55988 10 6452 1 2025-09-13 20:57:10.855 00:00:10.647 TCP 1.101.0.1:3000 -> 22.102.0.1:55988 10 6452 1 2025-09-13 20:57:42.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:57:42.702 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:57:42.701 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 20:57:42.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 20:58:03.942 00:00:10.375 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:58:03.943 00:00:10.375 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:58:11.537 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39774 10 6452 1 2025-09-13 20:58:11.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39774 10 6452 1 2025-09-13 20:53:28.050 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 20:53:28.048 00:06:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 20:53:28.051 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 Summary: total flows: 322, total bytes: 995366, total packets: 3150, avg bps: 2041, avg pps: 0, avg bpp: 315 Time window: 2025-09-13 19:54:28 - 2025-09-13 20:59:28 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0017s User: 0.0043s Wall: 0.0041s flows/second: 77869.3 Runtime: 0.0042s