Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 03:59:15.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49936 10 6452 1 2025-10-25 03:59:15.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49936 10 6452 1 2025-10-25 03:59:26.872 00:00:10.367 TCP 23.104.0.1:41142 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:59:26.871 00:00:10.367 TCP 23.104.0.1:41142 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:00:16.070 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48794 10 6452 1 2025-10-25 04:00:16.071 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48794 10 6452 1 2025-10-25 04:00:27.277 00:00:10.380 TCP 23.104.0.1:39866 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:00:27.278 00:00:10.379 TCP 23.104.0.1:39866 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:55:50.142 00:05:56.953 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 03:56:47.096 00:05:03.049 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:01:16.292 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46858 10 6452 1 2025-10-25 04:01:16.291 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46858 10 6452 1 2025-10-25 04:01:27.696 00:00:11.080 TCP 23.104.0.1:44732 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:01:27.695 00:00:11.081 TCP 23.104.0.1:44732 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:02:16.518 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53142 10 6452 1 2025-10-25 04:02:16.516 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53142 10 6452 1 2025-10-25 04:02:35.915 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:02:28.809 00:00:10.367 TCP 23.104.0.1:36292 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:02:36.012 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:02:35.915 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:02:28.809 00:00:10.367 TCP 23.104.0.1:36292 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:02:36.012 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:57:50.145 00:05:56.949 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:03:16.729 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56496 10 6452 1 2025-10-25 04:03:16.728 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56496 10 6452 1 2025-10-25 04:03:29.212 00:00:10.364 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:03:29.212 00:00:10.365 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:04:16.950 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42346 11 6504 1 2025-10-25 04:04:16.951 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42346 11 6504 1 2025-10-25 04:04:29.616 00:00:10.374 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:04:29.615 00:00:10.374 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:00:47.092 00:05:03.055 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:05:17.187 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52374 10 6452 1 2025-10-25 04:05:17.188 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52374 10 6452 1 2025-10-25 04:05:30.026 00:00:10.362 TCP 23.104.0.1:55924 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:05:30.027 00:00:10.363 TCP 23.104.0.1:55924 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:06:17.365 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53968 10 6452 1 2025-10-25 04:06:17.366 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53968 10 6452 1 2025-10-25 04:06:30.430 00:00:10.325 TCP 23.104.0.1:37566 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:06:30.431 00:00:10.325 TCP 23.104.0.1:37566 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:01:50.144 00:05:56.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:02:47.095 00:05:03.050 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:07:17.579 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:36650 10 6452 1 2025-10-25 04:07:17.579 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36650 10 6452 1 2025-10-25 04:07:35.831 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:07:36.022 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:07:35.832 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:07:36.022 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:07:30.792 00:00:10.366 TCP 23.104.0.1:36666 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:07:30.792 00:00:10.366 TCP 23.104.0.1:36666 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:08:17.844 00:00:15.386 TCP 1.101.0.1:3000 -> 22.102.0.1:36064 10 6452 1 2025-10-25 04:08:17.845 00:00:15.386 TCP 1.101.0.1:3000 -> 22.102.0.1:36064 10 6452 1 2025-10-25 04:08:31.191 00:00:10.367 TCP 23.104.0.1:52548 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:08:31.191 00:00:10.367 TCP 23.104.0.1:52548 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:03:50.146 00:05:56.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:09:23.307 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60430 10 6452 1 2025-10-25 04:09:23.305 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60430 10 6452 1 2025-10-25 04:09:31.597 00:00:10.368 TCP 23.104.0.1:55392 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:09:31.598 00:00:10.368 TCP 23.104.0.1:55392 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:10:23.516 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39752 10 6452 1 2025-10-25 04:10:23.516 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39752 10 6452 1 2025-10-25 04:10:32.002 00:00:10.366 TCP 23.104.0.1:51560 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:10:32.002 00:00:10.367 TCP 23.104.0.1:51560 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:06:47.096 00:05:03.052 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:11:23.735 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49830 10 6452 1 2025-10-25 04:11:23.735 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49830 10 6452 1 2025-10-25 04:11:32.404 00:00:10.366 TCP 23.104.0.1:55988 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:11:32.404 00:00:10.365 TCP 23.104.0.1:55988 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:12:35.913 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:12:23.945 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59024 10 6452 1 2025-10-25 04:12:35.935 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:12:35.911 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:12:23.943 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59024 10 6452 1 2025-10-25 04:12:35.933 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:12:32.814 00:00:10.400 TCP 23.104.0.1:56508 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:12:32.813 00:00:10.399 TCP 23.104.0.1:56508 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:07:50.146 00:05:56.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:08:47.099 00:05:03.047 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:13:24.184 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34474 10 6452 1 2025-10-25 04:13:24.183 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34474 10 6452 1 2025-10-25 04:13:33.268 00:00:10.381 TCP 23.104.0.1:43310 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:13:33.269 00:00:10.381 TCP 23.104.0.1:43310 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:14:24.395 00:00:10.786 TCP 1.101.0.1:3000 -> 22.102.0.1:54166 10 6452 1 2025-10-25 04:14:24.395 00:00:10.786 TCP 1.101.0.1:3000 -> 22.102.0.1:54166 10 6452 1 2025-10-25 04:14:33.686 00:00:10.373 TCP 23.104.0.1:42768 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:14:33.686 00:00:10.372 TCP 23.104.0.1:42768 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:09:50.147 00:05:56.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:15:25.219 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-10-25 04:15:25.219 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-10-25 04:15:34.104 00:00:10.331 TCP 23.104.0.1:35264 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:15:34.103 00:00:10.332 TCP 23.104.0.1:35264 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:16:25.430 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40656 10 6452 1 2025-10-25 04:16:25.430 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40656 10 6452 1 2025-10-25 04:16:34.471 00:00:10.363 TCP 23.104.0.1:38808 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:16:34.471 00:00:10.364 TCP 23.104.0.1:38808 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:12:47.096 00:05:03.053 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:17:25.647 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36448 10 6452 1 2025-10-25 04:17:36.298 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:17:25.646 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36448 10 6452 1 2025-10-25 04:17:36.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:17:36.337 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:17:36.299 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:17:34.874 00:00:10.365 TCP 23.104.0.1:41450 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:17:34.875 00:00:10.365 TCP 23.104.0.1:41450 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:18:25.821 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46374 10 6452 1 2025-10-25 04:18:25.820 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46374 10 6452 1 2025-10-25 04:18:35.278 00:00:10.367 TCP 23.104.0.1:60240 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:18:35.279 00:00:10.367 TCP 23.104.0.1:60240 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:13:50.147 00:05:56.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:14:47.102 00:05:03.047 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:19:26.072 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50098 10 6452 1 2025-10-25 04:19:26.073 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50098 10 6452 1 2025-10-25 04:19:35.679 00:00:10.367 TCP 23.104.0.1:41598 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:19:35.680 00:00:10.366 TCP 23.104.0.1:41598 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:20:26.291 00:00:10.430 TCP 1.101.0.1:3000 -> 22.102.0.1:60066 10 6452 1 2025-10-25 04:20:26.292 00:00:10.430 TCP 1.101.0.1:3000 -> 22.102.0.1:60066 10 6452 1 2025-10-25 04:15:50.149 00:05:56.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:20:36.105 00:00:11.186 TCP 23.104.0.1:39460 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:20:36.106 00:00:11.186 TCP 23.104.0.1:39460 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:21:26.763 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43358 10 6452 1 2025-10-25 04:21:26.762 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43358 10 6452 1 2025-10-25 04:21:37.331 00:00:10.363 TCP 23.104.0.1:55928 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:21:37.330 00:00:10.363 TCP 23.104.0.1:55928 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:22:26.977 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50600 10 6452 1 2025-10-25 04:22:36.235 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:22:36.064 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:22:36.065 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:22:26.978 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50600 10 6452 1 2025-10-25 04:22:36.236 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:22:37.737 00:00:10.368 TCP 23.104.0.1:56442 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:22:37.735 00:00:10.369 TCP 23.104.0.1:56442 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:18:47.098 00:05:03.053 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:23:27.243 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56354 10 6452 1 2025-10-25 04:23:27.242 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56354 10 6452 1 2025-10-25 04:23:38.143 00:00:10.366 TCP 23.104.0.1:57236 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:23:38.144 00:00:10.366 TCP 23.104.0.1:57236 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:24:27.427 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6452 1 2025-10-25 04:24:27.429 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6452 1 2025-10-25 04:24:38.543 00:00:10.363 TCP 23.104.0.1:40988 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:19:50.149 00:05:56.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:20:47.101 00:05:03.048 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:24:38.542 00:00:10.362 TCP 23.104.0.1:40988 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:25:27.661 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40330 10 6452 1 2025-10-25 04:25:27.660 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40330 10 6452 1 2025-10-25 04:25:38.945 00:00:10.366 TCP 23.104.0.1:45526 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:25:38.945 00:00:10.367 TCP 23.104.0.1:45526 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:26:27.876 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54280 10 6452 1 2025-10-25 04:26:27.876 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54280 10 6452 1 2025-10-25 04:26:39.349 00:00:10.373 TCP 23.104.0.1:37110 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:21:50.151 00:05:56.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:26:39.350 00:00:10.373 TCP 23.104.0.1:37110 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:27:28.099 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50218 10 6452 1 2025-10-25 04:27:36.781 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:27:36.502 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:27:28.099 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50218 10 6452 1 2025-10-25 04:27:36.781 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:27:36.502 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:27:39.755 00:00:10.379 TCP 23.104.0.1:46702 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:27:39.756 00:00:10.379 TCP 23.104.0.1:46702 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:28:28.309 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60252 10 6452 1 2025-10-25 04:28:28.309 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60252 10 6452 1 2025-10-25 04:28:40.172 00:00:10.368 TCP 23.104.0.1:57064 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:28:40.172 00:00:10.368 TCP 23.104.0.1:57064 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:24:47.099 00:05:03.054 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:29:28.529 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49062 10 6452 1 2025-10-25 04:29:28.529 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49062 10 6452 1 2025-10-25 04:29:40.582 00:00:10.369 TCP 23.104.0.1:58218 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:29:40.582 00:00:10.369 TCP 23.104.0.1:58218 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:30:28.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59850 10 6452 1 2025-10-25 04:30:28.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59850 10 6452 1 2025-10-25 04:25:50.149 00:05:56.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:26:47.103 00:05:03.048 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:30:40.990 00:00:10.367 TCP 23.104.0.1:60960 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:30:40.990 00:00:10.367 TCP 23.104.0.1:60960 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:31:28.950 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53740 10 6452 1 2025-10-25 04:31:28.949 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53740 10 6452 1 2025-10-25 04:31:41.400 00:00:10.367 TCP 23.104.0.1:45866 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:31:41.400 00:00:10.367 TCP 23.104.0.1:45866 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:32:29.173 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-10-25 04:32:36.660 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:32:36.555 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:32:36.555 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:32:29.173 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-10-25 04:32:36.660 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:27:50.152 00:05:56.949 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:32:41.807 00:00:10.369 TCP 23.104.0.1:57750 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:32:41.806 00:00:10.369 TCP 23.104.0.1:57750 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:33:29.384 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35992 10 6452 1 2025-10-25 04:33:29.385 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35992 10 6452 1 2025-10-25 04:33:42.210 00:00:10.364 TCP 23.104.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:33:42.210 00:00:10.364 TCP 23.104.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:34:29.596 00:00:20.033 TCP 1.101.0.1:3000 -> 22.102.0.1:45996 10 6452 1 2025-10-25 04:34:29.596 00:00:20.033 TCP 1.101.0.1:3000 -> 22.102.0.1:45996 10 6452 1 2025-10-25 04:30:47.100 00:05:03.054 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:34:42.608 00:00:10.392 TCP 23.104.0.1:52252 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:34:42.609 00:00:10.392 TCP 23.104.0.1:52252 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:35:39.668 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58164 10 6452 1 2025-10-25 04:35:39.668 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58164 10 6452 1 2025-10-25 04:35:43.050 00:00:10.332 TCP 23.104.0.1:45290 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:35:43.051 00:00:10.332 TCP 23.104.0.1:45290 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:31:50.151 00:05:56.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:32:47.103 00:05:03.049 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:36:39.889 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58642 10 6452 1 2025-10-25 04:36:43.421 00:00:10.324 TCP 23.104.0.1:44028 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:36:39.890 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58642 10 6452 1 2025-10-25 04:36:43.421 00:00:10.324 TCP 23.104.0.1:44028 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:37:36.743 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:37:36.688 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:37:36.743 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:37:36.688 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:37:40.117 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56826 10 6452 1 2025-10-25 04:37:40.117 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56826 10 6452 1 2025-10-25 04:37:43.783 00:00:10.326 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:37:43.782 00:00:10.327 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:38:40.334 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49890 10 6452 1 2025-10-25 04:33:50.154 00:05:56.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:38:40.334 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49890 10 6452 1 2025-10-25 04:38:44.146 00:00:10.358 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:38:44.145 00:00:10.358 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:39:40.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56912 10 6452 1 2025-10-25 04:39:44.542 00:00:10.373 TCP 23.104.0.1:41480 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:39:40.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56912 10 6452 1 2025-10-25 04:39:44.542 00:00:10.374 TCP 23.104.0.1:41480 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:40:40.726 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:38350 12 10369 1 2025-10-25 04:40:40.726 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:38350 12 10369 1 2025-10-25 04:36:47.104 00:05:03.051 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:40:44.951 00:00:10.445 TCP 23.104.0.1:46100 -> 1.101.0.1:3000 15 1926 1 2025-10-25 04:40:44.949 00:00:10.445 TCP 23.104.0.1:46100 -> 1.101.0.1:3000 15 1926 1 2025-10-25 04:41:40.967 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:52626 10 6452 1 2025-10-25 04:41:40.965 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:52626 10 6452 1 2025-10-25 04:41:45.432 00:00:10.372 TCP 23.104.0.1:51072 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:41:45.433 00:00:10.372 TCP 23.104.0.1:51072 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:42:36.772 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:42:36.801 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:42:36.772 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:42:36.802 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:37:50.152 00:05:56.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:38:47.106 00:05:03.047 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:42:41.164 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:57126 10 6452 1 2025-10-25 04:42:41.164 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:57126 10 6452 1 2025-10-25 04:42:45.840 00:00:10.391 TCP 23.104.0.1:47464 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:42:45.840 00:00:10.391 TCP 23.104.0.1:47464 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:43:41.373 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39502 10 6452 1 2025-10-25 04:43:41.373 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39502 10 6452 1 2025-10-25 04:43:46.271 00:00:10.366 TCP 23.104.0.1:39608 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:43:46.272 00:00:10.366 TCP 23.104.0.1:39608 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:39:50.154 00:05:56.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:44:41.601 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33936 10 6452 1 2025-10-25 04:44:41.602 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33936 10 6452 1 2025-10-25 04:44:46.675 00:00:10.362 TCP 23.104.0.1:56998 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:44:46.674 00:00:10.362 TCP 23.104.0.1:56998 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:45:41.828 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47880 10 6452 1 2025-10-25 04:45:41.827 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47880 10 6452 1 2025-10-25 04:45:47.100 00:00:10.359 TCP 23.104.0.1:51630 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:45:47.100 00:00:10.360 TCP 23.104.0.1:51630 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:42:47.104 00:05:03.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:46:42.001 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38168 10 6452 1 2025-10-25 04:46:42.001 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38168 10 6452 1 2025-10-25 04:46:47.499 00:00:10.362 TCP 23.104.0.1:35072 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:46:47.497 00:00:10.363 TCP 23.104.0.1:35072 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:47:36.972 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:47:37.158 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:47:37.157 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:47:36.972 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:47:42.223 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55458 10 6452 1 2025-10-25 04:47:42.221 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55458 10 6452 1 2025-10-25 04:47:47.904 00:00:10.369 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:47:47.903 00:00:10.368 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:43:50.154 00:05:56.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:44:47.107 00:05:03.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:48:42.401 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53534 10 6452 1 2025-10-25 04:48:42.400 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53534 10 6452 1 2025-10-25 04:48:48.311 00:00:10.364 TCP 23.104.0.1:60302 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:48:48.311 00:00:10.363 TCP 23.104.0.1:60302 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:49:42.612 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49364 10 6452 1 2025-10-25 04:49:42.613 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49364 10 6452 1 2025-10-25 04:49:48.710 00:00:10.326 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:49:48.710 00:00:10.326 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:45:50.157 00:05:56.949 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:50:42.839 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47476 10 6452 1 2025-10-25 04:50:42.839 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47476 10 6452 1 2025-10-25 04:50:49.101 00:00:10.368 TCP 23.104.0.1:49032 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:50:49.101 00:00:10.368 TCP 23.104.0.1:49032 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:51:43.027 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39250 10 6452 1 2025-10-25 04:51:43.027 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39250 10 6452 1 2025-10-25 04:51:49.502 00:00:10.378 TCP 23.104.0.1:54910 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:51:49.502 00:00:10.378 TCP 23.104.0.1:54910 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:52:36.943 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:52:37.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:52:36.944 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:52:37.079 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:48:47.106 00:05:03.062 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:52:43.207 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46056 10 6452 1 2025-10-25 04:52:43.207 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46056 10 6452 1 2025-10-25 04:52:49.917 00:00:10.369 TCP 23.104.0.1:40920 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:52:49.916 00:00:10.370 TCP 23.104.0.1:40920 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:53:43.441 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42762 10 6452 1 2025-10-25 04:53:43.444 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42762 10 6452 1 2025-10-25 04:53:50.323 00:00:10.370 TCP 23.104.0.1:54350 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:53:50.322 00:00:10.370 TCP 23.104.0.1:54350 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:49:50.163 00:05:56.945 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:50:47.108 00:05:03.057 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:54:43.653 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51504 10 6452 1 2025-10-25 04:54:43.653 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51504 10 6452 1 2025-10-25 04:54:50.729 00:00:10.374 TCP 23.104.0.1:54328 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:54:50.729 00:00:10.374 TCP 23.104.0.1:54328 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:55:43.870 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60826 10 6452 1 2025-10-25 04:55:43.871 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60826 10 6452 1 2025-10-25 04:55:51.135 00:00:10.364 TCP 23.104.0.1:41856 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:55:51.135 00:00:10.363 TCP 23.104.0.1:41856 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:51:50.168 00:05:56.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 04:56:44.110 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49888 10 6452 1 2025-10-25 04:56:44.112 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49888 10 6452 1 2025-10-25 04:56:51.539 00:00:10.368 TCP 23.104.0.1:54482 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:56:51.539 00:00:10.368 TCP 23.104.0.1:54482 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:57:37.036 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:57:36.784 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:57:37.037 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 04:57:36.785 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 04:57:44.326 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41308 10 6452 1 2025-10-25 04:57:44.327 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41308 10 6452 1 2025-10-25 04:57:51.945 00:00:10.380 TCP 23.104.0.1:55512 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:57:51.944 00:00:10.381 TCP 23.104.0.1:55512 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 323, total bytes: 988816, total packets: 3104, avg bps: 2119, avg pps: 0, avg bpp: 318 Time window: 2025-10-25 03:55:50 - 2025-10-25 04:58:02 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0044s User: 0.0022s Wall: 0.0037s flows/second: 86943.9 Runtime: 0.0037s