Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 14:54:47.285 00:05:03.089 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 14:59:08.640 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6870 1 2025-10-25 14:59:08.640 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6870 1 2025-10-25 14:59:26.998 00:00:10.359 TCP 23.104.0.1:50656 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:59:26.996 00:00:10.359 TCP 23.104.0.1:50656 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:00:08.852 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58428 10 6870 1 2025-10-25 15:00:08.853 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58428 10 6870 1 2025-10-25 15:00:27.400 00:00:10.377 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:00:27.400 00:00:10.378 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:55:50.372 00:05:56.919 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 14:56:47.288 00:05:03.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:01:09.094 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36456 10 6870 1 2025-10-25 15:01:09.093 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36456 10 6870 1 2025-10-25 15:01:27.813 00:00:10.369 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:01:27.813 00:00:10.369 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:02:09.313 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56758 10 6870 1 2025-10-25 15:02:09.314 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56758 10 6870 1 2025-10-25 15:02:28.220 00:00:10.371 TCP 23.104.0.1:52058 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:02:28.220 00:00:10.371 TCP 23.104.0.1:52058 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:02:49.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:57:50.375 00:05:56.912 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:02:49.277 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:02:49.276 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:02:49.292 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:03:09.529 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46998 10 6870 1 2025-10-25 15:03:09.529 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46998 10 6870 1 2025-10-25 15:03:28.633 00:00:10.362 TCP 23.104.0.1:36046 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:03:28.632 00:00:10.362 TCP 23.104.0.1:36046 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:04:09.741 00:00:10.280 TCP 1.101.0.1:3000 -> 22.102.0.1:59654 11 6922 1 2025-10-25 15:04:09.741 00:00:10.280 TCP 1.101.0.1:3000 -> 22.102.0.1:59654 11 6922 1 2025-10-25 15:04:29.035 00:00:10.365 TCP 23.104.0.1:43968 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:04:29.035 00:00:10.364 TCP 23.104.0.1:43968 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:00:47.286 00:05:03.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:05:10.073 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56008 10 6870 1 2025-10-25 15:05:10.072 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56008 10 6870 1 2025-10-25 15:05:29.437 00:00:10.447 TCP 23.104.0.1:37310 -> 1.101.0.1:3000 15 1926 1 2025-10-25 15:05:29.437 00:00:10.447 TCP 23.104.0.1:37310 -> 1.101.0.1:3000 15 1926 1 2025-10-25 15:06:10.283 00:00:11.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35452 12 10793 1 2025-10-25 15:06:10.284 00:00:11.199 TCP 1.101.0.1:3000 -> 22.102.0.1:35452 12 10793 1 2025-10-25 15:06:29.925 00:00:10.378 TCP 23.104.0.1:46620 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:06:29.925 00:00:10.378 TCP 23.104.0.1:46620 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:01:50.373 00:05:56.918 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:02:47.290 00:05:03.086 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:07:11.523 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42184 10 6870 1 2025-10-25 15:07:11.523 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42184 10 6870 1 2025-10-25 15:07:30.342 00:00:10.368 TCP 23.104.0.1:32938 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:07:30.341 00:00:10.368 TCP 23.104.0.1:32938 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:07:49.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:07:49.513 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:07:49.512 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:07:49.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:08:11.754 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59748 10 6870 1 2025-10-25 15:08:11.754 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59748 10 6870 1 2025-10-25 15:08:30.747 00:00:10.330 TCP 23.104.0.1:35720 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:08:30.748 00:00:10.329 TCP 23.104.0.1:35720 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:03:50.376 00:05:56.912 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:09:11.966 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51512 10 6870 1 2025-10-25 15:09:11.966 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51512 10 6870 1 2025-10-25 15:09:31.115 00:00:10.368 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:09:31.114 00:00:10.368 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:10:12.139 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45136 10 6870 1 2025-10-25 15:10:12.139 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45136 10 6870 1 2025-10-25 15:10:31.519 00:00:10.371 TCP 23.104.0.1:46312 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:10:31.518 00:00:10.371 TCP 23.104.0.1:46312 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:06:47.288 00:05:03.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:11:12.368 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51202 10 6870 1 2025-10-25 15:11:12.367 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51202 10 6870 1 2025-10-25 15:11:31.927 00:00:10.347 TCP 23.104.0.1:54630 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:11:31.927 00:00:10.347 TCP 23.104.0.1:54630 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:12:12.542 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42844 10 6870 1 2025-10-25 15:12:12.544 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42844 10 6870 1 2025-10-25 15:12:32.315 00:00:10.364 TCP 23.104.0.1:39894 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:12:32.315 00:00:10.364 TCP 23.104.0.1:39894 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:12:49.653 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:07:50.375 00:05:56.917 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:12:49.382 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:08:47.292 00:05:03.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:12:49.653 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:12:49.382 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:13:12.774 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48782 10 6870 1 2025-10-25 15:13:12.774 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48782 10 6870 1 2025-10-25 15:13:32.723 00:00:10.369 TCP 23.104.0.1:49354 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:13:32.723 00:00:10.369 TCP 23.104.0.1:49354 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:14:12.991 00:00:11.420 TCP 1.101.0.1:3000 -> 22.102.0.1:54738 10 6870 1 2025-10-25 15:14:12.993 00:00:11.420 TCP 1.101.0.1:3000 -> 22.102.0.1:54738 10 6870 1 2025-10-25 15:14:33.133 00:00:10.365 TCP 23.104.0.1:43830 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:14:33.133 00:00:10.365 TCP 23.104.0.1:43830 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:09:50.378 00:05:56.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:15:14.451 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:53416 10 6870 1 2025-10-25 15:15:14.450 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:53416 10 6870 1 2025-10-25 15:15:33.537 00:00:10.366 TCP 23.104.0.1:39672 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:15:33.536 00:00:10.366 TCP 23.104.0.1:39672 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:16:14.646 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57950 10 6870 1 2025-10-25 15:16:14.646 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57950 10 6870 1 2025-10-25 15:16:33.941 00:00:10.379 TCP 23.104.0.1:37214 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:16:33.942 00:00:10.379 TCP 23.104.0.1:37214 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:12:47.289 00:05:03.092 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:17:14.823 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43344 10 6870 1 2025-10-25 15:17:14.822 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43344 10 6870 1 2025-10-25 15:17:34.362 00:00:10.364 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:17:34.361 00:00:10.364 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:17:49.594 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:17:49.541 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:17:49.539 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:17:49.594 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:18:15.069 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39826 10 6870 1 2025-10-25 15:18:15.069 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39826 10 6870 1 2025-10-25 15:18:34.763 00:00:10.373 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:18:34.764 00:00:10.373 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:13:50.378 00:05:56.920 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:14:47.296 00:05:03.083 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:19:15.279 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37718 10 6870 1 2025-10-25 15:19:15.280 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37718 10 6870 1 2025-10-25 15:19:35.178 00:00:10.371 TCP 23.104.0.1:38266 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:19:35.178 00:00:10.371 TCP 23.104.0.1:38266 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:20:15.458 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50298 10 6870 1 2025-10-25 15:20:15.458 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50298 10 6870 1 2025-10-25 15:20:35.580 00:00:10.369 TCP 23.104.0.1:38494 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:20:35.580 00:00:10.369 TCP 23.104.0.1:38494 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:15:50.380 00:05:56.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:21:15.676 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39058 10 6870 1 2025-10-25 15:21:15.675 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39058 10 6870 1 2025-10-25 15:21:35.988 00:00:10.365 TCP 23.104.0.1:52468 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:21:35.988 00:00:10.365 TCP 23.104.0.1:52468 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:22:15.890 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53096 10 6870 1 2025-10-25 15:22:15.889 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53096 10 6870 1 2025-10-25 15:22:49.764 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:22:36.391 00:00:10.324 TCP 23.104.0.1:33922 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:22:49.674 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:22:49.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:18:47.294 00:05:03.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:22:49.674 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:22:36.390 00:00:10.325 TCP 23.104.0.1:33922 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:23:16.112 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51658 10 6870 1 2025-10-25 15:23:16.112 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51658 10 6870 1 2025-10-25 15:23:36.750 00:00:10.389 TCP 23.104.0.1:58314 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:23:36.750 00:00:10.388 TCP 23.104.0.1:58314 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:24:16.331 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33580 10 6870 1 2025-10-25 15:24:16.331 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33580 10 6870 1 2025-10-25 15:19:50.379 00:05:56.918 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:24:37.177 00:00:10.369 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:20:47.297 00:05:03.087 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:24:37.178 00:00:10.369 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:25:16.549 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47564 10 6870 1 2025-10-25 15:25:16.549 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47564 10 6870 1 2025-10-25 15:25:37.582 00:00:10.363 TCP 23.104.0.1:34952 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:25:37.582 00:00:10.363 TCP 23.104.0.1:34952 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:26:16.763 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49674 10 6870 1 2025-10-25 15:26:16.763 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49674 10 6870 1 2025-10-25 15:21:50.384 00:05:56.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:26:37.985 00:00:10.368 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:26:37.985 00:00:10.369 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:27:16.975 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:45504 10 6870 1 2025-10-25 15:27:16.974 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:45504 10 6870 1 2025-10-25 15:27:49.803 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:27:38.390 00:00:10.362 TCP 23.104.0.1:49756 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:27:49.716 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:27:49.803 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:27:38.389 00:00:10.363 TCP 23.104.0.1:49756 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:27:49.715 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:28:17.165 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53526 10 6870 1 2025-10-25 15:28:17.165 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53526 10 6870 1 2025-10-25 15:28:38.793 00:00:10.364 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:28:38.793 00:00:10.364 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:24:47.295 00:05:03.092 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:29:17.389 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 10 6870 1 2025-10-25 15:29:17.388 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 10 6870 1 2025-10-25 15:29:39.192 00:00:10.369 TCP 23.104.0.1:42652 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:29:39.192 00:00:10.369 TCP 23.104.0.1:42652 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:30:17.599 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52792 10 6870 1 2025-10-25 15:30:17.599 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:52792 10 6870 1 2025-10-25 15:30:39.601 00:00:10.751 TCP 23.104.0.1:43954 -> 1.101.0.1:3000 13 1611 1 2025-10-25 15:26:47.297 00:05:03.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:25:50.384 00:05:56.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:30:39.602 00:00:10.751 TCP 23.104.0.1:43954 -> 1.101.0.1:3000 13 1611 1 2025-10-25 15:31:17.837 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6870 1 2025-10-25 15:31:17.836 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6870 1 2025-10-25 15:31:40.391 00:00:10.327 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:31:40.393 00:00:10.327 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:32:18.070 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53130 10 6870 1 2025-10-25 15:32:18.069 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53130 10 6870 1 2025-10-25 15:27:50.387 00:05:56.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:32:49.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:32:49.995 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:32:49.917 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:32:49.994 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:32:40.769 00:00:10.373 TCP 23.104.0.1:43574 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:32:40.768 00:00:10.373 TCP 23.104.0.1:43574 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:33:18.280 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42896 10 6870 1 2025-10-25 15:33:18.281 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42896 10 6870 1 2025-10-25 15:33:41.178 00:00:10.373 TCP 23.104.0.1:38390 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:33:41.179 00:00:10.373 TCP 23.104.0.1:38390 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:34:18.493 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43950 10 6870 1 2025-10-25 15:34:18.493 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43950 10 6870 1 2025-10-25 15:30:47.295 00:05:03.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:34:41.586 00:00:10.366 TCP 23.104.0.1:34142 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:34:41.586 00:00:10.366 TCP 23.104.0.1:34142 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:35:18.707 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52180 10 6870 1 2025-10-25 15:35:18.707 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52180 10 6870 1 2025-10-25 15:35:41.992 00:00:10.365 TCP 23.104.0.1:54368 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:35:41.992 00:00:10.365 TCP 23.104.0.1:54368 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:36:18.917 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:53754 10 6870 1 2025-10-25 15:36:18.917 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53754 10 6870 1 2025-10-25 15:31:50.398 00:05:56.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:36:42.393 00:00:10.364 TCP 23.104.0.1:46474 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:36:42.394 00:00:10.364 TCP 23.104.0.1:46474 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:32:47.298 00:05:03.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:37:19.099 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32772 10 6870 1 2025-10-25 15:37:19.099 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32772 10 6870 1 2025-10-25 15:37:49.783 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:37:49.892 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:37:49.782 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:37:42.799 00:00:10.333 TCP 23.104.0.1:50258 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:37:49.892 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:37:42.799 00:00:10.334 TCP 23.104.0.1:50258 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:38:19.316 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45590 10 6870 1 2025-10-25 15:38:19.317 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45590 10 6870 1 2025-10-25 15:33:50.401 00:05:56.896 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:38:43.172 00:00:10.325 TCP 23.104.0.1:42232 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:38:43.173 00:00:10.324 TCP 23.104.0.1:42232 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:39:19.486 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49242 10 6870 1 2025-10-25 15:39:19.486 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49242 10 6870 1 2025-10-25 15:39:43.544 00:00:10.361 TCP 23.104.0.1:44830 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:39:43.544 00:00:10.361 TCP 23.104.0.1:44830 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:40:19.701 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50668 10 6870 1 2025-10-25 15:40:19.702 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50668 10 6870 1 2025-10-25 15:40:43.945 00:00:10.445 TCP 23.104.0.1:35426 -> 1.101.0.1:3000 15 1926 1 2025-10-25 15:40:43.944 00:00:10.446 TCP 23.104.0.1:35426 -> 1.101.0.1:3000 15 1926 1 2025-10-25 15:36:47.296 00:05:03.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:41:19.876 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:38676 12 10369 1 2025-10-25 15:41:19.876 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:38676 12 10369 1 2025-10-25 15:41:44.428 00:00:10.323 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:41:44.431 00:00:10.323 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:42:20.126 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43610 10 6452 1 2025-10-25 15:42:20.126 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43610 10 6452 1 2025-10-25 15:42:49.699 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:37:50.399 00:05:56.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:38:47.299 00:05:03.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:42:49.699 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:42:50.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:42:50.005 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:42:44.793 00:00:10.365 TCP 23.104.0.1:51880 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:42:44.793 00:00:10.365 TCP 23.104.0.1:51880 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:43:20.340 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-10-25 15:43:20.340 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-10-25 15:43:45.197 00:00:10.363 TCP 23.104.0.1:49226 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:43:45.195 00:00:10.363 TCP 23.104.0.1:49226 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:44:20.552 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6452 1 2025-10-25 15:44:20.552 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6452 1 2025-10-25 15:39:50.401 00:05:56.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:44:45.593 00:00:10.322 TCP 23.104.0.1:56746 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:44:45.593 00:00:10.322 TCP 23.104.0.1:56746 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:45:20.772 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-10-25 15:45:20.772 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-10-25 15:45:45.956 00:00:10.373 TCP 23.104.0.1:50718 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:45:45.956 00:00:10.372 TCP 23.104.0.1:50718 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:46:20.997 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60652 10 6452 1 2025-10-25 15:46:20.997 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60652 10 6452 1 2025-10-25 15:42:47.297 00:05:03.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:46:46.370 00:00:10.367 TCP 23.104.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:46:46.369 00:00:10.367 TCP 23.104.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:47:21.229 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57798 10 6452 1 2025-10-25 15:47:21.227 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57798 10 6452 1 2025-10-25 15:47:50.437 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:47:50.445 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:47:50.445 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:47:50.437 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:47:46.777 00:00:10.365 TCP 23.104.0.1:60942 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:47:46.778 00:00:10.365 TCP 23.104.0.1:60942 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:48:21.451 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43984 10 6452 1 2025-10-25 15:48:21.451 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43984 10 6452 1 2025-10-25 15:43:50.398 00:05:56.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:44:47.302 00:05:03.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:48:47.181 00:00:10.369 TCP 23.104.0.1:46800 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:48:47.181 00:00:10.370 TCP 23.104.0.1:46800 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:49:21.672 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39470 10 6452 1 2025-10-25 15:49:21.672 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39470 10 6452 1 2025-10-25 15:49:47.587 00:00:10.325 TCP 23.104.0.1:42708 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:49:47.588 00:00:10.325 TCP 23.104.0.1:42708 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:50:21.859 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:52228 10 6452 1 2025-10-25 15:50:21.859 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:52228 10 6452 1 2025-10-25 15:45:50.400 00:05:56.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:50:47.953 00:00:10.370 TCP 23.104.0.1:37052 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:50:47.952 00:00:10.370 TCP 23.104.0.1:37052 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:51:22.081 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6452 1 2025-10-25 15:51:22.081 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6452 1 2025-10-25 15:51:48.359 00:00:10.339 TCP 23.104.0.1:59884 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:51:48.361 00:00:10.338 TCP 23.104.0.1:59884 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:52:22.303 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35134 10 6452 1 2025-10-25 15:52:22.303 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35134 10 6452 1 2025-10-25 15:52:50.240 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:52:50.292 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:52:50.239 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:52:50.292 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:48:47.297 00:05:03.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:52:48.727 00:00:10.376 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:52:48.726 00:00:10.377 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:53:22.523 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35572 10 6452 1 2025-10-25 15:53:22.524 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35572 10 6452 1 2025-10-25 15:53:49.142 00:00:10.370 TCP 23.104.0.1:39404 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:53:49.143 00:00:10.370 TCP 23.104.0.1:39404 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:54:22.745 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58060 10 6452 1 2025-10-25 15:54:22.745 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58060 10 6452 1 2025-10-25 15:49:50.401 00:05:56.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:50:47.300 00:05:03.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:54:49.551 00:00:10.359 TCP 23.104.0.1:33218 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:54:49.551 00:00:10.359 TCP 23.104.0.1:33218 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:55:22.962 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59440 12 6556 1 2025-10-25 15:55:22.963 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59440 12 6556 1 2025-10-25 15:55:49.950 00:00:10.381 TCP 23.104.0.1:47004 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:55:49.950 00:00:10.380 TCP 23.104.0.1:47004 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:56:23.188 00:00:11.479 TCP 1.101.0.1:3000 -> 22.102.0.1:58546 10 6452 1 2025-10-25 15:56:23.188 00:00:11.479 TCP 1.101.0.1:3000 -> 22.102.0.1:58546 10 6452 1 2025-10-25 15:51:50.405 00:05:56.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 15:56:50.359 00:00:10.324 TCP 23.104.0.1:51642 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:56:50.360 00:00:10.323 TCP 23.104.0.1:51642 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:57:24.706 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40742 10 6452 1 2025-10-25 15:57:24.706 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40742 10 6452 1 2025-10-25 15:57:50.152 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:57:50.348 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:57:50.152 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 15:57:50.348 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 15:57:50.720 00:00:10.368 TCP 23.104.0.1:36510 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:57:50.721 00:00:10.368 TCP 23.104.0.1:36510 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:58:24.927 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:56920 10 6452 1 2025-10-25 15:58:24.927 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56920 10 6452 1 2025-10-25 15:54:47.299 00:05:03.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 327, total bytes: 1.0 M, total packets: 3168, avg bps: 2146, avg pps: 0, avg bpp: 330 Time window: 2025-10-25 14:54:47 - 2025-10-25 15:59:50 Total flows processed: 327, passed: 327, Blocks skipped: 0, Bytes read: 34072 Sys: 0.0037s User: 0.0037s Wall: 0.0045s flows/second: 72749.0 Runtime: 0.0045s