Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-05 18:59:05.450 00:00:10.595 TCP 1.101.0.1:3000 -> 22.102.0.1:42202 10 6452 1 2026-01-05 18:59:10.273 00:00:10.420 TCP 23.104.0.1:51278 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:00:06.090 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32906 10 6452 1 2026-01-05 19:00:10.736 00:00:10.330 TCP 23.104.0.1:45344 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:01:06.312 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 10 6452 1 2026-01-05 18:56:28.299 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-05 19:01:11.111 00:00:10.365 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2026-01-05 18:56:28.297 00:05:54.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-05 19:02:06.526 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60568 10 6452 1 2026-01-05 19:02:11.515 00:00:10.385 TCP 23.104.0.1:42228 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:02:34.972 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:02:34.790 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:03:06.750 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46514 10 6452 1 2026-01-05 19:03:11.942 00:00:10.420 TCP 23.104.0.1:33262 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:04:06.973 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39586 10 6452 1 2026-01-05 19:04:12.399 00:00:10.369 TCP 23.104.0.1:59484 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:05:07.206 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57530 10 6452 1 2026-01-05 19:05:12.804 00:00:10.370 TCP 23.104.0.1:35438 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:06:07.429 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43972 10 6452 1 2026-01-05 19:06:13.211 00:00:10.417 TCP 23.104.0.1:43790 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:07:07.601 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43392 10 6452 1 2026-01-05 19:02:28.299 00:05:54.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-05 19:07:13.671 00:00:10.363 TCP 23.104.0.1:40006 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:02:28.298 00:05:54.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-05 19:07:34.968 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:07:35.071 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:08:07.818 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41100 10 6452 1 2026-01-05 19:08:14.101 00:00:10.362 TCP 23.104.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:09:08.056 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37520 10 6452 1 2026-01-05 19:09:14.504 00:00:11.487 TCP 23.104.0.1:52400 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:10:08.283 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56484 10 6452 1 2026-01-05 19:10:16.032 00:00:10.365 TCP 23.104.0.1:39742 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:11:08.508 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42032 10 6452 1 2026-01-05 19:11:16.436 00:00:10.365 TCP 23.104.0.1:53806 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:12:08.689 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55576 10 6452 1 2026-01-05 19:12:16.856 00:00:10.374 TCP 23.104.0.1:44356 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:12:35.139 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:12:35.126 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:13:08.900 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45190 10 6452 1 2026-01-05 19:08:28.301 00:05:54.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-05 19:08:28.299 00:05:54.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-05 19:13:17.278 00:00:10.362 TCP 23.104.0.1:59282 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:14:09.114 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52328 10 6452 1 2026-01-05 19:14:17.681 00:00:10.366 TCP 23.104.0.1:36152 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:15:09.342 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53274 10 6452 1 2026-01-05 19:15:18.109 00:00:10.366 TCP 23.104.0.1:33958 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:16:09.558 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48454 10 6452 1 2026-01-05 19:16:18.523 00:00:10.368 TCP 23.104.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:17:09.779 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2026-01-05 19:17:18.924 00:00:10.435 TCP 23.104.0.1:53926 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:17:35.239 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:17:35.373 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:18:09.997 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40600 10 6452 1 2026-01-05 19:18:19.401 00:00:10.363 TCP 23.104.0.1:34598 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:19:10.229 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51210 10 6452 1 2026-01-05 19:14:28.303 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-05 19:14:28.302 00:05:54.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-05 19:19:19.802 00:00:10.364 TCP 23.104.0.1:45776 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:20:10.461 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42544 10 6452 1 2026-01-05 19:20:20.208 00:00:10.368 TCP 23.104.0.1:36550 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:21:10.700 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43148 10 6452 1 2026-01-05 19:21:20.615 00:00:10.362 TCP 23.104.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:22:10.911 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47244 10 6452 1 2026-01-05 19:22:35.343 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:22:21.018 00:00:10.314 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:22:35.298 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:23:11.135 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60376 10 6452 1 2026-01-05 19:23:21.374 00:00:10.368 TCP 23.104.0.1:34426 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:24:11.353 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50008 10 6452 1 2026-01-05 19:24:21.787 00:00:10.474 TCP 23.104.0.1:60156 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:25:11.584 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53718 10 6452 1 2026-01-05 19:20:28.304 00:05:54.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-05 19:20:28.306 00:05:54.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-05 19:25:22.299 00:00:10.366 TCP 23.104.0.1:51842 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:26:11.803 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:48100 10 6452 1 2026-01-05 19:26:22.709 00:00:10.388 TCP 23.104.0.1:45268 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:27:11.997 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37048 10 6452 1 2026-01-05 19:27:35.228 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:27:35.515 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:27:23.135 00:00:10.367 TCP 23.104.0.1:52852 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:28:12.215 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34224 10 6452 1 2026-01-05 19:28:23.542 00:00:10.370 TCP 23.104.0.1:53134 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:29:12.426 00:00:15.809 TCP 1.101.0.1:3000 -> 22.102.0.1:46146 10 6452 1 2026-01-05 19:29:23.952 00:00:10.372 TCP 23.104.0.1:49126 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:30:18.276 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42146 10 6452 1 2026-01-05 19:30:24.368 00:00:10.329 TCP 23.104.0.1:35002 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:26:28.306 00:05:54.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-05 19:26:28.305 00:05:54.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-05 19:31:18.507 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34530 10 6452 1 2026-01-05 19:31:24.738 00:00:10.364 TCP 23.104.0.1:53630 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:32:35.688 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:32:25.141 00:00:10.364 TCP 23.104.0.1:47070 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:32:18.683 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59030 10 6452 1 2026-01-05 19:32:35.634 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:33:18.897 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50140 10 6452 1 2026-01-05 19:33:25.557 00:00:10.368 TCP 23.104.0.1:33264 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:34:19.112 00:00:10.835 TCP 1.101.0.1:3000 -> 22.102.0.1:42232 10 6452 1 2026-01-05 19:34:25.964 00:00:10.376 TCP 23.104.0.1:36222 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:35:19.983 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:35610 10 6452 1 2026-01-05 19:35:26.372 00:00:10.368 TCP 23.104.0.1:45294 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:36:26.785 00:00:12.740 TCP 23.104.0.1:57504 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:36:20.171 00:00:19.259 TCP 1.101.0.1:3000 -> 22.102.0.1:36452 10 6452 1 2026-01-05 19:32:28.306 00:05:54.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-05 19:32:28.307 00:05:54.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-05 19:37:35.649 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:37:29.469 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42226 10 6452 1 2026-01-05 19:37:35.544 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:37:29.569 00:00:10.320 TCP 23.104.0.1:48978 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:38:29.648 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53518 10 6452 1 2026-01-05 19:38:29.931 00:00:10.376 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:39:29.856 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45548 10 6452 1 2026-01-05 19:39:30.348 00:00:10.362 TCP 23.104.0.1:53414 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:40:30.754 00:00:21.663 TCP 23.104.0.1:45974 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:40:30.088 00:00:22.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33760 10 6452 1 2026-01-05 19:41:42.318 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54396 10 6452 1 2026-01-05 19:41:42.459 00:00:10.363 TCP 23.104.0.1:60696 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:42:35.594 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:42:35.949 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:42:42.866 00:00:10.351 TCP 23.104.0.1:48768 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:42:42.534 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46212 10 6452 1 2026-01-05 19:38:28.309 00:05:54.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-05 19:38:28.307 00:05:54.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-05 19:43:43.235 00:00:10.365 TCP 23.104.0.1:47752 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:43:42.762 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43018 10 6452 1 2026-01-05 19:44:42.975 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:51062 12 10375 1 2026-01-05 19:44:43.639 00:00:10.444 TCP 23.104.0.1:52920 -> 1.101.0.1:3000 15 1926 1 2026-01-05 19:45:43.245 00:00:16.048 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6452 1 2026-01-05 19:45:44.126 00:00:15.257 TCP 23.104.0.1:56936 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:46:49.331 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35800 10 6452 1 2026-01-05 19:46:49.422 00:00:10.364 TCP 23.104.0.1:41130 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:47:35.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:47:35.551 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:47:49.506 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33250 10 6452 1 2026-01-05 19:47:49.827 00:00:10.322 TCP 23.104.0.1:49416 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:48:50.195 00:00:10.364 TCP 23.104.0.1:48260 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:48:49.734 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54758 10 6452 1 2026-01-05 19:44:28.306 00:05:54.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-05 19:44:28.310 00:05:54.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-05 19:49:50.598 00:00:10.371 TCP 23.104.0.1:33356 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:49:49.947 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:40840 10 6452 1 2026-01-05 19:50:50.183 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36094 10 6452 1 2026-01-05 19:50:51.012 00:00:10.360 TCP 23.104.0.1:43116 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:51:50.417 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33224 10 6452 1 2026-01-05 19:51:51.414 00:00:10.369 TCP 23.104.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:52:36.037 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:52:36.104 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:52:50.587 00:00:10.539 TCP 1.101.0.1:3000 -> 22.102.0.1:45250 10 6452 1 2026-01-05 19:52:51.820 00:00:10.365 TCP 23.104.0.1:59604 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:53:51.168 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50624 10 6452 1 2026-01-05 19:53:52.224 00:00:10.360 TCP 23.104.0.1:50908 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:54:51.340 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54052 10 6452 1 2026-01-05 19:54:52.625 00:00:10.362 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:50:28.315 00:05:54.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-05 19:50:28.313 00:05:54.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-05 19:55:51.549 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42186 10 6452 1 2026-01-05 19:55:53.025 00:00:10.366 TCP 23.104.0.1:42530 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:56:51.768 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60988 10 6452 1 2026-01-05 19:56:53.429 00:00:10.366 TCP 23.104.0.1:46164 -> 1.101.0.1:3000 11 1507 1 2026-01-05 19:57:36.195 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-05 19:57:35.800 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-05 19:57:51.981 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:42856 10 6452 1 2026-01-05 19:57:53.835 00:00:10.391 TCP 23.104.0.1:55408 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494731, total packets: 1557, avg bps: 1070, avg pps: 0, avg bpp: 317 Time window: 2026-01-05 18:56:28 - 2026-01-05 19:58:04 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0056s User: 0.0019s Wall: 0.0022s flows/second: 73369.7 Runtime: 0.0022s