Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-08 17:59:00.224 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 17:59:00.273 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 17:59:03.503 00:00:11.311 TCP 23.104.0.1:59342 -> 1.101.0.1:3000 11 1507 1 2026-01-08 17:59:02.736 00:00:11.984 TCP 1.101.0.1:3000 -> 22.102.0.1:34294 10 6452 1 2026-01-08 18:00:04.758 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40160 10 6452 1 2026-01-08 18:00:04.851 00:00:10.382 TCP 23.104.0.1:56928 -> 1.101.0.1:3000 11 1507 1 2026-01-08 17:55:29.893 00:05:54.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-08 17:55:29.895 00:05:54.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-08 18:01:04.984 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:42208 10 6452 1 2026-01-08 18:01:05.271 00:00:10.370 TCP 23.104.0.1:33916 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:02:05.676 00:00:10.361 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:02:05.185 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48468 10 6452 1 2026-01-08 18:03:05.394 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58166 10 6452 1 2026-01-08 18:03:06.099 00:00:10.363 TCP 23.104.0.1:52474 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:04:00.558 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 18:04:00.319 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 18:04:06.501 00:00:10.365 TCP 23.104.0.1:55588 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:04:05.607 00:00:10.373 TCP 1.101.0.1:3000 -> 22.102.0.1:51310 10 6452 1 2026-01-08 18:05:06.033 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33304 10 6452 1 2026-01-08 18:05:06.902 00:00:10.371 TCP 23.104.0.1:39824 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:06:06.201 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54350 10 6452 1 2026-01-08 18:01:29.899 00:05:54.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-08 18:06:07.318 00:00:10.390 TCP 23.104.0.1:49762 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:01:29.897 00:05:54.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-08 18:07:06.428 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52762 10 6452 1 2026-01-08 18:07:07.772 00:00:10.374 TCP 23.104.0.1:34676 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:08:06.642 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49860 10 6452 1 2026-01-08 18:08:08.191 00:00:10.363 TCP 23.104.0.1:49928 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:09:00.640 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 18:09:00.524 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 18:09:06.855 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33124 10 6452 1 2026-01-08 18:09:08.594 00:00:10.365 TCP 23.104.0.1:54666 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:10:09.002 00:00:20.863 TCP 23.104.0.1:35246 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:10:07.088 00:00:22.614 TCP 1.101.0.1:3000 -> 22.102.0.1:60412 11 6504 1 2026-01-08 18:11:19.969 00:00:10.371 TCP 23.104.0.1:54934 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:11:19.759 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45388 10 6452 1 2026-01-08 18:07:29.896 00:05:54.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-08 18:07:29.900 00:05:54.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-08 18:12:19.996 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40586 10 6452 1 2026-01-08 18:12:20.385 00:00:10.361 TCP 23.104.0.1:55830 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:13:20.226 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52820 10 6452 1 2026-01-08 18:13:20.785 00:00:10.369 TCP 23.104.0.1:43496 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:14:01.026 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 18:14:01.404 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 18:14:21.191 00:00:10.370 TCP 23.104.0.1:37546 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:14:20.439 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59502 10 6452 1 2026-01-08 18:15:21.597 00:00:10.327 TCP 23.104.0.1:39540 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:15:20.647 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33464 10 6452 1 2026-01-08 18:16:20.859 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38442 10 6452 1 2026-01-08 18:16:21.965 00:00:10.328 TCP 23.104.0.1:52408 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:17:21.095 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50780 10 6452 1 2026-01-08 18:17:22.336 00:00:10.359 TCP 23.104.0.1:53326 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:13:29.901 00:05:54.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-08 18:13:29.899 00:05:54.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-08 18:18:21.270 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33378 10 6452 1 2026-01-08 18:18:22.734 00:00:10.617 TCP 23.104.0.1:48222 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:19:00.764 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 18:19:00.826 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 18:19:21.486 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55480 10 6452 1 2026-01-08 18:19:23.390 00:00:10.370 TCP 23.104.0.1:42084 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:20:21.706 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45006 10 6452 1 2026-01-08 18:20:23.796 00:00:10.367 TCP 23.104.0.1:50942 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:21:21.920 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46024 10 6452 1 2026-01-08 18:21:24.202 00:00:10.366 TCP 23.104.0.1:54434 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:22:22.132 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58100 10 6452 1 2026-01-08 18:22:24.606 00:00:10.365 TCP 23.104.0.1:60988 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:23:25.012 00:00:10.368 TCP 23.104.0.1:47340 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:23:22.346 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:44514 10 6452 1 2026-01-08 18:24:01.243 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 18:24:01.338 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 18:19:29.903 00:05:54.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-08 18:19:29.900 00:05:54.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-08 18:24:22.636 00:00:10.291 TCP 1.101.0.1:3000 -> 22.102.0.1:47384 10 6452 1 2026-01-08 18:24:25.424 00:00:10.358 TCP 23.104.0.1:59256 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:25:25.836 00:00:10.393 TCP 23.104.0.1:36680 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:25:22.967 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:49466 10 6452 1 2026-01-08 18:26:26.266 00:00:10.364 TCP 23.104.0.1:47804 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:26:23.152 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41502 10 6452 1 2026-01-08 18:27:23.364 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50198 10 6452 1 2026-01-08 18:27:26.670 00:00:10.392 TCP 23.104.0.1:53746 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:28:23.535 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56946 10 6452 1 2026-01-08 18:28:27.105 00:00:10.370 TCP 23.104.0.1:40092 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:29:00.995 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 18:29:00.852 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 18:29:23.752 00:00:11.066 TCP 1.101.0.1:3000 -> 22.102.0.1:43336 10 6452 1 2026-01-08 18:29:27.512 00:00:10.364 TCP 23.104.0.1:55006 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:25:29.906 00:05:54.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-08 18:25:29.903 00:05:54.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-08 18:30:24.860 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51984 10 6452 1 2026-01-08 18:30:27.915 00:00:10.361 TCP 23.104.0.1:44552 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:31:25.090 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34206 10 6452 1 2026-01-08 18:31:28.317 00:00:10.369 TCP 23.104.0.1:39400 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:32:25.268 00:00:11.566 TCP 1.101.0.1:3000 -> 22.102.0.1:55068 10 6452 1 2026-01-08 18:32:28.724 00:00:10.661 TCP 23.104.0.1:33444 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:33:29.423 00:00:10.362 TCP 23.104.0.1:55940 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:33:26.877 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43256 10 6452 1 2026-01-08 18:34:01.134 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 18:34:00.862 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 18:34:27.103 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2026-01-08 18:34:29.832 00:00:10.390 TCP 23.104.0.1:37780 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:35:27.322 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57020 10 6452 1 2026-01-08 18:35:30.260 00:00:10.363 TCP 23.104.0.1:57912 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:31:29.910 00:05:54.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-08 18:31:29.914 00:05:54.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-08 18:36:30.673 00:00:10.371 TCP 23.104.0.1:59036 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:36:27.545 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6452 1 2026-01-08 18:37:31.105 00:00:10.367 TCP 23.104.0.1:45640 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:37:27.763 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53664 10 6452 1 2026-01-08 18:38:31.516 00:00:10.325 TCP 23.104.0.1:44620 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:38:27.997 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53392 10 6452 1 2026-01-08 18:39:01.623 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 18:39:01.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 18:39:28.232 00:00:10.262 TCP 1.101.0.1:3000 -> 22.102.0.1:60452 13 6608 1 2026-01-08 18:39:31.880 00:00:10.387 TCP 23.104.0.1:49684 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:40:28.550 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57122 10 6452 1 2026-01-08 18:40:32.312 00:00:10.339 TCP 23.104.0.1:32804 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:41:28.759 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33320 10 6452 1 2026-01-08 18:41:32.713 00:00:10.350 TCP 23.104.0.1:59750 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:37:29.911 00:05:54.858 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-08 18:37:29.913 00:05:54.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-08 18:42:28.973 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47236 10 6452 1 2026-01-08 18:42:33.115 00:00:10.368 TCP 23.104.0.1:33728 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:43:29.195 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2026-01-08 18:43:33.520 00:00:10.370 TCP 23.104.0.1:44220 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:44:01.340 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 18:44:01.223 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 18:44:29.410 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41768 10 6452 1 2026-01-08 18:44:33.932 00:00:10.375 TCP 23.104.0.1:40760 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:45:29.616 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36022 10 6452 1 2026-01-08 18:45:34.345 00:00:10.367 TCP 23.104.0.1:52430 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:46:34.749 00:00:11.101 TCP 23.104.0.1:36536 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:46:29.788 00:00:15.968 TCP 1.101.0.1:3000 -> 22.102.0.1:49822 10 6452 1 2026-01-08 18:47:35.797 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34886 10 6452 1 2026-01-08 18:47:35.884 00:00:10.387 TCP 23.104.0.1:39668 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:43:29.917 00:05:54.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-08 18:43:29.921 00:05:54.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-08 18:48:36.029 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41282 10 6452 1 2026-01-08 18:48:36.308 00:00:10.364 TCP 23.104.0.1:57858 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:49:01.445 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 18:49:01.087 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 18:49:36.252 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58560 10 6452 1 2026-01-08 18:49:36.713 00:00:10.373 TCP 23.104.0.1:35280 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:50:36.465 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43238 10 6452 1 2026-01-08 18:50:37.123 00:00:10.327 TCP 23.104.0.1:51096 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:51:36.678 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50330 10 6452 1 2026-01-08 18:51:37.485 00:00:10.369 TCP 23.104.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:52:36.893 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 10 6452 1 2026-01-08 18:52:37.892 00:00:10.377 TCP 23.104.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:53:38.310 00:00:10.547 TCP 23.104.0.1:57994 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:53:37.110 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40764 10 6452 1 2026-01-08 18:54:01.449 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 18:54:01.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 18:49:29.921 00:05:54.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-08 18:49:29.925 00:05:54.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-08 18:54:37.328 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51854 10 6452 1 2026-01-08 18:54:38.899 00:00:10.364 TCP 23.104.0.1:44992 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:55:37.505 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34958 10 6452 1 2026-01-08 18:55:39.304 00:00:10.364 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:56:39.706 00:00:10.369 TCP 23.104.0.1:51436 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:56:37.719 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2026-01-08 18:57:40.113 00:00:10.367 TCP 23.104.0.1:35280 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:57:37.925 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:37080 10 6452 1 2026-01-08 18:58:40.515 00:00:10.364 TCP 23.104.0.1:44466 -> 1.101.0.1:3000 11 1507 1 2026-01-08 18:58:38.173 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49502 10 6452 1 Summary: total flows: 164, total bytes: 498556, total packets: 1576, avg bps: 1049, avg pps: 0, avg bpp: 316 Time window: 2026-01-08 17:55:29 - 2026-01-08 18:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0019s Wall: 0.0014s flows/second: 118843.4 Runtime: 0.0014s