Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-21 02:58:46.670 00:00:10.317 TCP 23.104.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2026-01-21 02:59:23.696 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38650 10 6452 1 2026-01-21 02:59:47.028 00:00:10.364 TCP 23.104.0.1:51818 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:00:16.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:00:16.484 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:00:23.908 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49102 10 6452 1 2026-01-21 03:00:47.433 00:00:10.368 TCP 23.104.0.1:40192 -> 1.101.0.1:3000 11 1507 1 2026-01-21 02:56:36.795 00:05:54.352 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-21 02:56:36.792 00:05:54.358 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-21 03:01:24.125 00:00:12.058 TCP 1.101.0.1:3000 -> 22.102.0.1:60056 10 6452 1 2026-01-21 03:01:47.837 00:00:15.889 TCP 23.104.0.1:44306 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:02:26.222 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:44812 10 6452 1 2026-01-21 03:02:53.765 00:00:10.375 TCP 23.104.0.1:55896 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:03:26.478 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36588 10 6452 1 2026-01-21 03:03:54.184 00:00:10.326 TCP 23.104.0.1:56826 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:04:26.695 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58952 10 6452 1 2026-01-21 03:04:54.549 00:00:10.361 TCP 23.104.0.1:42860 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:05:16.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:05:16.724 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:05:26.867 00:00:11.892 TCP 1.101.0.1:3000 -> 22.102.0.1:46002 12 10375 1 2026-01-21 03:05:54.950 00:00:16.313 TCP 23.104.0.1:42170 -> 1.101.0.1:3000 15 1926 1 2026-01-21 03:06:28.799 00:00:14.759 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6452 1 2026-01-21 03:07:01.299 00:00:10.367 TCP 23.104.0.1:55936 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:02:36.799 00:05:54.350 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-21 03:02:36.798 00:05:54.355 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-21 03:07:33.601 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48682 12 6556 1 2026-01-21 03:08:01.709 00:00:10.320 TCP 23.104.0.1:44092 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:08:33.831 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48754 12 6556 1 2026-01-21 03:09:02.095 00:00:10.368 TCP 23.104.0.1:39070 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:09:34.071 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37396 10 6452 1 2026-01-21 03:10:16.880 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:10:02.495 00:00:10.365 TCP 23.104.0.1:50302 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:10:17.119 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:10:34.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47036 10 6452 1 2026-01-21 03:11:02.895 00:00:10.375 TCP 23.104.0.1:44652 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:11:34.464 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58940 10 6452 1 2026-01-21 03:12:03.307 00:00:10.336 TCP 23.104.0.1:35788 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:12:34.672 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50700 10 6452 1 2026-01-21 03:13:03.700 00:00:10.361 TCP 23.104.0.1:41712 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:08:36.801 00:05:54.350 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-21 03:08:36.800 00:05:54.355 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-21 03:13:34.897 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36306 10 6452 1 2026-01-21 03:14:04.106 00:00:18.057 TCP 23.104.0.1:39108 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:14:35.118 00:00:10.907 TCP 1.101.0.1:3000 -> 22.102.0.1:54104 10 6452 1 2026-01-21 03:15:18.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:15:18.028 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:15:12.254 00:00:10.372 TCP 23.104.0.1:44882 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:15:36.082 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:57744 10 6452 1 2026-01-21 03:16:12.666 00:00:10.321 TCP 23.104.0.1:37440 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:16:36.258 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44218 10 6452 1 2026-01-21 03:17:13.030 00:00:10.324 TCP 23.104.0.1:55662 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:17:36.480 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35058 10 6452 1 2026-01-21 03:18:13.397 00:00:10.366 TCP 23.104.0.1:49156 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:18:36.698 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56882 10 6452 1 2026-01-21 03:19:13.802 00:00:10.366 TCP 23.104.0.1:52004 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:14:36.798 00:05:54.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-21 03:14:36.801 00:05:54.357 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-21 03:19:36.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59074 10 6452 1 2026-01-21 03:20:17.221 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:20:17.179 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:20:14.212 00:00:11.230 TCP 23.104.0.1:45786 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:20:37.131 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:59816 10 6452 1 2026-01-21 03:21:15.480 00:00:10.363 TCP 23.104.0.1:48280 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:21:37.393 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51834 10 6452 1 2026-01-21 03:22:15.887 00:00:10.383 TCP 23.104.0.1:44222 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:22:37.623 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2026-01-21 03:23:16.313 00:00:10.367 TCP 23.104.0.1:55910 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:23:37.837 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 10 6452 1 2026-01-21 03:24:16.715 00:00:10.378 TCP 23.104.0.1:57754 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:24:38.087 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42616 10 6452 1 2026-01-21 03:25:17.553 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:25:17.453 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:25:17.146 00:00:10.383 TCP 23.104.0.1:43226 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:20:36.810 00:05:54.351 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-21 03:20:36.811 00:05:54.347 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-21 03:25:38.264 00:00:13.691 TCP 1.101.0.1:3000 -> 22.102.0.1:52740 10 6452 1 2026-01-21 03:26:17.579 00:00:16.789 TCP 23.104.0.1:33984 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:26:41.999 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45728 10 6452 1 2026-01-21 03:27:24.406 00:00:10.338 TCP 23.104.0.1:49446 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:27:42.221 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38580 10 6452 1 2026-01-21 03:28:24.781 00:00:10.331 TCP 23.104.0.1:43500 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:28:42.449 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58804 10 6452 1 2026-01-21 03:29:25.147 00:00:10.326 TCP 23.104.0.1:50918 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:29:42.664 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33482 10 6452 1 2026-01-21 03:30:17.495 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:30:17.175 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:30:25.511 00:00:10.438 TCP 23.104.0.1:56874 -> 1.101.0.1:3000 15 1926 1 2026-01-21 03:30:42.886 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60216 12 10375 1 2026-01-21 03:26:36.811 00:05:54.360 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-21 03:26:36.813 00:05:54.355 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-21 03:31:25.986 00:00:10.328 TCP 23.104.0.1:59340 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:31:43.103 00:00:14.330 TCP 1.101.0.1:3000 -> 22.102.0.1:58784 10 6452 1 2026-01-21 03:32:26.352 00:00:10.363 TCP 23.104.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:32:47.474 00:00:16.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38642 11 6504 1 2026-01-21 03:33:26.762 00:00:10.376 TCP 23.104.0.1:55902 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:33:53.645 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58634 10 6452 1 2026-01-21 03:34:27.183 00:00:10.365 TCP 23.104.0.1:36126 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:34:53.880 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40544 10 6452 1 2026-01-21 03:35:17.545 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:35:17.603 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:35:27.589 00:00:10.436 TCP 23.104.0.1:48734 -> 1.101.0.1:3000 15 1926 1 2026-01-21 03:35:54.107 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:50114 12 10369 1 2026-01-21 03:36:28.093 00:00:10.370 TCP 23.104.0.1:49472 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:36:54.347 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56346 10 6452 1 2026-01-21 03:32:36.816 00:05:54.353 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-21 03:32:36.814 00:05:54.359 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-21 03:37:28.506 00:00:10.368 TCP 23.104.0.1:36864 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:37:54.567 00:00:10.401 TCP 1.101.0.1:3000 -> 22.102.0.1:38038 10 6452 1 2026-01-21 03:38:28.913 00:00:10.324 TCP 23.104.0.1:35964 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:38:55.024 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43980 10 6452 1 2026-01-21 03:39:29.278 00:00:10.364 TCP 23.104.0.1:57216 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:39:55.262 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59382 10 6452 1 2026-01-21 03:40:17.566 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:40:17.651 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:40:29.686 00:00:10.359 TCP 23.104.0.1:45088 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:40:55.440 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33254 10 6452 1 2026-01-21 03:41:30.110 00:00:10.365 TCP 23.104.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:41:55.633 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2026-01-21 03:42:30.511 00:00:10.365 TCP 23.104.0.1:57390 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:42:55.846 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47848 10 6452 1 2026-01-21 03:38:36.817 00:05:54.355 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-21 03:38:36.819 00:05:54.350 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-21 03:43:30.916 00:00:10.382 TCP 23.104.0.1:51040 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:43:56.084 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58718 10 6452 1 2026-01-21 03:44:31.345 00:00:10.365 TCP 23.104.0.1:59758 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:44:56.306 00:00:13.370 TCP 1.101.0.1:3000 -> 22.102.0.1:53026 10 6452 1 2026-01-21 03:45:19.035 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:45:18.411 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:45:31.752 00:00:10.391 TCP 23.104.0.1:53982 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:45:59.719 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40658 10 6452 1 2026-01-21 03:46:32.179 00:00:10.323 TCP 23.104.0.1:42110 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:46:59.939 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:50000 10 6452 1 2026-01-21 03:47:32.540 00:00:10.359 TCP 23.104.0.1:52536 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:48:00.184 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51230 10 6452 1 2026-01-21 03:48:32.937 00:00:10.328 TCP 23.104.0.1:37100 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:49:00.397 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34364 10 6452 1 2026-01-21 03:44:36.819 00:05:54.350 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-21 03:44:36.817 00:05:54.355 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-21 03:49:33.302 00:00:10.367 TCP 23.104.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:50:00.613 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58070 10 6452 1 2026-01-21 03:50:17.811 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:50:17.836 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:50:33.704 00:00:11.330 TCP 23.104.0.1:43546 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:51:00.826 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:57712 10 6452 1 2026-01-21 03:51:35.106 00:00:11.666 TCP 23.104.0.1:58336 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:52:01.022 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 10 6452 1 2026-01-21 03:52:36.814 00:00:10.358 TCP 23.104.0.1:58130 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:53:01.194 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59038 10 6452 1 2026-01-21 03:53:37.209 00:00:10.326 TCP 23.104.0.1:33436 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:54:01.414 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34356 10 6452 1 2026-01-21 03:54:37.571 00:00:10.324 TCP 23.104.0.1:60490 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:55:01.640 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42294 10 6452 1 2026-01-21 03:55:17.958 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-21 03:55:17.845 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-21 03:50:36.821 00:05:54.351 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-21 03:50:36.819 00:05:54.355 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-21 03:55:37.934 00:00:10.383 TCP 23.104.0.1:34778 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:56:01.855 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50954 10 6452 1 2026-01-21 03:56:38.359 00:00:10.788 TCP 23.104.0.1:43184 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:57:02.086 00:00:21.080 TCP 1.101.0.1:3000 -> 22.102.0.1:34600 10 6452 1 2026-01-21 03:57:39.186 00:00:10.363 TCP 23.104.0.1:60226 -> 1.101.0.1:3000 11 1507 1 2026-01-21 03:58:13.242 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58746 10 6452 1 2026-01-21 03:58:39.588 00:00:10.327 TCP 23.104.0.1:58488 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505176, total packets: 1585, avg bps: 1082, avg pps: 0, avg bpp: 318 Time window: 2026-01-21 02:56:36 - 2026-01-21 03:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0009s Wall: 0.0022s flows/second: 73958.4 Runtime: 0.0022s