Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-22 18:59:05.906 00:00:12.502 TCP 1.101.0.1:3000 -> 22.102.0.1:48532 10 6452 1 2026-01-22 18:59:34.110 00:00:12.305 TCP 23.104.0.1:47740 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:00:08.468 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44874 10 6452 1 2026-01-22 18:55:37.719 00:05:54.457 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-22 19:00:36.454 00:00:10.363 TCP 23.104.0.1:58678 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:01:05.031 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:01:04.885 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:01:08.684 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:45910 12 10375 1 2026-01-22 18:56:37.723 00:05:54.451 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-22 19:01:36.852 00:00:10.451 TCP 23.104.0.1:56392 -> 1.101.0.1:3000 15 1926 1 2026-01-22 19:02:08.884 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50904 10 6452 1 2026-01-22 19:02:37.350 00:00:10.361 TCP 23.104.0.1:52288 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:03:09.105 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47988 10 6452 1 2026-01-22 19:03:37.750 00:00:10.339 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:04:09.327 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 10 6452 1 2026-01-22 19:04:38.126 00:00:10.363 TCP 23.104.0.1:39152 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:05:09.548 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2026-01-22 19:05:38.534 00:00:12.712 TCP 23.104.0.1:60710 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:06:04.865 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:06:04.776 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:06:09.767 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51044 10 6452 1 2026-01-22 19:01:37.719 00:05:54.457 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-22 19:06:41.297 00:00:10.365 TCP 23.104.0.1:43704 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:07:09.949 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58812 10 6452 1 2026-01-22 19:02:37.724 00:05:54.451 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-22 19:07:41.705 00:00:10.371 TCP 23.104.0.1:44758 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:08:10.184 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59168 10 6452 1 2026-01-22 19:08:42.113 00:00:10.324 TCP 23.104.0.1:41162 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:09:10.396 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39356 10 6452 1 2026-01-22 19:09:42.476 00:00:10.362 TCP 23.104.0.1:50042 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:10:10.616 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40318 10 6452 1 2026-01-22 19:11:05.370 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:11:05.289 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:10:42.874 00:00:19.198 TCP 23.104.0.1:60442 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:11:10.790 00:00:11.128 TCP 1.101.0.1:3000 -> 22.102.0.1:46828 10 6452 1 2026-01-22 19:11:52.108 00:00:10.388 TCP 23.104.0.1:42970 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:12:11.961 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46122 10 6452 1 2026-01-22 19:07:37.723 00:05:54.459 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-22 19:12:52.556 00:00:10.320 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:13:12.184 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39066 10 6452 1 2026-01-22 19:08:37.724 00:05:54.454 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-22 19:13:52.919 00:00:10.380 TCP 23.104.0.1:37970 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:14:12.358 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:41276 10 6452 1 2026-01-22 19:14:53.333 00:00:10.366 TCP 23.104.0.1:43172 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:15:12.537 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:60664 10 6452 1 2026-01-22 19:16:05.187 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:15:53.735 00:00:10.324 TCP 23.104.0.1:48458 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:16:05.232 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:16:12.718 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47990 10 6452 1 2026-01-22 19:16:54.110 00:00:10.860 TCP 23.104.0.1:50510 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:17:12.936 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37332 10 6452 1 2026-01-22 19:17:55.013 00:00:15.923 TCP 23.104.0.1:46946 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:18:13.171 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38866 10 6452 1 2026-01-22 19:13:37.725 00:05:54.459 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-22 19:19:00.973 00:00:10.369 TCP 23.104.0.1:56110 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:19:13.354 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:32900 10 6452 1 2026-01-22 19:14:37.726 00:05:54.454 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-22 19:20:01.380 00:00:10.364 TCP 23.104.0.1:32942 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:20:13.567 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58120 10 6452 1 2026-01-22 19:21:05.378 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:21:05.492 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:21:01.785 00:00:10.365 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:21:13.781 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35408 10 6452 1 2026-01-22 19:22:02.195 00:00:10.368 TCP 23.104.0.1:39062 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:22:13.995 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44234 10 6452 1 2026-01-22 19:23:02.600 00:00:10.366 TCP 23.104.0.1:56540 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:23:14.227 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55258 10 6452 1 2026-01-22 19:24:03.010 00:00:10.448 TCP 23.104.0.1:49874 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:24:14.439 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46170 10 6452 1 2026-01-22 19:19:37.725 00:05:54.464 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-22 19:25:03.527 00:00:10.323 TCP 23.104.0.1:51376 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:25:14.654 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36856 10 6452 1 2026-01-22 19:20:37.729 00:05:54.458 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-22 19:26:05.154 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:26:05.600 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:26:03.889 00:00:10.343 TCP 23.104.0.1:46884 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:26:14.869 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55140 10 6452 1 2026-01-22 19:27:04.270 00:00:10.323 TCP 23.104.0.1:41050 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:27:15.095 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55152 10 6452 1 2026-01-22 19:28:04.632 00:00:10.368 TCP 23.104.0.1:54332 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:28:15.311 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43114 10 6452 1 2026-01-22 19:29:05.064 00:00:15.262 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:29:15.485 00:00:14.424 TCP 1.101.0.1:3000 -> 22.102.0.1:59510 10 6452 1 2026-01-22 19:30:10.404 00:00:10.366 TCP 23.104.0.1:56102 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:25:37.727 00:05:54.463 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-22 19:30:19.956 00:00:16.041 TCP 1.101.0.1:3000 -> 22.102.0.1:35140 10 6452 1 2026-01-22 19:31:05.684 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:31:05.258 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:31:10.811 00:00:10.363 TCP 23.104.0.1:42340 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:31:26.071 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56846 10 6452 1 2026-01-22 19:26:37.730 00:05:54.461 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-22 19:32:11.213 00:00:10.364 TCP 23.104.0.1:42486 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:32:26.293 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51510 10 6452 1 2026-01-22 19:33:11.620 00:00:10.376 TCP 23.104.0.1:59236 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:33:26.507 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38626 10 6452 1 2026-01-22 19:34:12.056 00:00:10.395 TCP 23.104.0.1:57246 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:34:26.683 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44760 10 6452 1 2026-01-22 19:35:12.492 00:00:10.370 TCP 23.104.0.1:51582 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:35:26.892 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34334 10 6452 1 2026-01-22 19:36:05.706 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:36:05.640 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:36:12.894 00:00:10.392 TCP 23.104.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:31:37.729 00:05:54.472 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-22 19:36:27.117 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37908 10 6452 1 2026-01-22 19:37:13.309 00:00:22.600 TCP 23.104.0.1:51928 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:32:37.732 00:05:54.467 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-22 19:37:27.346 00:00:10.915 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2026-01-22 19:38:25.949 00:00:10.375 TCP 23.104.0.1:43632 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:38:28.300 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33660 10 6452 1 2026-01-22 19:39:26.366 00:00:10.360 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:39:28.519 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50740 10 6452 1 2026-01-22 19:40:28.742 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56204 10 6452 1 2026-01-22 19:40:26.765 00:00:10.376 TCP 23.104.0.1:35072 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:41:05.801 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:41:05.726 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:41:27.176 00:00:10.372 TCP 23.104.0.1:45660 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:41:28.963 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59420 10 6452 1 2026-01-22 19:37:37.734 00:05:54.472 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-22 19:42:29.206 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59946 10 6452 1 2026-01-22 19:42:27.583 00:00:10.380 TCP 23.104.0.1:37266 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:43:27.997 00:00:10.364 TCP 23.104.0.1:40646 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:38:37.733 00:05:54.470 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-22 19:43:29.422 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38806 10 6452 1 2026-01-22 19:44:28.399 00:00:26.609 TCP 23.104.0.1:41714 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:44:29.643 00:00:25.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56852 11 6504 1 2026-01-22 19:45:44.885 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:37800 10 6452 1 2026-01-22 19:45:45.058 00:00:10.359 TCP 23.104.0.1:36852 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:46:05.756 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:46:05.828 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:46:45.455 00:00:10.321 TCP 23.104.0.1:60488 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:46:45.123 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34944 10 6452 1 2026-01-22 19:47:45.288 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:41128 10 6452 1 2026-01-22 19:47:45.817 00:00:10.366 TCP 23.104.0.1:53398 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:43:37.732 00:05:54.476 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-22 19:48:45.470 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46400 10 6452 1 2026-01-22 19:48:46.217 00:00:10.320 TCP 23.104.0.1:45418 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:44:37.735 00:05:54.471 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-22 19:49:46.573 00:00:10.364 TCP 23.104.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:49:45.685 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55172 10 6452 1 2026-01-22 19:51:05.773 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:50:46.986 00:00:18.672 TCP 23.104.0.1:46128 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:50:45.896 00:00:19.571 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 10 6452 1 2026-01-22 19:51:05.792 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:51:55.508 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2026-01-22 19:51:55.731 00:00:10.366 TCP 23.104.0.1:38380 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:52:56.136 00:00:10.363 TCP 23.104.0.1:35980 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:52:55.729 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38790 10 6452 1 2026-01-22 19:53:55.939 00:00:16.461 TCP 1.101.0.1:3000 -> 22.102.0.1:59870 10 6452 1 2026-01-22 19:53:56.543 00:00:16.017 TCP 23.104.0.1:58792 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:49:37.735 00:05:54.484 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-22 19:55:02.441 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56520 10 6452 1 2026-01-22 19:55:02.598 00:00:10.375 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:50:37.736 00:05:54.479 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-22 19:56:06.066 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-22 19:56:05.993 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-22 19:56:02.667 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41588 10 6452 1 2026-01-22 19:56:03.008 00:00:10.320 TCP 23.104.0.1:43616 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:57:03.371 00:00:11.627 TCP 23.104.0.1:51158 -> 1.101.0.1:3000 11 1507 1 2026-01-22 19:57:02.880 00:00:11.960 TCP 1.101.0.1:3000 -> 22.102.0.1:37184 10 6452 1 2026-01-22 19:58:04.877 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45624 10 6452 1 2026-01-22 19:58:05.051 00:00:10.361 TCP 23.104.0.1:46456 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 493276, total packets: 1547, avg bps: 1050, avg pps: 0, avg bpp: 318 Time window: 2026-01-22 18:55:37 - 2026-01-22 19:58:15 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0049s User: 0.0020s Wall: 0.0021s flows/second: 75198.5 Runtime: 0.0022s