Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-30 18:58:57.819 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38968 10 6452 1 2026-01-30 18:58:57.887 00:00:10.389 TCP 23.104.0.1:59552 -> 1.101.0.1:3000 11 1507 1 2026-01-30 18:54:42.800 00:05:53.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-30 18:54:42.797 00:05:53.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-30 18:59:58.068 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33584 10 6452 1 2026-01-30 18:59:58.317 00:00:10.365 TCP 23.104.0.1:39752 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:00:17.092 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:00:17.178 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:00:58.729 00:00:10.362 TCP 23.104.0.1:57538 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:00:58.283 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2026-01-30 19:01:58.503 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:44248 10 6452 1 2026-01-30 19:01:59.134 00:00:10.341 TCP 23.104.0.1:55518 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:02:59.513 00:00:10.328 TCP 23.104.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:02:58.769 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51640 10 6452 1 2026-01-30 19:03:58.987 00:00:22.077 TCP 1.101.0.1:3000 -> 22.102.0.1:57390 10 6452 1 2026-01-30 19:03:59.880 00:00:21.272 TCP 23.104.0.1:48544 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:05:11.123 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42368 10 6452 1 2026-01-30 19:05:17.359 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:05:17.547 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:05:11.242 00:00:10.364 TCP 23.104.0.1:45576 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:00:42.799 00:05:53.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-30 19:00:42.802 00:05:53.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-30 19:06:11.353 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6452 1 2026-01-30 19:06:11.645 00:00:10.370 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:07:11.578 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47990 10 6452 1 2026-01-30 19:07:12.063 00:00:10.363 TCP 23.104.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:08:11.797 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:54856 10 6452 1 2026-01-30 19:08:12.466 00:00:10.361 TCP 23.104.0.1:55032 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:09:12.867 00:00:10.373 TCP 23.104.0.1:40920 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:09:12.008 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44492 10 6452 1 2026-01-30 19:10:17.468 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:10:12.229 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45084 10 6452 1 2026-01-30 19:10:17.380 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:10:13.280 00:00:10.328 TCP 23.104.0.1:39820 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:11:12.440 00:00:15.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53256 10 6452 1 2026-01-30 19:11:13.648 00:00:14.067 TCP 23.104.0.1:41044 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:06:42.805 00:05:53.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-30 19:06:42.802 00:05:53.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-30 19:12:17.660 00:00:13.399 TCP 1.101.0.1:3000 -> 22.102.0.1:36772 10 6452 1 2026-01-30 19:12:17.761 00:00:13.399 TCP 23.104.0.1:56034 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:13:21.208 00:00:10.370 TCP 23.104.0.1:33714 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:13:21.119 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57132 10 6452 1 2026-01-30 19:14:21.612 00:00:10.359 TCP 23.104.0.1:43008 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:14:21.339 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:52100 10 6452 1 2026-01-30 19:15:17.559 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:15:17.738 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:15:21.531 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36564 10 6452 1 2026-01-30 19:15:22.012 00:00:10.362 TCP 23.104.0.1:52730 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:16:21.707 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59434 12 6556 1 2026-01-30 19:16:22.411 00:00:10.374 TCP 23.104.0.1:48768 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:12:42.806 00:05:53.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-30 19:17:21.927 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:40040 10 6452 1 2026-01-30 19:17:22.821 00:00:10.369 TCP 23.104.0.1:53636 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:12:42.802 00:05:53.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-30 19:18:23.235 00:00:17.118 TCP 23.104.0.1:35402 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:18:22.193 00:00:18.043 TCP 1.101.0.1:3000 -> 22.102.0.1:58604 10 6452 1 2026-01-30 19:19:30.400 00:00:10.365 TCP 23.104.0.1:59354 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:19:30.292 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56952 10 6452 1 2026-01-30 19:20:17.749 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:20:17.753 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:20:30.501 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41396 10 6452 1 2026-01-30 19:20:30.805 00:00:10.342 TCP 23.104.0.1:50684 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:21:31.182 00:00:10.368 TCP 23.104.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:21:30.677 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35416 10 6452 1 2026-01-30 19:22:30.884 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53906 10 6452 1 2026-01-30 19:22:31.583 00:00:10.365 TCP 23.104.0.1:57890 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:18:42.811 00:05:53.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-30 19:23:31.107 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 10 6452 1 2026-01-30 19:18:42.808 00:05:53.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-30 19:23:31.988 00:00:10.367 TCP 23.104.0.1:58344 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:24:32.395 00:00:15.127 TCP 23.104.0.1:36570 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:24:31.316 00:00:16.112 TCP 1.101.0.1:3000 -> 22.102.0.1:46100 10 6452 1 2026-01-30 19:25:17.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:25:17.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:25:37.471 00:00:11.214 TCP 1.101.0.1:3000 -> 22.102.0.1:47686 10 6452 1 2026-01-30 19:25:37.561 00:00:11.194 TCP 23.104.0.1:33632 -> 1.101.0.1:3000 13 1611 1 2026-01-30 19:26:38.797 00:00:10.365 TCP 23.104.0.1:44824 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:26:38.723 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6452 1 2026-01-30 19:27:39.204 00:00:10.329 TCP 23.104.0.1:33140 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:27:38.956 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41868 13 6608 1 2026-01-30 19:28:39.578 00:00:10.358 TCP 23.104.0.1:48030 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:28:39.194 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57436 10 6452 1 2026-01-30 19:24:42.810 00:05:53.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-30 19:24:42.808 00:05:53.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-30 19:29:39.985 00:00:10.347 TCP 23.104.0.1:46824 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:29:39.420 00:00:10.313 TCP 1.101.0.1:3000 -> 22.102.0.1:50020 10 6452 1 2026-01-30 19:30:17.817 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:30:18.000 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:30:40.391 00:00:10.374 TCP 23.104.0.1:38098 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:30:39.794 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50706 10 6452 1 2026-01-30 19:31:40.804 00:00:10.802 TCP 23.104.0.1:60504 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:31:40.012 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59362 10 6452 1 2026-01-30 19:32:40.183 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33018 10 6452 1 2026-01-30 19:32:41.647 00:00:10.366 TCP 23.104.0.1:36558 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:33:40.401 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:35606 12 10369 1 2026-01-30 19:33:42.056 00:00:10.441 TCP 23.104.0.1:56050 -> 1.101.0.1:3000 15 1926 1 2026-01-30 19:34:42.597 00:00:11.547 TCP 23.104.0.1:35278 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:34:40.643 00:00:13.413 TCP 1.101.0.1:3000 -> 22.102.0.1:41452 10 6452 1 2026-01-30 19:35:18.014 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:35:18.133 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:30:42.812 00:05:53.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-30 19:30:42.815 00:05:53.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-30 19:35:44.188 00:00:10.361 TCP 23.104.0.1:39606 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:35:44.101 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43840 10 6452 1 2026-01-30 19:36:44.322 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35222 10 6452 1 2026-01-30 19:36:44.588 00:00:10.370 TCP 23.104.0.1:41594 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:37:45.014 00:00:10.376 TCP 23.104.0.1:38504 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:37:44.546 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59090 10 6452 1 2026-01-30 19:38:44.771 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57708 10 6452 1 2026-01-30 19:38:45.429 00:00:10.369 TCP 23.104.0.1:35492 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:39:45.834 00:00:10.634 TCP 23.104.0.1:46892 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:39:44.946 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:42094 10 6452 1 2026-01-30 19:40:18.041 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:40:18.108 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:40:45.196 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45684 10 6452 1 2026-01-30 19:40:46.510 00:00:10.367 TCP 23.104.0.1:45714 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:36:42.816 00:05:53.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-30 19:36:42.815 00:05:53.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-30 19:41:45.416 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:33764 10 6452 1 2026-01-30 19:41:46.911 00:00:10.365 TCP 23.104.0.1:39992 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:42:45.670 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44668 10 6452 1 2026-01-30 19:42:47.320 00:00:10.545 TCP 23.104.0.1:43602 -> 1.101.0.1:3000 13 1611 1 2026-01-30 19:43:45.902 00:00:15.102 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6452 1 2026-01-30 19:43:47.922 00:00:13.173 TCP 23.104.0.1:59818 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:44:51.067 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46076 10 6452 1 2026-01-30 19:44:51.137 00:00:10.368 TCP 23.104.0.1:44662 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:45:18.089 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:45:18.186 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:45:51.297 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52686 10 6452 1 2026-01-30 19:45:51.565 00:00:10.368 TCP 23.104.0.1:59418 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:46:51.972 00:00:14.891 TCP 23.104.0.1:47348 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:46:51.529 00:00:15.217 TCP 1.101.0.1:3000 -> 22.102.0.1:44750 10 6452 1 2026-01-30 19:42:42.817 00:05:53.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-30 19:42:42.818 00:05:53.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-30 19:47:56.787 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60304 10 6452 1 2026-01-30 19:47:56.902 00:00:10.370 TCP 23.104.0.1:56446 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:48:57.013 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:59518 12 10375 1 2026-01-30 19:48:57.311 00:00:10.437 TCP 23.104.0.1:51058 -> 1.101.0.1:3000 15 1926 1 2026-01-30 19:49:57.212 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44714 10 6452 1 2026-01-30 19:49:57.784 00:00:10.383 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:50:18.386 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:50:18.379 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:50:58.219 00:00:10.328 TCP 23.104.0.1:54394 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:50:57.443 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57686 10 6452 1 2026-01-30 19:51:58.589 00:00:10.362 TCP 23.104.0.1:35156 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:51:57.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43744 10 6452 1 2026-01-30 19:52:58.996 00:00:10.387 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:52:57.873 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47394 10 6452 1 2026-01-30 19:48:42.820 00:05:53.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-30 19:48:42.816 00:05:53.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-30 19:53:58.107 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56738 10 6452 1 2026-01-30 19:53:59.425 00:00:10.368 TCP 23.104.0.1:50472 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:54:59.832 00:00:10.400 TCP 23.104.0.1:35144 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:54:58.323 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47202 10 6452 1 2026-01-30 19:55:18.397 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-30 19:55:18.374 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-30 19:55:58.538 00:00:21.037 TCP 1.101.0.1:3000 -> 22.102.0.1:58134 10 6452 1 2026-01-30 19:56:00.263 00:00:19.411 TCP 23.104.0.1:49758 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:57:09.621 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:53634 10 6452 1 2026-01-30 19:57:09.745 00:00:10.374 TCP 23.104.0.1:53768 -> 1.101.0.1:3000 11 1507 1 2026-01-30 19:58:09.810 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6452 1 2026-01-30 19:58:10.155 00:00:10.322 TCP 23.104.0.1:60956 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499535, total packets: 1572, avg bps: 1046, avg pps: 0, avg bpp: 317 Time window: 2026-01-30 18:54:42 - 2026-01-30 19:58:20 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0019s Wall: 0.0025s flows/second: 64491.0 Runtime: 0.0025s