Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-02 17:59:25.347 00:00:11.126 TCP 23.104.0.1:49794 -> 1.101.0.1:3000 11 1507 1 2026-01-02 17:59:22.937 00:00:10.614 TCP 1.101.0.1:3000 -> 22.102.0.1:50972 10 6452 1 2026-01-02 18:00:23.591 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:52132 11 6504 1 2026-01-02 18:00:26.508 00:00:10.366 TCP 23.104.0.1:49470 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:01:07.027 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:01:07.472 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:01:23.866 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38566 10 6452 1 2026-01-02 18:01:26.915 00:00:10.339 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2026-01-02 17:58:21.635 00:05:05.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-02 17:58:21.632 00:05:05.087 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-02 18:02:24.109 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 10 6452 1 2026-01-02 18:02:27.297 00:00:10.367 TCP 23.104.0.1:37450 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:03:24.321 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59890 10 6452 1 2026-01-02 18:03:27.698 00:00:10.324 TCP 23.104.0.1:57050 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:04:24.495 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2026-01-02 18:04:28.088 00:00:10.366 TCP 23.104.0.1:47856 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:05:24.704 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48336 10 6452 1 2026-01-02 18:05:28.493 00:00:10.326 TCP 23.104.0.1:52352 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:06:07.292 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:06:07.491 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:06:24.879 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:48020 10 6452 1 2026-01-02 18:06:28.854 00:00:10.378 TCP 23.104.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:07:25.086 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52320 10 6452 1 2026-01-02 18:07:29.270 00:00:10.320 TCP 23.104.0.1:36580 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:04:21.635 00:05:05.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-02 18:04:21.633 00:05:05.087 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-02 18:08:25.261 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49882 10 6452 1 2026-01-02 18:08:29.636 00:00:10.367 TCP 23.104.0.1:49676 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:09:25.473 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38048 10 6452 1 2026-01-02 18:09:30.057 00:00:10.368 TCP 23.104.0.1:41982 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:10:25.684 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59004 10 6452 1 2026-01-02 18:10:30.464 00:00:10.364 TCP 23.104.0.1:42302 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:11:07.432 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:11:07.563 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:11:25.856 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:32888 10 6452 1 2026-01-02 18:11:30.863 00:00:10.368 TCP 23.104.0.1:35580 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:12:26.090 00:00:10.598 TCP 1.101.0.1:3000 -> 22.102.0.1:34466 10 6452 1 2026-01-02 18:12:31.280 00:00:11.092 TCP 23.104.0.1:49376 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:13:26.730 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57010 10 6452 1 2026-01-02 18:13:32.411 00:00:10.366 TCP 23.104.0.1:55826 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:10:21.635 00:05:05.089 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-02 18:10:21.638 00:05:05.084 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-02 18:14:26.953 00:00:10.254 TCP 1.101.0.1:3000 -> 22.102.0.1:56482 11 6504 1 2026-01-02 18:14:32.817 00:00:10.364 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:15:27.246 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44538 10 6452 1 2026-01-02 18:15:33.223 00:00:10.376 TCP 23.104.0.1:51900 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:16:07.381 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:16:07.492 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:16:27.478 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33382 10 6452 1 2026-01-02 18:16:33.639 00:00:10.374 TCP 23.104.0.1:56874 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:17:27.699 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37622 10 6452 1 2026-01-02 18:17:34.059 00:00:10.372 TCP 23.104.0.1:38078 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:18:27.921 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:59208 10 6452 1 2026-01-02 18:18:34.471 00:00:10.383 TCP 23.104.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:19:28.169 00:00:10.807 TCP 1.101.0.1:3000 -> 22.102.0.1:47678 10 6452 1 2026-01-02 18:19:34.889 00:00:10.372 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:16:21.634 00:05:05.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-02 18:16:21.639 00:05:05.086 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-02 18:20:29.021 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53332 10 6452 1 2026-01-02 18:20:35.301 00:00:10.364 TCP 23.104.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:21:07.604 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:21:07.668 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:21:29.240 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51660 10 6452 1 2026-01-02 18:21:35.708 00:00:10.364 TCP 23.104.0.1:46012 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:22:29.460 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45170 10 6452 1 2026-01-02 18:22:36.113 00:00:10.362 TCP 23.104.0.1:37516 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:23:29.677 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57526 10 6452 1 2026-01-02 18:23:36.515 00:00:10.367 TCP 23.104.0.1:46496 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:24:29.896 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51740 10 6452 1 2026-01-02 18:24:36.921 00:00:10.385 TCP 23.104.0.1:56478 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:25:30.121 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34028 10 6452 1 2026-01-02 18:25:37.346 00:00:10.364 TCP 23.104.0.1:59374 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:26:07.855 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:26:07.693 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:22:21.639 00:05:05.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-02 18:22:21.638 00:05:05.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-02 18:26:30.343 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48052 10 6452 1 2026-01-02 18:26:37.749 00:00:10.363 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:27:30.571 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37198 10 6452 1 2026-01-02 18:27:38.157 00:00:10.366 TCP 23.104.0.1:33014 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:28:30.784 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54666 10 6452 1 2026-01-02 18:28:38.562 00:00:10.361 TCP 23.104.0.1:43584 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:29:31.010 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52364 10 6452 1 2026-01-02 18:29:38.964 00:00:10.327 TCP 23.104.0.1:40602 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:30:31.237 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44690 10 6452 1 2026-01-02 18:30:39.328 00:00:10.365 TCP 23.104.0.1:32986 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:31:07.856 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:31:07.921 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:31:31.461 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48484 10 6452 1 2026-01-02 18:31:39.753 00:00:10.372 TCP 23.104.0.1:49072 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:28:21.640 00:05:05.086 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-02 18:28:21.638 00:05:05.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-02 18:32:31.644 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57440 10 6452 1 2026-01-02 18:32:40.164 00:00:10.325 TCP 23.104.0.1:49274 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:33:31.859 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47246 10 6452 1 2026-01-02 18:33:40.526 00:00:10.367 TCP 23.104.0.1:56306 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:34:32.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46778 10 6452 1 2026-01-02 18:34:40.929 00:00:10.374 TCP 23.104.0.1:45412 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:35:32.300 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2026-01-02 18:35:41.345 00:00:10.363 TCP 23.104.0.1:47846 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:36:08.016 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:36:07.969 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:36:32.513 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60052 10 6452 1 2026-01-02 18:36:41.744 00:00:10.365 TCP 23.104.0.1:54324 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:37:32.729 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39290 10 6452 1 2026-01-02 18:37:42.146 00:00:10.370 TCP 23.104.0.1:53768 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:34:21.641 00:05:05.087 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-02 18:34:21.638 00:05:05.092 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-02 18:38:32.940 00:00:11.498 TCP 1.101.0.1:3000 -> 22.102.0.1:45506 10 6452 1 2026-01-02 18:38:42.557 00:00:10.553 TCP 23.104.0.1:35302 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:39:34.477 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49946 10 6452 1 2026-01-02 18:39:43.154 00:00:10.363 TCP 23.104.0.1:58568 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:40:34.648 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58210 10 6452 1 2026-01-02 18:40:43.555 00:00:10.364 TCP 23.104.0.1:51842 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:41:07.934 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:41:07.768 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:41:34.870 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57764 10 6452 1 2026-01-02 18:41:43.963 00:00:10.328 TCP 23.104.0.1:39844 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:42:35.106 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:44936 10 6452 1 2026-01-02 18:42:44.328 00:00:10.363 TCP 23.104.0.1:60442 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:43:35.278 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:46224 11 6504 1 2026-01-02 18:43:44.727 00:00:10.369 TCP 23.104.0.1:53572 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:40:21.639 00:05:05.092 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-02 18:40:21.641 00:05:05.087 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-02 18:44:35.546 00:00:10.628 TCP 1.101.0.1:3000 -> 22.102.0.1:33096 10 6452 1 2026-01-02 18:44:45.133 00:00:10.368 TCP 23.104.0.1:50392 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:45:36.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59752 10 6452 1 2026-01-02 18:45:45.540 00:00:10.366 TCP 23.104.0.1:60436 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:46:08.144 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:46:08.070 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:46:36.423 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57470 10 6452 1 2026-01-02 18:46:45.944 00:00:10.368 TCP 23.104.0.1:60770 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:47:36.644 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53252 10 6452 1 2026-01-02 18:47:46.345 00:00:10.372 TCP 23.104.0.1:33228 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:48:36.865 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:47898 10 6452 1 2026-01-02 18:48:46.755 00:00:10.372 TCP 23.104.0.1:42830 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:49:37.102 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54722 10 6452 1 2026-01-02 18:49:47.164 00:00:10.362 TCP 23.104.0.1:53464 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:46:21.643 00:05:05.093 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-02 18:46:21.644 00:05:05.088 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-02 18:50:37.281 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48944 10 6452 1 2026-01-02 18:50:47.566 00:00:10.362 TCP 23.104.0.1:56342 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:51:08.465 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:51:07.996 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:51:37.453 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46574 10 6452 1 2026-01-02 18:51:47.968 00:00:10.367 TCP 23.104.0.1:52754 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:52:37.680 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35638 10 6452 1 2026-01-02 18:52:48.377 00:00:10.366 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:53:37.899 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58496 10 6452 1 2026-01-02 18:53:48.789 00:00:10.341 TCP 23.104.0.1:44756 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:54:38.115 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60016 10 6452 1 2026-01-02 18:54:49.161 00:00:10.375 TCP 23.104.0.1:35964 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:55:38.288 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49406 10 6452 1 2026-01-02 18:55:49.575 00:00:10.375 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:56:08.528 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-02 18:56:08.473 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-02 18:52:21.645 00:05:05.088 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-02 18:52:21.643 00:05:05.094 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-02 18:56:38.507 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37046 10 6452 1 2026-01-02 18:56:49.994 00:00:10.325 TCP 23.104.0.1:35154 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:57:38.716 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46748 10 6452 1 2026-01-02 18:57:50.356 00:00:10.362 TCP 23.104.0.1:56364 -> 1.101.0.1:3000 11 1507 1 2026-01-02 18:58:38.929 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34962 10 6452 1 Summary: total flows: 163, total bytes: 496997, total packets: 1564, avg bps: 1096, avg pps: 0, avg bpp: 317 Time window: 2026-01-02 17:58:21 - 2026-01-02 18:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0028s Wall: 0.0029s flows/second: 55709.9 Runtime: 0.0029s