Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-06 17:58:56.988 00:00:10.370 TCP 23.104.0.1:34962 -> 1.101.0.1:3000 11 1507 1 2026-01-06 17:59:41.712 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58296 10 6452 1 2026-01-06 17:59:57.394 00:00:10.365 TCP 23.104.0.1:43082 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:00:41.934 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49250 12 10375 1 2026-01-06 18:00:57.803 00:00:10.399 TCP 23.104.0.1:37394 -> 1.101.0.1:3000 15 1926 1 2026-01-06 17:56:28.808 00:05:54.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-06 17:56:28.809 00:05:54.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-06 18:01:42.144 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37890 10 6452 1 2026-01-06 18:01:58.246 00:00:10.362 TCP 23.104.0.1:35650 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:02:42.320 00:00:12.065 TCP 1.101.0.1:3000 -> 22.102.0.1:59470 10 6452 1 2026-01-06 18:03:02.641 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:03:02.701 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:02:58.648 00:00:10.328 TCP 23.104.0.1:38608 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:03:44.427 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52714 10 6452 1 2026-01-06 18:03:59.012 00:00:10.365 TCP 23.104.0.1:51118 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:04:44.649 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36034 10 6452 1 2026-01-06 18:04:59.414 00:00:10.366 TCP 23.104.0.1:50712 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:05:44.866 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36686 10 6452 1 2026-01-06 18:05:59.814 00:00:10.366 TCP 23.104.0.1:54094 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:06:45.084 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58468 10 6452 1 2026-01-06 18:07:00.220 00:00:10.366 TCP 23.104.0.1:57654 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:02:28.810 00:05:54.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-06 18:02:28.808 00:05:54.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-06 18:07:45.306 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51974 10 6452 1 2026-01-06 18:08:02.620 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:08:02.790 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:08:00.620 00:00:13.040 TCP 23.104.0.1:48016 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:08:45.520 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49032 10 6452 1 2026-01-06 18:09:03.700 00:00:10.369 TCP 23.104.0.1:35646 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:09:45.740 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39738 10 6452 1 2026-01-06 18:10:04.113 00:00:10.365 TCP 23.104.0.1:59778 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:10:45.955 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53924 10 6452 1 2026-01-06 18:11:04.516 00:00:10.360 TCP 23.104.0.1:44892 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:11:46.179 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47532 10 6452 1 2026-01-06 18:12:04.911 00:00:10.363 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:12:46.413 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59434 10 6452 1 2026-01-06 18:13:02.922 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:13:02.958 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:13:05.312 00:00:10.368 TCP 23.104.0.1:59564 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:08:28.810 00:05:54.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-06 18:08:28.812 00:05:54.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-06 18:13:46.626 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6452 1 2026-01-06 18:14:05.718 00:00:10.372 TCP 23.104.0.1:48574 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:14:46.797 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34722 10 6452 1 2026-01-06 18:15:06.128 00:00:10.366 TCP 23.104.0.1:34666 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:15:47.025 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37654 10 6452 1 2026-01-06 18:16:06.533 00:00:10.379 TCP 23.104.0.1:41162 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:16:47.238 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35854 10 6452 1 2026-01-06 18:17:06.952 00:00:10.374 TCP 23.104.0.1:49524 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:17:47.415 00:00:10.837 TCP 1.101.0.1:3000 -> 22.102.0.1:48832 10 6452 1 2026-01-06 18:18:02.951 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:18:02.960 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:18:07.359 00:00:10.368 TCP 23.104.0.1:56674 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:18:48.287 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44526 10 6452 1 2026-01-06 18:19:07.766 00:00:10.330 TCP 23.104.0.1:47302 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:14:28.814 00:05:54.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-06 18:14:28.811 00:05:54.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-06 18:19:48.512 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33572 10 6452 1 2026-01-06 18:20:08.135 00:00:10.438 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 15 1926 1 2026-01-06 18:20:48.727 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35642 12 10375 1 2026-01-06 18:21:08.614 00:00:10.369 TCP 23.104.0.1:54710 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:21:48.972 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:56162 10 6452 1 2026-01-06 18:22:09.022 00:00:10.362 TCP 23.104.0.1:59860 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:22:49.214 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38246 10 6452 1 2026-01-06 18:23:03.395 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:23:02.881 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:23:09.424 00:00:10.365 TCP 23.104.0.1:37302 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:23:49.423 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44276 10 6452 1 2026-01-06 18:24:09.828 00:00:16.183 TCP 23.104.0.1:47718 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:24:49.637 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59632 10 6452 1 2026-01-06 18:20:28.813 00:05:54.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-06 18:25:16.073 00:00:10.323 TCP 23.104.0.1:58492 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:20:28.816 00:05:54.750 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-06 18:25:49.850 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38032 10 6452 1 2026-01-06 18:26:16.435 00:00:10.325 TCP 23.104.0.1:56678 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:26:50.078 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59570 10 6452 1 2026-01-06 18:27:16.800 00:00:10.330 TCP 23.104.0.1:34406 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:27:50.325 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57322 10 6452 1 2026-01-06 18:28:03.107 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:28:02.953 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:28:17.171 00:00:10.359 TCP 23.104.0.1:48766 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:28:50.542 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36062 10 6452 1 2026-01-06 18:29:17.573 00:00:10.322 TCP 23.104.0.1:40310 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:29:50.758 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55700 10 6452 1 2026-01-06 18:30:17.939 00:00:10.390 TCP 23.104.0.1:57646 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:30:50.934 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35228 10 6452 1 2026-01-06 18:26:28.813 00:05:54.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-06 18:26:28.816 00:05:54.750 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-06 18:31:18.365 00:00:14.274 TCP 23.104.0.1:43472 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:31:51.164 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57872 10 6452 1 2026-01-06 18:32:22.676 00:00:10.324 TCP 23.104.0.1:39558 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:32:51.385 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38116 10 6452 1 2026-01-06 18:33:03.323 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:33:03.225 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:33:23.036 00:00:10.376 TCP 23.104.0.1:58538 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:33:51.593 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43460 10 6452 1 2026-01-06 18:34:23.447 00:00:10.367 TCP 23.104.0.1:40270 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:34:51.811 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60692 10 6452 1 2026-01-06 18:35:23.850 00:00:10.389 TCP 23.104.0.1:49094 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:35:51.988 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38492 10 6452 1 2026-01-06 18:36:24.273 00:00:10.367 TCP 23.104.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:36:52.215 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48800 10 6452 1 2026-01-06 18:32:28.828 00:05:54.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-06 18:32:28.826 00:05:54.744 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-06 18:37:24.681 00:00:10.375 TCP 23.104.0.1:40274 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:37:52.426 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45576 10 6452 1 2026-01-06 18:38:03.548 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:38:03.437 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:38:25.107 00:00:10.330 TCP 23.104.0.1:38002 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:38:52.633 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50508 10 6452 1 2026-01-06 18:39:25.473 00:00:10.370 TCP 23.104.0.1:48808 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:39:52.849 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47544 10 6452 1 2026-01-06 18:40:25.878 00:00:10.369 TCP 23.104.0.1:41152 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:40:53.085 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53160 10 6452 1 2026-01-06 18:41:26.282 00:00:10.367 TCP 23.104.0.1:51186 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:41:53.316 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45144 10 6452 1 2026-01-06 18:42:26.688 00:00:10.361 TCP 23.104.0.1:48050 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:43:03.222 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:42:53.489 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37236 10 6452 1 2026-01-06 18:43:03.348 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:38:28.826 00:05:54.745 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-06 18:38:28.829 00:05:54.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-06 18:43:27.102 00:00:10.363 TCP 23.104.0.1:46478 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:43:53.704 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55786 10 6452 1 2026-01-06 18:44:27.502 00:00:10.369 TCP 23.104.0.1:33678 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:44:53.914 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60674 10 6452 1 2026-01-06 18:45:27.911 00:00:10.340 TCP 23.104.0.1:52064 -> 1.101.0.1:3000 15 1751 1 2026-01-06 18:45:54.126 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59544 10 6452 1 2026-01-06 18:46:28.291 00:00:10.379 TCP 23.104.0.1:39878 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:46:54.333 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48052 10 6452 1 2026-01-06 18:47:28.714 00:00:10.376 TCP 23.104.0.1:58976 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:47:54.550 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53208 10 6452 1 2026-01-06 18:48:03.641 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:48:03.647 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:48:29.134 00:00:10.367 TCP 23.104.0.1:53088 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:48:54.760 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33986 10 6452 1 2026-01-06 18:44:28.831 00:05:54.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-06 18:44:28.827 00:05:54.746 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-06 18:49:29.537 00:00:10.363 TCP 23.104.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:49:54.928 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:39574 10 6452 1 2026-01-06 18:50:29.939 00:00:10.375 TCP 23.104.0.1:32828 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:50:55.125 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54720 10 6452 1 2026-01-06 18:51:30.351 00:00:10.329 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:51:55.301 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48156 10 6452 1 2026-01-06 18:52:30.719 00:00:10.366 TCP 23.104.0.1:42480 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:53:03.651 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:53:03.947 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:52:55.476 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53376 10 6452 1 2026-01-06 18:53:31.126 00:00:10.364 TCP 23.104.0.1:42410 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:53:55.655 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33198 10 6452 1 2026-01-06 18:54:31.530 00:00:10.365 TCP 23.104.0.1:48378 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:54:55.869 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34562 10 6452 1 2026-01-06 18:50:28.832 00:05:54.744 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-06 18:50:28.830 00:05:54.749 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-06 18:55:31.929 00:00:10.381 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:55:56.101 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50142 10 6452 1 2026-01-06 18:56:32.351 00:00:10.368 TCP 23.104.0.1:44546 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:56:56.315 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51066 10 6452 1 2026-01-06 18:57:32.760 00:00:10.377 TCP 23.104.0.1:47446 -> 1.101.0.1:3000 11 1507 1 2026-01-06 18:58:03.822 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-06 18:58:03.480 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-06 18:57:56.530 00:00:13.981 TCP 1.101.0.1:3000 -> 22.102.0.1:51844 10 6452 1 2026-01-06 18:58:33.175 00:00:10.326 TCP 23.104.0.1:56590 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500824, total packets: 1578, avg bps: 1072, avg pps: 0, avg bpp: 317 Time window: 2026-01-06 17:56:28 - 2026-01-06 18:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0052s User: 0.0021s Wall: 0.0021s flows/second: 76456.2 Runtime: 0.0022s