Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-08 23:59:07.266 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-08 23:59:07.528 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-08 23:59:10.984 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:59622 10 6452 1 2026-01-08 23:59:12.861 00:00:10.370 TCP 23.104.0.1:42450 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:00:11.227 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45702 10 6452 1 2026-01-08 23:55:30.084 00:05:54.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-08 23:55:30.081 00:05:54.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 00:00:13.263 00:00:10.370 TCP 23.104.0.1:41620 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:01:11.447 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51510 10 6452 1 2026-01-09 00:01:13.677 00:00:10.401 TCP 23.104.0.1:60720 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:02:11.667 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40644 10 6452 1 2026-01-09 00:02:14.124 00:00:10.327 TCP 23.104.0.1:48350 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:03:14.486 00:00:10.449 TCP 23.104.0.1:35456 -> 1.101.0.1:3000 15 1926 1 2026-01-09 00:03:11.888 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:40652 12 10375 1 2026-01-09 00:04:07.606 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 00:04:07.547 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 00:04:14.978 00:00:10.325 TCP 23.104.0.1:35044 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:04:12.136 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37500 10 6452 1 2026-01-09 00:05:12.350 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37516 10 6452 1 2026-01-09 00:05:15.345 00:00:10.371 TCP 23.104.0.1:48636 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:01:30.082 00:05:54.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 00:06:15.758 00:00:10.372 TCP 23.104.0.1:35064 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:01:30.084 00:05:54.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 00:06:12.563 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47570 12 6556 1 2026-01-09 00:07:12.777 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50256 10 6452 1 2026-01-09 00:07:16.172 00:00:10.360 TCP 23.104.0.1:54030 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:08:12.989 00:00:13.073 TCP 1.101.0.1:3000 -> 22.102.0.1:48480 12 10371 1 2026-01-09 00:08:16.575 00:00:10.442 TCP 23.104.0.1:34920 -> 1.101.0.1:3000 15 1926 1 2026-01-09 00:09:07.790 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 00:09:07.506 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 00:09:16.106 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39324 10 6452 1 2026-01-09 00:09:17.066 00:00:10.365 TCP 23.104.0.1:43762 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:10:16.326 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58840 10 6452 1 2026-01-09 00:10:17.468 00:00:10.372 TCP 23.104.0.1:34762 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:11:16.502 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58346 10 6452 1 2026-01-09 00:11:17.877 00:00:10.364 TCP 23.104.0.1:33476 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:07:30.085 00:05:54.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 00:12:16.728 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32856 10 6452 1 2026-01-09 00:07:30.088 00:05:54.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 00:12:18.283 00:00:10.364 TCP 23.104.0.1:56188 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:13:18.691 00:00:10.892 TCP 23.104.0.1:46252 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:13:16.942 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45050 10 6452 1 2026-01-09 00:14:09.804 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 00:14:09.664 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 00:14:19.627 00:00:10.362 TCP 23.104.0.1:58580 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:14:17.175 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38190 10 6452 1 2026-01-09 00:15:17.389 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47768 10 6452 1 2026-01-09 00:15:20.026 00:00:10.365 TCP 23.104.0.1:49208 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:16:17.561 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46116 10 6452 1 2026-01-09 00:16:20.431 00:00:10.360 TCP 23.104.0.1:51016 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:17:20.859 00:00:10.377 TCP 23.104.0.1:47948 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:17:17.779 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33816 10 6452 1 2026-01-09 00:13:30.090 00:05:54.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 00:13:30.087 00:05:54.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 00:18:21.278 00:00:10.383 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:18:17.947 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:34098 10 6452 1 2026-01-09 00:19:07.929 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 00:19:07.946 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 00:19:18.134 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:40590 10 6452 1 2026-01-09 00:19:21.702 00:00:10.366 TCP 23.104.0.1:35178 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:20:18.362 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59648 10 6452 1 2026-01-09 00:20:22.109 00:00:10.364 TCP 23.104.0.1:32974 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:21:18.532 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2026-01-09 00:21:22.515 00:00:10.373 TCP 23.104.0.1:44994 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:22:18.751 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:43736 11 6504 1 2026-01-09 00:22:22.923 00:00:10.374 TCP 23.104.0.1:57700 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:23:19.031 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45606 10 6452 1 2026-01-09 00:23:23.341 00:00:10.330 TCP 23.104.0.1:60336 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:24:08.247 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 00:24:08.225 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 00:19:30.088 00:05:54.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 00:19:30.090 00:05:54.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 00:24:19.246 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55420 10 6452 1 2026-01-09 00:24:23.716 00:00:10.377 TCP 23.104.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:25:19.459 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38272 10 6452 1 2026-01-09 00:25:24.136 00:00:10.363 TCP 23.104.0.1:42892 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:26:19.678 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57214 10 6452 1 2026-01-09 00:26:24.542 00:00:10.363 TCP 23.104.0.1:52998 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:27:19.891 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42392 10 6452 1 2026-01-09 00:27:24.943 00:00:10.376 TCP 23.104.0.1:47346 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:28:20.110 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44038 10 6452 1 2026-01-09 00:28:25.355 00:00:10.362 TCP 23.104.0.1:54860 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:29:08.205 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 00:29:08.253 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 00:29:20.329 00:00:10.431 TCP 1.101.0.1:3000 -> 22.102.0.1:36422 10 6452 1 2026-01-09 00:29:25.760 00:00:10.380 TCP 23.104.0.1:46038 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:25:30.089 00:05:54.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 00:25:30.092 00:05:54.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 00:30:20.801 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39410 10 6452 1 2026-01-09 00:30:26.178 00:00:10.364 TCP 23.104.0.1:53056 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:31:21.030 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33272 10 6452 1 2026-01-09 00:31:26.579 00:00:10.366 TCP 23.104.0.1:50692 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:32:21.249 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:50986 10 6452 1 2026-01-09 00:32:26.985 00:00:10.371 TCP 23.104.0.1:60164 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:33:21.432 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47976 10 6452 1 2026-01-09 00:33:27.392 00:00:10.367 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:34:08.143 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 00:34:08.142 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 00:34:21.614 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2026-01-09 00:34:27.797 00:00:10.339 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:35:21.844 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52348 10 6452 1 2026-01-09 00:35:28.176 00:00:10.360 TCP 23.104.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:31:30.089 00:05:54.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 00:31:30.092 00:05:54.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 00:36:22.089 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34938 10 6452 1 2026-01-09 00:36:28.573 00:00:10.367 TCP 23.104.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:37:22.310 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34526 10 6452 1 2026-01-09 00:37:28.980 00:00:10.372 TCP 23.104.0.1:58582 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:38:22.535 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56114 10 6452 1 2026-01-09 00:38:29.389 00:00:10.374 TCP 23.104.0.1:48202 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:39:08.393 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 00:39:08.392 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 00:39:22.751 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53060 10 6452 1 2026-01-09 00:39:29.796 00:00:10.347 TCP 23.104.0.1:45914 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:40:22.976 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:55858 10 6452 1 2026-01-09 00:40:30.179 00:00:10.321 TCP 23.104.0.1:58770 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:41:23.207 00:00:11.647 TCP 1.101.0.1:3000 -> 22.102.0.1:41060 10 6452 1 2026-01-09 00:41:30.543 00:00:21.550 TCP 23.104.0.1:54730 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:37:30.094 00:05:54.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 00:37:30.093 00:05:54.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 00:42:24.893 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45456 10 6452 1 2026-01-09 00:42:42.135 00:00:10.361 TCP 23.104.0.1:40804 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:43:25.114 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52290 10 6452 1 2026-01-09 00:43:42.537 00:00:10.361 TCP 23.104.0.1:34560 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:44:08.586 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 00:44:08.533 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 00:44:25.327 00:00:12.921 TCP 1.101.0.1:3000 -> 22.102.0.1:42562 10 6452 1 2026-01-09 00:44:42.943 00:00:10.371 TCP 23.104.0.1:35154 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:45:28.295 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49556 10 6452 1 2026-01-09 00:45:43.351 00:00:10.325 TCP 23.104.0.1:47774 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:46:28.522 00:00:17.108 TCP 1.101.0.1:3000 -> 22.102.0.1:49128 10 6452 1 2026-01-09 00:46:43.716 00:00:10.876 TCP 23.104.0.1:43642 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:47:35.673 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60082 10 6452 1 2026-01-09 00:47:44.632 00:00:11.125 TCP 23.104.0.1:52066 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:43:30.102 00:05:54.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 00:43:30.105 00:05:54.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 00:48:35.885 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55398 10 6452 1 2026-01-09 00:48:45.793 00:00:10.335 TCP 23.104.0.1:57556 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:49:08.481 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 00:49:08.458 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 00:49:36.084 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50484 10 6452 1 2026-01-09 00:49:46.169 00:00:10.358 TCP 23.104.0.1:48026 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:50:36.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54060 10 6452 1 2026-01-09 00:50:46.564 00:00:10.366 TCP 23.104.0.1:41246 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:51:36.507 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47180 10 6452 1 2026-01-09 00:51:46.973 00:00:10.371 TCP 23.104.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:52:36.726 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35920 10 6452 1 2026-01-09 00:52:47.384 00:00:10.368 TCP 23.104.0.1:58716 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:53:36.946 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56596 10 6452 1 2026-01-09 00:53:47.791 00:00:10.321 TCP 23.104.0.1:54058 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:54:08.741 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-09 00:54:08.668 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-09 00:49:30.107 00:05:54.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-09 00:49:30.105 00:05:54.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-09 00:54:37.177 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59742 10 6452 1 2026-01-09 00:54:48.146 00:00:10.367 TCP 23.104.0.1:44856 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:55:37.353 00:00:10.737 TCP 1.101.0.1:3000 -> 22.102.0.1:42794 10 6452 1 2026-01-09 00:55:48.554 00:00:10.364 TCP 23.104.0.1:46184 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:56:38.131 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47272 10 6452 1 2026-01-09 00:56:48.954 00:00:10.324 TCP 23.104.0.1:56590 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:57:38.356 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41080 10 6452 1 2026-01-09 00:57:49.315 00:00:10.367 TCP 23.104.0.1:46476 -> 1.101.0.1:3000 11 1507 1 2026-01-09 00:58:38.570 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:55750 10 6452 1 Summary: total flows: 163, total bytes: 505677, total packets: 1576, avg bps: 1064, avg pps: 0, avg bpp: 320 Time window: 2026-01-08 23:55:30 - 2026-01-09 00:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0052s User: 0.0017s Wall: 0.0032s flows/second: 50826.8 Runtime: 0.0032s