Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-12 18:58:39.402 00:00:16.805 TCP 1.101.0.1:3000 -> 22.102.0.1:37654 10 6452 1 2026-01-12 18:59:02.180 00:00:10.367 TCP 23.104.0.1:53410 -> 1.101.0.1:3000 11 1507 1 2026-01-12 18:59:46.250 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48876 10 6452 1 2026-01-12 19:00:02.588 00:00:10.363 TCP 23.104.0.1:56686 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:00:46.473 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45758 10 6452 1 2026-01-12 19:00:57.645 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:00:58.245 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:01:02.991 00:00:10.363 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:01:46.692 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51982 10 6452 1 2026-01-12 19:02:03.393 00:00:10.371 TCP 23.104.0.1:59958 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:02:46.907 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40908 10 6452 1 2026-01-12 19:03:03.800 00:00:10.338 TCP 23.104.0.1:39120 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:03:47.124 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39298 10 6452 1 2026-01-12 19:04:04.178 00:00:10.359 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:00:26.804 00:05:05.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-12 19:00:26.801 00:05:05.386 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-12 19:04:47.311 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38788 10 6452 1 2026-01-12 19:05:04.580 00:00:10.370 TCP 23.104.0.1:36748 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:05:57.282 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:05:47.534 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37592 10 6452 1 2026-01-12 19:05:57.057 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:06:04.999 00:00:10.354 TCP 23.104.0.1:50352 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:06:47.771 00:00:13.515 TCP 1.101.0.1:3000 -> 22.102.0.1:49042 10 6452 1 2026-01-12 19:07:05.419 00:00:10.364 TCP 23.104.0.1:35826 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:07:51.326 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51058 10 6452 1 2026-01-12 19:08:05.823 00:00:10.362 TCP 23.104.0.1:53470 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:08:51.546 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55866 10 6452 1 2026-01-12 19:09:06.223 00:00:10.328 TCP 23.104.0.1:56506 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:09:51.764 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40262 10 6452 1 2026-01-12 19:10:06.586 00:00:10.320 TCP 23.104.0.1:59030 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:06:26.806 00:05:05.382 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-12 19:06:26.809 00:05:05.377 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-12 19:10:57.314 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:10:57.414 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:10:51.978 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:56822 10 6452 1 2026-01-12 19:11:06.946 00:00:10.335 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:11:52.235 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49846 10 6452 1 2026-01-12 19:12:07.322 00:00:10.367 TCP 23.104.0.1:49086 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:12:52.454 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43008 10 6452 1 2026-01-12 19:13:07.725 00:00:10.375 TCP 23.104.0.1:38814 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:13:52.681 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 10 6452 1 2026-01-12 19:14:08.138 00:00:12.156 TCP 23.104.0.1:56746 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:14:52.976 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:58628 10 6452 1 2026-01-12 19:15:10.338 00:00:10.365 TCP 23.104.0.1:56106 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:15:57.508 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:15:57.434 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:15:53.220 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36330 10 6452 1 2026-01-12 19:16:10.742 00:00:10.383 TCP 23.104.0.1:34420 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:12:26.809 00:05:05.381 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-12 19:12:26.811 00:05:05.376 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-12 19:16:53.456 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6452 1 2026-01-12 19:17:11.170 00:00:10.362 TCP 23.104.0.1:45336 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:17:53.670 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44696 10 6452 1 2026-01-12 19:18:11.570 00:00:10.318 TCP 23.104.0.1:42480 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:18:53.881 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35170 10 6452 1 2026-01-12 19:19:11.931 00:00:10.336 TCP 23.104.0.1:38576 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:19:54.100 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33990 10 6452 1 2026-01-12 19:20:12.312 00:00:10.363 TCP 23.104.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:20:57.620 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:20:57.480 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:20:54.308 00:00:10.511 TCP 1.101.0.1:3000 -> 22.102.0.1:47388 10 6452 1 2026-01-12 19:21:12.714 00:00:10.376 TCP 23.104.0.1:60384 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:21:54.860 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:51508 10 6452 1 2026-01-12 19:22:13.129 00:00:10.322 TCP 23.104.0.1:33400 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:18:26.811 00:05:05.382 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-12 19:18:26.814 00:05:05.376 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-12 19:22:55.106 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:43818 10 6452 1 2026-01-12 19:23:13.494 00:00:10.324 TCP 23.104.0.1:33402 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:23:55.273 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57712 10 6452 1 2026-01-12 19:24:13.856 00:00:10.374 TCP 23.104.0.1:46196 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:24:55.449 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35988 10 6452 1 2026-01-12 19:25:14.272 00:00:10.323 TCP 23.104.0.1:36274 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:25:57.746 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:25:57.923 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:25:55.667 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60922 10 6452 1 2026-01-12 19:26:14.641 00:00:10.367 TCP 23.104.0.1:43524 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:26:55.910 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 10 6452 1 2026-01-12 19:27:15.055 00:00:10.363 TCP 23.104.0.1:44908 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:27:56.126 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47966 10 6452 1 2026-01-12 19:28:15.458 00:00:10.371 TCP 23.104.0.1:51504 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:24:26.816 00:05:05.375 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-12 19:24:26.813 00:05:05.381 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-12 19:28:56.345 00:00:21.891 TCP 1.101.0.1:3000 -> 22.102.0.1:55156 10 6452 1 2026-01-12 19:29:15.871 00:00:10.402 TCP 23.104.0.1:37954 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:30:08.306 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2026-01-12 19:30:16.310 00:00:10.366 TCP 23.104.0.1:56920 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:30:57.588 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:30:57.889 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:31:08.520 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2026-01-12 19:31:16.716 00:00:10.339 TCP 23.104.0.1:36360 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:32:08.737 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39070 10 6452 1 2026-01-12 19:32:17.103 00:00:10.369 TCP 23.104.0.1:57496 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:33:08.952 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33026 10 6452 1 2026-01-12 19:33:17.515 00:00:10.376 TCP 23.104.0.1:55502 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:34:09.182 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43232 10 6452 1 2026-01-12 19:34:17.946 00:00:10.368 TCP 23.104.0.1:52484 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:30:26.817 00:05:05.378 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-12 19:30:26.820 00:05:05.373 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-12 19:35:09.398 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44208 10 6452 1 2026-01-12 19:35:18.366 00:00:10.327 TCP 23.104.0.1:40912 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:35:57.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:35:57.863 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:36:09.619 00:00:11.014 TCP 1.101.0.1:3000 -> 22.102.0.1:52908 10 6452 1 2026-01-12 19:36:18.744 00:00:10.363 TCP 23.104.0.1:54208 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:37:10.670 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58984 10 6452 1 2026-01-12 19:37:19.142 00:00:10.367 TCP 23.104.0.1:53320 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:38:10.882 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47862 10 6452 1 2026-01-12 19:38:19.549 00:00:10.361 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:39:11.101 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48998 10 6452 1 2026-01-12 19:39:19.949 00:00:10.374 TCP 23.104.0.1:56450 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:40:11.312 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48108 10 6452 1 2026-01-12 19:40:20.360 00:00:10.356 TCP 23.104.0.1:40304 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:36:26.817 00:05:05.381 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-12 19:36:26.820 00:05:05.375 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-12 19:40:58.048 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:40:57.766 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:41:11.519 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53488 10 6452 1 2026-01-12 19:41:20.758 00:00:10.386 TCP 23.104.0.1:34190 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:42:11.694 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 12 10369 1 2026-01-12 19:42:21.186 00:00:10.401 TCP 23.104.0.1:51160 -> 1.101.0.1:3000 15 1926 1 2026-01-12 19:43:11.936 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:50178 10 6452 1 2026-01-12 19:43:21.619 00:00:11.286 TCP 23.104.0.1:37982 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:44:12.177 00:00:10.922 TCP 1.101.0.1:3000 -> 22.102.0.1:33902 10 6452 1 2026-01-12 19:44:22.955 00:00:10.366 TCP 23.104.0.1:55640 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:45:13.147 00:00:10.295 TCP 1.101.0.1:3000 -> 22.102.0.1:52590 10 6452 1 2026-01-12 19:45:23.363 00:00:10.367 TCP 23.104.0.1:42178 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:45:58.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:45:58.027 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:46:13.504 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43288 10 6452 1 2026-01-12 19:46:23.766 00:00:10.374 TCP 23.104.0.1:48068 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:42:26.821 00:05:05.376 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-12 19:42:26.818 00:05:05.382 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-12 19:47:13.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36886 10 6452 1 2026-01-12 19:47:24.180 00:00:10.366 TCP 23.104.0.1:47204 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:48:13.945 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50424 10 6452 1 2026-01-12 19:48:24.602 00:00:10.368 TCP 23.104.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:49:14.170 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58242 10 6452 1 2026-01-12 19:49:25.010 00:00:10.324 TCP 23.104.0.1:38384 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:50:14.382 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39150 10 6452 1 2026-01-12 19:50:25.374 00:00:10.365 TCP 23.104.0.1:42362 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:50:58.200 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:50:58.155 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:51:14.596 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45512 10 6452 1 2026-01-12 19:51:25.779 00:00:10.403 TCP 23.104.0.1:50216 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:52:14.810 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33306 10 6452 1 2026-01-12 19:52:26.223 00:00:10.364 TCP 23.104.0.1:39964 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:48:26.822 00:05:05.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-12 19:48:26.821 00:05:05.386 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-12 19:53:15.031 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38816 10 6452 1 2026-01-12 19:53:26.630 00:00:10.370 TCP 23.104.0.1:36318 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:54:15.202 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33596 10 6452 1 2026-01-12 19:54:27.052 00:00:10.367 TCP 23.104.0.1:45452 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:55:15.393 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44604 10 6452 1 2026-01-12 19:55:27.457 00:00:10.363 TCP 23.104.0.1:50064 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:55:58.315 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-12 19:55:58.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-12 19:56:15.611 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59548 10 6452 1 2026-01-12 19:56:27.858 00:00:10.375 TCP 23.104.0.1:45542 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:57:15.785 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46244 10 6452 1 2026-01-12 19:57:28.274 00:00:10.364 TCP 23.104.0.1:42084 -> 1.101.0.1:3000 11 1507 1 2026-01-12 19:58:16.009 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33608 10 6452 1 2026-01-12 19:54:26.824 00:05:05.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-12 19:54:26.822 00:05:05.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-12 19:58:28.676 00:00:20.650 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502684, total packets: 1578, avg bps: 1100, avg pps: 0, avg bpp: 318 Time window: 2026-01-12 18:58:39 - 2026-01-12 19:59:32 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0054s User: 0.0011s Wall: 0.0016s flows/second: 101560.0 Runtime: 0.0016s