Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-13 02:58:53.442 00:00:10.365 TCP 23.104.0.1:48174 -> 1.101.0.1:3000 11 1507 1 2026-01-13 02:58:53.327 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50676 10 6452 1 2026-01-13 02:59:53.847 00:00:10.382 TCP 23.104.0.1:48178 -> 1.101.0.1:3000 11 1507 1 2026-01-13 02:59:53.549 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47608 10 6452 1 2026-01-13 03:01:06.640 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:01:06.806 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:00:54.266 00:00:23.182 TCP 23.104.0.1:60442 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:00:53.767 00:00:23.589 TCP 1.101.0.1:3000 -> 22.102.0.1:46084 10 6452 1 2026-01-13 03:02:07.540 00:00:10.326 TCP 23.104.0.1:59040 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:02:07.405 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44800 10 6452 1 2026-01-13 03:03:07.636 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45540 10 6452 1 2026-01-13 03:03:07.912 00:00:10.325 TCP 23.104.0.1:45382 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:04:08.281 00:00:20.809 TCP 23.104.0.1:55406 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:04:07.807 00:00:21.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51420 10 6452 1 2026-01-13 03:00:26.958 00:05:05.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 03:00:26.960 00:05:05.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 03:05:19.052 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56616 10 6452 1 2026-01-13 03:05:19.135 00:00:10.360 TCP 23.104.0.1:60094 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:06:06.933 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:06:06.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:06:19.274 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42598 10 6452 1 2026-01-13 03:06:19.529 00:00:10.369 TCP 23.104.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:07:19.938 00:00:10.410 TCP 23.104.0.1:49686 -> 1.101.0.1:3000 15 1926 1 2026-01-13 03:07:19.500 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48244 12 10369 1 2026-01-13 03:08:19.741 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43292 10 6452 1 2026-01-13 03:08:20.393 00:00:10.361 TCP 23.104.0.1:51110 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:09:19.963 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56502 12 6556 1 2026-01-13 03:09:20.800 00:00:10.423 TCP 23.104.0.1:58534 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:10:21.279 00:00:10.373 TCP 23.104.0.1:32852 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:10:20.198 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47326 10 6452 1 2026-01-13 03:06:26.960 00:05:05.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 03:06:26.964 00:05:05.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 03:11:06.937 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:11:06.931 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:11:20.418 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36204 10 6452 1 2026-01-13 03:11:21.701 00:00:10.368 TCP 23.104.0.1:54906 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:12:20.647 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52824 10 6452 1 2026-01-13 03:12:22.110 00:00:10.323 TCP 23.104.0.1:50984 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:13:20.822 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54684 10 6452 1 2026-01-13 03:13:22.472 00:00:10.366 TCP 23.104.0.1:35452 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:14:21.061 00:00:10.876 TCP 1.101.0.1:3000 -> 22.102.0.1:37908 10 6452 1 2026-01-13 03:14:22.874 00:00:10.366 TCP 23.104.0.1:59764 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:15:21.976 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:36092 10 6452 1 2026-01-13 03:15:23.289 00:00:10.363 TCP 23.104.0.1:47320 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:16:06.908 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:16:07.145 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:16:22.167 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2026-01-13 03:12:26.960 00:05:05.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 03:16:23.691 00:00:10.369 TCP 23.104.0.1:42788 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:12:26.963 00:05:05.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 03:17:22.382 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47728 10 6452 1 2026-01-13 03:17:24.104 00:00:10.368 TCP 23.104.0.1:44260 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:18:22.604 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35874 10 6452 1 2026-01-13 03:18:24.511 00:00:10.369 TCP 23.104.0.1:41272 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:19:24.915 00:00:10.373 TCP 23.104.0.1:34628 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:19:22.810 00:00:11.388 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2026-01-13 03:20:24.235 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60760 10 6452 1 2026-01-13 03:20:25.326 00:00:10.362 TCP 23.104.0.1:51432 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:21:06.809 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:21:06.907 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:21:25.727 00:00:10.374 TCP 23.104.0.1:41266 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:21:24.464 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:37566 10 6452 1 2026-01-13 03:18:26.964 00:05:05.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 03:22:26.138 00:00:10.366 TCP 23.104.0.1:58920 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:22:24.650 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60530 10 6452 1 2026-01-13 03:18:26.961 00:05:05.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 03:23:26.547 00:00:10.365 TCP 23.104.0.1:45732 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:23:24.825 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40936 10 6452 1 2026-01-13 03:24:25.069 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59502 10 6452 1 2026-01-13 03:24:26.948 00:00:10.365 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:25:25.288 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51354 10 6452 1 2026-01-13 03:25:27.355 00:00:10.324 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:26:07.175 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:26:07.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:26:25.498 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47554 10 6452 1 2026-01-13 03:26:27.718 00:00:10.374 TCP 23.104.0.1:35616 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:27:25.668 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59734 10 6452 1 2026-01-13 03:27:28.124 00:00:10.366 TCP 23.104.0.1:56250 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:24:26.966 00:05:05.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 03:28:25.878 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50466 10 6452 1 2026-01-13 03:24:26.964 00:05:05.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 03:28:28.531 00:00:10.330 TCP 23.104.0.1:36390 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:29:26.077 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36984 10 6452 1 2026-01-13 03:29:28.907 00:00:10.382 TCP 23.104.0.1:46118 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:30:26.286 00:00:19.469 TCP 1.101.0.1:3000 -> 22.102.0.1:37924 10 6452 1 2026-01-13 03:30:29.328 00:00:16.521 TCP 23.104.0.1:57438 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:31:06.851 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:31:06.892 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:31:35.797 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:54174 10 6452 1 2026-01-13 03:31:35.895 00:00:10.424 TCP 23.104.0.1:35740 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:32:36.062 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:38530 12 10369 1 2026-01-13 03:32:36.363 00:00:10.440 TCP 23.104.0.1:51756 -> 1.101.0.1:3000 15 1926 1 2026-01-13 03:33:36.308 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43814 10 6452 1 2026-01-13 03:33:36.844 00:00:10.383 TCP 23.104.0.1:33360 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:30:26.966 00:05:05.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 03:30:26.969 00:05:05.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 03:34:36.530 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41072 10 6452 1 2026-01-13 03:34:37.272 00:00:10.366 TCP 23.104.0.1:34492 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:35:36.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48480 10 6452 1 2026-01-13 03:35:37.678 00:00:10.370 TCP 23.104.0.1:53742 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:36:07.694 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:36:07.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:36:36.962 00:00:24.339 TCP 1.101.0.1:3000 -> 22.102.0.1:54118 10 6452 1 2026-01-13 03:36:38.111 00:00:23.284 TCP 23.104.0.1:44644 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:37:51.343 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60286 10 6452 1 2026-01-13 03:37:51.444 00:00:10.363 TCP 23.104.0.1:56968 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:38:51.567 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41234 10 6452 1 2026-01-13 03:38:51.852 00:00:10.375 TCP 23.104.0.1:59550 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:39:51.780 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50464 10 6452 1 2026-01-13 03:39:52.267 00:00:10.327 TCP 23.104.0.1:60898 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:36:26.972 00:05:05.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 03:36:26.969 00:05:05.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 03:40:51.953 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:50780 10 6452 1 2026-01-13 03:40:52.638 00:00:10.323 TCP 23.104.0.1:50220 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:41:07.634 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:41:07.693 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:41:52.148 00:00:17.662 TCP 1.101.0.1:3000 -> 22.102.0.1:47988 10 6452 1 2026-01-13 03:41:52.995 00:00:16.909 TCP 23.104.0.1:34278 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:42:59.944 00:00:10.371 TCP 23.104.0.1:34160 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:42:59.850 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:48776 10 6452 1 2026-01-13 03:44:00.353 00:00:10.328 TCP 23.104.0.1:38006 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:44:00.103 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35784 10 6452 1 2026-01-13 03:45:00.720 00:00:10.371 TCP 23.104.0.1:54116 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:45:00.326 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45642 10 6452 1 2026-01-13 03:46:00.497 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50176 10 6452 1 2026-01-13 03:46:07.693 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:46:07.738 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:46:01.134 00:00:10.364 TCP 23.104.0.1:60632 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:42:26.971 00:05:05.435 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 03:42:26.972 00:05:05.430 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 03:47:00.720 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6452 1 2026-01-13 03:47:01.540 00:00:10.362 TCP 23.104.0.1:57324 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:48:00.945 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:44486 10 6452 1 2026-01-13 03:48:01.941 00:00:10.404 TCP 23.104.0.1:42432 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:49:01.234 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51346 10 6452 1 2026-01-13 03:49:02.401 00:00:10.365 TCP 23.104.0.1:41684 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:50:01.451 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60394 10 6452 1 2026-01-13 03:50:02.805 00:00:10.370 TCP 23.104.0.1:38574 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:51:07.925 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:51:08.062 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:51:01.663 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56244 10 6452 1 2026-01-13 03:51:03.215 00:00:10.361 TCP 23.104.0.1:57342 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:52:01.879 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42630 10 6452 1 2026-01-13 03:52:03.617 00:00:10.358 TCP 23.104.0.1:38650 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:48:26.972 00:05:05.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 03:48:26.974 00:05:05.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 03:53:02.108 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39800 10 6452 1 2026-01-13 03:53:04.015 00:00:14.270 TCP 23.104.0.1:60268 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:54:02.328 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44632 10 6452 1 2026-01-13 03:54:08.320 00:00:10.364 TCP 23.104.0.1:49724 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:55:02.550 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:60510 10 6452 1 2026-01-13 03:55:08.726 00:00:10.327 TCP 23.104.0.1:33602 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:56:08.892 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 03:56:08.715 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 03:56:02.759 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59042 10 6452 1 2026-01-13 03:56:09.104 00:00:10.366 TCP 23.104.0.1:58402 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:57:02.971 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:39900 10 6452 1 2026-01-13 03:57:09.511 00:00:10.394 TCP 23.104.0.1:35340 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:58:03.169 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56246 10 6452 1 2026-01-13 03:58:09.964 00:00:10.374 TCP 23.104.0.1:40284 -> 1.101.0.1:3000 11 1507 1 2026-01-13 03:54:26.975 00:05:05.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 03:54:26.973 00:05:05.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 499165, total packets: 1565, avg bps: 1097, avg pps: 0, avg bpp: 318 Time window: 2026-01-13 02:58:53 - 2026-01-13 03:59:32 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0040s User: 0.0030s Wall: 0.0019s flows/second: 86359.6 Runtime: 0.0019s