Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-13 05:58:47.308 00:00:10.362 TCP 23.104.0.1:45246 -> 1.101.0.1:3000 11 1507 1 2026-01-13 05:59:03.914 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:34576 10 6452 1 2026-01-13 05:59:47.709 00:00:10.361 TCP 23.104.0.1:59860 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:00:04.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38026 10 6452 1 2026-01-13 06:00:48.114 00:00:10.368 TCP 23.104.0.1:50498 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:01:10.311 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:01:10.287 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:01:04.314 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44226 10 6452 1 2026-01-13 06:01:48.518 00:00:10.367 TCP 23.104.0.1:44398 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:02:04.492 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51200 10 6452 1 2026-01-13 06:02:48.925 00:00:10.405 TCP 23.104.0.1:44062 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:03:04.703 00:00:14.276 TCP 1.101.0.1:3000 -> 22.102.0.1:36908 10 6452 1 2026-01-13 06:03:49.370 00:00:10.361 TCP 23.104.0.1:51526 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:04:09.030 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57536 10 6452 1 2026-01-13 05:59:32.447 00:05:54.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 05:59:32.450 00:05:54.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 06:04:49.774 00:00:10.373 TCP 23.104.0.1:35772 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:05:09.213 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35596 10 6452 1 2026-01-13 06:05:50.186 00:00:10.362 TCP 23.104.0.1:35054 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:06:10.620 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:06:10.375 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:06:09.391 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52424 10 6452 1 2026-01-13 06:06:50.589 00:00:10.420 TCP 23.104.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:07:09.565 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47636 11 6492 1 2026-01-13 06:07:51.059 00:00:10.378 TCP 23.104.0.1:34098 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:08:09.777 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43718 10 6452 1 2026-01-13 06:08:51.472 00:00:12.783 TCP 23.104.0.1:44550 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:09:09.946 00:00:21.960 TCP 1.101.0.1:3000 -> 22.102.0.1:45456 10 6452 1 2026-01-13 06:09:54.299 00:00:10.389 TCP 23.104.0.1:55472 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:05:32.453 00:05:54.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 06:05:32.449 00:05:54.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 06:10:21.946 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:49332 10 6452 1 2026-01-13 06:10:54.723 00:00:10.377 TCP 23.104.0.1:59536 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:11:10.635 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:11:10.650 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:11:22.145 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52388 10 6452 1 2026-01-13 06:11:55.138 00:00:17.177 TCP 23.104.0.1:45102 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:12:22.354 00:00:17.298 TCP 1.101.0.1:3000 -> 22.102.0.1:34720 10 6452 1 2026-01-13 06:13:02.358 00:00:10.364 TCP 23.104.0.1:41530 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:13:29.695 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54108 10 6452 1 2026-01-13 06:14:02.761 00:00:10.369 TCP 23.104.0.1:36736 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:14:29.911 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57674 10 6452 1 2026-01-13 06:15:03.172 00:00:10.362 TCP 23.104.0.1:51206 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:15:30.132 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:58404 10 6452 1 2026-01-13 06:16:10.607 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:16:10.446 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:16:03.573 00:00:10.364 TCP 23.104.0.1:54960 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:11:32.451 00:05:54.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 06:11:32.453 00:05:54.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 06:16:30.389 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55016 10 6452 1 2026-01-13 06:17:03.981 00:00:10.371 TCP 23.104.0.1:60614 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:17:30.618 00:00:10.448 TCP 1.101.0.1:3000 -> 22.102.0.1:55204 10 6452 1 2026-01-13 06:18:04.404 00:00:19.167 TCP 23.104.0.1:47612 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:18:31.112 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59432 10 6452 1 2026-01-13 06:19:13.664 00:00:10.419 TCP 23.104.0.1:39408 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:19:31.320 00:00:17.245 TCP 1.101.0.1:3000 -> 22.102.0.1:59986 10 6452 1 2026-01-13 06:20:14.114 00:00:10.365 TCP 23.104.0.1:46862 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:20:38.602 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59720 10 6452 1 2026-01-13 06:21:10.845 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:21:10.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:21:14.521 00:00:10.365 TCP 23.104.0.1:38080 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:21:38.776 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50070 10 6452 1 2026-01-13 06:17:32.458 00:05:54.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 06:17:32.455 00:05:54.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 06:22:14.928 00:00:18.514 TCP 23.104.0.1:53436 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:22:38.998 00:00:22.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47174 10 6452 1 2026-01-13 06:23:23.464 00:00:10.321 TCP 23.104.0.1:40022 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:23:51.204 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57504 10 6452 1 2026-01-13 06:24:23.832 00:00:10.396 TCP 23.104.0.1:49698 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:24:51.428 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35992 10 6452 1 2026-01-13 06:25:24.264 00:00:10.396 TCP 23.104.0.1:43910 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:25:51.637 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43518 10 6452 1 2026-01-13 06:26:10.904 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:26:10.880 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:26:24.702 00:00:10.391 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:26:51.852 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:51618 10 6452 1 2026-01-13 06:27:25.112 00:00:10.367 TCP 23.104.0.1:55642 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:27:52.101 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47948 10 6452 1 2026-01-13 06:23:32.460 00:05:54.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 06:23:32.456 00:05:54.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 06:28:25.516 00:00:10.363 TCP 23.104.0.1:58918 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:28:52.321 00:00:22.794 TCP 1.101.0.1:3000 -> 22.102.0.1:60878 10 6452 1 2026-01-13 06:29:25.921 00:00:10.389 TCP 23.104.0.1:60892 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:30:05.166 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41042 10 6452 1 2026-01-13 06:30:26.349 00:00:10.370 TCP 23.104.0.1:39256 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:31:11.016 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:31:11.311 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:31:05.337 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49840 10 6452 1 2026-01-13 06:31:26.753 00:00:10.373 TCP 23.104.0.1:36288 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:32:05.553 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45300 10 6452 1 2026-01-13 06:32:27.162 00:00:10.365 TCP 23.104.0.1:33446 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:33:05.771 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35376 10 6452 1 2026-01-13 06:33:27.569 00:00:10.364 TCP 23.104.0.1:50342 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:34:05.981 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36030 10 6452 1 2026-01-13 06:29:32.460 00:05:54.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 06:29:32.456 00:05:54.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 06:34:27.971 00:00:10.371 TCP 23.104.0.1:36640 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:35:06.208 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48558 10 6452 1 2026-01-13 06:35:28.382 00:00:10.365 TCP 23.104.0.1:43770 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:36:10.981 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:36:11.169 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:36:06.422 00:00:11.649 TCP 1.101.0.1:3000 -> 22.102.0.1:48168 10 6452 1 2026-01-13 06:36:28.784 00:00:10.368 TCP 23.104.0.1:39734 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:37:08.112 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52912 10 6452 1 2026-01-13 06:37:29.195 00:00:10.363 TCP 23.104.0.1:48388 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:38:08.289 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34130 10 6452 1 2026-01-13 06:38:29.595 00:00:10.378 TCP 23.104.0.1:51700 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:39:08.461 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35824 10 6452 1 2026-01-13 06:39:30.013 00:00:10.366 TCP 23.104.0.1:33550 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:40:08.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41610 10 6452 1 2026-01-13 06:35:32.461 00:05:54.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 06:35:32.458 00:05:54.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 06:40:30.414 00:00:10.365 TCP 23.104.0.1:48618 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:41:11.327 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:41:10.984 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:41:08.887 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34016 10 6452 1 2026-01-13 06:41:30.818 00:00:10.363 TCP 23.104.0.1:35106 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:42:09.107 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57270 10 6452 1 2026-01-13 06:42:31.216 00:00:10.442 TCP 23.104.0.1:52562 -> 1.101.0.1:3000 15 1926 1 2026-01-13 06:43:09.323 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:52968 12 10369 1 2026-01-13 06:43:31.697 00:00:10.368 TCP 23.104.0.1:36774 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:44:09.565 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48186 10 6452 1 2026-01-13 06:44:32.107 00:00:10.365 TCP 23.104.0.1:47190 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:45:09.772 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:49200 10 6452 1 2026-01-13 06:45:32.520 00:00:10.367 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:46:11.404 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:46:11.293 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:46:10.075 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 10 6452 1 2026-01-13 06:41:32.466 00:05:54.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 06:41:32.463 00:05:54.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 06:46:32.926 00:00:10.417 TCP 23.104.0.1:38588 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:47:10.288 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55934 12 6556 1 2026-01-13 06:47:33.381 00:00:10.322 TCP 23.104.0.1:56852 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:48:10.508 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40740 10 6452 1 2026-01-13 06:48:33.749 00:00:10.363 TCP 23.104.0.1:57638 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:49:10.716 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58986 10 6452 1 2026-01-13 06:49:34.150 00:00:10.424 TCP 23.104.0.1:43752 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:50:10.939 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:45960 10 6452 1 2026-01-13 06:50:34.613 00:00:11.687 TCP 23.104.0.1:60024 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:51:11.701 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:51:11.309 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:51:11.142 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44852 10 6452 1 2026-01-13 06:51:36.352 00:00:10.362 TCP 23.104.0.1:53974 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:52:11.379 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43562 10 6452 1 2026-01-13 06:47:32.468 00:05:54.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 06:47:32.465 00:05:54.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 06:52:36.753 00:00:10.393 TCP 23.104.0.1:47792 -> 1.101.0.1:3000 15 1926 1 2026-01-13 06:53:11.602 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:59210 12 10375 1 2026-01-13 06:53:37.187 00:00:10.365 TCP 23.104.0.1:53420 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:54:11.841 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47152 10 6452 1 2026-01-13 06:54:37.590 00:00:10.365 TCP 23.104.0.1:34652 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:55:12.080 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43100 10 6452 1 2026-01-13 06:55:37.998 00:00:10.365 TCP 23.104.0.1:36786 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:56:11.532 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 06:56:11.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 06:56:12.299 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34634 10 6452 1 2026-01-13 06:56:38.405 00:00:10.361 TCP 23.104.0.1:55870 -> 1.101.0.1:3000 11 1507 1 2026-01-13 06:57:12.474 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45966 10 6452 1 2026-01-13 06:57:38.810 00:00:10.439 TCP 23.104.0.1:40138 -> 1.101.0.1:3000 15 1926 1 2026-01-13 06:58:12.687 00:00:11.326 TCP 1.101.0.1:3000 -> 22.102.0.1:34888 12 10375 1 2026-01-13 06:53:32.465 00:05:54.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 06:53:32.468 00:05:54.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 06:58:39.289 00:00:10.366 TCP 23.104.0.1:33822 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505060, total packets: 1583, avg bps: 1110, avg pps: 0, avg bpp: 319 Time window: 2026-01-13 05:58:47 - 2026-01-13 06:59:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0055s User: 0.0018s Wall: 0.0022s flows/second: 72769.7 Runtime: 0.0023s