Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-13 08:59:02.195 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53694 10 6452 1 2026-01-13 08:59:02.468 00:00:10.365 TCP 23.104.0.1:57086 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:00:02.381 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40568 10 6452 1 2026-01-13 09:00:02.870 00:00:10.323 TCP 23.104.0.1:39312 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:01:13.923 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:01:02.586 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34228 10 6452 1 2026-01-13 09:01:13.918 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:01:03.231 00:00:10.369 TCP 23.104.0.1:40942 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:02:03.641 00:00:10.366 TCP 23.104.0.1:35094 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:02:02.756 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:43110 10 6452 1 2026-01-13 09:03:02.965 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:56130 10 6452 1 2026-01-13 09:03:04.053 00:00:10.321 TCP 23.104.0.1:54216 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:04:03.159 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49416 10 6452 1 2026-01-13 09:04:04.414 00:00:10.372 TCP 23.104.0.1:54366 -> 1.101.0.1:3000 11 1507 1 2026-01-13 08:59:32.509 00:05:54.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 08:59:32.512 00:05:54.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 09:05:04.828 00:00:10.364 TCP 23.104.0.1:52904 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:05:03.370 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44022 10 6452 1 2026-01-13 09:06:03.591 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:56690 10 6452 1 2026-01-13 09:06:14.129 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:06:13.892 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:06:05.229 00:00:10.362 TCP 23.104.0.1:54758 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:07:05.634 00:00:10.387 TCP 23.104.0.1:47876 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:07:03.782 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33730 10 6452 1 2026-01-13 09:08:06.085 00:00:10.342 TCP 23.104.0.1:33928 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:08:03.961 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:44870 10 6452 1 2026-01-13 09:09:04.199 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45446 10 6452 1 2026-01-13 09:09:06.469 00:00:10.370 TCP 23.104.0.1:49584 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:10:04.413 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:39920 10 6452 1 2026-01-13 09:10:06.893 00:00:10.369 TCP 23.104.0.1:60296 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:05:32.515 00:05:54.592 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 09:05:32.513 00:05:54.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 09:11:14.129 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:11:04.592 00:00:10.473 TCP 1.101.0.1:3000 -> 22.102.0.1:46634 10 6452 1 2026-01-13 09:11:14.305 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:11:07.306 00:00:20.055 TCP 23.104.0.1:42888 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:12:05.102 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60542 10 6452 1 2026-01-13 09:12:17.393 00:00:10.373 TCP 23.104.0.1:56734 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:13:05.322 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33748 10 6452 1 2026-01-13 09:13:17.803 00:00:10.371 TCP 23.104.0.1:59086 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:14:05.543 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55628 10 6452 1 2026-01-13 09:14:18.216 00:00:10.322 TCP 23.104.0.1:50170 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:15:05.768 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56998 10 6452 1 2026-01-13 09:15:18.577 00:00:10.373 TCP 23.104.0.1:54040 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:16:05.987 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39646 10 6452 1 2026-01-13 09:16:14.273 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:16:14.314 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:11:32.526 00:05:54.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 09:16:18.991 00:00:10.324 TCP 23.104.0.1:36982 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:11:32.523 00:05:54.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 09:17:06.216 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43240 10 6452 1 2026-01-13 09:17:19.356 00:00:10.373 TCP 23.104.0.1:38374 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:18:06.442 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51864 10 6452 1 2026-01-13 09:18:19.766 00:00:10.328 TCP 23.104.0.1:34972 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:19:06.672 00:00:10.749 TCP 1.101.0.1:3000 -> 22.102.0.1:40928 10 6452 1 2026-01-13 09:19:20.134 00:00:10.472 TCP 23.104.0.1:57494 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:20:07.468 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37878 10 6452 1 2026-01-13 09:20:20.650 00:00:10.402 TCP 23.104.0.1:43738 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:21:14.451 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:21:14.237 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:21:07.682 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38084 10 6452 1 2026-01-13 09:21:21.107 00:00:10.367 TCP 23.104.0.1:54064 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:22:07.894 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46352 10 6452 1 2026-01-13 09:22:21.515 00:00:10.376 TCP 23.104.0.1:60752 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:17:32.519 00:05:54.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 09:17:32.522 00:05:54.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 09:23:08.116 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48374 10 6452 1 2026-01-13 09:23:21.930 00:00:10.392 TCP 23.104.0.1:58132 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:24:08.330 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50108 10 6452 1 2026-01-13 09:24:22.364 00:00:10.325 TCP 23.104.0.1:49720 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:25:08.553 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57206 10 6452 1 2026-01-13 09:25:22.737 00:00:10.374 TCP 23.104.0.1:50336 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:26:14.536 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:26:14.602 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:26:08.788 00:00:13.529 TCP 1.101.0.1:3000 -> 22.102.0.1:45368 10 6452 1 2026-01-13 09:26:23.146 00:00:20.352 TCP 23.104.0.1:43912 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:27:12.357 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48260 10 6452 1 2026-01-13 09:27:33.586 00:00:10.378 TCP 23.104.0.1:34186 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:28:12.568 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34130 10 6452 1 2026-01-13 09:23:32.520 00:05:54.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 09:23:32.522 00:05:54.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 09:28:34.002 00:00:10.323 TCP 23.104.0.1:57430 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:29:12.788 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52344 10 6452 1 2026-01-13 09:29:34.362 00:00:10.365 TCP 23.104.0.1:45570 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:30:13.028 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52314 10 6452 1 2026-01-13 09:30:34.764 00:00:10.332 TCP 23.104.0.1:39120 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:31:15.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:31:15.199 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:31:13.243 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54992 10 6452 1 2026-01-13 09:31:35.134 00:00:10.324 TCP 23.104.0.1:38846 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:32:13.459 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52438 10 6452 1 2026-01-13 09:32:35.494 00:00:10.363 TCP 23.104.0.1:33200 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:33:13.671 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38686 10 6452 1 2026-01-13 09:33:35.898 00:00:10.327 TCP 23.104.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:34:13.893 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49356 10 6452 1 2026-01-13 09:29:32.524 00:05:54.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 09:29:32.522 00:05:54.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 09:34:36.262 00:00:10.328 TCP 23.104.0.1:57718 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:35:14.114 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38884 10 6452 1 2026-01-13 09:35:36.624 00:00:10.365 TCP 23.104.0.1:40946 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:36:14.608 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:36:14.634 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:36:14.333 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60730 10 6452 1 2026-01-13 09:36:37.031 00:00:10.369 TCP 23.104.0.1:39542 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:37:14.549 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57132 10 6452 1 2026-01-13 09:37:37.440 00:00:10.370 TCP 23.104.0.1:35240 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:38:14.760 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35990 10 6452 1 2026-01-13 09:38:37.848 00:00:10.383 TCP 23.104.0.1:43258 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:39:14.972 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39128 10 6452 1 2026-01-13 09:39:38.271 00:00:10.367 TCP 23.104.0.1:51536 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:40:15.196 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60106 10 6452 1 2026-01-13 09:35:32.528 00:05:54.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 09:35:32.526 00:05:54.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 09:40:38.678 00:00:10.564 TCP 23.104.0.1:45444 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:41:15.160 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:41:14.963 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:41:15.411 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43518 10 6452 1 2026-01-13 09:41:39.286 00:00:10.320 TCP 23.104.0.1:57666 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:42:15.624 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60162 10 6452 1 2026-01-13 09:42:39.649 00:00:10.374 TCP 23.104.0.1:57854 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:43:15.833 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41724 10 6452 1 2026-01-13 09:43:40.108 00:00:10.323 TCP 23.104.0.1:42974 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:44:16.072 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50820 10 6452 1 2026-01-13 09:44:40.467 00:00:13.677 TCP 23.104.0.1:40580 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:45:16.247 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44358 10 6452 1 2026-01-13 09:45:44.220 00:00:10.364 TCP 23.104.0.1:44308 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:46:14.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:46:14.994 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:46:16.468 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:60988 10 6452 1 2026-01-13 09:41:32.531 00:05:54.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 09:41:32.529 00:05:54.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 09:46:44.625 00:00:10.364 TCP 23.104.0.1:48454 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:47:16.722 00:00:10.304 TCP 1.101.0.1:3000 -> 22.102.0.1:37080 10 6452 1 2026-01-13 09:47:45.026 00:00:11.972 TCP 23.104.0.1:48572 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:48:17.080 00:00:14.050 TCP 1.101.0.1:3000 -> 22.102.0.1:51070 10 6452 1 2026-01-13 09:48:47.035 00:00:10.365 TCP 23.104.0.1:45722 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:49:21.171 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52412 10 6452 1 2026-01-13 09:49:47.442 00:00:10.362 TCP 23.104.0.1:49864 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:50:21.394 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36384 10 6452 1 2026-01-13 09:50:47.844 00:00:10.410 TCP 23.104.0.1:41396 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:51:15.396 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:51:15.654 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:51:21.612 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56264 10 6452 1 2026-01-13 09:51:48.265 00:00:10.364 TCP 23.104.0.1:43560 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:47:32.531 00:05:54.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 09:47:32.529 00:05:54.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 09:52:21.824 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51872 10 6452 1 2026-01-13 09:52:48.671 00:00:10.374 TCP 23.104.0.1:59670 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:53:22.076 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34606 10 6452 1 2026-01-13 09:53:49.123 00:00:10.371 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:54:22.289 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41592 10 6452 1 2026-01-13 09:54:49.532 00:00:10.362 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:55:22.535 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52314 10 6452 1 2026-01-13 09:55:49.932 00:00:10.383 TCP 23.104.0.1:55114 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:56:15.156 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 09:56:15.062 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 09:56:22.758 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:35396 10 6452 1 2026-01-13 09:56:50.346 00:00:10.371 TCP 23.104.0.1:42860 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:57:23.017 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:32976 10 6452 1 2026-01-13 09:57:50.755 00:00:10.332 TCP 23.104.0.1:37826 -> 1.101.0.1:3000 11 1507 1 2026-01-13 09:53:32.535 00:05:54.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 09:53:32.532 00:05:54.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 09:58:23.236 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37822 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1096, avg pps: 0, avg bpp: 318 Time window: 2026-01-13 08:59:02 - 2026-01-13 09:59:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0017s Wall: 0.0019s flows/second: 83803.8 Runtime: 0.0020s