Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-13 18:58:57.679 00:00:10.377 TCP 23.104.0.1:60234 -> 1.101.0.1:3000 11 1507 1 2026-01-13 18:59:16.578 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45624 10 6452 1 2026-01-13 18:59:58.107 00:00:10.325 TCP 23.104.0.1:41526 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:00:16.800 00:00:11.409 TCP 1.101.0.1:3000 -> 22.102.0.1:33174 10 6452 1 2026-01-13 19:00:58.471 00:00:10.361 TCP 23.104.0.1:57626 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:01:25.764 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:01:25.763 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:01:18.255 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34646 10 6452 1 2026-01-13 19:01:58.872 00:00:10.375 TCP 23.104.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:02:18.475 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:52706 10 6452 1 2026-01-13 19:02:59.315 00:00:10.367 TCP 23.104.0.1:53238 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:03:18.682 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42032 10 6452 1 2026-01-13 19:03:59.720 00:00:10.371 TCP 23.104.0.1:57680 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:04:18.898 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60776 10 6452 1 2026-01-13 18:59:32.754 00:05:54.524 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 18:59:32.751 00:05:54.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 19:05:00.133 00:00:11.213 TCP 23.104.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:05:19.114 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:37986 10 6452 1 2026-01-13 19:06:01.421 00:00:10.369 TCP 23.104.0.1:51876 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:06:26.075 00:00:00.009 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:06:26.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:06:19.381 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:41806 10 6452 1 2026-01-13 19:07:01.830 00:00:10.383 TCP 23.104.0.1:42630 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:07:19.568 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35044 10 6452 1 2026-01-13 19:08:02.253 00:00:10.368 TCP 23.104.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:08:19.745 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41236 10 6452 1 2026-01-13 19:09:02.670 00:00:10.322 TCP 23.104.0.1:33488 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:09:19.954 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57366 12 6556 1 2026-01-13 19:10:03.055 00:00:10.327 TCP 23.104.0.1:44390 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:05:32.754 00:05:54.523 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 19:10:20.192 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46502 10 6452 1 2026-01-13 19:05:32.752 00:05:54.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 19:11:03.415 00:00:10.329 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:11:27.016 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:11:27.154 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:11:20.408 00:00:12.973 TCP 1.101.0.1:3000 -> 22.102.0.1:36316 10 6452 1 2026-01-13 19:12:03.783 00:00:10.327 TCP 23.104.0.1:33492 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:12:23.435 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45068 10 6452 1 2026-01-13 19:13:04.149 00:00:10.370 TCP 23.104.0.1:46802 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:13:23.657 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37418 10 6452 1 2026-01-13 19:14:04.553 00:00:10.365 TCP 23.104.0.1:35708 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:14:23.872 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43946 10 6452 1 2026-01-13 19:15:04.962 00:00:10.366 TCP 23.104.0.1:60912 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:15:24.101 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39410 10 6452 1 2026-01-13 19:16:05.367 00:00:10.364 TCP 23.104.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:16:26.375 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:16:26.286 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:11:32.752 00:05:54.531 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 19:11:32.755 00:05:54.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 19:16:24.327 00:00:11.930 TCP 1.101.0.1:3000 -> 22.102.0.1:39078 10 6452 1 2026-01-13 19:17:05.769 00:00:14.719 TCP 23.104.0.1:52904 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:17:26.296 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33262 10 6452 1 2026-01-13 19:18:10.583 00:00:10.368 TCP 23.104.0.1:39702 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:18:26.519 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38728 10 6452 1 2026-01-13 19:19:10.994 00:00:10.364 TCP 23.104.0.1:60994 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:19:26.745 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34574 10 6452 1 2026-01-13 19:20:11.407 00:00:10.327 TCP 23.104.0.1:48576 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:20:26.966 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34596 10 6452 1 2026-01-13 19:21:26.493 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:21:11.769 00:00:10.368 TCP 23.104.0.1:36460 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:21:26.331 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:21:27.194 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37998 10 6452 1 2026-01-13 19:22:12.175 00:00:10.362 TCP 23.104.0.1:43638 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:17:32.759 00:05:54.523 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 19:17:32.755 00:05:54.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 19:22:27.412 00:00:18.158 TCP 1.101.0.1:3000 -> 22.102.0.1:36804 10 6452 1 2026-01-13 19:23:12.573 00:00:10.366 TCP 23.104.0.1:41358 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:23:35.610 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37202 10 6452 1 2026-01-13 19:24:12.979 00:00:10.321 TCP 23.104.0.1:47556 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:24:35.835 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:38196 10 6452 1 2026-01-13 19:25:13.343 00:00:10.325 TCP 23.104.0.1:46788 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:25:36.038 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50516 10 6452 1 2026-01-13 19:26:26.486 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:26:26.755 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:26:13.702 00:00:10.374 TCP 23.104.0.1:42556 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:26:36.251 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56752 10 6452 1 2026-01-13 19:27:14.115 00:00:10.372 TCP 23.104.0.1:53700 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:27:36.468 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58576 10 6452 1 2026-01-13 19:28:14.525 00:00:10.368 TCP 23.104.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:23:32.757 00:05:54.531 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 19:23:32.760 00:05:54.526 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 19:28:36.684 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51472 10 6452 1 2026-01-13 19:29:14.927 00:00:10.431 TCP 23.104.0.1:35484 -> 1.101.0.1:3000 15 1926 1 2026-01-13 19:29:36.901 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:50062 12 10375 1 2026-01-13 19:30:15.394 00:00:10.368 TCP 23.104.0.1:44336 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:30:37.156 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40266 10 6452 1 2026-01-13 19:31:26.626 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:31:26.858 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:31:15.803 00:00:10.364 TCP 23.104.0.1:53772 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:31:37.374 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55632 10 6452 1 2026-01-13 19:32:16.204 00:00:10.363 TCP 23.104.0.1:56130 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:32:37.586 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54948 10 6452 1 2026-01-13 19:33:16.604 00:00:10.325 TCP 23.104.0.1:55912 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:33:37.797 00:00:12.394 TCP 1.101.0.1:3000 -> 22.102.0.1:50316 10 6452 1 2026-01-13 19:29:32.760 00:05:54.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 19:34:16.968 00:00:10.341 TCP 23.104.0.1:53518 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:29:32.757 00:05:54.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 19:34:40.237 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57230 10 6452 1 2026-01-13 19:35:17.364 00:00:10.372 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:35:40.461 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35768 10 6452 1 2026-01-13 19:36:26.832 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:36:26.931 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:36:17.777 00:00:10.368 TCP 23.104.0.1:57404 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:36:40.634 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58706 10 6452 1 2026-01-13 19:37:18.188 00:00:10.364 TCP 23.104.0.1:46352 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:37:40.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55308 10 6452 1 2026-01-13 19:38:18.594 00:00:10.363 TCP 23.104.0.1:57790 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:38:41.032 00:00:14.931 TCP 1.101.0.1:3000 -> 22.102.0.1:42466 10 6452 1 2026-01-13 19:39:18.994 00:00:10.383 TCP 23.104.0.1:40998 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:39:46.004 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:49950 10 6452 1 2026-01-13 19:35:32.762 00:05:54.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 19:40:19.421 00:00:10.364 TCP 23.104.0.1:58516 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:35:32.759 00:05:54.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 19:40:46.202 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33166 10 6452 1 2026-01-13 19:41:26.958 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:41:26.956 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:41:19.818 00:00:10.366 TCP 23.104.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:41:46.412 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2026-01-13 19:42:20.227 00:00:10.366 TCP 23.104.0.1:40976 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:42:46.636 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43800 10 6452 1 2026-01-13 19:43:20.638 00:00:10.371 TCP 23.104.0.1:55144 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:43:46.815 00:00:22.744 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 10 6452 1 2026-01-13 19:44:21.052 00:00:18.446 TCP 23.104.0.1:54326 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:44:59.606 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59470 10 6452 1 2026-01-13 19:45:29.538 00:00:10.359 TCP 23.104.0.1:38692 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:45:59.827 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60924 10 6452 1 2026-01-13 19:46:26.957 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:41:32.762 00:05:54.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 19:46:26.991 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:41:32.759 00:05:54.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 19:46:29.940 00:00:10.374 TCP 23.104.0.1:40046 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:47:00.068 00:00:21.905 TCP 1.101.0.1:3000 -> 22.102.0.1:42296 10 6452 1 2026-01-13 19:47:30.355 00:00:10.369 TCP 23.104.0.1:58636 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:48:12.060 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54564 10 6452 1 2026-01-13 19:48:30.757 00:00:10.368 TCP 23.104.0.1:40880 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:49:12.282 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48682 10 6452 1 2026-01-13 19:49:31.163 00:00:10.328 TCP 23.104.0.1:33710 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:50:12.501 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59838 10 6452 1 2026-01-13 19:50:31.523 00:00:10.361 TCP 23.104.0.1:56328 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:51:12.733 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6452 1 2026-01-13 19:51:26.964 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:51:27.034 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:51:31.924 00:00:10.373 TCP 23.104.0.1:36180 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:52:12.951 00:00:18.236 TCP 1.101.0.1:3000 -> 22.102.0.1:42480 12 6556 1 2026-01-13 19:47:32.763 00:05:54.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 19:47:32.760 00:05:54.531 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 19:52:32.336 00:00:10.440 TCP 23.104.0.1:47472 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:53:21.241 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33712 10 6452 1 2026-01-13 19:53:32.817 00:00:10.327 TCP 23.104.0.1:36078 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:54:21.461 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49104 10 6452 1 2026-01-13 19:54:33.183 00:00:27.848 TCP 23.104.0.1:58874 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:55:21.685 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58604 10 6452 1 2026-01-13 19:55:51.121 00:00:10.318 TCP 23.104.0.1:43786 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:56:27.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-13 19:56:27.981 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-13 19:56:21.925 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39054 10 6452 1 2026-01-13 19:56:51.479 00:00:10.368 TCP 23.104.0.1:36882 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:57:22.146 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43810 10 6452 1 2026-01-13 19:57:51.887 00:00:13.099 TCP 23.104.0.1:52072 -> 1.101.0.1:3000 11 1507 1 2026-01-13 19:53:32.766 00:05:54.523 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-13 19:53:32.764 00:05:54.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-13 19:58:22.318 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44196 10 6452 1 Summary: total flows: 162, total bytes: 494939, total packets: 1561, avg bps: 1090, avg pps: 0, avg bpp: 317 Time window: 2026-01-13 18:58:57 - 2026-01-13 19:59:27 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0034s User: 0.0022s Wall: 0.0028s flows/second: 57122.9 Runtime: 0.0029s