Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-20 18:59:10.688 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52628 10 6452 1 2026-01-20 18:59:11.684 00:00:10.359 TCP 23.104.0.1:41076 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:00:07.563 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:00:07.428 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:00:10.904 00:00:10.853 TCP 1.101.0.1:3000 -> 22.102.0.1:33584 10 6452 1 2026-01-20 19:00:12.107 00:00:10.367 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:01:12.509 00:00:15.491 TCP 23.104.0.1:42532 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:01:11.798 00:00:16.074 TCP 1.101.0.1:3000 -> 22.102.0.1:40770 10 6452 1 2026-01-20 18:57:30.900 00:05:05.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-20 18:57:30.903 00:05:05.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-20 19:02:17.911 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34802 10 6452 1 2026-01-20 19:02:18.056 00:00:10.364 TCP 23.104.0.1:35738 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:03:18.462 00:00:10.366 TCP 23.104.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:03:18.124 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33124 10 6452 1 2026-01-20 19:04:18.868 00:00:10.439 TCP 23.104.0.1:38072 -> 1.101.0.1:3000 15 1926 1 2026-01-20 19:04:18.340 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:37208 12 10375 1 2026-01-20 19:05:07.327 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:05:07.381 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:05:19.349 00:00:10.363 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:05:18.593 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53104 10 6452 1 2026-01-20 19:06:18.816 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45184 10 6452 1 2026-01-20 19:06:19.752 00:00:10.324 TCP 23.104.0.1:54794 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:07:20.113 00:00:10.367 TCP 23.104.0.1:40056 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:03:30.907 00:05:05.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-20 19:07:19.065 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:47078 10 6452 1 2026-01-20 19:03:30.904 00:05:05.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-20 19:08:19.326 00:00:14.402 TCP 1.101.0.1:3000 -> 22.102.0.1:55874 10 6452 1 2026-01-20 19:08:20.518 00:00:13.297 TCP 23.104.0.1:55416 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:09:23.901 00:00:10.365 TCP 23.104.0.1:56580 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:09:23.791 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43794 10 6452 1 2026-01-20 19:10:07.586 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:10:07.359 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:10:24.020 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43118 10 6452 1 2026-01-20 19:10:24.307 00:00:10.362 TCP 23.104.0.1:55058 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:11:24.231 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34298 10 6452 1 2026-01-20 19:11:24.710 00:00:10.379 TCP 23.104.0.1:56322 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:12:25.125 00:00:10.364 TCP 23.104.0.1:54314 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:12:24.407 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34976 10 6452 1 2026-01-20 19:13:25.527 00:00:10.366 TCP 23.104.0.1:50608 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:13:24.628 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48580 10 6452 1 2026-01-20 19:09:30.919 00:05:05.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-20 19:09:30.921 00:05:05.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-20 19:14:25.927 00:00:10.538 TCP 23.104.0.1:40466 -> 1.101.0.1:3000 17 2241 1 2026-01-20 19:14:24.845 00:00:10.250 TCP 1.101.0.1:3000 -> 22.102.0.1:54958 14 14286 1 2026-01-20 19:15:07.479 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:15:07.505 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:15:26.500 00:00:10.328 TCP 23.104.0.1:49278 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:15:25.132 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52138 10 6452 1 2026-01-20 19:16:25.361 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51052 10 6452 1 2026-01-20 19:16:26.866 00:00:10.584 TCP 23.104.0.1:59714 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:17:25.537 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60656 10 6452 1 2026-01-20 19:17:27.489 00:00:10.320 TCP 23.104.0.1:36460 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:18:25.757 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:58908 10 6452 1 2026-01-20 19:18:27.850 00:00:10.388 TCP 23.104.0.1:59264 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:15:30.929 00:05:05.682 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-20 19:19:25.938 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2026-01-20 19:15:30.927 00:05:05.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-20 19:19:28.276 00:00:10.362 TCP 23.104.0.1:39076 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:20:07.637 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:20:07.557 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:20:26.184 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53020 10 6452 1 2026-01-20 19:20:28.676 00:00:10.372 TCP 23.104.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:21:26.401 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55202 10 6452 1 2026-01-20 19:21:29.123 00:00:10.432 TCP 23.104.0.1:34382 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:22:26.618 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:46456 10 6452 1 2026-01-20 19:22:29.596 00:00:10.327 TCP 23.104.0.1:43144 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:23:26.804 00:00:17.567 TCP 1.101.0.1:3000 -> 22.102.0.1:38362 10 6452 1 2026-01-20 19:23:29.960 00:00:14.492 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:24:34.422 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34164 10 6452 1 2026-01-20 19:24:34.515 00:00:10.361 TCP 23.104.0.1:49982 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:25:07.757 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:25:07.670 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:21:30.929 00:05:05.683 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-20 19:21:30.928 00:05:05.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-20 19:25:34.915 00:00:10.383 TCP 23.104.0.1:37798 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:25:34.650 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56662 10 6452 1 2026-01-20 19:26:34.863 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34812 10 6452 1 2026-01-20 19:26:35.334 00:00:10.319 TCP 23.104.0.1:44738 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:27:35.696 00:00:16.054 TCP 23.104.0.1:54500 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:27:35.110 00:00:16.550 TCP 1.101.0.1:3000 -> 22.102.0.1:50154 10 6452 1 2026-01-20 19:28:41.699 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 10 6452 1 2026-01-20 19:28:41.790 00:00:10.367 TCP 23.104.0.1:60028 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:29:42.199 00:00:10.362 TCP 23.104.0.1:35128 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:29:41.869 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33852 10 6452 1 2026-01-20 19:30:07.642 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:30:07.683 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:30:42.601 00:00:10.365 TCP 23.104.0.1:36876 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:30:42.105 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43732 10 6452 1 2026-01-20 19:27:30.933 00:05:05.681 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-20 19:27:30.931 00:05:05.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-20 19:31:43.007 00:00:10.320 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:31:42.320 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56436 10 6452 1 2026-01-20 19:32:43.368 00:00:10.372 TCP 23.104.0.1:36714 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:32:42.536 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43208 10 6452 1 2026-01-20 19:33:43.772 00:00:10.327 TCP 23.104.0.1:57230 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:33:42.748 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57782 10 6452 1 2026-01-20 19:34:44.136 00:00:10.617 TCP 23.104.0.1:45706 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:34:42.983 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59620 10 6452 1 2026-01-20 19:35:07.860 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:35:07.596 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:35:44.789 00:00:10.365 TCP 23.104.0.1:38720 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:35:43.223 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50650 10 6452 1 2026-01-20 19:36:45.187 00:00:10.371 TCP 23.104.0.1:40524 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:36:43.408 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51642 10 6452 1 2026-01-20 19:33:30.939 00:05:05.681 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-20 19:33:30.941 00:05:05.676 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-20 19:37:45.594 00:00:10.364 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 12 1559 1 2026-01-20 19:37:43.619 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35374 10 6452 1 2026-01-20 19:38:45.997 00:00:10.375 TCP 23.104.0.1:37884 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:38:43.835 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50254 10 6452 1 2026-01-20 19:39:46.417 00:00:10.367 TCP 23.104.0.1:58038 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:39:44.086 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41668 10 6452 1 2026-01-20 19:40:07.897 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:40:08.041 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:40:44.318 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:49006 10 6452 1 2026-01-20 19:40:46.824 00:00:10.366 TCP 23.104.0.1:60108 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:41:44.507 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57420 10 6452 1 2026-01-20 19:41:47.234 00:00:10.366 TCP 23.104.0.1:57564 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:42:44.721 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51484 10 6452 1 2026-01-20 19:42:47.637 00:00:10.367 TCP 23.104.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:39:30.942 00:05:05.682 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-20 19:39:30.939 00:05:05.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-20 19:43:44.941 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40854 10 6452 1 2026-01-20 19:43:48.045 00:00:10.364 TCP 23.104.0.1:37100 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:44:45.177 00:00:13.286 TCP 1.101.0.1:3000 -> 22.102.0.1:37866 10 6452 1 2026-01-20 19:44:48.460 00:00:10.394 TCP 23.104.0.1:59970 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:45:08.033 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:45:07.921 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:45:48.526 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40656 10 6452 1 2026-01-20 19:45:48.911 00:00:10.373 TCP 23.104.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:46:48.758 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59680 10 6452 1 2026-01-20 19:46:49.323 00:00:10.358 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:47:49.722 00:00:10.325 TCP 23.104.0.1:36332 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:47:48.980 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60000 10 6452 1 2026-01-20 19:48:49.204 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37556 10 6452 1 2026-01-20 19:48:50.105 00:00:10.362 TCP 23.104.0.1:49784 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:45:30.942 00:05:05.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-20 19:45:30.943 00:05:05.681 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-20 19:49:50.521 00:00:10.370 TCP 23.104.0.1:58594 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:49:49.425 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50052 10 6452 1 2026-01-20 19:50:08.381 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:50:08.169 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:50:50.927 00:00:22.077 TCP 23.104.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:50:49.640 00:00:23.267 TCP 1.101.0.1:3000 -> 22.102.0.1:36490 10 6452 1 2026-01-20 19:52:03.079 00:00:10.372 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:52:02.974 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44364 10 6452 1 2026-01-20 19:53:03.209 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49758 10 6452 1 2026-01-20 19:53:03.493 00:00:10.370 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:54:03.901 00:00:10.371 TCP 23.104.0.1:53144 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:54:03.381 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43070 10 6452 1 2026-01-20 19:55:08.396 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2026-01-20 19:55:08.376 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2026-01-20 19:55:03.605 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34682 10 6452 1 2026-01-20 19:55:04.309 00:00:10.363 TCP 23.104.0.1:51722 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:51:30.944 00:05:05.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2026-01-20 19:51:30.946 00:05:05.682 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2026-01-20 19:56:03.821 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40368 10 6452 1 2026-01-20 19:56:04.709 00:00:10.393 TCP 23.104.0.1:54594 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:57:05.138 00:00:10.371 TCP 23.104.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2026-01-20 19:57:04.054 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40612 10 6452 1 2026-01-20 19:58:04.276 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35974 10 6452 1 2026-01-20 19:58:05.544 00:00:10.368 TCP 23.104.0.1:57642 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503351, total packets: 1568, avg bps: 1104, avg pps: 0, avg bpp: 321 Time window: 2026-01-20 18:57:30 - 2026-01-20 19:58:15 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0029s User: 0.0039s Wall: 0.0021s flows/second: 75699.3 Runtime: 0.0022s