Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-02 08:59:13.986 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36550 10 6452 1 2026-01-02 08:56:25.845 00:05:02.952 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 08:56:25.846 00:05:02.947 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 09:00:14.409 00:00:19.459 TCP 1.101.0.1:3000 -> 23.104.0.1:49252 10 6452 1 2026-01-02 09:00:57.379 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:00:57.415 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:00:57.367 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:00:57.368 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:00:57.296 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:01:23.917 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47582 10 6452 1 2026-01-02 09:02:24.278 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33930 10 6452 1 2026-01-02 09:03:24.681 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38224 10 6452 1 2026-01-02 09:04:25.112 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41122 10 6452 1 2026-01-02 09:05:25.521 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49338 10 6452 1 2026-01-02 09:05:56.722 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:05:56.577 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:05:56.419 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:05:56.383 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:05:56.641 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:02:25.855 00:05:02.940 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 09:02:25.853 00:05:02.946 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 09:06:25.928 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:50768 12 10369 1 2026-01-02 09:07:26.370 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51404 10 6452 1 2026-01-02 09:08:26.775 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47128 10 6452 1 2026-01-02 09:09:27.186 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45886 10 6452 1 2026-01-02 09:10:27.589 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50418 10 6452 1 2026-01-02 09:10:56.735 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:10:56.519 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:10:56.654 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:10:56.566 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:10:56.652 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:11:27.993 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:36724 10 6452 1 2026-01-02 09:08:25.856 00:05:02.944 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 09:08:25.854 00:05:02.949 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 09:12:28.367 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37750 10 6452 1 2026-01-02 09:13:28.773 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45994 10 6452 1 2026-01-02 09:14:29.143 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:48798 10 6452 1 2026-01-02 09:15:29.528 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:50632 10 6452 1 2026-01-02 09:15:56.789 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:15:56.726 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:15:56.704 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:15:56.727 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:15:56.808 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:16:29.883 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52666 10 6452 1 2026-01-02 09:17:30.292 00:00:11.341 TCP 1.101.0.1:3000 -> 23.104.0.1:38428 10 6452 1 2026-01-02 09:14:25.854 00:05:02.952 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 09:14:25.858 00:05:02.946 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 09:18:31.677 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41350 10 6452 1 2026-01-02 09:19:32.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51464 10 6452 1 2026-01-02 09:20:32.512 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:49100 10 6452 1 2026-01-02 09:20:57.564 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:20:57.166 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:20:57.566 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:20:57.261 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:20:57.481 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:21:32.942 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:51868 10 6452 1 2026-01-02 09:22:33.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43552 10 6452 1 2026-01-02 09:23:33.763 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60378 10 6452 1 2026-01-02 09:20:25.858 00:05:02.948 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 09:20:25.862 00:05:02.942 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 09:24:34.177 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49290 10 6452 1 2026-01-02 09:25:34.539 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40946 10 6452 1 2026-01-02 09:25:56.978 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:25:56.896 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:25:56.806 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:25:56.923 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:25:56.895 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:26:34.911 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:50706 10 6452 1 2026-01-02 09:27:35.296 00:00:14.660 TCP 1.101.0.1:3000 -> 23.104.0.1:57692 10 6452 1 2026-01-02 09:28:40.033 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60374 10 6452 1 2026-01-02 09:29:40.436 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58346 10 6452 1 2026-01-02 09:26:25.859 00:05:02.948 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 09:26:25.862 00:05:02.943 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 09:30:56.962 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:30:40.808 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:33194 10 6452 1 2026-01-02 09:30:56.877 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:30:56.878 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:30:56.639 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:30:56.879 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:31:41.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58850 10 6452 1 2026-01-02 09:32:41.596 00:00:14.419 TCP 1.101.0.1:3000 -> 23.104.0.1:59366 10 6452 1 2026-01-02 09:33:46.071 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53802 10 6452 1 2026-01-02 09:34:46.437 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38496 10 6452 1 2026-01-02 09:35:57.749 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:35:57.666 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:35:46.839 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48522 10 6452 1 2026-01-02 09:35:57.667 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:35:57.668 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:35:57.144 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:32:25.861 00:05:02.948 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 09:32:25.863 00:05:02.943 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 09:36:47.255 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51736 10 6452 1 2026-01-02 09:37:47.619 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38628 10 6452 1 2026-01-02 09:38:48.028 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35626 10 6452 1 2026-01-02 09:39:48.435 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44502 10 6452 1 2026-01-02 09:40:57.273 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:40:57.133 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:40:57.136 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:40:57.071 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:40:48.835 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:56966 10 6452 1 2026-01-02 09:40:57.191 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:41:49.221 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33506 10 6452 1 2026-01-02 09:38:25.867 00:05:02.940 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 09:38:25.865 00:05:02.945 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 09:42:49.619 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37134 10 6452 1 2026-01-02 09:43:50.023 00:00:11.069 TCP 1.101.0.1:3000 -> 23.104.0.1:55048 10 6452 1 2026-01-02 09:44:51.133 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46900 10 6452 1 2026-01-02 09:45:57.356 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:45:57.165 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:45:57.020 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:45:57.274 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:45:57.252 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:45:51.538 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:56762 10 6452 1 2026-01-02 09:46:51.938 00:00:10.548 TCP 1.101.0.1:3000 -> 23.104.0.1:55188 10 6452 1 2026-01-02 09:47:52.530 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50242 10 6452 1 2026-01-02 09:44:25.867 00:05:02.944 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 09:44:25.869 00:05:02.939 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 09:48:52.941 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:46816 10 6452 1 2026-01-02 09:49:53.394 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36824 10 6452 1 2026-01-02 09:50:57.751 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:50:57.675 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:50:57.747 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:50:57.687 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:50:57.668 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:50:53.758 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:54082 10 6452 1 2026-01-02 09:51:54.137 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44662 10 6452 1 2026-01-02 09:52:54.542 00:00:11.160 TCP 1.101.0.1:3000 -> 23.104.0.1:53896 10 6452 1 2026-01-02 09:53:55.745 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38152 10 6452 1 2026-01-02 09:50:25.873 00:05:02.936 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 09:50:25.870 00:05:02.942 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 09:54:56.154 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51168 10 6452 1 2026-01-02 09:55:57.410 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 09:55:57.454 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 09:55:57.368 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:55:57.329 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 09:55:57.116 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 09:55:56.517 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42542 10 6452 1 2026-01-02 09:56:56.914 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36546 10 6452 1 2026-01-02 09:57:57.315 00:00:18.566 TCP 1.101.0.1:3000 -> 23.104.0.1:38422 10 6452 1 Summary: total flows: 139, total bytes: 414465, total packets: 1012, avg bps: 893, avg pps: 0, avg bpp: 409 Time window: 2026-01-02 08:56:25 - 2026-01-02 09:58:15 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0054s User: 0.0009s Wall: 0.0019s flows/second: 74486.8 Runtime: 0.0019s