Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-02 19:59:32.987 00:00:10.572 TCP 1.101.0.1:3000 -> 23.104.0.1:37870 10 6452 1 2026-01-02 19:56:26.107 00:05:02.970 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 19:56:26.109 00:05:02.965 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 20:00:33.591 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36764 10 6452 1 2026-01-02 20:01:09.727 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:01:09.681 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:01:09.565 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:01:09.645 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:01:09.645 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:01:33.999 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55064 10 6452 1 2026-01-02 20:02:34.408 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:45072 10 6452 1 2026-01-02 20:03:34.800 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53094 10 6452 1 2026-01-02 20:04:35.208 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44136 10 6452 1 2026-01-02 20:05:35.573 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53588 10 6452 1 2026-01-02 20:06:10.233 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:06:09.827 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:06:10.156 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:06:10.261 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:06:10.151 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:02:26.110 00:05:02.969 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 20:02:26.113 00:05:02.964 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 20:06:35.989 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35896 10 6452 1 2026-01-02 20:07:36.400 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39262 10 6452 1 2026-01-02 20:08:36.801 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42114 10 6452 1 2026-01-02 20:09:37.212 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48058 10 6452 1 2026-01-02 20:10:37.611 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38912 10 6452 1 2026-01-02 20:11:09.851 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:11:09.860 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:11:09.724 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:11:10.070 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:11:09.987 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:11:38.020 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59582 10 6452 1 2026-01-02 20:08:26.112 00:05:02.969 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 20:08:26.115 00:05:02.964 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 20:12:38.421 00:00:11.194 TCP 1.101.0.1:3000 -> 23.104.0.1:48762 10 6452 1 2026-01-02 20:13:39.656 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54224 10 6452 1 2026-01-02 20:14:40.073 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48796 10 6452 1 2026-01-02 20:15:40.477 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60074 10 6452 1 2026-01-02 20:16:09.846 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:16:09.950 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:16:09.690 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:16:09.952 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:16:10.035 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:16:40.838 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:60982 12 10369 1 2026-01-02 20:17:41.297 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55320 10 6452 1 2026-01-02 20:14:26.114 00:05:02.969 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 20:14:26.116 00:05:02.964 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 20:18:41.664 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41326 10 6452 1 2026-01-02 20:19:42.115 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37452 10 6452 1 2026-01-02 20:20:42.516 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50764 10 6452 1 2026-01-02 20:21:09.844 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:21:09.759 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:21:09.761 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:21:10.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:21:10.052 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:21:42.920 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:47258 10 6452 1 2026-01-02 20:22:43.296 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56794 10 6452 1 2026-01-02 20:23:43.697 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45386 10 6452 1 2026-01-02 20:20:26.119 00:05:02.966 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 20:20:26.121 00:05:02.962 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 20:24:44.114 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39842 10 6452 1 2026-01-02 20:25:44.479 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48650 10 6452 1 2026-01-02 20:26:10.364 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:26:10.449 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:26:10.446 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:26:10.282 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:26:10.446 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:26:44.882 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45898 10 6452 1 2026-01-02 20:27:45.289 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42522 10 6452 1 2026-01-02 20:28:45.696 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54768 10 6452 1 2026-01-02 20:29:46.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37516 10 6452 1 2026-01-02 20:26:26.123 00:05:02.960 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 20:26:26.120 00:05:02.965 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 20:30:46.507 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38238 10 6452 1 2026-01-02 20:31:09.930 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:31:09.940 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:31:10.024 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:31:10.279 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:31:10.295 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:31:46.909 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38548 10 6452 1 2026-01-02 20:32:47.324 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36744 10 6452 1 2026-01-02 20:33:47.726 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46776 10 6452 1 2026-01-02 20:34:48.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40840 10 6452 1 2026-01-02 20:35:48.540 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52428 10 6452 1 2026-01-02 20:36:10.459 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:36:10.262 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:36:10.084 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:36:10.220 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:36:10.377 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:32:26.125 00:05:02.960 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 20:32:26.122 00:05:02.965 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 20:36:48.949 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:40156 10 6452 1 2026-01-02 20:37:49.378 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54196 10 6452 1 2026-01-02 20:38:49.779 00:00:10.467 TCP 1.101.0.1:3000 -> 23.104.0.1:37452 10 6452 1 2026-01-02 20:39:50.298 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60570 10 6452 1 2026-01-02 20:40:50.699 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42378 10 6452 1 2026-01-02 20:41:10.440 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:41:10.401 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:41:10.363 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:41:10.115 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:41:10.357 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:41:51.115 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46714 10 6452 1 2026-01-02 20:38:26.123 00:05:02.965 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 20:38:26.126 00:05:02.960 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 20:42:51.516 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48870 10 6452 1 2026-01-02 20:43:51.921 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35966 10 6452 1 2026-01-02 20:44:52.323 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33380 10 6452 1 2026-01-02 20:45:52.731 00:00:10.874 TCP 1.101.0.1:3000 -> 23.104.0.1:33950 10 6452 1 2026-01-02 20:46:10.426 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:46:10.564 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:46:10.450 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:46:10.603 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:46:10.686 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:46:53.645 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59096 10 6452 1 2026-01-02 20:47:54.070 00:00:24.176 TCP 1.101.0.1:3000 -> 23.104.0.1:38638 10 6452 1 2026-01-02 20:44:26.125 00:05:02.963 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 20:44:26.123 00:05:02.968 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 20:49:08.285 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33982 10 6452 1 2026-01-02 20:50:08.692 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59524 10 6452 1 2026-01-02 20:51:10.640 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:51:10.549 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:51:10.552 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:51:10.326 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:51:10.557 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:51:09.106 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48712 10 6452 1 2026-01-02 20:52:09.522 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43222 10 6452 1 2026-01-02 20:53:09.933 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:38742 10 6452 1 2026-01-02 20:50:26.125 00:05:02.967 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-02 20:54:10.364 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43726 10 6452 1 2026-01-02 20:50:26.129 00:05:02.961 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-02 20:55:10.725 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48986 10 6452 1 2026-01-02 20:56:10.701 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-02 20:56:10.753 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-02 20:56:10.697 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-02 20:56:10.651 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:56:10.618 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-02 20:56:11.135 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46638 10 6452 1 2026-01-02 20:57:11.537 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36228 10 6452 1 2026-01-02 20:58:11.952 00:00:17.145 TCP 1.101.0.1:3000 -> 23.104.0.1:46658 10 6452 1 Summary: total flows: 139, total bytes: 414465, total packets: 1012, avg bps: 890, avg pps: 0, avg bpp: 409 Time window: 2026-01-02 19:56:26 - 2026-01-02 20:58:29 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0017s Wall: 0.0019s flows/second: 72513.5 Runtime: 0.0019s