Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-03 01:59:03.686 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49832 10 6452 1 2026-01-03 02:00:04.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 10 6452 1 2026-01-03 01:56:26.211 00:05:02.970 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 01:56:26.214 00:05:02.966 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 02:01:04.521 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54794 10 6452 1 2026-01-03 02:01:17.017 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:01:16.933 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:01:16.831 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:01:16.754 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:01:16.662 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:02:04.885 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:53692 10 6452 1 2026-01-03 02:03:05.320 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45168 10 6452 1 2026-01-03 02:04:05.729 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52658 10 6452 1 2026-01-03 02:05:06.140 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47990 10 6452 1 2026-01-03 02:06:17.130 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:06:16.767 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:06:16.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:06:06.548 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:55126 10 6452 1 2026-01-03 02:06:16.966 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:06:17.049 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:02:26.212 00:05:02.971 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 02:02:26.215 00:05:02.966 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 02:07:06.926 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:60732 10 6452 1 2026-01-03 02:08:07.355 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49942 10 6452 1 2026-01-03 02:09:07.764 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:48964 10 6452 1 2026-01-03 02:10:08.146 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58430 10 6452 1 2026-01-03 02:11:17.155 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:11:16.980 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:11:08.554 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60690 10 6452 1 2026-01-03 02:11:17.130 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:11:16.985 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:11:17.070 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:12:08.961 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:39550 12 10375 1 2026-01-03 02:08:26.212 00:05:02.972 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 02:08:26.215 00:05:02.967 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 02:13:09.404 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56262 10 6452 1 2026-01-03 02:14:09.815 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56492 10 6452 1 2026-01-03 02:15:10.222 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56018 10 6452 1 2026-01-03 02:16:17.114 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:16:16.909 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:16:17.012 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:16:17.175 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:16:17.257 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:16:10.624 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40396 10 6452 1 2026-01-03 02:17:11.036 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48780 10 6452 1 2026-01-03 02:18:11.403 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58218 10 6452 1 2026-01-03 02:14:26.216 00:05:02.971 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 02:14:26.214 00:05:02.975 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 02:19:11.809 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:54020 10 6452 1 2026-01-03 02:20:12.188 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52886 10 6452 1 2026-01-03 02:21:17.122 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:21:16.955 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:21:17.223 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:21:16.956 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:21:17.039 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:21:12.590 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58646 10 6452 1 2026-01-03 02:22:12.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49570 10 6452 1 2026-01-03 02:23:13.405 00:00:19.029 TCP 1.101.0.1:3000 -> 23.104.0.1:46292 10 6452 1 2026-01-03 02:20:26.217 00:05:02.972 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 02:20:26.214 00:05:02.977 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 02:24:22.503 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:58592 10 6452 1 2026-01-03 02:25:22.900 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33042 10 6452 1 2026-01-03 02:26:17.361 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:26:17.354 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:26:17.312 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:26:17.356 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:26:17.440 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:26:23.270 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57470 10 6452 1 2026-01-03 02:27:23.682 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35664 10 6452 1 2026-01-03 02:28:24.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45352 10 6452 1 2026-01-03 02:29:24.516 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59008 10 6452 1 2026-01-03 02:26:26.216 00:05:02.976 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 02:26:26.219 00:05:02.971 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 02:30:24.880 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45844 10 6452 1 2026-01-03 02:31:17.590 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:31:17.594 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:31:17.601 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:31:17.520 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:31:17.602 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:31:25.283 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44780 10 6452 1 2026-01-03 02:32:25.701 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57540 10 6452 1 2026-01-03 02:33:26.097 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58016 10 6452 1 2026-01-03 02:34:26.498 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48140 10 6452 1 2026-01-03 02:35:26.896 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:36866 10 6452 1 2026-01-03 02:36:17.502 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:36:17.504 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:36:17.337 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:36:17.408 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:36:17.490 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:32:26.217 00:05:02.976 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 02:32:26.220 00:05:02.971 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 02:36:27.274 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56456 10 6452 1 2026-01-03 02:37:27.637 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:44284 11 6504 1 2026-01-03 02:38:28.125 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47580 10 6452 1 2026-01-03 02:39:28.542 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:42740 10 6452 1 2026-01-03 02:40:28.967 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42822 10 6452 1 2026-01-03 02:41:17.575 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:41:17.506 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:41:17.424 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:41:17.423 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:41:17.506 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:41:29.367 00:00:11.233 TCP 1.101.0.1:3000 -> 23.104.0.1:60370 14 10473 1 2026-01-03 02:38:26.220 00:05:02.975 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 02:38:26.222 00:05:02.970 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 02:42:30.637 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37134 10 6452 1 2026-01-03 02:43:31.064 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39760 10 6452 1 2026-01-03 02:44:31.471 00:00:10.525 TCP 1.101.0.1:3000 -> 23.104.0.1:60562 10 6452 1 2026-01-03 02:45:32.036 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43622 10 6452 1 2026-01-03 02:46:17.881 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:46:17.800 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:46:17.863 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:46:17.798 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:46:17.793 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:46:32.444 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41642 10 6452 1 2026-01-03 02:47:32.850 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 10 6452 1 2026-01-03 02:44:26.219 00:05:02.976 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 02:44:26.222 00:05:02.972 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 02:48:33.276 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40756 10 6452 1 2026-01-03 02:49:33.638 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40962 10 6452 1 2026-01-03 02:50:34.036 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51188 10 6452 1 2026-01-03 02:51:18.028 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:51:17.634 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:51:17.811 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:51:17.821 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:51:17.944 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:51:34.451 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47562 10 6452 1 2026-01-03 02:52:34.813 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56518 10 6452 1 2026-01-03 02:53:35.212 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36586 10 6452 1 2026-01-03 02:50:26.229 00:05:02.965 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 02:50:26.228 00:05:02.970 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 02:54:35.631 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44210 10 6452 1 2026-01-03 02:55:36.030 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38496 10 6452 1 2026-01-03 02:56:17.957 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 02:56:17.872 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 02:56:17.873 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 02:56:17.809 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:56:17.874 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 02:56:36.437 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35762 10 6452 1 2026-01-03 02:57:36.838 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:48568 10 6452 1 2026-01-03 02:58:37.221 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44266 10 6452 1 Summary: total flows: 140, total bytes: 424996, total packets: 1027, avg bps: 908, avg pps: 0, avg bpp: 413 Time window: 2026-01-03 01:56:26 - 2026-01-03 02:58:47 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0046s User: 0.0000s Wall: 0.0015s flows/second: 94863.1 Runtime: 0.0015s