Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-03 17:59:30.444 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38896 10 6452 1 2026-01-03 17:56:26.543 00:05:02.985 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 17:56:26.546 00:05:02.980 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 18:00:30.845 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:50432 10 6452 1 2026-01-03 18:01:35.998 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:01:36.165 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:01:36.103 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:01:36.167 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:01:36.251 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:01:31.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34852 10 6452 1 2026-01-03 18:02:31.681 00:00:10.964 TCP 1.101.0.1:3000 -> 23.104.0.1:40946 11 6504 1 2026-01-03 18:03:32.683 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36396 10 6452 1 2026-01-03 18:04:33.108 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:45864 10 6452 1 2026-01-03 18:05:33.484 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50980 10 6452 1 2026-01-03 18:02:26.549 00:05:02.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 18:02:26.547 00:05:02.983 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 18:06:36.629 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:06:36.519 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:06:36.414 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:06:36.328 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:06:36.546 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:06:33.883 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:47926 12 6556 1 2026-01-03 18:07:34.311 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50836 10 6452 1 2026-01-03 18:08:34.719 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46404 10 6452 1 2026-01-03 18:09:35.135 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40434 10 6452 1 2026-01-03 18:10:35.549 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33386 10 6452 1 2026-01-03 18:11:36.691 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:11:36.547 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:11:36.545 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:11:36.574 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:11:36.609 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:11:35.954 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52910 10 6452 1 2026-01-03 18:08:26.548 00:05:02.984 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 18:08:26.551 00:05:02.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 18:12:36.375 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37562 10 6452 1 2026-01-03 18:13:36.792 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48246 10 6452 1 2026-01-03 18:14:37.157 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52672 10 6452 1 2026-01-03 18:15:37.553 00:00:10.771 TCP 1.101.0.1:3000 -> 23.104.0.1:60802 10 6452 1 2026-01-03 18:16:36.390 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:16:36.306 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:16:36.416 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:16:36.348 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:16:36.306 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:16:38.360 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:50936 12 10375 1 2026-01-03 18:17:38.837 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:43950 10 6452 1 2026-01-03 18:14:26.550 00:05:02.983 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 18:14:26.553 00:05:02.977 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 18:18:39.220 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44450 10 6452 1 2026-01-03 18:19:39.581 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50012 10 6452 1 2026-01-03 18:20:39.983 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36046 10 6452 1 2026-01-03 18:21:36.856 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:21:36.397 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:21:36.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:21:36.350 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:21:36.773 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:21:40.394 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50004 12 6556 1 2026-01-03 18:22:40.799 00:00:10.678 TCP 1.101.0.1:3000 -> 23.104.0.1:39776 10 6452 1 2026-01-03 18:23:41.531 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58146 10 6452 1 2026-01-03 18:20:26.552 00:05:02.982 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 18:20:26.555 00:05:02.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 18:24:41.937 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:39068 10 6452 1 2026-01-03 18:25:42.335 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57232 10 6452 1 2026-01-03 18:26:36.858 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:26:36.717 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:26:36.439 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:26:36.360 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:26:36.777 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:26:42.745 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48058 10 6452 1 2026-01-03 18:27:43.154 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35056 10 6452 1 2026-01-03 18:28:43.515 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33776 10 6452 1 2026-01-03 18:29:43.912 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46588 10 6452 1 2026-01-03 18:26:26.558 00:05:02.976 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 18:26:26.556 00:05:02.981 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 18:30:44.315 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56736 10 6452 1 2026-01-03 18:31:36.601 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:31:36.775 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:31:36.851 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:31:36.643 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:31:36.505 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:31:44.717 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50808 10 6452 1 2026-01-03 18:32:45.134 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45016 10 6452 1 2026-01-03 18:33:45.533 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51638 10 6452 1 2026-01-03 18:34:45.940 00:00:24.821 TCP 1.101.0.1:3000 -> 23.104.0.1:35562 10 6452 1 2026-01-03 18:36:00.807 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41866 10 6452 1 2026-01-03 18:32:26.559 00:05:02.979 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 18:32:26.557 00:05:02.984 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 18:36:36.902 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:36:36.942 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:36:36.889 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:36:36.829 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:36:36.820 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:37:01.219 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45686 10 6452 1 2026-01-03 18:38:01.620 00:00:16.951 TCP 1.101.0.1:3000 -> 23.104.0.1:37934 10 6452 1 2026-01-03 18:39:08.608 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54928 10 6452 1 2026-01-03 18:40:09.014 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38264 10 6452 1 2026-01-03 18:41:09.439 00:00:14.117 TCP 1.101.0.1:3000 -> 23.104.0.1:36822 10 6452 1 2026-01-03 18:41:36.812 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:41:36.953 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:41:36.834 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:41:36.759 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:41:36.729 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:42:13.601 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42608 10 6452 1 2026-01-03 18:38:26.557 00:05:02.984 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 18:38:26.559 00:05:02.979 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 18:43:14.007 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45226 10 6452 1 2026-01-03 18:44:14.408 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42928 10 6452 1 2026-01-03 18:45:14.812 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48600 10 6452 1 2026-01-03 18:46:15.208 00:00:18.103 TCP 1.101.0.1:3000 -> 23.104.0.1:58558 10 6452 1 2026-01-03 18:46:37.231 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:46:37.076 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:46:36.985 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:46:36.960 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:46:37.043 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:47:23.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56674 10 6452 1 2026-01-03 18:44:26.562 00:05:02.980 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 18:48:23.758 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:42346 10 6452 1 2026-01-03 18:44:26.559 00:05:02.986 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 18:49:24.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45688 10 6452 1 2026-01-03 18:50:24.521 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60766 10 6452 1 2026-01-03 18:51:37.209 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:51:36.993 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:51:37.123 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:51:37.010 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:51:37.128 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:51:24.926 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53026 10 6452 1 2026-01-03 18:52:25.345 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50224 10 6452 1 2026-01-03 18:53:25.753 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40222 10 6452 1 2026-01-03 18:50:26.561 00:05:02.981 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-03 18:50:26.559 00:05:02.987 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-03 18:54:26.154 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:34180 10 6452 1 2026-01-03 18:55:26.550 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42588 10 6452 1 2026-01-03 18:56:37.264 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-03 18:56:37.265 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-03 18:56:36.869 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:56:37.117 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-03 18:56:37.200 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-03 18:56:26.959 00:00:21.478 TCP 1.101.0.1:3000 -> 23.104.0.1:60168 10 6452 1 2026-01-03 18:57:38.499 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34604 10 6452 1 2026-01-03 18:58:38.906 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54178 12 6556 1 Summary: total flows: 139, total bytes: 414835, total packets: 1019, avg bps: 886, avg pps: 0, avg bpp: 407 Time window: 2026-01-03 17:56:26 - 2026-01-03 18:58:49 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0049s User: 0.0020s Wall: 0.0029s flows/second: 48515.3 Runtime: 0.0029s