Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-04 18:59:11.740 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45384 10 6452 1 2026-01-04 19:00:12.113 00:00:12.708 TCP 1.101.0.1:3000 -> 23.104.0.1:34458 10 6452 1 2026-01-04 18:55:30.154 00:05:56.930 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-04 18:55:30.151 00:05:56.935 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-04 19:01:14.863 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57054 10 6452 1 2026-01-04 19:02:06.049 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:02:06.274 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:02:06.097 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:02:05.932 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:02:06.016 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:02:15.281 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49070 10 6452 1 2026-01-04 19:03:15.636 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:43004 12 10375 1 2026-01-04 19:04:16.118 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38890 10 6452 1 2026-01-04 19:05:16.530 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37212 10 6452 1 2026-01-04 19:01:30.155 00:05:56.932 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-04 19:01:30.152 00:05:56.937 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-04 19:06:16.933 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60484 10 6452 1 2026-01-04 19:07:06.375 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:07:06.484 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:07:06.484 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:07:06.564 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:07:06.293 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:07:17.354 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54048 10 6452 1 2026-01-04 19:08:17.754 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:45570 12 10369 1 2026-01-04 19:09:18.231 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52556 10 6452 1 2026-01-04 19:10:18.642 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41658 10 6452 1 2026-01-04 19:11:19.009 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54262 10 6452 1 2026-01-04 19:12:06.627 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:12:06.544 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:12:06.506 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:12:06.506 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:12:06.378 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:07:30.158 00:05:56.930 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-04 19:07:30.155 00:05:56.936 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-04 19:12:19.415 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48618 10 6452 1 2026-01-04 19:13:19.828 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33198 10 6452 1 2026-01-04 19:14:20.232 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46884 10 6452 1 2026-01-04 19:15:20.636 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58180 10 6452 1 2026-01-04 19:16:21.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58782 10 6452 1 2026-01-04 19:17:06.458 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:17:06.515 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:17:06.457 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:17:06.260 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:17:06.540 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:17:21.445 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49722 10 6452 1 2026-01-04 19:13:30.160 00:05:56.933 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-04 19:13:30.163 00:05:56.928 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-04 19:18:21.805 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:41306 10 6452 1 2026-01-04 19:19:22.179 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34424 10 6452 1 2026-01-04 19:20:22.586 00:00:10.782 TCP 1.101.0.1:3000 -> 23.104.0.1:43366 10 6452 1 2026-01-04 19:21:23.417 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:50490 10 6452 1 2026-01-04 19:22:06.586 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:22:06.502 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:22:06.508 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:22:06.518 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:22:06.503 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:22:23.793 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38750 10 6452 1 2026-01-04 19:23:24.211 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:39370 12 10375 1 2026-01-04 19:19:30.159 00:05:56.934 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-04 19:19:30.162 00:05:56.929 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-04 19:24:24.687 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59050 10 6452 1 2026-01-04 19:25:25.113 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42912 10 6452 1 2026-01-04 19:26:25.509 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38614 10 6452 1 2026-01-04 19:27:07.120 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:27:06.971 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:27:06.796 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:27:07.119 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:27:07.202 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:27:25.929 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:45104 10 6452 1 2026-01-04 19:28:26.359 00:00:10.752 TCP 1.101.0.1:3000 -> 23.104.0.1:48428 10 6452 1 2026-01-04 19:29:27.148 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37858 10 6452 1 2026-01-04 19:25:30.160 00:05:56.935 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-04 19:25:30.163 00:05:56.930 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-04 19:30:27.556 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51212 10 6452 1 2026-01-04 19:31:27.914 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33516 10 6452 1 2026-01-04 19:32:06.984 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:32:06.904 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:32:06.849 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:32:06.817 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:32:06.900 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:32:28.323 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39406 10 6452 1 2026-01-04 19:33:28.723 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37860 10 6452 1 2026-01-04 19:34:29.141 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:38888 10 6452 1 2026-01-04 19:35:29.533 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:49404 10 6452 1 2026-01-04 19:31:30.166 00:05:56.930 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-04 19:31:30.168 00:05:56.924 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-04 19:36:29.929 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:39320 10 6452 1 2026-01-04 19:37:07.087 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:37:06.996 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:37:07.008 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:37:06.993 00:00:00.050 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:37:07.075 00:00:00.050 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:37:30.363 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40778 10 6452 1 2026-01-04 19:38:30.769 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60852 10 6452 1 2026-01-04 19:39:31.179 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38774 10 6452 1 2026-01-04 19:40:31.593 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:49242 10 6452 1 2026-01-04 19:41:31.970 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41908 10 6452 1 2026-01-04 19:42:07.086 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:42:07.071 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:42:07.004 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:42:06.735 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:42:07.004 00:00:00.045 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:37:30.168 00:05:56.928 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-04 19:37:30.170 00:05:56.923 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-04 19:42:32.381 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33526 10 6452 1 2026-01-04 19:43:32.785 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45728 10 6452 1 2026-01-04 19:44:33.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33286 10 6452 1 2026-01-04 19:45:33.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45538 10 6452 1 2026-01-04 19:46:34.000 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37106 10 6452 1 2026-01-04 19:47:07.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:47:07.203 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:47:07.137 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:47:07.263 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:47:07.347 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:47:34.393 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33920 10 6452 1 2026-01-04 19:43:30.171 00:05:56.925 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-04 19:43:30.173 00:05:56.921 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-04 19:48:34.759 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:41294 10 6452 1 2026-01-04 19:49:35.186 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34744 10 6452 1 2026-01-04 19:50:35.592 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53278 10 6452 1 2026-01-04 19:51:35.974 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37514 12 6556 1 2026-01-04 19:52:07.615 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:52:07.519 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:52:07.535 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:52:07.616 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:52:07.533 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:52:36.383 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49358 10 6452 1 2026-01-04 19:53:36.784 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:56806 12 10375 1 2026-01-04 19:49:30.175 00:05:56.920 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-04 19:49:30.172 00:05:56.925 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-04 19:54:37.263 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34640 10 6452 1 2026-01-04 19:55:37.665 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33854 10 6452 1 2026-01-04 19:56:38.093 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49992 10 6452 1 2026-01-04 19:57:07.263 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-04 19:57:07.275 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-04 19:57:07.185 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-04 19:57:07.218 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:57:07.179 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-04 19:57:38.458 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56348 10 6452 1 2026-01-04 19:58:38.859 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:41980 10 6452 1 Summary: total flows: 140, total bytes: 432790, total packets: 1030, avg bps: 911, avg pps: 0, avg bpp: 420 Time window: 2026-01-04 18:55:30 - 2026-01-04 19:58:49 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0034s User: 0.0017s Wall: 0.0016s flows/second: 86467.8 Runtime: 0.0016s