Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-05 00:59:24.178 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39488 10 6452 1 2026-01-05 00:55:30.296 00:05:56.890 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-05 00:55:30.298 00:05:56.886 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-05 01:00:24.591 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43250 10 6452 1 2026-01-05 01:01:24.954 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56114 10 6452 1 2026-01-05 01:02:13.250 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:02:13.248 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:02:13.272 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:02:13.457 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:02:13.539 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:02:25.372 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57698 10 6452 1 2026-01-05 01:03:25.780 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34344 10 6452 1 2026-01-05 01:04:26.189 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46060 10 6452 1 2026-01-05 01:05:26.553 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59874 10 6452 1 2026-01-05 01:01:30.301 00:05:56.885 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-05 01:01:30.298 00:05:56.890 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-05 01:06:26.955 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51774 10 6452 1 2026-01-05 01:07:14.137 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:07:13.525 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:07:14.076 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:07:13.717 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:07:14.054 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:07:27.362 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55346 10 6452 1 2026-01-05 01:08:27.731 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39560 10 6452 1 2026-01-05 01:09:28.138 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36202 10 6452 1 2026-01-05 01:10:28.498 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45944 10 6452 1 2026-01-05 01:11:28.864 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:45852 10 6452 1 2026-01-05 01:12:13.793 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:12:13.653 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:12:13.602 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:12:13.265 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:12:13.711 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:07:30.304 00:05:56.883 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-05 01:07:30.301 00:05:56.888 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-05 01:12:29.282 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44340 10 6452 1 2026-01-05 01:13:29.686 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59898 10 6452 1 2026-01-05 01:14:30.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39860 10 6452 1 2026-01-05 01:15:30.522 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:46316 10 6452 1 2026-01-05 01:16:31.014 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2026-01-05 01:17:13.723 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:17:13.645 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:17:13.761 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:17:13.770 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:17:13.852 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:17:31.373 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47784 10 6452 1 2026-01-05 01:13:30.305 00:05:56.883 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-05 01:13:30.304 00:05:56.888 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-05 01:18:31.778 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:33216 12 10375 1 2026-01-05 01:19:32.255 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50770 10 6452 1 2026-01-05 01:20:32.662 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50244 10 6452 1 2026-01-05 01:21:33.031 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46730 10 6452 1 2026-01-05 01:22:14.053 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:22:13.977 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:22:13.943 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:22:13.849 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:22:13.971 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:22:33.445 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41616 10 6452 1 2026-01-05 01:23:33.813 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33774 10 6452 1 2026-01-05 01:19:30.310 00:05:56.880 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-05 01:19:30.307 00:05:56.886 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-05 01:24:34.221 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46102 10 6452 1 2026-01-05 01:25:34.588 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34940 10 6452 1 2026-01-05 01:26:34.949 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35986 10 6452 1 2026-01-05 01:27:14.091 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:27:14.172 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:27:13.778 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:27:14.099 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:27:14.182 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:27:35.355 00:00:10.661 TCP 1.101.0.1:3000 -> 23.104.0.1:34570 10 6452 1 2026-01-05 01:28:36.062 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35898 10 6452 1 2026-01-05 01:29:36.465 00:00:10.914 TCP 1.101.0.1:3000 -> 23.104.0.1:42254 10 6452 1 2026-01-05 01:25:30.317 00:05:56.876 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-05 01:25:30.314 00:05:56.881 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-05 01:30:37.421 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36366 10 6452 1 2026-01-05 01:31:37.824 00:00:14.761 TCP 1.101.0.1:3000 -> 23.104.0.1:58154 10 6452 1 2026-01-05 01:32:14.745 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:32:15.510 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:32:15.462 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:32:15.463 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:32:15.543 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:32:42.660 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46162 10 6452 1 2026-01-05 01:33:43.101 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34160 10 6452 1 2026-01-05 01:34:43.508 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45148 10 6452 1 2026-01-05 01:35:43.872 00:00:11.868 TCP 1.101.0.1:3000 -> 23.104.0.1:51438 10 6452 1 2026-01-05 01:31:30.315 00:05:56.880 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-05 01:31:30.318 00:05:56.875 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-05 01:36:45.779 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47922 10 6452 1 2026-01-05 01:37:14.151 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:37:13.953 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:37:13.989 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:37:13.843 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:37:13.926 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:37:46.182 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:43694 10 6452 1 2026-01-05 01:38:46.591 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34892 10 6452 1 2026-01-05 01:39:46.996 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42788 10 6452 1 2026-01-05 01:40:47.401 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47736 10 6452 1 2026-01-05 01:41:47.804 00:00:10.594 TCP 1.101.0.1:3000 -> 23.104.0.1:59622 10 6452 1 2026-01-05 01:42:14.354 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:42:14.198 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:42:13.817 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:42:14.127 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:42:14.209 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:37:30.326 00:05:56.867 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-05 01:37:30.324 00:05:56.872 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-05 01:42:48.466 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46826 10 6452 1 2026-01-05 01:43:48.865 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:57172 12 10375 1 2026-01-05 01:44:49.351 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35156 10 6452 1 2026-01-05 01:45:49.760 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:48278 10 6452 1 2026-01-05 01:46:50.135 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49936 10 6452 1 2026-01-05 01:47:15.684 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:47:15.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:47:15.636 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:47:15.572 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:47:15.655 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:47:50.538 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54030 10 6452 1 2026-01-05 01:43:30.326 00:05:56.874 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-05 01:43:30.328 00:05:56.869 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-05 01:48:50.946 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:36296 12 10375 1 2026-01-05 01:49:51.445 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45224 10 6452 1 2026-01-05 01:50:51.849 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34674 10 6452 1 2026-01-05 01:51:52.269 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41980 10 6452 1 2026-01-05 01:52:14.333 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:52:14.416 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:52:14.267 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:52:14.436 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:52:14.249 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:52:52.675 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60290 10 6452 1 2026-01-05 01:53:53.036 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45098 10 6452 1 2026-01-05 01:49:30.327 00:05:56.876 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-05 01:49:30.331 00:05:56.872 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-05 01:54:53.404 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38528 10 6452 1 2026-01-05 01:55:53.827 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:46436 10 6452 1 2026-01-05 01:56:54.256 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40790 10 6452 1 2026-01-05 01:57:14.453 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-05 01:57:14.380 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-05 01:57:14.423 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:57:14.454 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-05 01:57:14.538 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-05 01:57:54.661 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55060 10 6452 1 Summary: total flows: 139, total bytes: 422317, total packets: 1016, avg bps: 899, avg pps: 0, avg bpp: 415 Time window: 2026-01-05 00:55:30 - 2026-01-05 01:58:05 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0056s User: 0.0009s Wall: 0.0025s flows/second: 55667.7 Runtime: 0.0025s