Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-07 08:59:00.856 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58338 10 6452 1 2026-01-07 09:00:01.278 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57518 10 6452 1 2026-01-07 08:55:31.543 00:05:57.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 08:55:31.546 00:05:57.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 09:01:01.685 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:59626 10 6452 1 2026-01-07 09:02:02.108 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60404 10 6452 1 2026-01-07 09:03:02.529 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34338 10 6452 1 2026-01-07 09:03:20.681 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:03:20.746 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:03:20.769 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:03:20.801 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:03:20.884 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:04:02.937 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:48282 10 6452 1 2026-01-07 09:05:03.362 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48884 10 6452 1 2026-01-07 09:06:03.779 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:56002 10 6452 1 2026-01-07 09:01:31.544 00:05:57.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 09:01:31.546 00:05:57.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 09:07:04.149 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44770 10 6452 1 2026-01-07 09:08:04.558 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38604 10 6452 1 2026-01-07 09:08:20.961 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:08:20.962 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:08:20.585 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:08:20.756 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:08:20.839 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:09:04.959 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59122 10 6452 1 2026-01-07 09:10:05.367 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:37280 10 6452 1 2026-01-07 09:11:05.780 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38118 10 6452 1 2026-01-07 09:12:06.185 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45474 10 6452 1 2026-01-07 09:07:31.545 00:05:57.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 09:07:31.547 00:05:57.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 09:13:06.550 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48346 10 6452 1 2026-01-07 09:13:20.760 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:13:20.932 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:13:20.728 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:13:20.990 00:00:00.056 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:13:21.074 00:00:00.055 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:14:06.951 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40378 10 6452 1 2026-01-07 09:15:07.360 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50456 10 6452 1 2026-01-07 09:16:07.779 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35410 10 6452 1 2026-01-07 09:17:08.193 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47368 10 6452 1 2026-01-07 09:18:08.563 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59040 10 6452 1 2026-01-07 09:18:21.201 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:13:31.551 00:05:57.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 09:18:20.952 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:18:20.958 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:18:20.887 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:18:21.118 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:13:31.548 00:05:57.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 09:19:08.924 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33412 10 6452 1 2026-01-07 09:20:09.337 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42996 10 6452 1 2026-01-07 09:21:09.709 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34760 10 6452 1 2026-01-07 09:22:10.101 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43104 10 6452 1 2026-01-07 09:23:21.158 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:23:21.263 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:23:21.057 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:23:21.159 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:23:10.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43096 10 6452 1 2026-01-07 09:23:21.241 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:24:10.914 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60084 10 6452 1 2026-01-07 09:19:31.552 00:05:57.067 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 09:19:31.554 00:05:57.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 09:25:11.283 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40914 10 6452 1 2026-01-07 09:26:11.691 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60292 10 6452 1 2026-01-07 09:27:12.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47608 10 6452 1 2026-01-07 09:28:21.379 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:28:21.351 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:28:21.297 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:28:21.244 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:28:12.514 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:49088 10 6452 1 2026-01-07 09:28:21.299 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:29:12.884 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56646 10 6452 1 2026-01-07 09:30:13.301 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33898 10 6452 1 2026-01-07 09:25:31.557 00:05:57.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 09:25:31.554 00:05:57.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 09:31:13.665 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:60836 10 6452 1 2026-01-07 09:32:14.110 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33264 10 6452 1 2026-01-07 09:33:21.287 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:33:21.405 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:33:21.255 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:33:21.356 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:33:14.512 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53842 10 6452 1 2026-01-07 09:33:21.439 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:34:14.915 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51466 10 6452 1 2026-01-07 09:35:15.324 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:60296 10 6452 1 2026-01-07 09:36:15.796 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59222 10 6452 1 2026-01-07 09:31:31.558 00:05:57.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 09:31:31.561 00:05:57.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 09:37:16.207 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57146 10 6452 1 2026-01-07 09:38:22.079 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:38:21.909 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:38:22.167 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:38:21.597 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:38:21.996 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:38:16.617 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37048 10 6452 1 2026-01-07 09:39:17.025 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35352 10 6452 1 2026-01-07 09:40:17.390 00:00:12.250 TCP 1.101.0.1:3000 -> 23.104.0.1:53930 10 6452 1 2026-01-07 09:41:19.746 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:46562 12 10375 1 2026-01-07 09:37:31.561 00:05:57.065 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 09:37:31.563 00:05:57.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 09:42:20.227 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41694 10 6452 1 2026-01-07 09:43:21.300 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:43:21.567 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:43:21.459 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:43:21.498 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:43:21.581 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:43:20.636 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55802 10 6452 1 2026-01-07 09:44:21.038 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50656 10 6452 1 2026-01-07 09:45:21.445 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49180 10 6452 1 2026-01-07 09:46:21.857 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34890 10 6452 1 2026-01-07 09:47:22.272 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33640 10 6452 1 2026-01-07 09:48:21.467 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:48:21.699 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:48:21.343 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:48:21.704 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:48:21.787 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:43:31.565 00:05:57.062 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 09:43:31.563 00:05:57.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 09:48:22.638 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36446 10 6452 1 2026-01-07 09:49:23.002 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36866 10 6452 1 2026-01-07 09:50:23.403 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39112 10 6452 1 2026-01-07 09:51:23.764 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40492 10 6452 1 2026-01-07 09:52:24.130 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:60364 10 6452 1 2026-01-07 09:53:21.858 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:53:21.805 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:53:21.391 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:53:21.862 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:53:21.945 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:53:24.598 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44220 10 6452 1 2026-01-07 09:49:31.563 00:05:57.067 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 09:49:31.567 00:05:57.062 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 09:54:25.007 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39656 10 6452 1 2026-01-07 09:55:25.407 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38162 10 6452 1 2026-01-07 09:56:25.766 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56730 10 6452 1 2026-01-07 09:57:26.180 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47488 10 6452 1 2026-01-07 09:58:21.802 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 09:58:21.906 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 09:58:21.607 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:58:21.747 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 09:58:21.830 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 09:58:26.585 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41740 10 6452 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 889, avg pps: 0, avg bpp: 411 Time window: 2026-01-07 08:55:31 - 2026-01-07 09:58:36 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0045s User: 0.0009s Wall: 0.0016s flows/second: 87329.4 Runtime: 0.0016s