Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-10 08:58:54.066 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35216 10 6452 1 2026-01-10 08:59:47.243 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 08:59:47.471 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 08:59:47.107 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 08:59:47.518 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 08:59:47.601 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 08:59:54.468 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36346 10 6452 1 2026-01-10 08:56:30.349 00:05:02.912 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-10 08:56:30.345 00:05:02.918 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-10 09:00:54.871 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50412 10 6452 1 2026-01-10 09:01:55.273 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38650 10 6452 1 2026-01-10 09:02:55.634 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48034 10 6452 1 2026-01-10 09:03:56.036 00:00:11.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55010 10 6452 1 2026-01-10 09:04:47.528 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 09:04:47.615 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 09:04:47.587 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:04:47.616 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:04:47.699 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 09:04:57.446 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55644 10 6452 1 2026-01-10 09:05:57.809 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56508 10 6452 1 2026-01-10 09:02:30.351 00:05:02.910 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-10 09:02:30.349 00:05:02.915 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-10 09:06:58.213 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38966 10 6452 1 2026-01-10 09:07:58.621 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44816 10 6452 1 2026-01-10 09:08:59.024 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48408 10 6452 1 2026-01-10 09:09:47.590 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 09:09:47.500 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 09:09:47.499 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 09:09:47.319 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:09:47.509 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:09:59.430 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51062 10 6452 1 2026-01-10 09:10:59.792 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40550 10 6452 1 2026-01-10 09:12:00.154 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51294 10 6452 1 2026-01-10 09:08:30.351 00:05:02.911 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-10 09:08:30.349 00:05:02.916 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-10 09:13:00.558 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:35562 11 6504 1 2026-01-10 09:14:01.015 00:00:22.300 TCP 1.101.0.1:3000 -> 23.104.0.1:59278 10 6452 1 2026-01-10 09:14:47.847 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 09:14:47.737 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 09:14:47.707 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:14:47.839 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:14:47.922 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 09:15:13.359 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59856 10 6452 1 2026-01-10 09:16:13.712 00:00:19.561 TCP 1.101.0.1:3000 -> 23.104.0.1:36498 10 6452 1 2026-01-10 09:17:23.315 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39082 10 6452 1 2026-01-10 09:14:30.350 00:05:02.918 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-10 09:14:30.354 00:05:02.914 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-10 09:18:23.676 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60034 10 6452 1 2026-01-10 09:19:24.106 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45400 10 6452 1 2026-01-10 09:19:47.928 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 09:19:47.905 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 09:19:47.779 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 09:19:47.793 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:19:47.845 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:20:24.505 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55206 10 6452 1 2026-01-10 09:21:24.908 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51372 10 6452 1 2026-01-10 09:22:25.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42060 10 6452 1 2026-01-10 09:23:25.720 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54968 10 6452 1 2026-01-10 09:20:30.353 00:05:02.915 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-10 09:20:30.350 00:05:02.921 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-10 09:24:26.135 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:46042 10 6452 1 2026-01-10 09:24:47.822 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 09:24:47.727 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 09:24:47.879 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:24:47.908 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:24:47.991 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 09:25:26.534 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42348 10 6452 1 2026-01-10 09:26:26.896 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46424 10 6452 1 2026-01-10 09:27:27.312 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38652 10 6452 1 2026-01-10 09:28:27.725 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:44314 10 6452 1 2026-01-10 09:29:28.136 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38376 10 6452 1 2026-01-10 09:29:48.043 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 09:29:47.891 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 09:29:47.842 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:29:47.890 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:29:47.973 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 09:26:30.356 00:05:02.914 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-10 09:26:30.353 00:05:02.920 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-10 09:30:28.538 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53704 10 6452 1 2026-01-10 09:31:28.940 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34882 10 6452 1 2026-01-10 09:32:29.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49974 10 6452 1 2026-01-10 09:33:29.764 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:44750 10 6452 1 2026-01-10 09:34:30.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56294 10 6452 1 2026-01-10 09:34:48.206 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 09:34:47.938 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 09:34:48.143 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 09:34:47.969 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:34:48.123 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:35:30.538 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47640 10 6452 1 2026-01-10 09:32:30.353 00:05:02.922 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-10 09:32:30.356 00:05:02.916 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-10 09:36:30.939 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:42366 10 6452 1 2026-01-10 09:37:31.319 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:45618 10 6452 1 2026-01-10 09:38:31.687 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48290 10 6452 1 2026-01-10 09:39:32.114 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49238 10 6452 1 2026-01-10 09:39:48.295 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:39:48.476 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 09:39:48.475 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 09:39:48.236 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:39:48.378 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 09:40:32.513 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33082 10 6452 1 2026-01-10 09:41:32.877 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32850 10 6452 1 2026-01-10 09:38:30.358 00:05:02.921 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-10 09:38:30.356 00:05:02.925 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-10 09:42:33.353 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36232 10 6452 1 2026-01-10 09:43:33.757 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:38296 10 6452 1 2026-01-10 09:44:48.446 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 09:44:34.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59414 10 6452 1 2026-01-10 09:44:48.364 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 09:44:48.407 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 09:44:48.222 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:44:48.363 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:45:34.592 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39806 10 6452 1 2026-01-10 09:46:34.959 00:00:11.009 TCP 1.101.0.1:3000 -> 23.104.0.1:48458 10 6452 1 2026-01-10 09:47:36.012 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46400 10 6452 1 2026-01-10 09:44:30.357 00:05:02.925 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-10 09:44:30.359 00:05:02.921 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-10 09:48:36.410 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50132 10 6452 1 2026-01-10 09:49:48.612 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 09:49:36.825 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36420 10 6452 1 2026-01-10 09:49:48.530 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:49:48.474 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 09:49:48.469 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 09:49:48.067 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:50:37.227 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:44612 10 6452 1 2026-01-10 09:51:37.582 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55254 10 6452 1 2026-01-10 09:52:37.987 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45484 10 6452 1 2026-01-10 09:53:38.392 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42378 10 6452 1 2026-01-10 09:50:30.363 00:05:02.921 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-10 09:50:30.359 00:05:02.927 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-10 09:54:48.734 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-10 09:54:48.432 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-10 09:54:48.503 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-10 09:54:48.515 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:54:48.653 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-10 09:54:38.810 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38916 10 6452 1 2026-01-10 09:55:39.213 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33180 10 6452 1 2026-01-10 09:56:39.623 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:33658 10 6452 1 2026-01-10 09:57:39.989 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49106 10 6452 1 Summary: total flows: 139, total bytes: 410600, total packets: 1011, avg bps: 892, avg pps: 0, avg bpp: 406 Time window: 2026-01-10 08:56:30 - 2026-01-10 09:57:50 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0038s User: 0.0029s Wall: 0.0018s flows/second: 75873.0 Runtime: 0.0018s