Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-23 00:59:06.468 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:58106 13 6608 1 2026-01-23 00:55:37.809 00:05:03.280 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 00:55:37.810 00:05:03.275 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 01:00:06.905 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33114 10 6452 1 2026-01-23 01:01:12.307 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:01:12.261 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:01:12.090 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:01:12.210 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:01:12.291 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:01:07.309 00:00:15.400 TCP 1.101.0.1:3000 -> 23.104.0.1:49550 10 6452 1 2026-01-23 01:02:12.766 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44438 10 6452 1 2026-01-23 01:03:13.170 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44602 10 6452 1 2026-01-23 01:04:13.535 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56114 10 6452 1 2026-01-23 01:05:13.942 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39522 10 6452 1 2026-01-23 01:01:37.832 00:05:03.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 01:01:37.830 00:05:03.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 01:06:12.138 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:06:12.288 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:06:12.255 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:06:12.153 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:06:12.237 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:06:14.353 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:38070 10 6452 1 2026-01-23 01:07:14.709 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39262 10 6452 1 2026-01-23 01:08:15.115 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47236 10 6452 1 2026-01-23 01:09:15.476 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39722 10 6452 1 2026-01-23 01:10:15.877 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53042 10 6452 1 2026-01-23 01:11:12.490 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:11:12.389 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:11:12.204 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:11:12.412 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:11:12.406 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:11:16.280 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55756 10 6452 1 2026-01-23 01:07:37.836 00:05:03.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 01:07:37.836 00:05:03.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 01:12:16.701 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57382 10 6452 1 2026-01-23 01:13:17.118 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:60142 10 6452 1 2026-01-23 01:14:17.483 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43722 10 6452 1 2026-01-23 01:15:17.886 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:43878 10 6452 1 2026-01-23 01:16:12.243 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:16:12.415 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:16:12.291 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:16:12.238 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:16:12.320 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:16:18.321 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:34692 10 6452 1 2026-01-23 01:17:18.678 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46178 10 6452 1 2026-01-23 01:13:37.835 00:05:03.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 01:13:37.838 00:05:03.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 01:18:19.040 00:00:18.020 TCP 1.101.0.1:3000 -> 23.104.0.1:58186 10 6452 1 2026-01-23 01:19:27.119 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53286 10 6452 1 2026-01-23 01:20:27.518 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37476 10 6452 1 2026-01-23 01:21:12.531 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:21:12.427 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:21:12.464 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:21:12.526 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:21:12.619 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:21:27.922 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:46672 10 6452 1 2026-01-23 01:22:28.350 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52546 10 6452 1 2026-01-23 01:23:28.760 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41876 10 6452 1 2026-01-23 01:19:37.837 00:05:03.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 01:19:37.841 00:05:03.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 01:24:29.169 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41760 10 6452 1 2026-01-23 01:25:29.573 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51024 10 6452 1 2026-01-23 01:26:12.848 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:26:12.765 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:26:12.674 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:26:12.683 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:26:12.611 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:26:29.980 00:00:16.162 TCP 1.101.0.1:3000 -> 23.104.0.1:43174 10 6452 1 2026-01-23 01:27:36.183 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47960 10 6452 1 2026-01-23 01:28:36.590 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58888 10 6452 1 2026-01-23 01:25:37.841 00:05:03.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 01:25:37.839 00:05:03.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 01:29:36.992 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54078 10 6452 1 2026-01-23 01:30:37.392 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41008 10 6452 1 2026-01-23 01:31:13.010 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:31:12.800 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:31:12.716 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:31:12.888 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:31:12.969 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:31:37.799 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52286 10 6452 1 2026-01-23 01:32:38.206 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51632 10 6452 1 2026-01-23 01:33:38.607 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51124 10 6452 1 2026-01-23 01:34:39.012 00:00:20.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59610 10 6452 1 2026-01-23 01:31:37.840 00:05:03.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 01:31:37.843 00:05:03.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 01:35:49.434 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54208 10 6452 1 2026-01-23 01:36:12.833 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:36:12.928 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:36:12.796 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:36:12.758 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:36:12.842 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:36:49.844 00:00:10.464 TCP 1.101.0.1:3000 -> 23.104.0.1:55250 12 10369 1 2026-01-23 01:37:50.346 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45854 10 6452 1 2026-01-23 01:38:50.748 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58358 10 6452 1 2026-01-23 01:39:51.153 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46232 10 6452 1 2026-01-23 01:40:51.557 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48290 10 6452 1 2026-01-23 01:41:13.132 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:41:12.729 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:41:12.848 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:41:12.571 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:41:13.050 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:37:37.846 00:05:03.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 01:37:37.848 00:05:03.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 01:41:51.960 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58912 10 6452 1 2026-01-23 01:42:52.364 00:00:11.468 TCP 1.101.0.1:3000 -> 23.104.0.1:49834 10 6452 1 2026-01-23 01:43:53.869 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37956 10 6452 1 2026-01-23 01:44:54.277 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48746 10 6452 1 2026-01-23 01:45:54.639 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55558 10 6452 1 2026-01-23 01:46:12.963 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:46:13.057 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:46:12.982 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:46:13.057 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:46:13.139 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:46:55.047 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:41692 10 6452 1 2026-01-23 01:43:37.847 00:05:03.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 01:43:37.850 00:05:03.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 01:47:55.428 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:47832 10 6452 1 2026-01-23 01:48:55.799 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51166 10 6452 1 2026-01-23 01:49:56.204 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41376 10 6452 1 2026-01-23 01:50:56.569 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:51440 10 6452 1 2026-01-23 01:51:13.262 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:51:12.963 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:51:13.097 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:51:13.271 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:51:13.364 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:51:56.930 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:33698 10 6452 1 2026-01-23 01:52:57.359 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60472 10 6452 1 2026-01-23 01:49:37.850 00:05:03.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 01:49:37.847 00:05:03.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 01:53:57.758 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:56074 10 6452 1 2026-01-23 01:54:58.131 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45750 10 6452 1 2026-01-23 01:55:58.534 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48492 10 6452 1 2026-01-23 01:56:13.322 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 01:56:13.263 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 01:56:13.219 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:56:13.274 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 01:56:13.356 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 01:56:58.935 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41174 10 6452 1 2026-01-23 01:57:59.357 00:00:17.757 TCP 1.101.0.1:3000 -> 23.104.0.1:53080 10 6452 1 Summary: total flows: 139, total bytes: 414621, total packets: 1015, avg bps: 882, avg pps: 0, avg bpp: 408 Time window: 2026-01-23 00:55:37 - 2026-01-23 01:58:17 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0033s User: 0.0022s Wall: 0.0022s flows/second: 63267.3 Runtime: 0.0022s