Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-23 04:59:00.858 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42942 10 6452 1 2026-01-23 04:55:37.936 00:05:03.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 04:55:37.932 00:05:03.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 05:00:01.276 00:00:14.800 TCP 1.101.0.1:3000 -> 23.104.0.1:43794 10 6452 1 2026-01-23 05:01:16.952 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:01:16.904 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:01:16.721 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:01:16.981 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:01:06.115 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43132 10 6452 1 2026-01-23 05:01:17.064 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:02:06.521 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41536 10 6452 1 2026-01-23 05:03:06.927 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:34746 10 6452 1 2026-01-23 05:04:07.350 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57696 10 6452 1 2026-01-23 05:05:07.758 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:34072 10 6452 1 2026-01-23 05:01:37.941 00:05:03.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 05:01:37.938 00:05:03.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 05:06:16.915 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:06:08.192 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46652 10 6452 1 2026-01-23 05:06:16.833 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:06:16.717 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:06:16.926 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:06:16.773 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:07:08.594 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52270 10 6452 1 2026-01-23 05:08:09.012 00:00:10.852 TCP 1.101.0.1:3000 -> 23.104.0.1:52016 10 6452 1 2026-01-23 05:09:09.904 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55492 10 6452 1 2026-01-23 05:10:10.315 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46656 10 6452 1 2026-01-23 05:11:17.141 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:11:17.230 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:11:16.882 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:11:17.202 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:11:17.285 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:11:10.714 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41450 10 6452 1 2026-01-23 05:07:37.941 00:05:03.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 05:07:37.938 00:05:03.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 05:12:11.119 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50556 10 6452 1 2026-01-23 05:13:11.524 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40324 10 6452 1 2026-01-23 05:14:11.931 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:60918 10 6452 1 2026-01-23 05:15:12.356 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41084 10 6452 1 2026-01-23 05:16:17.110 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:16:17.234 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:16:16.717 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:16:17.201 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:16:17.285 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:16:12.769 00:00:20.787 TCP 1.101.0.1:3000 -> 23.104.0.1:43870 10 6452 1 2026-01-23 05:17:23.600 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39206 10 6452 1 2026-01-23 05:13:37.939 00:05:03.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 05:13:37.941 00:05:03.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 05:18:24.006 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39790 10 6452 1 2026-01-23 05:19:24.369 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60554 10 6452 1 2026-01-23 05:20:24.766 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38022 10 6452 1 2026-01-23 05:21:17.374 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:21:17.382 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:21:17.261 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:21:17.428 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:21:17.511 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:21:25.180 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:49242 10 6452 1 2026-01-23 05:22:25.556 00:00:12.859 TCP 1.101.0.1:3000 -> 23.104.0.1:58122 10 6452 1 2026-01-23 05:23:28.475 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60872 10 6452 1 2026-01-23 05:19:37.942 00:05:03.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 05:19:37.946 00:05:03.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 05:24:28.878 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51864 10 6452 1 2026-01-23 05:25:29.283 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59618 10 6452 1 2026-01-23 05:26:17.276 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:26:17.439 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:26:17.301 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:26:17.371 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:26:17.454 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:26:29.688 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57034 10 6452 1 2026-01-23 05:27:30.121 00:00:17.685 TCP 1.101.0.1:3000 -> 23.104.0.1:48454 12 10375 1 2026-01-23 05:28:37.871 00:00:15.585 TCP 1.101.0.1:3000 -> 23.104.0.1:40304 10 6452 1 2026-01-23 05:25:37.946 00:05:03.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 05:25:37.948 00:05:03.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 05:29:43.504 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37764 10 6452 1 2026-01-23 05:30:43.908 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57304 10 6452 1 2026-01-23 05:31:17.786 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:31:17.805 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:31:17.845 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:31:17.219 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:31:17.704 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:31:44.315 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37860 10 6452 1 2026-01-23 05:32:44.716 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40566 10 6452 1 2026-01-23 05:33:45.132 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44992 10 6452 1 2026-01-23 05:34:45.537 00:00:22.270 TCP 1.101.0.1:3000 -> 23.104.0.1:41530 10 6452 1 2026-01-23 05:31:37.955 00:05:03.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 05:31:37.952 00:05:03.254 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 05:35:57.857 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:42754 10 6452 1 2026-01-23 05:36:17.837 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:36:17.555 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:36:17.556 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:36:17.695 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:36:17.755 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:36:58.279 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38560 10 6452 1 2026-01-23 05:37:58.651 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:35762 12 10369 1 2026-01-23 05:38:59.134 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58292 10 6452 1 2026-01-23 05:39:59.494 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38192 10 6452 1 2026-01-23 05:40:59.857 00:00:11.281 TCP 1.101.0.1:3000 -> 23.104.0.1:33354 10 6452 1 2026-01-23 05:41:18.641 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:41:18.570 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:41:18.471 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:41:18.482 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:41:18.560 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:37:37.956 00:05:03.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 05:37:37.955 00:05:03.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 05:42:01.261 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58494 10 6452 1 2026-01-23 05:43:01.666 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43268 10 6452 1 2026-01-23 05:44:02.083 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40142 10 6452 1 2026-01-23 05:45:02.448 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59650 10 6452 1 2026-01-23 05:46:17.833 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:46:02.855 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45884 10 6452 1 2026-01-23 05:46:17.665 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:46:17.862 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:46:17.848 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:46:17.750 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:47:03.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56566 10 6452 1 2026-01-23 05:43:37.957 00:05:03.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 05:43:37.954 00:05:03.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 05:48:03.680 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56162 10 6452 1 2026-01-23 05:49:04.056 00:00:18.899 TCP 1.101.0.1:3000 -> 23.104.0.1:54746 10 6452 1 2026-01-23 05:50:13.009 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60566 10 6452 1 2026-01-23 05:51:17.858 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:51:17.922 00:00:00.014 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:51:17.922 00:00:00.012 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:51:17.927 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:51:17.775 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:51:13.390 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46566 10 6452 1 2026-01-23 05:52:13.755 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36248 10 6452 1 2026-01-23 05:53:14.179 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51200 10 6452 1 2026-01-23 05:49:37.956 00:05:03.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-23 05:49:37.959 00:05:03.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-23 05:54:14.542 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48178 10 6452 1 2026-01-23 05:55:14.950 00:00:15.730 TCP 1.101.0.1:3000 -> 23.104.0.1:60378 10 6452 1 2026-01-23 05:56:18.310 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-23 05:56:18.122 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-23 05:56:18.153 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-23 05:56:17.884 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:56:18.228 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-23 05:56:20.719 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46294 10 6452 1 2026-01-23 05:57:21.139 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53000 10 6452 1 2026-01-23 05:58:21.539 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48322 10 6452 1 Summary: total flows: 139, total bytes: 418388, total packets: 1014, avg bps: 886, avg pps: 0, avg bpp: 412 Time window: 2026-01-23 04:55:37 - 2026-01-23 05:58:31 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0060s User: 0.0012s Wall: 0.0024s flows/second: 58871.9 Runtime: 0.0024s