Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-27 09:58:57.459 00:00:15.431 TCP 1.101.0.1:3000 -> 23.104.0.1:44886 10 6452 1 2026-01-27 10:00:02.970 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:34670 12 10375 1 2026-01-27 10:01:03.423 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48036 10 6452 1 2026-01-27 10:02:03.829 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38872 10 6452 1 2026-01-27 10:03:04.235 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49472 10 6452 1 2026-01-27 10:03:28.910 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:03:29.200 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:03:29.074 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:03:28.857 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:03:28.826 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:04:04.633 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59504 10 6452 1 2026-01-27 10:00:40.774 00:05:02.990 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 10:00:40.777 00:05:02.985 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 10:05:05.029 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58104 10 6452 1 2026-01-27 10:06:05.432 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35768 10 6452 1 2026-01-27 10:07:05.832 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:37246 10 6452 1 2026-01-27 10:08:06.258 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55736 10 6452 1 2026-01-27 10:08:29.304 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:08:29.220 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:08:29.225 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:08:29.221 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:08:29.122 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:09:06.667 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39548 10 6452 1 2026-01-27 10:10:07.032 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47054 10 6452 1 2026-01-27 10:06:40.778 00:05:02.986 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 10:06:40.776 00:05:02.991 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 10:11:07.434 00:00:12.724 TCP 1.101.0.1:3000 -> 23.104.0.1:51322 10 6452 1 2026-01-27 10:12:10.216 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34968 10 6452 1 2026-01-27 10:13:10.577 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40440 10 6452 1 2026-01-27 10:13:29.445 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:13:29.298 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:13:29.357 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:13:29.234 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:13:29.362 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:14:10.948 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48262 10 6452 1 2026-01-27 10:15:11.353 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:47046 10 6452 1 2026-01-27 10:16:11.746 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45608 10 6452 1 2026-01-27 10:12:40.777 00:05:02.993 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 10:12:40.780 00:05:02.988 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 10:17:12.152 00:00:11.002 TCP 1.101.0.1:3000 -> 23.104.0.1:45956 10 6452 1 2026-01-27 10:18:13.193 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48930 10 6452 1 2026-01-27 10:18:29.419 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:18:29.458 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:18:29.462 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:18:29.178 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:18:29.337 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:19:13.606 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:36456 10 6452 1 2026-01-27 10:20:14.024 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58310 10 6452 1 2026-01-27 10:21:14.432 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52842 10 6452 1 2026-01-27 10:22:14.846 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:56316 10 6452 1 2026-01-27 10:18:40.780 00:05:02.989 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 10:18:40.778 00:05:02.994 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 10:23:29.094 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:23:29.098 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:23:29.116 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:23:15.288 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43308 10 6452 1 2026-01-27 10:23:29.174 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:23:29.256 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:24:15.656 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57818 10 6452 1 2026-01-27 10:25:16.096 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34894 10 6452 1 2026-01-27 10:26:16.497 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48256 10 6452 1 2026-01-27 10:27:16.902 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:45356 10 6452 1 2026-01-27 10:28:29.619 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:28:29.685 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:28:29.573 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:28:17.277 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52882 10 6452 1 2026-01-27 10:28:29.727 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:28:29.812 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:24:40.784 00:05:02.989 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 10:24:40.780 00:05:02.995 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 10:29:17.682 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46388 10 6452 1 2026-01-27 10:30:18.114 00:00:13.767 TCP 1.101.0.1:3000 -> 23.104.0.1:50332 10 6452 1 2026-01-27 10:31:21.982 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47954 10 6452 1 2026-01-27 10:32:22.345 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54046 10 6452 1 2026-01-27 10:33:30.463 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:33:22.705 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39396 10 6452 1 2026-01-27 10:33:30.606 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:33:30.525 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:33:30.466 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:33:30.550 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:34:23.096 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44462 10 6452 1 2026-01-27 10:30:40.799 00:05:02.975 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 10:30:40.797 00:05:02.980 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 10:35:23.500 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 10 6452 1 2026-01-27 10:36:23.862 00:00:12.567 TCP 1.101.0.1:3000 -> 23.104.0.1:36446 10 6452 1 2026-01-27 10:37:26.474 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55538 10 6452 1 2026-01-27 10:38:29.879 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:38:29.818 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:38:29.739 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:38:29.939 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:38:30.022 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:38:26.881 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54182 10 6452 1 2026-01-27 10:39:27.244 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49402 10 6452 1 2026-01-27 10:40:27.648 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39854 10 6452 1 2026-01-27 10:36:40.801 00:05:02.979 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 10:36:40.803 00:05:02.974 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 10:41:28.065 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45668 10 6452 1 2026-01-27 10:42:28.469 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48638 10 6452 1 2026-01-27 10:43:29.952 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:43:29.870 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:43:29.709 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:43:29.708 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:43:29.869 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:43:28.877 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56752 10 6452 1 2026-01-27 10:44:29.284 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59954 10 6452 1 2026-01-27 10:45:29.690 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36036 10 6452 1 2026-01-27 10:42:40.801 00:05:02.980 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 10:46:30.125 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43284 10 6452 1 2026-01-27 10:42:40.804 00:05:02.975 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 10:47:30.547 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59724 10 6452 1 2026-01-27 10:48:29.713 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:48:29.883 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:48:29.966 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:48:30.049 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:48:30.051 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:48:30.956 00:00:13.531 TCP 1.101.0.1:3000 -> 23.104.0.1:40174 10 6452 1 2026-01-27 10:49:34.601 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46074 10 6452 1 2026-01-27 10:50:35.010 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41114 10 6452 1 2026-01-27 10:51:35.412 00:00:12.684 TCP 1.101.0.1:3000 -> 23.104.0.1:53102 10 6452 1 2026-01-27 10:48:40.805 00:05:02.982 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 10:48:40.802 00:05:02.988 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 10:52:38.133 00:00:13.603 TCP 1.101.0.1:3000 -> 23.104.0.1:40974 10 6452 1 2026-01-27 10:53:29.921 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:53:29.908 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:53:29.666 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:53:30.278 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:53:30.196 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:53:41.778 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42512 10 6452 1 2026-01-27 10:54:42.187 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2026-01-27 10:55:42.584 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56442 10 6452 1 2026-01-27 10:56:42.991 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54328 10 6452 1 2026-01-27 10:57:43.362 00:00:23.817 TCP 1.101.0.1:3000 -> 23.104.0.1:40270 10 6452 1 2026-01-27 10:58:30.057 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 10:58:30.252 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 10:58:30.146 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:58:30.140 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 10:58:30.224 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 10:54:40.807 00:05:02.986 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 10:54:40.804 00:05:02.991 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 414471, total packets: 1012, avg bps: 909, avg pps: 0, avg bpp: 409 Time window: 2026-01-27 09:58:57 - 2026-01-27 10:59:43 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0048s User: 0.0010s Wall: 0.0027s flows/second: 51694.3 Runtime: 0.0027s