Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-07 19:59:38.553 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53024 10 6452 1 2026-01-07 19:55:31.779 00:05:57.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 19:55:31.776 00:05:57.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 20:00:38.956 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42308 10 6452 1 2026-01-07 20:01:39.364 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52328 10 6452 1 2026-01-07 20:02:39.770 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40984 10 6452 1 2026-01-07 20:03:34.001 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:03:33.790 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:03:33.814 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:03:33.861 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:03:33.945 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:03:40.137 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37570 10 6452 1 2026-01-07 20:04:40.538 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:47154 10 6452 1 2026-01-07 20:05:40.974 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36222 10 6452 1 2026-01-07 20:01:31.781 00:05:57.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 20:01:31.778 00:05:57.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 20:06:41.375 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50362 10 6452 1 2026-01-07 20:07:41.780 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50046 10 6452 1 2026-01-07 20:08:33.877 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:08:33.969 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:08:33.894 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:08:34.121 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:08:34.204 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:08:42.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37538 10 6452 1 2026-01-07 20:09:42.601 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32974 10 6452 1 2026-01-07 20:10:43.002 00:00:11.917 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 10 6452 1 2026-01-07 20:11:44.964 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51408 10 6452 1 2026-01-07 20:07:31.782 00:05:57.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 20:07:31.780 00:05:57.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 20:12:45.376 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52854 10 6452 1 2026-01-07 20:13:34.026 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:13:34.959 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:13:33.890 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:13:34.683 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:13:34.767 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:13:45.776 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:39692 10 6452 1 2026-01-07 20:14:46.149 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50060 10 6452 1 2026-01-07 20:15:46.558 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53856 10 6452 1 2026-01-07 20:16:46.958 00:00:13.564 TCP 1.101.0.1:3000 -> 23.104.0.1:52146 10 6452 1 2026-01-07 20:17:50.562 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45890 10 6452 1 2026-01-07 20:13:31.785 00:05:57.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 20:13:31.784 00:05:57.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 20:18:34.082 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:18:34.202 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:18:34.083 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:18:34.178 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:18:34.165 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:18:50.959 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55778 10 6452 1 2026-01-07 20:19:51.376 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38712 10 6452 1 2026-01-07 20:20:51.782 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47892 10 6452 1 2026-01-07 20:21:52.196 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:39320 12 10369 1 2026-01-07 20:22:52.675 00:00:13.173 TCP 1.101.0.1:3000 -> 23.104.0.1:55820 10 6452 1 2026-01-07 20:23:34.123 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:23:34.231 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:23:33.915 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:23:34.297 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:23:34.380 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:23:55.933 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38302 10 6452 1 2026-01-07 20:19:31.787 00:05:57.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 20:19:31.786 00:05:57.158 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 20:24:56.345 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60638 10 6452 1 2026-01-07 20:25:56.756 00:00:12.612 TCP 1.101.0.1:3000 -> 23.104.0.1:36256 10 6452 1 2026-01-07 20:26:59.405 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44470 10 6452 1 2026-01-07 20:27:59.811 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59668 10 6452 1 2026-01-07 20:28:34.555 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:28:34.604 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:28:34.546 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:28:34.399 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:28:34.471 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:29:00.219 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54742 10 6452 1 2026-01-07 20:30:00.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39098 10 6452 1 2026-01-07 20:25:31.788 00:05:57.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 20:25:31.791 00:05:57.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 20:31:00.992 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48870 10 6452 1 2026-01-07 20:32:01.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55950 10 6452 1 2026-01-07 20:33:01.766 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40006 10 6452 1 2026-01-07 20:33:34.431 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:33:34.526 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:33:34.631 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:33:34.605 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:33:34.690 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:34:02.134 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53584 10 6452 1 2026-01-07 20:35:02.540 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54376 10 6452 1 2026-01-07 20:36:02.946 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34344 10 6452 1 2026-01-07 20:31:31.791 00:05:57.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 20:31:31.790 00:05:57.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 20:37:03.362 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36874 10 6452 1 2026-01-07 20:38:03.727 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54542 10 6452 1 2026-01-07 20:38:34.775 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:38:34.775 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:38:34.426 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:38:34.570 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:38:34.652 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:39:04.143 00:00:14.873 TCP 1.101.0.1:3000 -> 23.104.0.1:49080 10 6452 1 2026-01-07 20:40:09.062 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55736 10 6452 1 2026-01-07 20:41:09.424 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35854 10 6452 1 2026-01-07 20:42:09.825 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:37470 12 10375 1 2026-01-07 20:37:31.792 00:05:57.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 20:37:31.795 00:05:57.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 20:43:10.310 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38002 10 6452 1 2026-01-07 20:43:34.674 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:43:34.655 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:43:34.765 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:43:34.590 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:43:34.592 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:44:10.718 00:00:10.821 TCP 1.101.0.1:3000 -> 23.104.0.1:50876 10 6452 1 2026-01-07 20:45:11.576 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43176 10 6452 1 2026-01-07 20:46:11.979 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42544 10 6452 1 2026-01-07 20:47:12.383 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57740 10 6452 1 2026-01-07 20:43:31.798 00:05:57.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 20:48:12.793 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51946 10 6452 1 2026-01-07 20:43:31.796 00:05:57.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 20:48:34.944 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:48:34.933 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:48:35.273 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:48:35.471 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:48:35.554 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:49:13.196 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39840 10 6452 1 2026-01-07 20:50:13.594 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59726 10 6452 1 2026-01-07 20:51:13.961 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52016 10 6452 1 2026-01-07 20:52:14.394 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55140 10 6452 1 2026-01-07 20:53:14.764 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57428 10 6452 1 2026-01-07 20:53:34.772 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:53:35.130 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:53:35.002 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:53:35.160 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:53:35.243 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:49:31.800 00:05:57.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-07 20:54:15.177 00:00:10.603 TCP 1.101.0.1:3000 -> 23.104.0.1:56506 10 6452 1 2026-01-07 20:49:31.797 00:05:57.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-07 20:55:15.820 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55048 10 6452 1 2026-01-07 20:56:16.224 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47278 10 6452 1 2026-01-07 20:57:16.586 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53038 10 6452 1 2026-01-07 20:58:16.946 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52688 10 6452 1 2026-01-07 20:58:34.835 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-07 20:58:35.071 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-07 20:58:34.991 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-07 20:58:35.154 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-07 20:58:34.988 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 418388, total packets: 1014, avg bps: 884, avg pps: 0, avg bpp: 412 Time window: 2026-01-07 19:55:31 - 2026-01-07 20:58:35 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0060s User: 0.0010s Wall: 0.0018s flows/second: 76711.6 Runtime: 0.0018s