Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-08 10:58:52.100 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 10:58:51.876 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 10:58:52.069 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 10:58:52.011 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 10:58:52.092 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 10:58:56.674 00:00:10.656 TCP 1.101.0.1:3000 -> 23.104.0.1:51280 10 6452 1 2026-01-08 10:59:57.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43502 10 6452 1 2026-01-08 10:56:29.266 00:05:02.862 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-08 10:56:29.266 00:05:02.858 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-08 11:00:57.772 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 10 6452 1 2026-01-08 11:01:58.184 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:38292 12 10369 1 2026-01-08 11:02:58.664 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33650 10 6452 1 2026-01-08 11:03:51.995 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 11:03:51.942 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 11:03:51.925 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:03:51.927 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:03:52.012 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 11:03:59.097 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57018 10 6452 1 2026-01-08 11:04:59.507 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48610 10 6452 1 2026-01-08 11:05:59.868 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48886 10 6452 1 2026-01-08 11:02:29.267 00:05:02.858 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-08 11:02:29.266 00:05:02.863 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-08 11:07:00.279 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44692 10 6452 1 2026-01-08 11:08:00.681 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34378 10 6452 1 2026-01-08 11:08:52.470 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 11:08:52.388 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 11:08:52.416 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:08:52.387 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:08:52.470 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 11:09:01.112 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:32810 10 6452 1 2026-01-08 11:10:01.517 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49906 10 6452 1 2026-01-08 11:11:01.919 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49582 10 6452 1 2026-01-08 11:12:02.329 00:00:13.724 TCP 1.101.0.1:3000 -> 23.104.0.1:45986 10 6452 1 2026-01-08 11:08:29.269 00:05:02.859 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-08 11:08:29.266 00:05:02.864 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-08 11:13:06.166 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45730 10 6452 1 2026-01-08 11:13:52.251 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 11:13:52.161 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 11:13:52.111 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:13:52.307 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:13:52.390 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 11:14:06.568 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50916 10 6452 1 2026-01-08 11:15:06.971 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41616 10 6452 1 2026-01-08 11:16:07.374 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46546 10 6452 1 2026-01-08 11:17:07.776 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56258 10 6452 1 2026-01-08 11:18:08.144 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57734 10 6452 1 2026-01-08 11:14:29.271 00:05:02.860 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-08 11:14:29.268 00:05:02.864 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-08 11:18:52.381 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 11:18:52.240 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 11:18:52.136 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 11:18:51.936 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:18:52.298 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:19:08.509 00:00:15.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40904 10 6452 1 2026-01-08 11:20:13.931 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:60338 10 6452 1 2026-01-08 11:21:14.362 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43212 10 6452 1 2026-01-08 11:22:14.771 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55844 10 6452 1 2026-01-08 11:23:15.180 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33656 10 6452 1 2026-01-08 11:23:52.452 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 11:23:52.381 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 11:23:52.041 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:23:52.376 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:23:52.457 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 11:24:15.582 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53756 10 6452 1 2026-01-08 11:20:29.272 00:05:02.861 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-08 11:20:29.269 00:05:02.867 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-08 11:25:15.950 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:60292 10 6452 1 2026-01-08 11:26:16.325 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49528 10 6452 1 2026-01-08 11:27:16.728 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42346 10 6452 1 2026-01-08 11:28:17.139 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40878 10 6452 1 2026-01-08 11:28:52.553 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 11:28:52.499 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 11:28:52.447 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:28:52.338 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:28:52.421 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 11:29:17.769 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37004 10 6452 1 2026-01-08 11:30:18.191 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:55606 10 6452 1 2026-01-08 11:26:29.269 00:05:02.867 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-08 11:26:29.273 00:05:02.862 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-08 11:31:18.691 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:39642 11 6504 1 2026-01-08 11:32:19.153 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46424 10 6452 1 2026-01-08 11:33:19.559 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47922 10 6452 1 2026-01-08 11:33:52.825 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 11:33:52.744 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:33:52.541 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 11:33:52.668 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 11:33:52.645 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:34:19.962 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58370 10 6452 1 2026-01-08 11:35:20.369 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56184 10 6452 1 2026-01-08 11:32:29.276 00:05:02.860 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-08 11:36:20.776 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58902 10 6452 1 2026-01-08 11:32:29.275 00:05:02.865 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-08 11:37:21.186 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39390 10 6452 1 2026-01-08 11:38:21.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34342 10 6452 1 2026-01-08 11:38:52.566 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 11:38:52.881 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 11:38:52.583 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:38:52.775 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:38:52.858 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 11:39:21.992 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53864 10 6452 1 2026-01-08 11:40:22.403 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33312 10 6452 1 2026-01-08 11:41:22.806 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36206 10 6452 1 2026-01-08 11:38:29.274 00:05:02.868 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-08 11:38:29.277 00:05:02.863 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-08 11:42:23.224 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44896 10 6452 1 2026-01-08 11:43:23.628 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46022 10 6452 1 2026-01-08 11:43:52.890 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 11:43:52.753 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:43:52.751 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:43:52.747 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 11:43:52.833 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 11:44:24.033 00:00:16.664 TCP 1.101.0.1:3000 -> 23.104.0.1:56512 10 6452 1 2026-01-08 11:45:30.737 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44136 10 6452 1 2026-01-08 11:46:31.141 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55962 10 6452 1 2026-01-08 11:47:31.552 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39038 10 6452 1 2026-01-08 11:44:29.278 00:05:02.863 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-08 11:44:29.277 00:05:02.868 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-08 11:48:31.954 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34128 10 6452 1 2026-01-08 11:48:53.266 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 11:48:53.303 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 11:48:52.916 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:48:53.097 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:48:53.180 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 11:49:32.359 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46668 10 6452 1 2026-01-08 11:50:32.722 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51564 10 6452 1 2026-01-08 11:51:33.100 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35830 10 6452 1 2026-01-08 11:52:33.501 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:60180 12 10375 1 2026-01-08 11:53:33.978 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33560 10 6452 1 2026-01-08 11:53:52.839 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-08 11:53:52.941 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-08 11:53:53.156 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:53:53.011 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-08 11:53:53.093 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-08 11:50:29.279 00:05:02.866 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-08 11:50:29.276 00:05:02.870 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-08 11:54:34.387 00:00:10.695 TCP 1.101.0.1:3000 -> 23.104.0.1:48798 10 6452 1 2026-01-08 11:55:35.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41388 10 6452 1 2026-01-08 11:56:35.517 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54880 10 6452 1 2026-01-08 11:57:35.923 00:00:19.705 TCP 1.101.0.1:3000 -> 23.104.0.1:57784 10 6452 1 Summary: total flows: 139, total bytes: 418440, total packets: 1015, avg bps: 908, avg pps: 0, avg bpp: 412 Time window: 2026-01-08 10:56:29 - 2026-01-08 11:57:55 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0036s User: 0.0021s Wall: 0.0021s flows/second: 67407.6 Runtime: 0.0021s