Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-12 00:58:42.677 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:40494 10 6452 1 2026-01-12 00:59:43.052 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32820 10 6452 1 2026-01-12 00:56:31.285 00:05:02.961 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-12 00:56:31.289 00:05:02.956 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-12 01:00:35.511 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:00:35.592 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:00:35.297 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:00:35.429 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:00:35.365 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:00:43.458 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50642 10 6452 1 2026-01-12 01:01:43.858 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44010 10 6452 1 2026-01-12 01:02:44.277 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52538 10 6452 1 2026-01-12 01:03:44.679 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50864 10 6452 1 2026-01-12 01:04:45.101 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40192 10 6452 1 2026-01-12 01:05:35.713 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:05:35.633 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:05:35.588 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:05:35.543 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:05:35.553 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:05:45.505 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60800 10 6452 1 2026-01-12 01:02:31.291 00:05:02.953 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-12 01:02:31.288 00:05:02.959 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-12 01:06:45.909 00:00:18.809 TCP 1.101.0.1:3000 -> 23.104.0.1:41878 10 6452 1 2026-01-12 01:07:54.761 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 10 6452 1 2026-01-12 01:08:55.172 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52446 10 6452 1 2026-01-12 01:09:55.578 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41912 10 6452 1 2026-01-12 01:10:36.686 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:10:36.751 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:10:36.427 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:10:36.753 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:10:36.836 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:10:55.982 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42318 10 6452 1 2026-01-12 01:11:56.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45140 10 6452 1 2026-01-12 01:08:31.295 00:05:02.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-12 01:08:31.293 00:05:02.955 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-12 01:12:56.803 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36470 10 6452 1 2026-01-12 01:13:57.209 00:00:12.963 TCP 1.101.0.1:3000 -> 23.104.0.1:34078 10 6452 1 2026-01-12 01:15:00.211 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60152 10 6452 1 2026-01-12 01:15:35.706 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:15:35.941 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:15:35.939 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:15:35.423 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:15:35.624 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:16:00.620 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:35542 12 10369 1 2026-01-12 01:17:01.114 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40252 10 6452 1 2026-01-12 01:18:01.521 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39676 10 6452 1 2026-01-12 01:14:31.300 00:05:02.952 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-12 01:14:31.297 00:05:02.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-12 01:19:01.925 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60738 10 6452 1 2026-01-12 01:20:02.333 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59624 10 6452 1 2026-01-12 01:20:35.772 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:20:35.685 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:20:35.630 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:20:35.681 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:20:35.765 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:21:02.765 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:42046 10 6452 1 2026-01-12 01:22:03.223 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:41562 10 6452 1 2026-01-12 01:23:03.597 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55164 10 6452 1 2026-01-12 01:24:04.008 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:55884 10 6452 1 2026-01-12 01:20:31.300 00:05:02.963 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-12 01:20:31.298 00:05:02.968 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-12 01:25:04.399 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52538 10 6452 1 2026-01-12 01:25:35.876 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:25:35.958 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:25:35.950 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:25:36.008 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:25:36.090 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:26:04.764 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:57802 10 6452 1 2026-01-12 01:27:05.183 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60246 10 6452 1 2026-01-12 01:28:05.586 00:00:11.848 TCP 1.101.0.1:3000 -> 23.104.0.1:33800 10 6452 1 2026-01-12 01:29:07.475 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51200 10 6452 1 2026-01-12 01:30:07.878 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42110 10 6452 1 2026-01-12 01:26:31.300 00:05:02.974 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-12 01:26:31.303 00:05:02.968 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-12 01:30:35.982 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:30:36.076 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:30:35.938 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:30:36.111 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:30:36.195 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:31:08.284 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39710 10 6452 1 2026-01-12 01:32:08.693 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41664 10 6452 1 2026-01-12 01:33:09.068 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42934 10 6452 1 2026-01-12 01:34:09.470 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37530 10 6452 1 2026-01-12 01:35:09.879 00:00:15.683 TCP 1.101.0.1:3000 -> 23.104.0.1:43336 10 6452 1 2026-01-12 01:35:36.119 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:35:36.174 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:35:35.840 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:35:36.118 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:35:36.200 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:36:15.593 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:57884 10 6452 1 2026-01-12 01:32:31.301 00:05:02.976 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-12 01:32:31.302 00:05:02.971 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-12 01:37:15.953 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35164 10 6452 1 2026-01-12 01:38:16.358 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53516 10 6452 1 2026-01-12 01:39:16.724 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50800 10 6452 1 2026-01-12 01:40:17.134 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47348 10 6452 1 2026-01-12 01:40:36.241 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:40:36.139 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:40:36.014 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:40:36.301 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:40:36.384 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:41:17.538 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:33936 12 10369 1 2026-01-12 01:42:18.022 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49656 10 6452 1 2026-01-12 01:38:31.301 00:05:02.980 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-12 01:38:31.304 00:05:02.974 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-12 01:43:18.450 00:00:10.546 TCP 1.101.0.1:3000 -> 23.104.0.1:46302 10 6452 1 2026-01-12 01:44:19.065 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 10 6452 1 2026-01-12 01:45:19.478 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:54218 10 6452 1 2026-01-12 01:45:36.405 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:45:36.254 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:45:36.074 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:45:36.115 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:45:36.322 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:46:19.849 00:00:10.462 TCP 1.101.0.1:3000 -> 23.104.0.1:48474 12 10375 1 2026-01-12 01:47:20.349 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40666 10 6452 1 2026-01-12 01:44:31.305 00:05:02.977 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-12 01:48:20.758 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:48006 10 6452 1 2026-01-12 01:44:31.308 00:05:02.972 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-12 01:49:21.188 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53654 10 6452 1 2026-01-12 01:50:21.590 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35188 10 6452 1 2026-01-12 01:50:36.210 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:50:36.209 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:50:36.175 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:50:36.212 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:50:36.295 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:51:21.989 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40184 10 6452 1 2026-01-12 01:52:22.415 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38572 10 6452 1 2026-01-12 01:53:22.776 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52964 10 6452 1 2026-01-12 01:50:31.313 00:05:02.968 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-12 01:54:23.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40222 10 6452 1 2026-01-12 01:50:31.308 00:05:02.975 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-12 01:55:36.780 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-12 01:55:23.595 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60472 10 6452 1 2026-01-12 01:55:36.664 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-12 01:55:36.542 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-12 01:55:36.494 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:55:36.698 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-12 01:56:24.002 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 10 6452 1 2026-01-12 01:57:24.404 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38132 10 6452 1 2026-01-12 01:58:24.818 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53474 10 6452 1 Summary: total flows: 140, total bytes: 428757, total packets: 1026, avg bps: 921, avg pps: 0, avg bpp: 417 Time window: 2026-01-12 00:56:31 - 2026-01-12 01:58:35 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0058s User: 0.0019s Wall: 0.0023s flows/second: 60951.1 Runtime: 0.0023s