Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-13 01:58:44.636 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55100 10 6452 1 2026-01-13 01:59:45.039 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52210 10 6452 1 2026-01-13 01:56:31.869 00:05:02.994 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 01:56:31.867 00:05:03.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 02:00:45.439 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57828 10 6452 1 2026-01-13 02:01:06.231 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:01:06.248 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:01:06.319 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:01:06.148 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:01:06.330 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:01:45.841 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 10 6452 1 2026-01-13 02:02:46.273 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54952 10 6452 1 2026-01-13 02:03:46.636 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45170 10 6452 1 2026-01-13 02:04:47.050 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42698 10 6452 1 2026-01-13 02:05:47.417 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43598 10 6452 1 2026-01-13 02:06:05.737 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:06:05.736 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:06:05.513 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:06:05.659 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:06:05.741 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:02:31.872 00:05:02.996 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 02:02:31.869 00:05:03.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 02:06:47.823 00:00:19.929 TCP 1.101.0.1:3000 -> 23.104.0.1:43526 10 6452 1 2026-01-13 02:07:57.791 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53692 10 6452 1 2026-01-13 02:08:58.198 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53158 10 6452 1 2026-01-13 02:09:58.601 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36220 10 6452 1 2026-01-13 02:11:05.679 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:11:05.682 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:11:05.607 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:10:58.963 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:53490 10 6452 1 2026-01-13 02:11:05.681 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:11:05.769 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:11:59.326 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6452 1 2026-01-13 02:08:31.873 00:05:02.999 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 02:08:31.874 00:05:02.994 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 02:12:59.732 00:00:10.428 TCP 1.101.0.1:3000 -> 23.104.0.1:34646 11 6504 1 2026-01-13 02:14:00.200 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:49980 10 6452 1 2026-01-13 02:15:00.639 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:39940 10 6452 1 2026-01-13 02:16:05.738 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:16:05.757 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:16:05.820 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:16:05.746 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:16:05.902 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:16:01.083 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40656 10 6452 1 2026-01-13 02:17:01.493 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58556 10 6452 1 2026-01-13 02:18:01.899 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58538 10 6452 1 2026-01-13 02:14:31.874 00:05:03.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 02:14:31.876 00:05:02.996 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 02:19:02.303 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58304 10 6452 1 2026-01-13 02:20:02.721 00:00:26.514 TCP 1.101.0.1:3000 -> 23.104.0.1:50168 10 6452 1 2026-01-13 02:21:05.972 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:21:05.892 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:21:05.893 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:21:05.929 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:21:05.891 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:21:19.304 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:50394 10 6452 1 2026-01-13 02:22:19.664 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56840 10 6452 1 2026-01-13 02:23:20.080 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57588 10 6452 1 2026-01-13 02:24:20.447 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56296 10 6452 1 2026-01-13 02:20:31.878 00:05:02.996 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 02:20:31.874 00:05:03.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 02:25:20.855 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60264 10 6452 1 2026-01-13 02:26:06.139 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:26:05.832 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:26:06.081 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:26:06.085 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:26:06.164 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:26:21.274 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37242 10 6452 1 2026-01-13 02:27:21.640 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:44512 12 10375 1 2026-01-13 02:28:22.130 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55498 10 6452 1 2026-01-13 02:29:22.534 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55298 10 6452 1 2026-01-13 02:30:22.940 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51078 10 6452 1 2026-01-13 02:26:31.881 00:05:02.995 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 02:26:31.879 00:05:03.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 02:31:06.466 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:31:06.462 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:31:06.257 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:31:06.373 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:31:06.455 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:31:23.356 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42558 10 6452 1 2026-01-13 02:32:23.721 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:58614 12 10375 1 2026-01-13 02:33:24.203 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34312 10 6452 1 2026-01-13 02:34:24.565 00:00:21.745 TCP 1.101.0.1:3000 -> 23.104.0.1:42952 10 6452 1 2026-01-13 02:35:36.357 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35964 10 6452 1 2026-01-13 02:36:06.246 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:36:06.102 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:36:06.290 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:36:06.218 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:36:06.329 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:32:31.883 00:05:02.995 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 02:32:31.880 00:05:03.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 02:36:36.756 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43318 10 6452 1 2026-01-13 02:37:37.164 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35536 10 6452 1 2026-01-13 02:38:37.570 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59504 10 6452 1 2026-01-13 02:39:37.968 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58546 10 6452 1 2026-01-13 02:40:38.378 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38974 10 6452 1 2026-01-13 02:41:06.327 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:41:06.247 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:41:06.451 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:41:06.132 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:41:06.245 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:41:38.786 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47066 10 6452 1 2026-01-13 02:38:31.884 00:05:02.996 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 02:38:31.881 00:05:03.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 02:42:39.149 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:54988 12 10375 1 2026-01-13 02:43:39.628 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:41812 10 6452 1 2026-01-13 02:44:40.097 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46708 10 6452 1 2026-01-13 02:45:40.505 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57836 10 6452 1 2026-01-13 02:46:06.600 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:46:06.499 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:46:06.569 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:46:06.397 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:46:06.480 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:46:40.912 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34336 10 6452 1 2026-01-13 02:47:41.320 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50020 10 6452 1 2026-01-13 02:44:31.882 00:05:03.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 02:44:31.886 00:05:02.996 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 02:48:41.724 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:56404 10 6452 1 2026-01-13 02:49:42.109 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48164 10 6452 1 2026-01-13 02:50:42.471 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35726 10 6452 1 2026-01-13 02:51:07.079 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:51:06.994 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:51:07.119 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:51:06.948 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:51:06.996 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:51:42.874 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43062 10 6452 1 2026-01-13 02:52:43.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59916 10 6452 1 2026-01-13 02:53:43.690 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38812 10 6452 1 2026-01-13 02:50:31.886 00:05:03.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 02:50:31.888 00:05:02.996 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 02:54:44.116 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55100 10 6452 1 2026-01-13 02:55:44.569 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60876 10 6452 1 2026-01-13 02:56:06.696 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 02:56:06.416 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:56:06.575 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 02:56:06.498 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 02:56:06.658 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 02:56:44.976 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57434 10 6452 1 2026-01-13 02:57:45.382 00:00:17.991 TCP 1.101.0.1:3000 -> 23.104.0.1:46588 10 6452 1 Summary: total flows: 139, total bytes: 422369, total packets: 1017, avg bps: 915, avg pps: 0, avg bpp: 415 Time window: 2026-01-13 01:56:31 - 2026-01-13 02:58:03 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0052s User: 0.0000s Wall: 0.0022s flows/second: 63411.8 Runtime: 0.0022s