Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-16 18:58:40.160 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45976 10 6452 1 2026-01-16 18:55:34.075 00:05:03.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-16 18:55:34.074 00:05:03.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-16 18:59:40.563 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58050 10 6452 1 2026-01-16 19:00:40.962 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50730 10 6452 1 2026-01-16 19:01:41.368 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37558 10 6452 1 2026-01-16 19:02:52.769 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:02:52.642 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:02:52.540 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:02:52.500 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:02:41.769 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:43944 10 6452 1 2026-01-16 19:02:52.686 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:03:42.182 00:00:12.865 TCP 1.101.0.1:3000 -> 23.104.0.1:44718 10 6452 1 2026-01-16 19:04:45.110 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59390 10 6452 1 2026-01-16 19:01:34.077 00:05:03.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-16 19:01:34.074 00:05:03.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-16 19:05:45.516 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35508 10 6452 1 2026-01-16 19:06:45.921 00:00:13.219 TCP 1.101.0.1:3000 -> 23.104.0.1:46834 10 6452 1 2026-01-16 19:07:52.753 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:07:52.568 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:07:52.766 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:07:52.563 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:07:52.645 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:07:49.180 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39718 10 6452 1 2026-01-16 19:08:49.544 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53788 10 6452 1 2026-01-16 19:09:49.946 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35156 10 6452 1 2026-01-16 19:10:50.363 00:00:10.584 TCP 1.101.0.1:3000 -> 23.104.0.1:48736 10 6452 1 2026-01-16 19:07:34.077 00:05:03.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-16 19:07:34.080 00:05:03.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-16 19:11:50.985 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 10 6452 1 2026-01-16 19:12:52.820 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:12:52.637 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:12:52.946 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:12:52.731 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:12:52.739 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:12:51.396 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49964 10 6452 1 2026-01-16 19:13:51.798 00:00:15.238 TCP 1.101.0.1:3000 -> 23.104.0.1:40614 10 6452 1 2026-01-16 19:14:57.267 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37722 10 6452 1 2026-01-16 19:15:57.681 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60302 10 6452 1 2026-01-16 19:16:58.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46272 10 6452 1 2026-01-16 19:13:34.078 00:05:03.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-16 19:13:34.081 00:05:03.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-16 19:17:52.678 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:17:52.833 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:17:52.701 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:17:52.771 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:17:52.854 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:17:58.512 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51506 10 6452 1 2026-01-16 19:18:58.879 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50794 10 6452 1 2026-01-16 19:19:59.243 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:59138 10 6452 1 2026-01-16 19:20:59.736 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54476 10 6452 1 2026-01-16 19:22:00.144 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58670 10 6452 1 2026-01-16 19:22:52.928 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:22:52.937 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:22:52.701 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:22:52.977 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:22:53.061 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:23:00.549 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:33880 12 10369 1 2026-01-16 19:19:34.084 00:05:03.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-16 19:19:34.085 00:05:03.153 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-16 19:24:01.022 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37804 10 6452 1 2026-01-16 19:25:01.433 00:00:21.829 TCP 1.101.0.1:3000 -> 23.104.0.1:45688 10 6452 1 2026-01-16 19:26:13.307 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56920 10 6452 1 2026-01-16 19:27:13.669 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38902 10 6452 1 2026-01-16 19:27:53.942 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:27:53.832 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:27:53.643 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:27:53.941 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:27:54.024 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:28:14.099 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46974 10 6452 1 2026-01-16 19:29:14.507 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42690 10 6452 1 2026-01-16 19:25:34.085 00:05:03.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-16 19:25:34.088 00:05:03.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-16 19:30:14.908 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40584 10 6452 1 2026-01-16 19:31:15.317 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2026-01-16 19:32:15.722 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50296 10 6452 1 2026-01-16 19:32:53.075 00:00:00.050 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:32:52.988 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:32:53.246 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:32:52.945 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:32:52.992 00:00:00.051 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:33:16.138 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57316 10 6452 1 2026-01-16 19:34:16.505 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44132 10 6452 1 2026-01-16 19:35:16.920 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38934 10 6452 1 2026-01-16 19:31:34.088 00:05:03.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-16 19:31:34.086 00:05:03.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-16 19:36:17.291 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33598 10 6452 1 2026-01-16 19:37:17.658 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34624 10 6452 1 2026-01-16 19:37:53.472 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:37:53.385 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:37:53.502 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:37:53.066 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:37:53.389 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:38:18.105 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50422 10 6452 1 2026-01-16 19:39:18.484 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57028 10 6452 1 2026-01-16 19:40:18.860 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34606 10 6452 1 2026-01-16 19:41:19.276 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56632 10 6452 1 2026-01-16 19:37:34.091 00:05:03.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-16 19:37:34.088 00:05:03.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-16 19:42:19.678 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47822 10 6452 1 2026-01-16 19:42:53.546 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:42:53.529 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:42:53.525 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:42:53.479 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:42:53.464 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:43:20.114 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:50312 11 6504 1 2026-01-16 19:44:20.586 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33206 10 6452 1 2026-01-16 19:45:20.989 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42502 10 6452 1 2026-01-16 19:46:21.401 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54648 10 6452 1 2026-01-16 19:43:34.090 00:05:03.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-16 19:47:21.806 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:35440 10 6452 1 2026-01-16 19:43:34.092 00:05:03.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-16 19:47:53.501 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:47:53.559 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:47:53.467 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:47:53.505 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:47:53.588 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:48:22.190 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:60782 12 10375 1 2026-01-16 19:49:22.633 00:00:17.909 TCP 1.101.0.1:3000 -> 23.104.0.1:53788 10 6452 1 2026-01-16 19:50:30.599 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51144 10 6452 1 2026-01-16 19:51:31.004 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48138 10 6452 1 2026-01-16 19:52:31.409 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58828 10 6452 1 2026-01-16 19:52:53.577 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:52:53.653 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:52:53.559 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:52:53.594 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:52:53.677 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:49:34.094 00:05:03.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-16 19:49:34.092 00:05:03.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-16 19:53:31.814 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54954 10 6452 1 2026-01-16 19:54:32.225 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42088 10 6452 1 2026-01-16 19:55:32.633 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38272 10 6452 1 2026-01-16 19:56:33.048 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59372 10 6452 1 2026-01-16 19:57:33.447 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60372 10 6452 1 2026-01-16 19:57:53.618 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:57:53.701 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-16 19:57:53.710 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-16 19:57:53.742 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-16 19:57:53.701 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-16 19:58:33.815 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41232 10 6452 1 Summary: total flows: 140, total bytes: 424892, total packets: 1025, avg bps: 896, avg pps: 0, avg bpp: 414 Time window: 2026-01-16 18:55:34 - 2026-01-16 19:58:44 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0051s User: 0.0020s Wall: 0.0025s flows/second: 56701.7 Runtime: 0.0025s