Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-17 00:58:56.498 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:53142 12 10369 1 2026-01-17 00:55:34.172 00:05:03.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-17 00:55:34.170 00:05:03.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-17 00:59:56.939 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:59064 10 6452 1 2026-01-17 01:00:57.375 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:51224 10 6452 1 2026-01-17 01:01:57.810 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36868 10 6452 1 2026-01-17 01:03:00.193 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:02:59.764 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:02:59.892 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:02:59.809 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:03:00.112 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:02:58.227 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50450 10 6452 1 2026-01-17 01:03:58.624 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54368 10 6452 1 2026-01-17 01:04:59.037 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42858 10 6452 1 2026-01-17 01:01:34.174 00:05:03.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-17 01:01:34.171 00:05:03.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-17 01:05:59.444 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60092 10 6452 1 2026-01-17 01:06:59.851 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:35368 10 6452 1 2026-01-17 01:07:59.814 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:07:59.930 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:07:59.912 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:08:00.061 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:07:59.978 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:08:00.242 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60360 10 6452 1 2026-01-17 01:09:00.602 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:53080 13 13949 1 2026-01-17 01:10:01.110 00:00:27.573 TCP 1.101.0.1:3000 -> 23.104.0.1:34178 10 6452 1 2026-01-17 01:11:18.729 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37606 10 6452 1 2026-01-17 01:07:34.173 00:05:03.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-17 01:07:34.176 00:05:03.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-17 01:12:19.108 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39572 10 6452 1 2026-01-17 01:12:59.883 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:13:00.150 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:13:00.115 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:13:00.074 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:13:00.068 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:13:19.511 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55874 10 6452 1 2026-01-17 01:14:19.916 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38636 10 6452 1 2026-01-17 01:15:20.322 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52588 10 6452 1 2026-01-17 01:16:20.723 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33736 10 6452 1 2026-01-17 01:13:34.176 00:05:03.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-17 01:17:21.148 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36210 10 6452 1 2026-01-17 01:13:34.180 00:05:03.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-17 01:17:59.830 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:17:59.913 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:18:00.156 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:18:00.100 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:18:00.070 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:18:21.544 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33514 10 6452 1 2026-01-17 01:19:21.952 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60122 10 6452 1 2026-01-17 01:20:22.322 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60470 10 6452 1 2026-01-17 01:21:22.730 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43006 10 6452 1 2026-01-17 01:22:23.136 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38808 10 6452 1 2026-01-17 01:23:00.429 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:23:00.335 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:23:00.343 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:23:00.069 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:23:00.346 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:19:34.181 00:05:03.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-17 01:23:23.543 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55738 10 6452 1 2026-01-17 01:19:34.182 00:05:03.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-17 01:24:23.945 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:48456 12 10375 1 2026-01-17 01:25:24.435 00:00:20.167 TCP 1.101.0.1:3000 -> 23.104.0.1:54820 10 6452 1 2026-01-17 01:26:34.639 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:50030 10 6452 1 2026-01-17 01:27:34.999 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:43046 10 6452 1 2026-01-17 01:28:00.607 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:28:00.518 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:28:00.350 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:28:00.267 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:28:00.524 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:28:35.414 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37958 10 6452 1 2026-01-17 01:25:34.185 00:05:03.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-17 01:25:34.184 00:05:03.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-17 01:29:35.818 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45478 10 6452 1 2026-01-17 01:30:36.185 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58376 10 6452 1 2026-01-17 01:31:36.590 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51982 10 6452 1 2026-01-17 01:32:36.996 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33366 10 6452 1 2026-01-17 01:33:00.342 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:33:00.425 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:33:00.100 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:33:00.489 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:33:00.572 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:33:37.401 00:00:21.288 TCP 1.101.0.1:3000 -> 23.104.0.1:40560 10 6452 1 2026-01-17 01:34:48.725 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46774 10 6452 1 2026-01-17 01:31:34.186 00:05:03.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-17 01:31:34.184 00:05:03.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-17 01:35:49.144 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34256 10 6452 1 2026-01-17 01:36:49.548 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45650 10 6452 1 2026-01-17 01:38:00.544 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:38:00.551 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:38:00.388 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:38:00.652 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:37:49.953 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47284 10 6452 1 2026-01-17 01:38:00.734 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:38:50.324 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52950 10 6452 1 2026-01-17 01:39:50.726 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57774 10 6452 1 2026-01-17 01:40:51.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41642 10 6452 1 2026-01-17 01:37:34.184 00:05:03.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-17 01:37:34.187 00:05:03.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-17 01:41:51.540 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 10 6452 1 2026-01-17 01:43:00.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:43:00.702 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:42:51.939 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57202 10 6452 1 2026-01-17 01:43:00.706 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:43:00.423 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:43:00.575 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:43:52.352 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59912 10 6452 1 2026-01-17 01:44:52.748 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49732 10 6452 1 2026-01-17 01:45:53.153 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43210 10 6452 1 2026-01-17 01:46:53.556 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40870 10 6452 1 2026-01-17 01:43:34.185 00:05:03.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-17 01:43:34.188 00:05:03.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-17 01:48:00.652 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:48:00.768 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:47:53.959 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58030 10 6452 1 2026-01-17 01:48:00.669 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:48:00.706 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:48:00.569 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:48:54.363 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43678 10 6452 1 2026-01-17 01:49:54.725 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42828 10 6452 1 2026-01-17 01:50:55.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34240 10 6452 1 2026-01-17 01:51:55.512 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56228 10 6452 1 2026-01-17 01:53:00.859 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:53:00.777 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:53:01.004 00:00:00.037 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:53:00.857 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:53:00.780 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:52:55.931 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:47498 10 6452 1 2026-01-17 01:49:34.188 00:05:03.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-17 01:49:34.190 00:05:03.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-17 01:53:56.367 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54130 10 6452 1 2026-01-17 01:54:56.775 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41596 10 6452 1 2026-01-17 01:55:57.178 00:00:18.238 TCP 1.101.0.1:3000 -> 23.104.0.1:47492 10 6452 1 2026-01-17 01:57:05.460 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38964 10 6452 1 2026-01-17 01:58:00.970 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-17 01:58:01.064 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-17 01:58:00.910 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:58:00.976 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-17 01:58:01.058 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-17 01:58:05.822 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36458 10 6452 1 Summary: total flows: 139, total bytes: 425885, total packets: 1017, avg bps: 905, avg pps: 0, avg bpp: 418 Time window: 2026-01-17 00:55:34 - 2026-01-17 01:58:16 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0059s User: 0.0010s Wall: 0.0018s flows/second: 79374.8 Runtime: 0.0018s