Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-20 07:58:56.110 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43198 10 6452 1 2026-01-20 07:55:36.215 00:05:03.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-20 07:55:36.213 00:05:03.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-20 07:59:53.859 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 07:59:53.863 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 07:59:53.939 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 07:59:53.861 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 07:59:53.944 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 07:59:56.517 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41060 10 6452 1 2026-01-20 08:00:56.883 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:52950 10 6452 1 2026-01-20 08:01:57.262 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:56794 12 10375 1 2026-01-20 08:02:57.756 00:00:10.655 TCP 1.101.0.1:3000 -> 23.104.0.1:36066 10 6452 1 2026-01-20 08:03:58.486 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53684 10 6452 1 2026-01-20 08:04:54.134 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 08:04:53.988 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 08:04:54.051 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 08:04:53.867 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:04:54.053 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:04:58.847 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:58834 10 6452 1 2026-01-20 08:01:36.214 00:05:03.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-20 08:01:36.217 00:05:03.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-20 08:05:59.271 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43332 10 6452 1 2026-01-20 08:06:59.675 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48718 10 6452 1 2026-01-20 08:08:00.098 00:00:17.550 TCP 1.101.0.1:3000 -> 23.104.0.1:51420 10 6452 1 2026-01-20 08:09:07.697 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56924 10 6452 1 2026-01-20 08:09:54.150 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 08:09:54.159 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 08:09:54.101 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:09:54.057 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:09:54.140 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 08:10:08.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53214 10 6452 1 2026-01-20 08:11:08.512 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43646 10 6452 1 2026-01-20 08:07:36.216 00:05:03.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-20 08:07:36.218 00:05:03.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-20 08:12:08.917 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54784 10 6452 1 2026-01-20 08:13:09.320 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57542 10 6452 1 2026-01-20 08:14:09.730 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54246 10 6452 1 2026-01-20 08:14:54.013 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 08:14:54.110 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 08:14:54.346 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 08:14:54.275 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:14:53.930 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:15:10.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43390 10 6452 1 2026-01-20 08:16:10.540 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48720 10 6452 1 2026-01-20 08:17:10.941 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33104 10 6452 1 2026-01-20 08:13:36.218 00:05:03.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-20 08:13:36.216 00:05:03.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-20 08:18:11.355 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39776 10 6452 1 2026-01-20 08:19:11.765 00:00:18.466 TCP 1.101.0.1:3000 -> 23.104.0.1:42434 10 6452 1 2026-01-20 08:19:54.643 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 08:19:54.619 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 08:19:54.612 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 08:19:53.886 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:19:54.562 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:20:20.277 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60438 10 6452 1 2026-01-20 08:21:20.677 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42718 12 6556 1 2026-01-20 08:22:21.106 00:00:12.786 TCP 1.101.0.1:3000 -> 23.104.0.1:52000 10 6452 1 2026-01-20 08:23:23.930 00:00:11.836 TCP 1.101.0.1:3000 -> 23.104.0.1:51738 10 6452 1 2026-01-20 08:19:36.217 00:05:03.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-20 08:19:36.219 00:05:03.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-20 08:24:25.834 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49264 10 6452 1 2026-01-20 08:24:54.441 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 08:24:54.469 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 08:24:54.520 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 08:24:54.315 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:24:54.358 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:25:26.251 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53178 10 6452 1 2026-01-20 08:26:26.618 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49332 10 6452 1 2026-01-20 08:27:27.021 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40894 10 6452 1 2026-01-20 08:28:27.421 00:00:12.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45588 10 6452 1 2026-01-20 08:25:36.223 00:05:03.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-20 08:25:36.220 00:05:03.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-20 08:29:29.801 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48496 10 6452 1 2026-01-20 08:29:54.625 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 08:29:54.373 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 08:29:54.471 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 08:29:54.398 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:29:54.542 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:30:30.211 00:00:17.476 TCP 1.101.0.1:3000 -> 23.104.0.1:44278 10 6452 1 2026-01-20 08:31:37.723 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34570 12 6556 1 2026-01-20 08:32:38.141 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53936 10 6452 1 2026-01-20 08:33:38.543 00:00:10.620 TCP 1.101.0.1:3000 -> 23.104.0.1:44434 10 6452 1 2026-01-20 08:34:54.832 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 08:34:39.211 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50552 10 6452 1 2026-01-20 08:34:54.654 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 08:34:54.712 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 08:34:54.386 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:34:54.748 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:31:36.221 00:05:03.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-20 08:31:36.224 00:05:03.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-20 08:35:39.578 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47042 10 6452 1 2026-01-20 08:36:39.979 00:00:11.729 TCP 1.101.0.1:3000 -> 23.104.0.1:46978 10 6452 1 2026-01-20 08:37:41.755 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50798 11 6492 1 2026-01-20 08:38:42.128 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49858 10 6452 1 2026-01-20 08:39:54.973 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 08:39:54.841 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 08:39:54.819 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 08:39:54.838 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:39:54.892 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:39:42.539 00:00:10.901 TCP 1.101.0.1:3000 -> 23.104.0.1:51868 10 6452 1 2026-01-20 08:40:43.477 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:44306 10 6452 1 2026-01-20 08:37:36.226 00:05:03.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-20 08:37:36.223 00:05:03.240 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-20 08:41:43.871 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36660 10 6452 1 2026-01-20 08:42:44.234 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55398 10 6452 1 2026-01-20 08:43:44.641 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33712 10 6452 1 2026-01-20 08:44:55.366 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 08:44:55.284 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 08:44:45.006 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:36932 10 6452 1 2026-01-20 08:44:55.158 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:44:55.368 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:44:55.450 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 08:45:45.403 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46520 10 6452 1 2026-01-20 08:46:45.767 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57266 10 6452 1 2026-01-20 08:43:36.225 00:05:03.243 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-20 08:43:36.229 00:05:03.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-20 08:47:46.185 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:50390 12 10375 1 2026-01-20 08:48:46.659 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42144 10 6452 1 2026-01-20 08:49:54.853 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 08:49:54.962 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 08:49:54.708 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:49:54.771 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:49:55.009 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 08:49:47.064 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37474 10 6452 1 2026-01-20 08:50:47.468 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58612 10 6452 1 2026-01-20 08:51:47.866 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37178 10 6452 1 2026-01-20 08:52:48.239 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47204 10 6452 1 2026-01-20 08:49:36.227 00:05:03.243 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-20 08:49:36.231 00:05:03.238 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-20 08:53:48.648 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6452 1 2026-01-20 08:54:54.897 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-20 08:54:55.058 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-20 08:54:55.168 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:54:55.063 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-20 08:54:55.146 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-20 08:54:49.069 00:00:16.616 TCP 1.101.0.1:3000 -> 23.104.0.1:38528 10 6452 1 2026-01-20 08:55:55.738 00:00:16.256 TCP 1.101.0.1:3000 -> 23.104.0.1:57942 10 6452 1 2026-01-20 08:57:02.056 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44542 10 6452 1 2026-01-20 08:58:02.465 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:52080 10 6452 1 Summary: total flows: 139, total bytes: 418642, total packets: 1019, avg bps: 891, avg pps: 0, avg bpp: 410 Time window: 2026-01-20 07:55:36 - 2026-01-20 08:58:12 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0049s User: 0.0020s Wall: 0.0019s flows/second: 72136.6 Runtime: 0.0019s