Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-21 17:59:12.691 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58532 10 6452 1 2026-01-21 17:55:37.047 00:05:03.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-21 17:55:37.049 00:05:03.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-21 18:00:13.110 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35474 10 6452 1 2026-01-21 18:00:34.833 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:00:34.745 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:00:34.755 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:00:34.932 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:00:35.014 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:01:13.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42568 10 6452 1 2026-01-21 18:02:13.922 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38734 10 6452 1 2026-01-21 18:03:14.333 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60662 10 6452 1 2026-01-21 18:04:14.697 00:00:11.135 TCP 1.101.0.1:3000 -> 23.104.0.1:45378 10 6452 1 2026-01-21 18:05:15.873 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55866 10 6452 1 2026-01-21 18:05:34.953 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:05:34.884 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:05:34.837 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:05:34.961 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:05:35.044 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:01:37.051 00:05:03.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-21 18:01:37.054 00:05:03.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-21 18:06:16.280 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58604 10 6452 1 2026-01-21 18:07:16.682 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 10 6452 1 2026-01-21 18:08:17.107 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42952 10 6452 1 2026-01-21 18:09:17.513 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45608 10 6452 1 2026-01-21 18:10:17.936 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39382 10 6452 1 2026-01-21 18:10:34.910 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:10:34.927 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:10:35.116 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:10:35.095 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:10:35.177 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:11:18.360 00:00:14.740 TCP 1.101.0.1:3000 -> 23.104.0.1:36268 10 6452 1 2026-01-21 18:07:37.054 00:05:03.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-21 18:07:37.052 00:05:03.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-21 18:12:23.143 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38436 10 6452 1 2026-01-21 18:13:23.554 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53566 10 6452 1 2026-01-21 18:14:23.954 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59206 10 6452 1 2026-01-21 18:15:35.654 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:15:24.361 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43022 10 6452 1 2026-01-21 18:15:35.303 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:15:35.641 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:15:35.468 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:15:35.572 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:16:24.766 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:57690 10 6452 1 2026-01-21 18:13:37.053 00:05:03.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-21 18:17:25.135 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33014 10 6452 1 2026-01-21 18:13:37.054 00:05:03.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-21 18:18:25.543 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35176 10 6452 1 2026-01-21 18:19:25.938 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33024 10 6452 1 2026-01-21 18:20:35.253 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:20:35.495 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:20:26.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59006 10 6452 1 2026-01-21 18:20:35.332 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:20:35.357 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:20:35.172 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:21:26.766 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44626 10 6452 1 2026-01-21 18:22:27.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38202 10 6452 1 2026-01-21 18:23:27.595 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47210 10 6452 1 2026-01-21 18:19:37.057 00:05:03.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-21 18:19:37.054 00:05:03.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-21 18:24:27.963 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:51710 10 6452 1 2026-01-21 18:25:35.421 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:25:35.157 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:25:35.258 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:25:28.364 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:46498 10 6452 1 2026-01-21 18:25:35.301 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:25:35.339 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:26:28.788 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52070 10 6452 1 2026-01-21 18:27:29.155 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46828 10 6452 1 2026-01-21 18:28:29.560 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41274 10 6452 1 2026-01-21 18:25:37.055 00:05:03.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-21 18:25:37.058 00:05:03.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-21 18:29:29.968 00:00:12.874 TCP 1.101.0.1:3000 -> 23.104.0.1:48506 10 6452 1 2026-01-21 18:30:35.423 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:30:35.430 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:30:35.534 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:30:35.346 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:30:35.340 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:30:32.882 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:52668 10 6452 1 2026-01-21 18:31:33.314 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 10 6452 1 2026-01-21 18:32:33.718 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44140 10 6452 1 2026-01-21 18:33:34.103 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52640 10 6452 1 2026-01-21 18:34:34.471 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35420 10 6452 1 2026-01-21 18:35:35.573 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:35:35.438 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:35:35.643 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:35:35.518 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:35:35.601 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:31:37.058 00:05:03.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-21 18:31:37.060 00:05:03.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-21 18:35:34.872 00:00:17.300 TCP 1.101.0.1:3000 -> 23.104.0.1:38130 10 6452 1 2026-01-21 18:36:42.211 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34238 10 6452 1 2026-01-21 18:37:42.624 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:37374 10 6452 1 2026-01-21 18:38:42.981 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:42412 10 6452 1 2026-01-21 18:39:43.394 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50502 10 6452 1 2026-01-21 18:40:35.887 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:40:35.581 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:40:35.488 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:40:35.617 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:40:35.804 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:40:43.799 00:00:21.144 TCP 1.101.0.1:3000 -> 23.104.0.1:42026 10 6452 1 2026-01-21 18:37:37.062 00:05:03.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-21 18:37:37.059 00:05:03.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-21 18:41:54.981 00:00:21.536 TCP 1.101.0.1:3000 -> 23.104.0.1:43956 10 6452 1 2026-01-21 18:43:06.563 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48664 12 6556 1 2026-01-21 18:44:06.975 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43910 10 6452 1 2026-01-21 18:45:07.378 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51872 10 6452 1 2026-01-21 18:45:35.916 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:45:35.668 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:45:35.682 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:45:35.554 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:45:35.834 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:46:07.778 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36666 10 6452 1 2026-01-21 18:47:08.190 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47342 10 6452 1 2026-01-21 18:43:37.065 00:05:03.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-21 18:43:37.062 00:05:03.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-21 18:48:08.591 00:00:14.147 TCP 1.101.0.1:3000 -> 23.104.0.1:38582 10 6452 1 2026-01-21 18:49:12.776 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59914 10 6452 1 2026-01-21 18:50:13.143 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41034 10 6452 1 2026-01-21 18:50:35.749 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:50:35.881 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:50:35.767 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:50:35.703 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:50:35.666 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:51:13.510 00:00:19.198 TCP 1.101.0.1:3000 -> 23.104.0.1:39608 10 6452 1 2026-01-21 18:52:22.751 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59868 10 6452 1 2026-01-21 18:53:23.153 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59840 10 6452 1 2026-01-21 18:49:37.066 00:05:03.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-21 18:49:37.065 00:05:03.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-21 18:54:23.517 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45906 10 6452 1 2026-01-21 18:55:23.929 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:33686 10 6452 1 2026-01-21 18:55:35.953 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-21 18:55:35.865 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-21 18:55:35.950 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-21 18:55:35.715 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:55:35.872 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-21 18:56:24.355 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36516 10 6452 1 2026-01-21 18:57:24.757 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:45770 10 6452 1 2026-01-21 18:58:25.191 00:00:18.921 TCP 1.101.0.1:3000 -> 23.104.0.1:48048 10 6452 1 Summary: total flows: 139, total bytes: 410652, total packets: 1012, avg bps: 867, avg pps: 0, avg bpp: 405 Time window: 2026-01-21 17:55:37 - 2026-01-21 18:58:44 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0058s User: 0.0000s Wall: 0.0013s flows/second: 106505.0 Runtime: 0.0013s