Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-22 03:58:41.230 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59222 10 6452 1 2026-01-22 03:55:37.302 00:05:03.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 03:55:37.300 00:05:03.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 03:59:41.635 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46750 10 6452 1 2026-01-22 04:00:46.837 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:00:46.888 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:00:46.625 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:00:46.753 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:00:46.890 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:00:42.041 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58732 10 6452 1 2026-01-22 04:01:42.451 00:00:10.935 TCP 1.101.0.1:3000 -> 23.104.0.1:48488 10 6452 1 2026-01-22 04:02:43.440 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:34386 10 6452 1 2026-01-22 04:03:43.903 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51100 10 6452 1 2026-01-22 04:04:44.318 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:34912 10 6452 1 2026-01-22 04:01:37.303 00:05:03.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 04:01:37.305 00:05:03.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 04:05:47.178 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:05:46.961 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:05:47.227 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:05:46.863 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:05:47.095 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:05:44.687 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49266 10 6452 1 2026-01-22 04:06:45.111 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53096 10 6452 1 2026-01-22 04:07:45.474 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37922 10 6452 1 2026-01-22 04:08:45.874 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48644 10 6452 1 2026-01-22 04:09:46.274 00:00:11.115 TCP 1.101.0.1:3000 -> 23.104.0.1:38122 10 6452 1 2026-01-22 04:10:47.145 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:10:47.072 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:10:47.063 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:10:46.893 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:10:47.062 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:10:47.453 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54876 10 6452 1 2026-01-22 04:07:37.304 00:05:03.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 04:07:37.306 00:05:03.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 04:11:47.868 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53156 10 6452 1 2026-01-22 04:12:48.277 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35976 10 6452 1 2026-01-22 04:13:48.679 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35196 10 6452 1 2026-01-22 04:14:49.102 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44760 10 6452 1 2026-01-22 04:15:48.221 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:15:48.343 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:15:48.155 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:15:47.094 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:15:48.139 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:15:49.517 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54460 10 6452 1 2026-01-22 04:16:49.882 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34126 10 6452 1 2026-01-22 04:13:37.306 00:05:03.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 04:13:37.309 00:05:03.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 04:17:50.346 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:51918 10 6452 1 2026-01-22 04:18:50.720 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39506 10 6452 1 2026-01-22 04:19:51.131 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50956 10 6452 1 2026-01-22 04:20:47.293 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:20:47.211 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:20:46.988 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:20:47.211 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:20:47.282 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:20:51.539 00:00:21.856 TCP 1.101.0.1:3000 -> 23.104.0.1:45262 10 6452 1 2026-01-22 04:22:03.495 00:00:11.564 TCP 1.101.0.1:3000 -> 23.104.0.1:46434 10 6452 1 2026-01-22 04:23:05.117 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35024 10 6452 1 2026-01-22 04:19:37.310 00:05:03.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 04:19:37.308 00:05:03.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 04:24:05.521 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41938 10 6452 1 2026-01-22 04:25:05.927 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36788 10 6452 1 2026-01-22 04:25:47.524 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:25:47.345 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:25:47.534 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:25:47.518 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:25:47.442 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:26:06.353 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47328 10 6452 1 2026-01-22 04:27:06.750 00:00:10.875 TCP 1.101.0.1:3000 -> 23.104.0.1:54326 10 6452 1 2026-01-22 04:28:07.667 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46216 10 6452 1 2026-01-22 04:29:08.102 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51752 10 6452 1 2026-01-22 04:25:37.311 00:05:03.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 04:25:37.309 00:05:03.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 04:30:08.500 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53650 10 6452 1 2026-01-22 04:30:47.495 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:30:47.582 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:30:47.552 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:30:47.294 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:30:47.377 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:31:08.898 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54194 10 6452 1 2026-01-22 04:32:09.306 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44316 10 6452 1 2026-01-22 04:33:09.711 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44824 10 6452 1 2026-01-22 04:34:10.120 00:00:13.167 TCP 1.101.0.1:3000 -> 23.104.0.1:36840 10 6452 1 2026-01-22 04:35:13.401 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35152 10 6452 1 2026-01-22 04:31:37.312 00:05:03.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 04:35:49.602 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:35:49.147 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:35:48.817 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:35:49.665 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:31:37.309 00:05:03.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 04:35:49.747 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:36:13.806 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46592 10 6452 1 2026-01-22 04:37:14.210 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48480 10 6452 1 2026-01-22 04:38:14.573 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50716 10 6452 1 2026-01-22 04:39:14.979 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39400 10 6452 1 2026-01-22 04:40:15.347 00:00:10.801 TCP 1.101.0.1:3000 -> 23.104.0.1:55332 10 6452 1 2026-01-22 04:40:47.828 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:40:47.692 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:40:47.558 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:40:47.618 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:40:47.702 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:41:16.189 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49898 10 6452 1 2026-01-22 04:37:37.312 00:05:03.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 04:37:37.315 00:05:03.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 04:42:16.601 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:39878 10 6452 1 2026-01-22 04:43:16.991 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48404 10 6452 1 2026-01-22 04:44:17.396 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49546 10 6452 1 2026-01-22 04:45:17.804 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45840 10 6452 1 2026-01-22 04:45:47.958 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:45:47.850 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:45:47.806 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:45:47.535 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:45:47.876 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:46:18.215 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53714 10 6452 1 2026-01-22 04:47:18.622 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60680 10 6452 1 2026-01-22 04:43:37.314 00:05:03.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 04:43:37.312 00:05:03.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 04:48:19.027 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 10 6452 1 2026-01-22 04:49:19.387 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42836 10 6452 1 2026-01-22 04:50:19.791 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43838 10 6452 1 2026-01-22 04:50:48.006 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:50:47.760 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:50:47.839 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:50:47.778 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:50:47.923 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:51:20.190 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33424 10 6452 1 2026-01-22 04:52:20.600 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57904 10 6452 1 2026-01-22 04:53:20.969 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48060 10 6452 1 2026-01-22 04:49:37.318 00:05:03.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 04:49:37.315 00:05:03.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 04:54:21.380 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55328 10 6452 1 2026-01-22 04:55:21.781 00:00:22.657 TCP 1.101.0.1:3000 -> 23.104.0.1:56314 10 6452 1 2026-01-22 04:55:48.728 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 04:55:48.641 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 04:55:48.648 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 04:55:48.620 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:55:48.646 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 04:56:34.522 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:53576 10 6452 1 2026-01-22 04:57:35.023 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49480 10 6452 1 2026-01-22 04:58:35.423 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45014 10 6452 1 Summary: total flows: 140, total bytes: 417000, total packets: 1020, avg bps: 880, avg pps: 0, avg bpp: 408 Time window: 2026-01-22 03:55:37 - 2026-01-22 04:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0047s User: 0.0009s Wall: 0.0025s flows/second: 55754.1 Runtime: 0.0025s