Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-22 20:58:50.959 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57956 10 6452 1 2026-01-22 20:55:37.714 00:05:03.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 20:55:37.717 00:05:03.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 20:59:51.369 00:00:13.944 TCP 1.101.0.1:3000 -> 23.104.0.1:50860 10 6452 1 2026-01-22 21:01:07.389 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:01:07.388 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:01:07.052 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:01:07.385 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:01:07.468 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:00:55.390 00:00:14.879 TCP 1.101.0.1:3000 -> 23.104.0.1:37880 10 6452 1 2026-01-22 21:02:00.319 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45830 10 6452 1 2026-01-22 21:03:00.726 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44658 10 6452 1 2026-01-22 21:04:01.138 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58378 10 6452 1 2026-01-22 21:05:01.548 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43178 10 6452 1 2026-01-22 21:01:37.716 00:05:03.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 21:01:37.719 00:05:03.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 21:06:07.813 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:06:07.329 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:06:07.604 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:06:07.576 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:06:07.730 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:06:01.952 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38804 10 6452 1 2026-01-22 21:07:02.359 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38948 10 6452 1 2026-01-22 21:08:02.762 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50184 10 6452 1 2026-01-22 21:09:03.177 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37814 10 6452 1 2026-01-22 21:10:03.585 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33086 10 6452 1 2026-01-22 21:11:07.550 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:11:07.456 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:11:07.225 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:11:07.493 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:11:07.468 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:11:03.989 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50316 10 6452 1 2026-01-22 21:07:37.721 00:05:03.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 21:07:37.718 00:05:03.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 21:12:04.395 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54650 10 6452 1 2026-01-22 21:13:04.805 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55732 10 6452 1 2026-01-22 21:14:05.226 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55452 10 6452 1 2026-01-22 21:15:05.632 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53034 10 6452 1 2026-01-22 21:16:07.257 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:16:07.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:16:07.109 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:16:07.002 00:00:00.050 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:16:07.175 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:16:06.060 00:00:15.316 TCP 1.101.0.1:3000 -> 23.104.0.1:38300 10 6452 1 2026-01-22 21:17:11.414 00:00:13.097 TCP 1.101.0.1:3000 -> 23.104.0.1:55912 10 6452 1 2026-01-22 21:13:37.721 00:05:03.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 21:13:37.720 00:05:03.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 21:18:14.563 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53314 10 6452 1 2026-01-22 21:19:14.926 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:36492 10 6452 1 2026-01-22 21:20:15.354 00:00:16.310 TCP 1.101.0.1:3000 -> 23.104.0.1:44084 10 6452 1 2026-01-22 21:21:07.665 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:21:07.783 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:21:07.588 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:21:07.560 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:21:07.643 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:21:21.707 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60112 10 6452 1 2026-01-22 21:22:22.115 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56436 12 6556 1 2026-01-22 21:23:22.525 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38676 10 6452 1 2026-01-22 21:19:37.722 00:05:03.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 21:19:37.719 00:05:03.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 21:24:22.927 00:00:14.757 TCP 1.101.0.1:3000 -> 23.104.0.1:34798 10 6452 1 2026-01-22 21:25:27.722 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38220 10 6452 1 2026-01-22 21:26:07.951 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:26:07.810 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:26:07.665 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:26:07.903 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:26:07.985 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:26:28.132 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:40836 12 10375 1 2026-01-22 21:27:28.617 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47114 10 6452 1 2026-01-22 21:28:28.984 00:00:10.488 TCP 1.101.0.1:3000 -> 23.104.0.1:37904 10 6452 1 2026-01-22 21:29:29.508 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46898 10 6452 1 2026-01-22 21:25:37.725 00:05:03.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 21:25:37.723 00:05:03.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 21:30:29.870 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36006 10 6452 1 2026-01-22 21:31:07.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:31:07.799 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:31:07.895 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:31:07.803 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:31:07.886 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:31:30.233 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42252 10 6452 1 2026-01-22 21:32:30.630 00:00:10.669 TCP 1.101.0.1:3000 -> 23.104.0.1:55616 10 6452 1 2026-01-22 21:33:31.336 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38998 10 6452 1 2026-01-22 21:34:31.754 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43170 10 6452 1 2026-01-22 21:31:37.726 00:05:03.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 21:35:32.167 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48832 10 6452 1 2026-01-22 21:31:37.725 00:05:03.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 21:36:08.129 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:36:08.299 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:36:08.162 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:36:08.191 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:36:08.045 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:36:32.533 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58370 10 6452 1 2026-01-22 21:37:32.938 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46628 10 6452 1 2026-01-22 21:38:33.352 00:00:16.041 TCP 1.101.0.1:3000 -> 23.104.0.1:52926 10 6452 1 2026-01-22 21:39:39.434 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59196 10 6452 1 2026-01-22 21:40:39.838 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:46566 10 6452 1 2026-01-22 21:41:08.216 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:41:08.253 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:41:08.127 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:41:08.172 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:41:08.256 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:37:37.728 00:05:03.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 21:37:37.731 00:05:03.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 21:41:40.265 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:48202 10 6452 1 2026-01-22 21:42:40.622 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33032 10 6452 1 2026-01-22 21:43:41.026 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46876 10 6452 1 2026-01-22 21:44:41.430 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56476 10 6452 1 2026-01-22 21:45:41.843 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:54044 10 6452 1 2026-01-22 21:46:08.544 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:46:08.654 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:46:08.002 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:46:08.758 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:46:08.841 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:46:42.271 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39176 10 6452 1 2026-01-22 21:43:37.731 00:05:03.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 21:43:37.735 00:05:03.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 21:47:42.672 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46986 10 6452 1 2026-01-22 21:48:43.106 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59792 10 6452 1 2026-01-22 21:49:43.464 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51888 10 6452 1 2026-01-22 21:50:43.872 00:00:12.059 TCP 1.101.0.1:3000 -> 23.104.0.1:53034 10 6452 1 2026-01-22 21:51:08.340 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:51:08.113 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:51:08.179 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:51:08.136 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:51:08.258 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:51:45.983 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58268 10 6452 1 2026-01-22 21:52:46.390 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:41934 10 6452 1 2026-01-22 21:49:37.735 00:05:03.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-22 21:49:37.737 00:05:03.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-22 21:53:46.779 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41068 10 6452 1 2026-01-22 21:54:47.184 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53008 10 6452 1 2026-01-22 21:55:47.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33994 10 6452 1 2026-01-22 21:56:08.717 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-22 21:56:08.581 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-22 21:56:08.497 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-22 21:56:08.518 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:56:08.634 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-22 21:56:47.988 00:00:11.551 TCP 1.101.0.1:3000 -> 23.104.0.1:35742 10 6452 1 2026-01-22 21:57:49.575 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44420 10 6452 1 Summary: total flows: 139, total bytes: 414575, total packets: 1014, avg bps: 886, avg pps: 0, avg bpp: 408 Time window: 2026-01-22 20:55:37 - 2026-01-22 21:57:59 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0063s User: 0.0009s Wall: 0.0019s flows/second: 73436.0 Runtime: 0.0019s