Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-27 08:59:01.926 00:00:20.256 TCP 1.101.0.1:3000 -> 23.104.0.1:55918 10 6452 1 2026-01-27 09:00:12.224 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:44592 10 6452 1 2026-01-27 09:01:12.621 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46450 10 6452 1 2026-01-27 09:02:12.986 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32970 10 6452 1 2026-01-27 09:03:13.387 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:32818 10 6452 1 2026-01-27 09:03:29.011 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:03:29.302 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:03:29.014 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:03:29.002 00:00:00.047 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:03:29.085 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:04:13.743 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50648 10 6452 1 2026-01-27 09:00:40.743 00:05:02.999 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 09:00:40.740 00:05:03.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 09:05:14.156 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49192 10 6452 1 2026-01-27 09:06:14.525 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37454 10 6452 1 2026-01-27 09:07:14.923 00:00:19.567 TCP 1.101.0.1:3000 -> 23.104.0.1:40668 10 6452 1 2026-01-27 09:08:28.677 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:08:28.761 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:08:28.774 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:08:28.845 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:08:28.857 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:08:24.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36390 10 6452 1 2026-01-27 09:09:24.951 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43134 10 6452 1 2026-01-27 09:10:25.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40056 10 6452 1 2026-01-27 09:06:40.744 00:05:03.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 09:06:40.746 00:05:02.997 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 09:11:25.765 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34688 10 6452 1 2026-01-27 09:12:26.185 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43400 10 6452 1 2026-01-27 09:13:27.904 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:13:28.317 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:13:28.007 00:00:00.049 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:13:28.085 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:13:28.168 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:13:26.588 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42914 10 6452 1 2026-01-27 09:14:26.954 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35440 10 6452 1 2026-01-27 09:15:27.363 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38922 10 6452 1 2026-01-27 09:16:27.763 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36246 11 6492 1 2026-01-27 09:12:40.744 00:05:03.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 09:12:40.747 00:05:02.997 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 09:17:28.177 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43774 10 6452 1 2026-01-27 09:18:28.467 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:18:28.382 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:18:28.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:18:29.186 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:18:28.384 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:18:28.584 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:41536 10 6452 1 2026-01-27 09:19:28.974 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 10 6452 1 2026-01-27 09:20:29.396 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:45280 10 6452 1 2026-01-27 09:21:29.770 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38286 10 6452 1 2026-01-27 09:22:30.187 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:52104 10 6452 1 2026-01-27 09:18:40.749 00:05:02.997 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 09:18:40.745 00:05:03.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 09:23:28.409 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:23:28.236 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:23:28.080 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:23:28.113 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:23:28.197 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:23:30.620 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53012 10 6452 1 2026-01-27 09:24:31.035 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35842 10 6452 1 2026-01-27 09:25:31.441 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59960 10 6452 1 2026-01-27 09:26:31.855 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34676 10 6452 1 2026-01-27 09:27:32.271 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47082 10 6452 1 2026-01-27 09:28:28.351 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:28:28.370 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:28:28.368 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:28:28.384 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:28:28.269 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:24:40.750 00:05:02.997 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 09:28:32.678 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33888 10 6452 1 2026-01-27 09:24:40.748 00:05:03.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 09:29:33.111 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:46566 12 10375 1 2026-01-27 09:30:33.552 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39882 10 6452 1 2026-01-27 09:31:33.952 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40260 10 6452 1 2026-01-27 09:32:34.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51618 10 6452 1 2026-01-27 09:33:28.497 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:33:28.540 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:33:28.324 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:33:28.504 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:33:28.587 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:33:34.762 00:00:16.268 TCP 1.101.0.1:3000 -> 23.104.0.1:32848 10 6452 1 2026-01-27 09:30:40.751 00:05:02.997 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 09:30:40.748 00:05:03.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 09:34:41.084 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40350 10 6452 1 2026-01-27 09:35:41.488 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43246 10 6452 1 2026-01-27 09:36:41.894 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47520 10 6452 1 2026-01-27 09:37:42.311 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55814 10 6452 1 2026-01-27 09:38:28.529 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:38:28.698 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:38:28.369 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:38:28.696 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:38:28.780 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:38:42.714 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:38780 10 6452 1 2026-01-27 09:39:43.140 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56346 10 6452 1 2026-01-27 09:36:40.750 00:05:03.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 09:36:40.752 00:05:02.999 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 09:40:43.535 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35992 10 6452 1 2026-01-27 09:41:43.941 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58934 10 6452 1 2026-01-27 09:42:44.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50496 10 6452 1 2026-01-27 09:43:28.683 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:43:28.591 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:43:28.751 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:43:28.684 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:43:28.766 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:43:44.768 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33910 10 6452 1 2026-01-27 09:44:45.200 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35716 10 6452 1 2026-01-27 09:45:45.608 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49224 10 6452 1 2026-01-27 09:42:40.769 00:05:02.988 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 09:42:40.768 00:05:02.992 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 09:46:45.972 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49458 10 6452 1 2026-01-27 09:47:46.382 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:58834 10 6452 1 2026-01-27 09:48:28.859 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:48:28.664 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:48:28.836 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:48:28.873 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:48:28.776 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:48:46.806 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39082 10 6452 1 2026-01-27 09:49:47.230 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55602 10 6452 1 2026-01-27 09:50:47.631 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52318 10 6452 1 2026-01-27 09:51:48.036 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:51226 10 6452 1 2026-01-27 09:48:40.768 00:05:02.994 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 09:48:40.771 00:05:02.988 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 09:52:48.409 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48980 10 6452 1 2026-01-27 09:53:28.834 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:53:29.056 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:53:28.959 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:53:28.926 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:53:29.009 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:53:48.812 00:00:14.529 TCP 1.101.0.1:3000 -> 23.104.0.1:48994 12 10369 1 2026-01-27 09:54:53.443 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55292 10 6452 1 2026-01-27 09:55:53.846 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:44068 10 6452 1 2026-01-27 09:56:54.278 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:48068 10 6452 1 2026-01-27 09:57:54.663 00:00:12.756 TCP 1.101.0.1:3000 -> 23.104.0.1:41746 10 6452 1 2026-01-27 09:58:29.837 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 09:58:29.426 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 09:58:29.728 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 09:58:29.344 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:58:29.755 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 09:54:40.775 00:05:02.985 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 09:54:40.772 00:05:02.991 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 418428, total packets: 1015, avg bps: 919, avg pps: 0, avg bpp: 412 Time window: 2026-01-27 08:59:01 - 2026-01-27 09:59:43 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0053s User: 0.0009s Wall: 0.0019s flows/second: 73233.0 Runtime: 0.0019s