Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-27 18:58:51.216 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53862 10 6452 1 2026-01-27 18:59:51.622 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39786 10 6452 1 2026-01-27 19:00:52.025 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46214 10 6452 1 2026-01-27 19:01:52.432 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 10 6452 1 2026-01-27 19:02:52.839 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52492 10 6452 1 2026-01-27 19:03:39.857 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:03:39.856 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:03:39.542 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:03:39.920 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:03:40.005 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:03:53.267 00:00:10.860 TCP 1.101.0.1:3000 -> 23.104.0.1:37894 10 6452 1 2026-01-27 19:00:41.084 00:05:02.964 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 19:00:41.086 00:05:02.960 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 19:04:54.164 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43426 10 6452 1 2026-01-27 19:05:54.572 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49404 10 6452 1 2026-01-27 19:06:54.976 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55302 10 6452 1 2026-01-27 19:07:55.387 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40406 10 6452 1 2026-01-27 19:08:40.411 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:08:40.266 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:08:40.031 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:08:40.343 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:08:40.328 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:08:55.790 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:43980 10 6452 1 2026-01-27 19:09:56.214 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54516 10 6452 1 2026-01-27 19:06:41.088 00:05:02.959 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 19:06:41.085 00:05:02.964 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 19:10:56.616 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38730 10 6452 1 2026-01-27 19:11:56.986 00:00:15.993 TCP 1.101.0.1:3000 -> 23.104.0.1:58332 10 6452 1 2026-01-27 19:13:03.017 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48570 10 6452 1 2026-01-27 19:13:40.181 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:13:40.349 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:13:40.188 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:13:40.080 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:13:40.264 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:14:03.418 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43048 10 6452 1 2026-01-27 19:15:03.824 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53708 10 6452 1 2026-01-27 19:16:04.224 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38350 10 6452 1 2026-01-27 19:12:41.089 00:05:02.960 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 19:12:41.088 00:05:02.965 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 19:17:04.632 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56950 10 6452 1 2026-01-27 19:18:05.039 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55852 10 6452 1 2026-01-27 19:18:40.164 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:18:40.084 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:18:40.085 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:18:40.076 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:18:40.168 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:19:05.447 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50982 10 6452 1 2026-01-27 19:20:05.854 00:00:18.666 TCP 1.101.0.1:3000 -> 23.104.0.1:41800 10 6452 1 2026-01-27 19:21:14.584 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58090 10 6452 1 2026-01-27 19:22:14.950 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41196 10 6452 1 2026-01-27 19:18:41.091 00:05:02.963 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 19:18:41.092 00:05:02.958 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 19:23:15.363 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59588 10 6452 1 2026-01-27 19:23:39.917 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:23:40.417 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:23:40.332 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:23:40.254 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:23:40.335 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:24:15.768 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39070 10 6452 1 2026-01-27 19:25:16.180 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42724 10 6452 1 2026-01-27 19:26:16.582 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56956 10 6452 1 2026-01-27 19:27:16.985 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39486 10 6452 1 2026-01-27 19:28:17.353 00:00:17.102 TCP 1.101.0.1:3000 -> 23.104.0.1:42286 10 6452 1 2026-01-27 19:28:40.641 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:24:41.092 00:05:02.958 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 19:28:40.641 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:28:40.545 00:00:00.018 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:28:40.572 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:24:41.090 00:05:02.964 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 19:28:40.655 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:29:24.496 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53294 10 6452 1 2026-01-27 19:30:24.900 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44062 10 6452 1 2026-01-27 19:31:25.314 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:49002 12 10375 1 2026-01-27 19:32:25.807 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53132 10 6452 1 2026-01-27 19:33:26.221 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36578 10 6452 1 2026-01-27 19:33:40.473 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:33:40.478 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:33:40.389 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:33:40.579 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:33:40.663 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:34:26.627 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:60726 10 6452 1 2026-01-27 19:30:41.090 00:05:02.964 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 19:30:41.093 00:05:02.959 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 19:35:26.989 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36222 10 6452 1 2026-01-27 19:36:27.392 00:00:17.490 TCP 1.101.0.1:3000 -> 23.104.0.1:43092 10 6452 1 2026-01-27 19:37:34.933 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:45250 10 6452 1 2026-01-27 19:38:41.105 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:38:41.273 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:38:41.091 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:38:41.279 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:38:41.364 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:38:35.360 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48806 10 6452 1 2026-01-27 19:39:35.782 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60380 10 6452 1 2026-01-27 19:36:41.094 00:05:02.961 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 19:36:41.092 00:05:02.965 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 19:40:36.159 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40282 10 6452 1 2026-01-27 19:41:36.570 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46076 10 6452 1 2026-01-27 19:42:36.974 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42140 10 6452 1 2026-01-27 19:43:40.850 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:43:40.728 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:43:40.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:43:40.398 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:43:40.767 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:43:37.373 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39358 10 6452 1 2026-01-27 19:44:37.781 00:00:11.072 TCP 1.101.0.1:3000 -> 23.104.0.1:50280 10 6452 1 2026-01-27 19:45:38.892 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56568 10 6452 1 2026-01-27 19:42:41.109 00:05:02.947 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 19:42:41.106 00:05:02.953 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 19:46:39.310 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36424 10 6452 1 2026-01-27 19:47:39.729 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45232 10 6452 1 2026-01-27 19:48:40.930 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:48:40.994 00:00:00.045 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:48:40.695 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:48:40.684 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:48:40.767 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:48:40.106 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49728 10 6452 1 2026-01-27 19:49:40.512 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38728 10 6452 1 2026-01-27 19:50:40.917 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37676 10 6452 1 2026-01-27 19:51:41.319 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52826 10 6452 1 2026-01-27 19:48:41.110 00:05:02.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 19:48:41.108 00:05:02.956 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-27 19:52:41.737 00:00:10.618 TCP 1.101.0.1:3000 -> 23.104.0.1:35936 10 6452 1 2026-01-27 19:53:41.489 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:53:41.612 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:53:41.490 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:53:41.401 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:53:41.572 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:53:42.396 00:00:10.649 TCP 1.101.0.1:3000 -> 23.104.0.1:36532 10 6452 1 2026-01-27 19:54:43.125 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36264 10 6452 1 2026-01-27 19:55:43.530 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36022 10 6452 1 2026-01-27 19:56:43.936 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58758 10 6452 1 2026-01-27 19:57:44.352 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33020 10 6452 1 2026-01-27 19:58:41.139 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-27 19:54:41.112 00:05:02.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-27 19:58:41.006 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-27 19:58:40.933 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:58:40.920 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-27 19:58:41.003 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-27 19:54:41.108 00:05:02.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 414471, total packets: 1012, avg bps: 907, avg pps: 0, avg bpp: 409 Time window: 2026-01-27 18:58:51 - 2026-01-27 19:59:44 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0023s Wall: 0.0044s flows/second: 31341.2 Runtime: 0.0045s