Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2026-01-13 18:58:57.683 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60234 10 6452 1 2026-01-13 18:55:32.300 00:05:02.958 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 18:59:58.113 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41526 10 6452 1 2026-01-13 19:00:58.476 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57626 10 6452 1 2026-01-13 19:01:25.664 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:01:26.070 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:01:26.111 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:01:25.989 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:01:26.166 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:01:58.876 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47042 10 6452 1 2026-01-13 19:02:59.319 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53238 10 6452 1 2026-01-13 19:03:59.725 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57680 10 6452 1 2026-01-13 19:00:32.302 00:05:02.953 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 19:05:00.139 00:00:11.213 TCP 1.101.0.1:3000 -> 23.104.0.1:51498 10 6452 1 2026-01-13 19:01:32.300 00:05:02.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 19:06:01.427 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51876 10 6452 1 2026-01-13 19:06:25.964 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:06:26.330 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:06:26.205 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:06:26.248 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:06:26.202 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:07:01.835 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42630 10 6452 1 2026-01-13 19:08:02.258 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48906 10 6452 1 2026-01-13 19:09:02.677 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33488 10 6452 1 2026-01-13 19:10:03.059 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44390 10 6452 1 2026-01-13 19:06:32.309 00:05:02.948 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 19:11:03.420 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33924 10 6452 1 2026-01-13 19:11:27.098 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:11:27.056 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:11:27.042 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:11:27.133 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:11:27.125 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:07:32.305 00:05:02.953 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 19:12:03.789 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33492 10 6452 1 2026-01-13 19:13:04.154 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46802 10 6452 1 2026-01-13 19:14:04.558 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35708 10 6452 1 2026-01-13 19:15:04.967 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60912 10 6452 1 2026-01-13 19:16:05.372 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48918 10 6452 1 2026-01-13 19:16:26.292 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:16:26.189 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:16:26.181 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:16:26.357 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:16:26.264 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:12:32.310 00:05:02.948 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 19:17:05.777 00:00:14.719 TCP 1.101.0.1:3000 -> 23.104.0.1:52904 10 6452 1 2026-01-13 19:13:32.306 00:05:02.953 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 19:18:10.589 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39702 10 6452 1 2026-01-13 19:19:11.001 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60994 10 6452 1 2026-01-13 19:20:11.411 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48576 10 6452 1 2026-01-13 19:21:11.775 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36460 10 6452 1 2026-01-13 19:21:26.573 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:21:26.501 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:21:26.398 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:21:26.492 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:21:26.497 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:22:12.181 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43638 10 6452 1 2026-01-13 19:18:32.310 00:05:02.948 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 19:23:12.578 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41358 10 6452 1 2026-01-13 19:19:32.307 00:05:02.953 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 19:24:12.985 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:47556 10 6452 1 2026-01-13 19:25:13.348 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46788 10 6452 1 2026-01-13 19:26:13.706 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42556 10 6452 1 2026-01-13 19:26:26.743 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:26:26.582 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:26:26.656 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:26:26.660 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:26:26.654 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:27:14.120 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53700 10 6452 1 2026-01-13 19:28:14.530 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34040 10 6452 1 2026-01-13 19:24:32.333 00:05:02.928 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 19:29:14.933 00:00:10.431 TCP 1.101.0.1:3000 -> 23.104.0.1:35484 12 10375 1 2026-01-13 19:25:32.330 00:05:02.934 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 19:30:15.399 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44336 10 6452 1 2026-01-13 19:31:26.581 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:31:26.486 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:31:26.652 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:31:15.807 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53772 10 6452 1 2026-01-13 19:31:26.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:31:26.663 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:32:16.210 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56130 10 6452 1 2026-01-13 19:33:16.609 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55912 10 6452 1 2026-01-13 19:34:16.974 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:53518 10 6452 1 2026-01-13 19:30:32.334 00:05:02.929 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 19:35:17.370 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36734 10 6452 1 2026-01-13 19:31:32.331 00:05:02.934 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 19:36:26.986 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:36:26.713 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:36:26.735 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:36:26.904 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:36:26.590 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:36:17.782 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57404 10 6452 1 2026-01-13 19:37:18.193 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46352 10 6452 1 2026-01-13 19:38:18.599 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57790 10 6452 1 2026-01-13 19:39:18.999 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40998 10 6452 1 2026-01-13 19:40:19.427 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58516 10 6452 1 2026-01-13 19:36:32.335 00:05:02.930 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 19:41:26.907 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:41:26.860 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:41:26.905 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:41:26.812 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:41:19.823 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51280 10 6452 1 2026-01-13 19:41:26.988 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:37:32.333 00:05:02.936 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 19:42:20.233 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40976 10 6452 1 2026-01-13 19:43:20.643 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55144 10 6452 1 2026-01-13 19:44:21.056 00:00:18.447 TCP 1.101.0.1:3000 -> 23.104.0.1:54326 10 6452 1 2026-01-13 19:45:29.542 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38692 10 6452 1 2026-01-13 19:46:26.893 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:46:26.813 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:46:26.859 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:46:26.810 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:46:26.917 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:42:32.337 00:05:02.931 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 19:46:29.946 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40046 10 6452 1 2026-01-13 19:43:32.333 00:05:02.936 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 19:47:30.359 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58636 10 6452 1 2026-01-13 19:48:30.762 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40880 10 6452 1 2026-01-13 19:49:31.170 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33710 10 6452 1 2026-01-13 19:50:31.526 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56328 10 6452 1 2026-01-13 19:51:26.915 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:51:26.867 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:51:26.977 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:51:26.917 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:51:27.060 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:51:31.929 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36180 10 6452 1 2026-01-13 19:48:32.338 00:05:02.930 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2026-01-13 19:52:32.341 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:47472 11 6504 1 2026-01-13 19:49:32.335 00:05:02.935 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2026-01-13 19:53:32.823 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36078 10 6452 1 2026-01-13 19:54:33.188 00:00:27.847 TCP 1.101.0.1:3000 -> 23.104.0.1:58874 10 6452 1 2026-01-13 19:55:51.126 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:43786 10 6452 1 2026-01-13 19:56:27.934 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2026-01-13 19:56:27.883 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:56:27.927 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2026-01-13 19:56:28.060 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2026-01-13 19:56:28.012 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2026-01-13 19:56:51.484 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36882 10 6452 1 2026-01-13 19:57:51.891 00:00:13.099 TCP 1.101.0.1:3000 -> 23.104.0.1:52072 12 6556 1 2026-01-13 19:54:32.339 00:05:02.930 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 Summary: total flows: 139, total bytes: 414627, total packets: 1015, avg bps: 863, avg pps: 0, avg bpp: 408 Time window: 2026-01-13 18:55:32 - 2026-01-13 19:59:35 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0050s User: 0.0008s Wall: 0.0020s flows/second: 68204.1 Runtime: 0.0021s