Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-19 17:58:50.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33992 10 6452 1 2025-12-19 17:59:22.873 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:59:22.855 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:59:22.797 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:59:22.752 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:59:22.792 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:59:50.995 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41870 10 6452 1 2025-12-19 18:00:51.401 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53426 10 6452 1 2025-12-19 17:57:18.721 00:05:02.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 17:57:18.719 00:05:02.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 18:01:51.812 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48568 10 6452 1 2025-12-19 18:02:52.220 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36944 10 6452 1 2025-12-19 18:03:52.623 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34278 10 6452 1 2025-12-19 18:04:22.847 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:04:22.835 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:04:22.832 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:04:22.734 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:04:22.765 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:04:53.026 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48568 10 6452 1 2025-12-19 18:05:53.426 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39798 10 6452 1 2025-12-19 18:06:53.830 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57684 10 6452 1 2025-12-19 18:03:18.721 00:05:02.457 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 18:03:18.719 00:05:02.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 18:07:54.229 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36528 10 6452 1 2025-12-19 18:08:54.636 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39462 10 6452 1 2025-12-19 18:09:23.142 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:09:23.160 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:09:23.163 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:09:23.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:09:23.302 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:09:55.037 00:00:10.646 TCP 1.101.0.1:3000 -> 23.104.0.1:41218 10 6452 1 2025-12-19 18:10:55.721 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42924 10 6452 1 2025-12-19 18:11:56.130 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56322 10 6452 1 2025-12-19 18:12:56.541 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47364 10 6452 1 2025-12-19 18:09:18.724 00:05:02.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 18:09:18.721 00:05:02.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 18:13:56.966 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59854 10 6452 1 2025-12-19 18:14:23.363 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:14:23.287 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:14:23.278 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:14:22.960 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:14:23.281 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:14:57.394 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:36682 10 6452 1 2025-12-19 18:15:57.825 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39712 10 6452 1 2025-12-19 18:16:58.233 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:52128 10 6452 1 2025-12-19 18:17:58.666 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33090 10 6452 1 2025-12-19 18:18:59.101 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41048 10 6452 1 2025-12-19 18:19:23.156 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:15:18.732 00:05:02.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 18:19:23.042 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:19:23.074 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:19:23.054 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:19:23.138 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:15:18.731 00:05:02.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 18:19:59.512 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59118 10 6452 1 2025-12-19 18:20:59.919 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:42516 12 10375 1 2025-12-19 18:22:00.404 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40508 10 6452 1 2025-12-19 18:23:00.806 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49358 10 6452 1 2025-12-19 18:24:01.215 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45290 10 6452 1 2025-12-19 18:24:23.331 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:24:23.319 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:24:23.174 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:24:22.904 00:00:00.034 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:24:23.249 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:25:01.614 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56830 10 6452 1 2025-12-19 18:21:18.732 00:05:02.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 18:21:18.734 00:05:02.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 18:26:02.021 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56454 10 6452 1 2025-12-19 18:27:02.424 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52384 10 6452 1 2025-12-19 18:28:02.827 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57892 10 6452 1 2025-12-19 18:29:03.228 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58360 10 6452 1 2025-12-19 18:29:23.475 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:29:23.427 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:29:23.219 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:29:23.422 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:29:23.505 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:30:03.636 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59688 10 6452 1 2025-12-19 18:31:04.033 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43886 10 6452 1 2025-12-19 18:27:18.735 00:05:02.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 18:27:18.733 00:05:02.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 18:32:04.436 00:00:10.760 TCP 1.101.0.1:3000 -> 23.104.0.1:47078 10 6452 1 2025-12-19 18:33:05.250 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34678 10 6452 1 2025-12-19 18:34:05.651 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42368 10 6452 1 2025-12-19 18:34:23.407 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:34:23.467 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:34:23.344 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:34:23.326 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:34:23.211 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:35:06.075 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38542 10 6452 1 2025-12-19 18:36:06.434 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45740 10 6452 1 2025-12-19 18:37:06.839 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41032 10 6452 1 2025-12-19 18:33:18.737 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 18:33:18.734 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 18:38:07.253 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34206 10 6452 1 2025-12-19 18:39:07.617 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:44898 10 6452 1 2025-12-19 18:39:23.469 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:39:23.508 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:39:23.591 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:39:23.653 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:39:23.674 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:40:07.972 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:42974 10 6452 1 2025-12-19 18:41:08.394 00:00:11.316 TCP 1.101.0.1:3000 -> 23.104.0.1:57388 10 6452 1 2025-12-19 18:42:09.746 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44956 10 6452 1 2025-12-19 18:39:18.738 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 18:43:10.151 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53890 10 6452 1 2025-12-19 18:39:18.736 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 18:44:23.976 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:44:23.724 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:44:23.779 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:44:23.578 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:44:10.558 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52338 10 6452 1 2025-12-19 18:44:23.660 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:45:10.959 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36274 10 6452 1 2025-12-19 18:46:11.358 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45000 10 6452 1 2025-12-19 18:47:11.766 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53942 10 6452 1 2025-12-19 18:48:12.176 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50020 10 6452 1 2025-12-19 18:49:23.768 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:45:18.737 00:05:02.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 18:49:23.849 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:45:18.740 00:05:02.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 18:49:12.579 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40220 10 6452 1 2025-12-19 18:49:23.852 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:49:23.640 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:49:23.685 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:50:12.978 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:55592 10 6452 1 2025-12-19 18:51:13.403 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58078 10 6452 1 2025-12-19 18:52:13.764 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:47392 10 6452 1 2025-12-19 18:53:14.149 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58522 10 6452 1 2025-12-19 18:54:23.983 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:54:23.900 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:54:23.798 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:54:23.421 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:54:14.589 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39620 10 6452 1 2025-12-19 18:54:23.900 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:51:18.738 00:05:02.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 18:51:18.741 00:05:02.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 18:55:14.959 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45388 10 6452 1 2025-12-19 18:56:15.359 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58244 10 6452 1 2025-12-19 18:57:15.764 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41354 10 6452 1 2025-12-19 18:58:16.187 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38370 10 6452 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 918, avg pps: 0, avg bpp: 411 Time window: 2025-12-19 17:57:18 - 2025-12-19 18:58:26 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0020s Wall: 0.0032s flows/second: 44431.2 Runtime: 0.0032s