Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-19 22:59:02.578 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51400 10 6452 1 2025-12-19 22:59:28.997 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 22:59:28.709 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 22:59:28.534 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 22:59:28.902 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 22:59:28.984 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:00:02.985 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44010 10 6452 1 2025-12-19 23:01:03.347 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52704 10 6452 1 2025-12-19 22:57:18.839 00:05:02.460 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 22:57:18.837 00:05:02.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 23:02:03.706 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:34014 10 6452 1 2025-12-19 23:03:04.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34986 10 6452 1 2025-12-19 23:04:04.550 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39460 10 6452 1 2025-12-19 23:04:28.922 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 23:04:28.763 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 23:04:28.799 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:04:29.055 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:04:29.139 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:05:04.976 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35668 10 6452 1 2025-12-19 23:06:05.380 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58740 10 6452 1 2025-12-19 23:07:05.783 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:38716 10 6452 1 2025-12-19 23:03:18.838 00:05:02.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 23:03:18.840 00:05:02.460 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 23:08:06.161 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38780 10 6452 1 2025-12-19 23:09:06.571 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43352 10 6452 1 2025-12-19 23:09:29.545 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 23:09:29.548 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 23:09:29.325 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:09:29.556 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:09:29.640 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:10:06.980 00:00:11.691 TCP 1.101.0.1:3000 -> 23.104.0.1:47456 10 6452 1 2025-12-19 23:11:08.709 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45492 10 6452 1 2025-12-19 23:12:09.112 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60086 10 6452 1 2025-12-19 23:13:09.506 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54948 10 6452 1 2025-12-19 23:09:18.838 00:05:02.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 23:09:18.841 00:05:02.460 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 23:14:09.915 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53486 10 6452 1 2025-12-19 23:14:29.089 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 23:14:28.880 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 23:14:29.107 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:14:29.143 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:14:29.226 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:15:10.320 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48132 10 6452 1 2025-12-19 23:16:10.720 00:00:10.526 TCP 1.101.0.1:3000 -> 23.104.0.1:35398 11 6504 1 2025-12-19 23:17:11.284 00:00:10.778 TCP 1.101.0.1:3000 -> 23.104.0.1:34720 10 6452 1 2025-12-19 23:18:12.110 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49730 10 6452 1 2025-12-19 23:15:18.842 00:05:02.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 23:15:18.844 00:05:02.463 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 23:19:12.472 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41930 10 6452 1 2025-12-19 23:19:29.310 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:19:29.360 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 23:19:29.453 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 23:19:29.333 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:19:29.393 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:20:12.872 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47808 10 6452 1 2025-12-19 23:21:13.272 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54100 10 6452 1 2025-12-19 23:22:13.677 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42278 10 6452 1 2025-12-19 23:23:14.058 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52982 10 6452 1 2025-12-19 23:24:14.461 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59192 10 6452 1 2025-12-19 23:24:29.266 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:24:29.257 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 23:24:29.265 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 23:24:29.130 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:24:29.350 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:21:18.844 00:05:02.463 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 23:21:18.843 00:05:02.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 23:25:14.866 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44838 10 6452 1 2025-12-19 23:26:15.280 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35116 10 6452 1 2025-12-19 23:27:15.684 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38066 10 6452 1 2025-12-19 23:28:16.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53700 10 6452 1 2025-12-19 23:29:29.312 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:29:16.511 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36558 10 6452 1 2025-12-19 23:29:29.317 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 23:29:29.389 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 23:29:29.363 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:29:29.394 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:30:16.909 00:00:11.199 TCP 1.101.0.1:3000 -> 23.104.0.1:35524 10 6452 1 2025-12-19 23:27:18.846 00:05:02.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 23:27:18.843 00:05:02.470 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 23:31:18.148 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:45214 12 10375 1 2025-12-19 23:32:18.625 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38426 10 6452 1 2025-12-19 23:33:19.021 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53560 10 6452 1 2025-12-19 23:34:29.603 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 23:34:29.684 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 23:34:29.462 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:34:29.698 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:34:19.420 00:00:10.469 TCP 1.101.0.1:3000 -> 23.104.0.1:38062 10 6452 1 2025-12-19 23:34:29.781 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:35:19.930 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:58308 10 6452 1 2025-12-19 23:36:20.352 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 10 6452 1 2025-12-19 23:33:18.849 00:05:02.463 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 23:33:18.846 00:05:02.469 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 23:37:20.752 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51120 10 6452 1 2025-12-19 23:38:21.179 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44032 10 6452 1 2025-12-19 23:39:29.501 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:39:29.512 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 23:39:29.293 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 23:39:29.450 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:39:29.419 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:39:21.546 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40044 10 6452 1 2025-12-19 23:40:21.958 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:55308 12 10375 1 2025-12-19 23:41:22.444 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34946 10 6452 1 2025-12-19 23:42:22.803 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53842 10 6452 1 2025-12-19 23:39:18.849 00:05:02.463 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 23:39:18.849 00:05:02.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 23:43:23.215 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50364 10 6452 1 2025-12-19 23:44:29.664 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 23:44:29.655 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 23:44:29.748 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:44:29.549 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:44:29.631 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:44:23.619 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34400 10 6452 1 2025-12-19 23:45:24.030 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51882 10 6452 1 2025-12-19 23:46:24.431 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48098 10 6452 1 2025-12-19 23:47:24.836 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:54186 10 6452 1 2025-12-19 23:48:25.273 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56460 10 6452 1 2025-12-19 23:45:18.848 00:05:02.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 23:45:18.850 00:05:02.464 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 23:49:29.705 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 23:49:29.786 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 23:49:29.795 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:49:29.838 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:49:29.921 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:49:25.678 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60444 10 6452 1 2025-12-19 23:50:26.094 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56372 10 6452 1 2025-12-19 23:51:26.499 00:00:11.043 TCP 1.101.0.1:3000 -> 23.104.0.1:38248 10 6452 1 2025-12-19 23:52:27.580 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53412 10 6452 1 2025-12-19 23:53:27.980 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43474 10 6452 1 2025-12-19 23:54:29.862 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 23:54:29.705 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 23:54:29.748 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:54:29.696 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 23:54:29.779 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 23:54:28.388 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43966 10 6452 1 2025-12-19 23:51:18.852 00:05:02.463 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 23:51:18.849 00:05:02.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 23:55:28.804 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41124 10 6452 1 2025-12-19 23:56:29.212 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43302 10 6452 1 2025-12-19 23:57:29.617 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35326 10 6452 1 2025-12-19 23:58:29.979 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37536 10 6452 1 Summary: total flows: 140, total bytes: 424898, total packets: 1025, avg bps: 923, avg pps: 0, avg bpp: 414 Time window: 2025-12-19 22:57:18 - 2025-12-19 23:58:40 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0036s User: 0.0027s Wall: 0.0020s flows/second: 69131.5 Runtime: 0.0020s