Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-20 00:58:53.923 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42678 10 6452 1 2025-12-20 00:59:31.447 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 00:59:31.116 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 00:59:31.375 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 00:59:31.437 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 00:59:31.365 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 00:59:54.347 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48790 10 6452 1 2025-12-20 01:00:54.712 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37624 10 6452 1 2025-12-20 00:57:18.874 00:05:02.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 00:57:18.870 00:05:02.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 01:01:55.099 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56830 10 6452 1 2025-12-20 01:02:55.459 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37988 10 6452 1 2025-12-20 01:03:55.865 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53082 10 6452 1 2025-12-20 01:04:31.457 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 01:04:31.528 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 01:04:31.396 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 01:04:31.542 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:04:31.374 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:04:56.270 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35516 10 6452 1 2025-12-20 01:05:56.677 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42684 10 6452 1 2025-12-20 01:06:57.112 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44716 10 6452 1 2025-12-20 01:03:18.872 00:05:02.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 01:03:18.874 00:05:02.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 01:07:57.514 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41360 10 6452 1 2025-12-20 01:08:57.883 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36604 10 6452 1 2025-12-20 01:09:31.337 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 01:09:31.390 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 01:09:30.997 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:09:31.393 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:09:31.475 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 01:09:58.283 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51112 10 6452 1 2025-12-20 01:10:58.694 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43662 10 6452 1 2025-12-20 01:11:59.120 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42072 10 6452 1 2025-12-20 01:12:59.524 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43298 10 6452 1 2025-12-20 01:09:18.880 00:05:02.464 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 01:09:18.876 00:05:02.469 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 01:13:59.933 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:36036 10 6452 1 2025-12-20 01:14:31.459 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 01:14:31.520 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 01:14:31.463 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:14:31.566 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:14:31.648 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 01:15:00.316 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60902 10 6452 1 2025-12-20 01:16:00.721 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57424 10 6452 1 2025-12-20 01:17:01.136 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-12-20 01:18:01.542 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51860 10 6452 1 2025-12-20 01:19:01.950 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44376 10 6452 1 2025-12-20 01:15:18.880 00:05:02.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 01:15:18.878 00:05:02.470 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 01:19:31.666 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 01:19:31.336 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:19:31.610 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:19:31.653 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 01:19:31.693 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 01:20:02.319 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44500 10 6452 1 2025-12-20 01:21:02.720 00:00:11.105 TCP 1.101.0.1:3000 -> 23.104.0.1:35166 10 6452 1 2025-12-20 01:22:03.864 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45402 10 6452 1 2025-12-20 01:23:04.269 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40180 10 6452 1 2025-12-20 01:24:04.633 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49584 10 6452 1 2025-12-20 01:24:31.891 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 01:24:31.762 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 01:24:31.723 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 01:24:31.333 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:24:31.807 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:25:05.061 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47708 10 6452 1 2025-12-20 01:21:18.878 00:05:02.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 01:21:18.881 00:05:02.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 01:26:05.464 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:44230 12 10375 1 2025-12-20 01:27:05.935 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:48834 10 6452 1 2025-12-20 01:28:06.367 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:55122 10 6452 1 2025-12-20 01:29:06.762 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58110 10 6452 1 2025-12-20 01:29:31.915 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 01:29:31.784 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 01:29:31.666 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 01:29:31.701 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:29:31.832 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:30:07.185 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51462 10 6452 1 2025-12-20 01:31:07.595 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43406 10 6452 1 2025-12-20 01:27:18.882 00:05:02.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 01:27:18.878 00:05:02.475 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 01:32:08.014 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:52606 10 6452 1 2025-12-20 01:33:08.412 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55064 10 6452 1 2025-12-20 01:34:08.825 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38250 10 6452 1 2025-12-20 01:34:31.941 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 01:34:31.897 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 01:34:31.890 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:34:31.941 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:34:32.025 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 01:35:09.190 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34418 10 6452 1 2025-12-20 01:36:09.593 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36194 10 6452 1 2025-12-20 01:33:18.881 00:05:02.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 01:33:18.884 00:05:02.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 01:37:09.997 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6452 1 2025-12-20 01:38:10.406 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39808 10 6452 1 2025-12-20 01:39:10.814 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:34292 10 6452 1 2025-12-20 01:39:32.152 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 01:39:32.009 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 01:39:31.716 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:39:31.870 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:39:31.953 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 01:40:11.187 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37476 10 6452 1 2025-12-20 01:41:11.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37914 10 6452 1 2025-12-20 01:42:11.947 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36604 10 6452 1 2025-12-20 01:39:18.887 00:05:02.472 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 01:43:12.346 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57364 10 6452 1 2025-12-20 01:39:18.884 00:05:02.477 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 01:44:12.756 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42712 10 6452 1 2025-12-20 01:44:32.218 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 01:44:32.173 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 01:44:32.074 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 01:44:31.951 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:44:32.135 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:45:13.176 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50742 10 6452 1 2025-12-20 01:46:13.578 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33712 10 6452 1 2025-12-20 01:47:13.979 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:56298 10 6452 1 2025-12-20 01:48:14.351 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45220 10 6452 1 2025-12-20 01:45:18.891 00:05:02.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 01:45:18.893 00:05:02.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 01:49:14.755 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56916 10 6452 1 2025-12-20 01:49:32.326 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 01:49:32.286 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 01:49:32.129 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 01:49:32.084 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:49:32.243 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:50:15.173 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33452 10 6452 1 2025-12-20 01:51:15.581 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35364 10 6452 1 2025-12-20 01:52:15.986 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60750 10 6452 1 2025-12-20 01:53:16.362 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47284 10 6452 1 2025-12-20 01:54:16.768 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54760 10 6452 1 2025-12-20 01:54:32.296 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 01:54:32.144 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 01:54:32.088 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:54:32.317 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 01:54:32.401 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 01:51:18.891 00:05:02.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 01:51:18.893 00:05:02.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 01:55:17.188 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44402 10 6452 1 2025-12-20 01:56:17.593 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44792 10 6452 1 2025-12-20 01:57:17.996 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33514 10 6452 1 2025-12-20 01:58:18.360 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54600 10 6452 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 917, avg pps: 0, avg bpp: 411 Time window: 2025-12-20 00:57:18 - 2025-12-20 01:58:28 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0038s User: 0.0015s Wall: 0.0023s flows/second: 61352.3 Runtime: 0.0023s