Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-20 10:58:54.430 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58800 10 6452 1 2025-12-20 10:59:43.273 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 10:59:43.407 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 10:59:43.312 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 10:59:43.429 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 10:59:43.189 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 10:59:54.837 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:56670 10 6452 1 2025-12-20 11:00:55.263 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:42008 10 6452 1 2025-12-20 10:57:19.099 00:05:02.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 10:57:19.097 00:05:02.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 11:01:55.662 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48120 10 6452 1 2025-12-20 11:02:56.095 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54070 10 6452 1 2025-12-20 11:03:56.495 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51462 10 6452 1 2025-12-20 11:04:43.460 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 11:04:43.369 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 11:04:43.336 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:04:43.377 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:04:43.371 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 11:04:56.862 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48754 10 6452 1 2025-12-20 11:05:57.274 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55774 10 6452 1 2025-12-20 11:06:57.639 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:32786 10 6452 1 2025-12-20 11:03:19.100 00:05:02.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 11:03:19.102 00:05:02.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 11:07:58.002 00:00:13.475 TCP 1.101.0.1:3000 -> 23.104.0.1:36674 10 6452 1 2025-12-20 11:09:01.528 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:41238 10 6452 1 2025-12-20 11:09:43.447 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 11:09:43.497 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 11:09:43.217 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:09:43.293 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:09:43.375 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 11:10:01.887 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33838 10 6452 1 2025-12-20 11:11:02.259 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52472 10 6452 1 2025-12-20 11:12:02.674 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46300 10 6452 1 2025-12-20 11:13:03.106 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34244 10 6452 1 2025-12-20 11:09:19.099 00:05:02.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 11:09:19.101 00:05:02.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 11:14:03.505 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35530 10 6452 1 2025-12-20 11:14:43.606 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 11:14:43.432 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 11:14:43.442 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:14:43.602 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:14:43.685 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 11:15:03.910 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39314 10 6452 1 2025-12-20 11:16:04.284 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50224 10 6452 1 2025-12-20 11:17:04.702 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:58628 10 6452 1 2025-12-20 11:18:05.137 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40834 10 6452 1 2025-12-20 11:19:05.508 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48122 10 6452 1 2025-12-20 11:15:19.104 00:05:02.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 11:15:19.101 00:05:02.475 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 11:19:43.729 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 11:19:43.483 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 11:19:43.591 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:19:43.636 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:19:43.718 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 11:20:05.871 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36876 10 6452 1 2025-12-20 11:21:06.277 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51070 10 6452 1 2025-12-20 11:22:06.682 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46826 10 6452 1 2025-12-20 11:23:07.106 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50644 10 6452 1 2025-12-20 11:24:07.511 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44708 10 6452 1 2025-12-20 11:24:43.835 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 11:24:43.752 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 11:24:43.672 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 11:24:43.663 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:24:43.753 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:25:07.914 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38064 10 6452 1 2025-12-20 11:21:19.105 00:05:02.471 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 11:21:19.101 00:05:02.476 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 11:26:08.321 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:35470 12 10369 1 2025-12-20 11:27:08.798 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37700 10 6452 1 2025-12-20 11:28:09.204 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42868 10 6452 1 2025-12-20 11:29:09.607 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52936 10 6452 1 2025-12-20 11:29:43.841 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 11:29:43.726 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 11:29:43.725 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:29:43.841 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:29:43.924 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 11:30:10.012 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55540 10 6452 1 2025-12-20 11:27:19.112 00:05:02.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 11:27:19.113 00:05:02.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 11:31:10.375 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49070 10 6452 1 2025-12-20 11:32:10.739 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:44354 10 6452 1 2025-12-20 11:33:11.159 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38062 10 6452 1 2025-12-20 11:34:11.566 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56276 10 6452 1 2025-12-20 11:34:43.834 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 11:34:43.840 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 11:34:43.873 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:34:44.064 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:34:44.147 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 11:35:11.972 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42924 10 6452 1 2025-12-20 11:36:12.383 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55754 10 6452 1 2025-12-20 11:33:19.116 00:05:02.460 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 11:37:12.784 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33392 10 6452 1 2025-12-20 11:33:19.113 00:05:02.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 11:38:13.193 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:34118 10 6452 1 2025-12-20 11:39:13.562 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33864 10 6452 1 2025-12-20 11:39:43.914 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 11:39:43.999 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 11:39:43.734 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:39:43.991 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:39:44.073 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 11:40:13.973 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:36612 10 6452 1 2025-12-20 11:41:14.357 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41220 10 6452 1 2025-12-20 11:42:14.763 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58976 10 6452 1 2025-12-20 11:39:19.116 00:05:02.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 11:39:19.113 00:05:02.470 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 11:43:15.178 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52390 10 6452 1 2025-12-20 11:44:15.582 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38690 10 6452 1 2025-12-20 11:44:43.825 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:44:44.074 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 11:44:43.963 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 11:44:44.090 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:44:43.908 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 11:45:15.991 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51558 10 6452 1 2025-12-20 11:46:16.354 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44642 10 6452 1 2025-12-20 11:47:16.760 00:00:11.078 TCP 1.101.0.1:3000 -> 23.104.0.1:55574 10 6452 1 2025-12-20 11:48:17.880 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55692 10 6452 1 2025-12-20 11:45:19.117 00:05:02.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 11:45:19.115 00:05:02.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 11:49:18.290 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34756 10 6452 1 2025-12-20 11:49:44.220 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 11:49:44.143 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 11:49:43.985 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:49:44.062 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:49:44.145 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 11:50:18.691 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34604 10 6452 1 2025-12-20 11:51:19.115 00:00:10.698 TCP 1.101.0.1:3000 -> 23.104.0.1:59980 13 13949 1 2025-12-20 11:52:19.852 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45970 10 6452 1 2025-12-20 11:53:20.268 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38528 10 6452 1 2025-12-20 11:54:20.671 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51538 10 6452 1 2025-12-20 11:54:44.399 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 11:54:44.401 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 11:54:44.224 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 11:54:44.260 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:54:44.316 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 11:51:19.120 00:05:02.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 11:51:19.117 00:05:02.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 11:55:21.112 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60938 10 6452 1 2025-12-20 11:56:21.519 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60628 10 6452 1 2025-12-20 11:57:21.920 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:35136 10 6452 1 2025-12-20 11:58:22.275 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48342 10 6452 1 Summary: total flows: 140, total bytes: 428414, total packets: 1025, avg bps: 932, avg pps: 0, avg bpp: 417 Time window: 2025-12-20 10:57:19 - 2025-12-20 11:58:32 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0032s User: 0.0022s Wall: 0.0023s flows/second: 62137.8 Runtime: 0.0023s