Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-20 13:59:15.628 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42668 10 6452 1 2025-12-20 13:59:46.667 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 13:59:46.664 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 13:59:46.811 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 13:59:46.838 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 13:59:46.921 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:00:16.030 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38312 10 6452 1 2025-12-20 13:57:19.162 00:05:02.469 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 13:57:19.166 00:05:02.464 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 14:01:16.435 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:35374 12 10375 1 2025-12-20 14:02:16.911 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46878 10 6452 1 2025-12-20 14:03:17.312 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49250 10 6452 1 2025-12-20 14:04:17.722 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54262 10 6452 1 2025-12-20 14:04:47.053 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:04:46.751 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:04:46.849 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:04:46.673 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:04:46.971 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:05:18.130 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60382 10 6452 1 2025-12-20 14:06:18.488 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35720 10 6452 1 2025-12-20 14:03:19.165 00:05:02.467 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 14:03:19.167 00:05:02.463 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 14:07:18.855 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:45638 10 6452 1 2025-12-20 14:08:19.275 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:54010 10 6452 1 2025-12-20 14:09:19.680 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49614 10 6452 1 2025-12-20 14:09:47.080 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:09:46.957 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:09:46.893 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:09:47.323 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:09:47.406 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:10:20.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47538 10 6452 1 2025-12-20 14:11:20.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37958 10 6452 1 2025-12-20 14:12:20.917 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:52536 10 6452 1 2025-12-20 14:09:19.169 00:05:02.462 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 14:09:19.167 00:05:02.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 14:13:21.306 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44406 10 6452 1 2025-12-20 14:14:21.707 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41378 10 6452 1 2025-12-20 14:14:47.012 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:14:46.921 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:14:46.934 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:14:46.912 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:14:46.995 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:15:22.116 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58084 10 6452 1 2025-12-20 14:16:22.517 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53150 10 6452 1 2025-12-20 14:17:22.883 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:41446 10 6452 1 2025-12-20 14:18:23.320 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51430 10 6452 1 2025-12-20 14:15:19.173 00:05:02.460 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 14:15:19.172 00:05:02.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 14:19:23.724 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:59396 10 6452 1 2025-12-20 14:19:47.394 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:19:47.314 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:19:47.203 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:19:47.261 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:19:47.212 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:20:24.147 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44436 10 6452 1 2025-12-20 14:21:24.508 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:59504 12 10369 1 2025-12-20 14:22:24.997 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44796 12 6556 1 2025-12-20 14:23:25.399 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:42194 10 6452 1 2025-12-20 14:24:25.760 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35144 10 6452 1 2025-12-20 14:24:47.451 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:24:47.370 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:24:47.256 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:24:46.925 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:24:47.369 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:21:19.176 00:05:02.458 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 14:21:19.174 00:05:02.463 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 14:25:26.174 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42336 10 6452 1 2025-12-20 14:26:26.585 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57090 10 6452 1 2025-12-20 14:27:26.982 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48382 10 6452 1 2025-12-20 14:28:27.394 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43570 10 6452 1 2025-12-20 14:29:27.794 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59292 10 6452 1 2025-12-20 14:29:47.554 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:29:47.599 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:29:47.468 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:29:47.552 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:29:47.471 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:30:28.197 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:35158 12 10369 1 2025-12-20 14:27:19.175 00:05:02.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 14:27:19.177 00:05:02.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 14:31:28.686 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60432 10 6452 1 2025-12-20 14:32:29.106 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36154 10 6452 1 2025-12-20 14:33:29.507 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53690 10 6452 1 2025-12-20 14:34:29.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58554 10 6452 1 2025-12-20 14:34:47.583 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:34:47.665 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:34:47.448 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:34:47.632 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:34:47.715 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:35:30.321 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:58134 10 6452 1 2025-12-20 14:36:30.728 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6452 1 2025-12-20 14:33:19.177 00:05:02.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 14:33:19.175 00:05:02.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 14:37:31.138 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44804 10 6452 1 2025-12-20 14:38:31.547 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57478 10 6452 1 2025-12-20 14:39:31.949 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39216 10 6452 1 2025-12-20 14:39:47.628 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:39:47.671 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:39:47.813 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:39:47.706 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:39:47.546 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:40:32.361 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48304 10 6452 1 2025-12-20 14:41:32.760 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:51928 10 6452 1 2025-12-20 14:42:33.151 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56854 10 6452 1 2025-12-20 14:39:19.178 00:05:02.462 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 14:39:19.175 00:05:02.467 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 14:43:33.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55248 10 6452 1 2025-12-20 14:44:49.429 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:44:33.959 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47378 10 6452 1 2025-12-20 14:44:49.344 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:44:49.048 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:44:49.364 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:44:49.345 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:45:34.367 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42268 10 6452 1 2025-12-20 14:46:34.774 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53404 10 6452 1 2025-12-20 14:47:35.183 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36638 10 6452 1 2025-12-20 14:48:35.585 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45864 10 6452 1 2025-12-20 14:45:19.181 00:05:02.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 14:45:19.179 00:05:02.467 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 14:49:47.871 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:49:47.984 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:49:47.672 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:49:35.982 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58964 10 6452 1 2025-12-20 14:49:47.627 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:49:47.787 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:50:36.393 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52964 10 6452 1 2025-12-20 14:51:36.756 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:39596 10 6452 1 2025-12-20 14:52:37.185 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33432 11 6504 1 2025-12-20 14:53:37.607 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51708 10 6452 1 2025-12-20 14:54:48.008 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:54:38.009 00:00:10.574 TCP 1.101.0.1:3000 -> 23.104.0.1:45256 10 6452 1 2025-12-20 14:54:47.924 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:54:47.864 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:54:47.721 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:54:47.937 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:51:19.180 00:05:02.467 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 14:51:19.183 00:05:02.462 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 14:55:38.619 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:53998 12 10375 1 2025-12-20 14:56:39.112 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42334 10 6452 1 2025-12-20 14:57:39.524 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45038 10 6452 1 Summary: total flows: 139, total bytes: 426384, total packets: 1021, avg bps: 939, avg pps: 0, avg bpp: 417 Time window: 2025-12-20 13:57:19 - 2025-12-20 14:57:49 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0031s User: 0.0021s Wall: 0.0020s flows/second: 69879.9 Runtime: 0.0020s