Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-20 14:58:39.923 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:51444 10 6452 1 2025-12-20 14:59:48.123 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 14:59:47.742 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 14:59:48.151 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 14:59:47.977 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:59:48.039 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 14:59:40.368 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40602 10 6452 1 2025-12-20 15:00:40.779 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59664 10 6452 1 2025-12-20 14:57:19.181 00:05:02.467 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 14:57:19.183 00:05:02.462 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 15:01:41.188 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51032 10 6452 1 2025-12-20 15:02:41.602 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33956 10 6452 1 2025-12-20 15:03:42.020 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58840 10 6452 1 2025-12-20 15:04:48.294 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:04:48.006 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:04:48.227 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:04:48.129 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:04:48.211 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:04:42.445 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48008 10 6452 1 2025-12-20 15:05:42.857 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54740 10 6452 1 2025-12-20 15:06:43.273 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53044 10 6452 1 2025-12-20 15:03:19.185 00:05:02.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 15:03:19.188 00:05:02.460 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 15:07:43.683 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43766 10 6452 1 2025-12-20 15:08:44.116 00:00:12.526 TCP 1.101.0.1:3000 -> 23.104.0.1:43222 10 6452 1 2025-12-20 15:09:48.378 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:09:48.241 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:09:48.248 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:09:48.099 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:09:48.296 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:09:46.684 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58584 10 6452 1 2025-12-20 15:10:47.056 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41460 10 6452 1 2025-12-20 15:11:47.462 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39548 10 6452 1 2025-12-20 15:12:47.865 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38980 10 6452 1 2025-12-20 15:09:19.186 00:05:02.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 15:09:19.188 00:05:02.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 15:13:48.271 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33586 10 6452 1 2025-12-20 15:14:48.245 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:14:48.232 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:14:48.263 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:14:48.235 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:14:48.318 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:14:48.674 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55394 10 6452 1 2025-12-20 15:15:49.105 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37900 10 6452 1 2025-12-20 15:16:49.510 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41702 10 6452 1 2025-12-20 15:17:49.919 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44522 10 6452 1 2025-12-20 15:18:50.333 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50654 10 6452 1 2025-12-20 15:15:19.190 00:05:02.463 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 15:15:19.189 00:05:02.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 15:19:48.992 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:19:49.185 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:19:48.912 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:19:49.347 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:19:49.430 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:19:50.737 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55628 10 6452 1 2025-12-20 15:20:51.142 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58100 10 6452 1 2025-12-20 15:21:51.544 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58992 10 6452 1 2025-12-20 15:22:51.954 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32822 10 6452 1 2025-12-20 15:23:52.367 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58270 10 6452 1 2025-12-20 15:24:48.598 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:24:48.509 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:24:48.577 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:24:48.320 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:24:48.515 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:24:52.774 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38408 10 6452 1 2025-12-20 15:21:19.191 00:05:02.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 15:21:19.193 00:05:02.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 15:25:53.180 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40236 10 6452 1 2025-12-20 15:26:53.580 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45630 10 6452 1 2025-12-20 15:27:53.983 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44124 10 6452 1 2025-12-20 15:28:54.388 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56080 10 6452 1 2025-12-20 15:29:49.190 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:29:48.901 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:29:49.112 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:29:48.837 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:29:49.107 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:29:54.749 00:00:11.189 TCP 1.101.0.1:3000 -> 23.104.0.1:36400 10 6452 1 2025-12-20 15:30:55.977 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54350 10 6452 1 2025-12-20 15:27:19.193 00:05:02.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 15:27:19.196 00:05:02.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 15:31:56.388 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:48316 10 6452 1 2025-12-20 15:32:56.752 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45650 10 6452 1 2025-12-20 15:33:57.152 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33694 10 6452 1 2025-12-20 15:34:48.838 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:34:48.755 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:34:48.757 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:34:48.760 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:34:48.754 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:34:57.557 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:59374 10 6452 1 2025-12-20 15:35:57.917 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38926 10 6452 1 2025-12-20 15:36:58.323 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45576 10 6452 1 2025-12-20 15:33:19.194 00:05:02.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 15:33:19.198 00:05:02.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 15:37:58.756 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:45664 10 6452 1 2025-12-20 15:38:59.185 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52880 10 6452 1 2025-12-20 15:39:49.012 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:39:48.871 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:39:48.869 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:39:48.618 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:39:48.928 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:39:59.596 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35816 10 6452 1 2025-12-20 15:40:59.956 00:00:10.734 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6452 1 2025-12-20 15:42:00.732 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50538 10 6452 1 2025-12-20 15:43:01.148 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39684 10 6452 1 2025-12-20 15:39:19.200 00:05:02.460 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 15:39:19.197 00:05:02.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 15:44:01.549 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-12-20 15:44:49.028 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:44:48.986 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:44:48.989 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:44:48.841 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:44:48.944 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:45:01.954 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42002 10 6452 1 2025-12-20 15:46:02.362 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54840 10 6452 1 2025-12-20 15:47:02.725 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56422 12 6556 1 2025-12-20 15:48:03.137 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60000 10 6452 1 2025-12-20 15:49:03.547 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52458 10 6452 1 2025-12-20 15:45:19.197 00:05:02.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 15:45:19.200 00:05:02.460 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 15:49:49.450 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:49:49.507 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:49:49.113 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:49:49.452 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:49:49.534 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:50:03.948 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42704 10 6452 1 2025-12-20 15:51:04.316 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:54476 10 6452 1 2025-12-20 15:52:04.731 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36684 10 6452 1 2025-12-20 15:53:05.137 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60822 10 6452 1 2025-12-20 15:54:05.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36286 10 6452 1 2025-12-20 15:54:48.928 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:54:49.076 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:54:48.861 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:54:49.227 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:54:49.310 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:55:05.955 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6452 1 2025-12-20 15:51:19.207 00:05:02.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 15:51:19.204 00:05:02.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 15:56:06.372 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47384 10 6452 1 2025-12-20 15:57:06.778 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40280 10 6452 1 2025-12-20 15:58:07.186 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56578 10 6452 1 Summary: total flows: 140, total bytes: 417104, total packets: 1022, avg bps: 912, avg pps: 0, avg bpp: 408 Time window: 2025-12-20 14:57:19 - 2025-12-20 15:58:17 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0043s User: 0.0017s Wall: 0.0021s flows/second: 67994.7 Runtime: 0.0021s