Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-20 15:59:07.549 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54998 10 6452 1 2025-12-20 15:59:49.244 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 15:59:49.241 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 15:59:49.244 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 15:59:49.110 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 15:59:49.162 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:00:07.907 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47450 12 6556 1 2025-12-20 16:01:08.308 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:57114 12 10375 1 2025-12-20 15:57:19.199 00:05:02.467 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 15:57:19.203 00:05:02.462 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 16:02:08.786 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51206 10 6452 1 2025-12-20 16:03:09.190 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36208 10 6452 1 2025-12-20 16:04:09.555 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46092 10 6452 1 2025-12-20 16:04:49.393 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:04:49.310 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:04:49.437 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:04:49.340 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:04:49.309 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:05:09.950 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:51940 10 6452 1 2025-12-20 16:06:10.328 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34398 10 6452 1 2025-12-20 16:03:19.202 00:05:02.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 16:03:19.205 00:05:02.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 16:07:10.731 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41898 10 6452 1 2025-12-20 16:08:11.145 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48956 10 6452 1 2025-12-20 16:09:11.553 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36276 10 6452 1 2025-12-20 16:09:49.324 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:09:49.427 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:09:49.495 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:09:49.322 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:09:49.405 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:10:11.954 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44040 10 6452 1 2025-12-20 16:11:12.363 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53122 10 6452 1 2025-12-20 16:12:12.771 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36792 10 6452 1 2025-12-20 16:09:19.207 00:05:02.458 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 16:13:13.188 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40626 10 6452 1 2025-12-20 16:09:19.205 00:05:02.463 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 16:14:13.589 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56070 10 6452 1 2025-12-20 16:14:49.742 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:14:49.660 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:14:49.661 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:14:49.602 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:14:49.660 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:15:13.954 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45284 10 6452 1 2025-12-20 16:16:14.322 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50058 10 6452 1 2025-12-20 16:17:14.725 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59988 10 6452 1 2025-12-20 16:18:15.140 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:50060 10 6452 1 2025-12-20 16:15:19.209 00:05:02.458 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 16:15:19.206 00:05:02.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 16:19:15.519 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53422 10 6452 1 2025-12-20 16:19:49.384 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:19:49.507 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:19:49.629 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:19:49.380 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:19:49.463 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:20:15.939 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56394 10 6452 1 2025-12-20 16:21:16.352 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38680 10 6452 1 2025-12-20 16:22:16.762 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:50610 10 6452 1 2025-12-20 16:23:17.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53212 10 6452 1 2025-12-20 16:24:17.538 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40304 10 6452 1 2025-12-20 16:24:49.929 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:24:49.592 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:24:49.586 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:24:49.803 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:24:49.846 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:21:19.212 00:05:02.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 16:21:19.210 00:05:02.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 16:25:17.940 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47438 10 6452 1 2025-12-20 16:26:18.357 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:39842 12 10375 1 2025-12-20 16:27:18.796 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56980 10 6452 1 2025-12-20 16:28:19.197 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58042 10 6452 1 2025-12-20 16:29:19.600 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58424 10 6452 1 2025-12-20 16:29:49.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:29:49.666 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:29:49.902 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:29:49.724 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:29:49.668 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:30:20.008 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32958 10 6452 1 2025-12-20 16:27:19.213 00:05:02.457 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 16:27:19.210 00:05:02.463 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 16:31:20.412 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33498 10 6452 1 2025-12-20 16:32:20.808 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60682 10 6452 1 2025-12-20 16:33:21.227 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43708 10 6452 1 2025-12-20 16:34:21.629 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37478 10 6452 1 2025-12-20 16:34:49.885 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:34:49.924 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:34:50.049 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:34:50.154 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:34:50.237 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:35:21.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52140 10 6452 1 2025-12-20 16:36:22.404 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41920 10 6452 1 2025-12-20 16:33:19.215 00:05:02.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 16:33:19.212 00:05:02.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 16:37:22.807 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56062 10 6452 1 2025-12-20 16:38:23.208 00:00:14.115 TCP 1.101.0.1:3000 -> 23.104.0.1:55946 10 6452 1 2025-12-20 16:39:27.399 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58794 10 6452 1 2025-12-20 16:39:50.268 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:39:49.838 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:39:49.708 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:39:50.276 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:39:50.186 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:40:27.807 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:56426 10 6452 1 2025-12-20 16:41:28.178 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 10 6452 1 2025-12-20 16:42:28.539 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39678 10 6452 1 2025-12-20 16:39:19.214 00:05:02.463 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 16:39:19.217 00:05:02.458 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 16:43:28.935 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51786 10 6452 1 2025-12-20 16:44:29.360 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33416 10 6452 1 2025-12-20 16:44:50.678 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:44:50.598 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:44:50.532 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:44:50.282 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:44:50.596 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:45:29.763 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48712 10 6452 1 2025-12-20 16:46:30.177 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32794 10 6452 1 2025-12-20 16:47:30.577 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35458 10 6452 1 2025-12-20 16:48:30.979 00:00:10.531 TCP 1.101.0.1:3000 -> 23.104.0.1:43344 10 6452 1 2025-12-20 16:45:19.217 00:05:02.460 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 16:45:19.220 00:05:02.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 16:49:31.547 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50856 10 6452 1 2025-12-20 16:49:50.352 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:49:50.149 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:49:50.147 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:49:50.188 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:49:50.270 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:50:31.953 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:33498 10 6452 1 2025-12-20 16:51:32.324 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36774 10 6452 1 2025-12-20 16:52:32.689 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57678 10 6452 1 2025-12-20 16:53:33.116 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54250 10 6452 1 2025-12-20 16:54:33.532 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35240 10 6452 1 2025-12-20 16:54:50.372 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:54:50.460 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:54:50.327 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:54:50.293 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:54:50.376 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:51:19.215 00:05:02.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 16:51:19.219 00:05:02.457 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 16:55:33.958 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:55116 10 6452 1 2025-12-20 16:56:34.341 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41554 10 6452 1 2025-12-20 16:57:34.754 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39886 10 6452 1 2025-12-20 16:58:35.155 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44186 10 6452 1 Summary: total flows: 140, total bytes: 424950, total packets: 1026, avg bps: 922, avg pps: 0, avg bpp: 414 Time window: 2025-12-20 15:57:19 - 2025-12-20 16:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0035s User: 0.0017s Wall: 0.0032s flows/second: 44277.1 Runtime: 0.0032s