Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-20 16:59:35.554 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53564 10 6452 1 2025-12-20 16:59:51.138 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 16:59:50.917 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 16:59:51.113 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 16:59:51.111 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 16:59:51.056 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:00:35.954 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32976 10 6452 1 2025-12-20 16:57:19.216 00:05:02.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 16:57:19.218 00:05:02.457 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 17:01:36.358 00:00:13.407 TCP 1.101.0.1:3000 -> 23.104.0.1:59316 10 6452 1 2025-12-20 17:02:39.804 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45250 10 6452 1 2025-12-20 17:03:40.213 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37366 10 6452 1 2025-12-20 17:04:50.546 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 17:04:50.546 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 17:04:50.379 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:04:40.609 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58048 10 6452 1 2025-12-20 17:04:50.645 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:04:50.729 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 17:05:41.010 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34382 10 6452 1 2025-12-20 17:06:41.408 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33024 10 6452 1 2025-12-20 17:03:19.225 00:05:02.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 17:03:19.222 00:05:02.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 17:07:41.808 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 10 6452 1 2025-12-20 17:08:42.207 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51746 10 6452 1 2025-12-20 17:09:50.833 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 17:09:50.625 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 17:09:42.606 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53856 10 6452 1 2025-12-20 17:09:50.625 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 17:09:50.534 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:09:50.750 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:10:43.023 00:00:10.713 TCP 1.101.0.1:3000 -> 23.104.0.1:41298 10 6452 1 2025-12-20 17:11:43.776 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49968 10 6452 1 2025-12-20 17:12:44.181 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33192 10 6452 1 2025-12-20 17:09:19.227 00:05:02.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 17:09:19.224 00:05:02.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 17:13:44.585 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34254 10 6452 1 2025-12-20 17:14:50.932 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 17:14:50.860 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 17:14:50.808 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 17:14:50.567 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:14:50.849 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:14:44.992 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45054 10 6452 1 2025-12-20 17:15:45.354 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37486 10 6452 1 2025-12-20 17:16:45.756 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35322 10 6452 1 2025-12-20 17:17:46.170 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35352 10 6452 1 2025-12-20 17:18:46.530 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41120 10 6452 1 2025-12-20 17:15:19.225 00:05:02.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 17:15:19.227 00:05:02.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 17:19:50.955 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 17:19:50.825 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 17:19:50.774 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:19:50.896 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:19:50.978 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 17:19:46.924 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40092 10 6452 1 2025-12-20 17:20:47.334 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46494 10 6452 1 2025-12-20 17:21:47.739 00:00:10.962 TCP 1.101.0.1:3000 -> 23.104.0.1:55258 10 6452 1 2025-12-20 17:22:48.741 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47778 10 6452 1 2025-12-20 17:23:49.158 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54398 10 6452 1 2025-12-20 17:24:50.945 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 17:24:50.937 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 17:24:50.772 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 17:24:50.883 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:24:50.863 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:24:49.563 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53818 10 6452 1 2025-12-20 17:21:19.241 00:05:02.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 17:21:19.244 00:05:02.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 17:25:49.963 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60934 10 6452 1 2025-12-20 17:26:50.373 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37938 10 6452 1 2025-12-20 17:27:50.738 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34566 10 6452 1 2025-12-20 17:28:51.145 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:39748 10 6452 1 2025-12-20 17:29:50.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 17:29:51.053 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 17:29:50.796 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:29:50.954 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:29:51.037 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 17:29:51.601 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39160 10 6452 1 2025-12-20 17:30:52.008 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59588 10 6452 1 2025-12-20 17:27:19.246 00:05:02.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 17:27:19.243 00:05:02.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 17:31:52.404 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53042 10 6452 1 2025-12-20 17:32:52.808 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49584 10 6452 1 2025-12-20 17:33:53.213 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49098 10 6452 1 2025-12-20 17:34:51.192 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 17:34:51.231 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 17:34:51.144 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:34:51.127 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:34:51.210 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 17:34:53.617 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47254 10 6452 1 2025-12-20 17:35:53.979 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45724 10 6452 1 2025-12-20 17:36:54.383 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60494 10 6452 1 2025-12-20 17:33:19.242 00:05:02.446 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 17:33:19.245 00:05:02.441 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 17:37:54.797 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49618 10 6452 1 2025-12-20 17:38:55.203 00:00:10.465 TCP 1.101.0.1:3000 -> 23.104.0.1:41064 10 6452 1 2025-12-20 17:39:51.250 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 17:39:51.359 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 17:39:51.428 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 17:39:51.356 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:39:51.167 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:39:55.705 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53480 10 6452 1 2025-12-20 17:40:56.118 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38578 12 6556 1 2025-12-20 17:41:56.525 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53258 10 6452 1 2025-12-20 17:42:56.898 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:56710 10 6452 1 2025-12-20 17:39:19.246 00:05:02.443 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 17:39:19.248 00:05:02.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 17:43:57.335 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53638 10 6452 1 2025-12-20 17:44:51.556 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 17:44:51.475 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:44:51.233 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 17:44:51.569 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 17:44:51.362 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:44:57.738 00:00:11.193 TCP 1.101.0.1:3000 -> 23.104.0.1:59436 10 6452 1 2025-12-20 17:45:58.987 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51420 10 6452 1 2025-12-20 17:46:59.389 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42524 10 6452 1 2025-12-20 17:47:59.792 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35628 10 6452 1 2025-12-20 17:49:00.195 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33094 10 6452 1 2025-12-20 17:45:19.251 00:05:02.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 17:45:19.249 00:05:02.443 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 17:49:51.419 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 17:49:51.412 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 17:49:51.216 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:49:51.652 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:49:51.735 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 17:50:00.559 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60718 10 6452 1 2025-12-20 17:51:00.962 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:46060 12 10375 1 2025-12-20 17:52:01.447 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59676 10 6452 1 2025-12-20 17:53:01.850 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:42516 10 6452 1 2025-12-20 17:54:02.273 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39124 10 6452 1 2025-12-20 17:54:51.616 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 17:54:51.593 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 17:54:51.591 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 17:54:51.239 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:54:51.534 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 17:55:02.676 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40276 12 6556 1 2025-12-20 17:51:19.252 00:05:02.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 17:51:19.249 00:05:02.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 17:56:03.105 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36188 10 6452 1 2025-12-20 17:57:03.516 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33892 10 6452 1 2025-12-20 17:58:03.920 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35456 10 6452 1 Summary: total flows: 139, total bytes: 414679, total packets: 1016, avg bps: 907, avg pps: 0, avg bpp: 408 Time window: 2025-12-20 16:57:19 - 2025-12-20 17:58:14 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0056s User: 0.0009s Wall: 0.0022s flows/second: 64470.7 Runtime: 0.0022s