Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-20 18:59:29.380 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52344 10 6452 1 2025-12-20 18:59:52.822 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 18:59:52.818 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 18:59:52.846 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 18:59:52.625 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 18:59:52.708 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:00:29.782 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34444 10 6452 1 2025-12-20 18:57:19.275 00:05:02.437 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 18:57:19.278 00:05:02.432 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 19:01:30.184 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47262 10 6452 1 2025-12-20 19:02:30.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53598 10 6452 1 2025-12-20 19:03:30.992 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48610 10 6452 1 2025-12-20 19:04:31.356 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44828 10 6452 1 2025-12-20 19:04:52.962 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 19:04:52.741 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 19:04:52.980 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:04:52.901 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:04:52.984 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:05:31.721 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:46794 10 6452 1 2025-12-20 19:06:32.145 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33216 10 6452 1 2025-12-20 19:03:19.279 00:05:02.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 19:03:19.279 00:05:02.436 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 19:07:32.507 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36038 10 6452 1 2025-12-20 19:08:32.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49316 10 6452 1 2025-12-20 19:09:33.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46662 10 6452 1 2025-12-20 19:09:52.956 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:09:53.074 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 19:09:52.967 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:09:52.874 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:09:53.078 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 19:10:33.718 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:46680 10 6452 1 2025-12-20 19:11:34.111 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56072 10 6452 1 2025-12-20 19:12:34.515 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51890 10 6452 1 2025-12-20 19:09:19.283 00:05:02.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 19:09:19.286 00:05:02.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 19:13:34.885 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:51918 10 6452 1 2025-12-20 19:14:35.313 00:00:11.053 TCP 1.101.0.1:3000 -> 23.104.0.1:48898 11 6504 1 2025-12-20 19:14:53.071 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:14:53.064 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:14:52.988 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:14:53.126 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 19:14:53.186 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 19:15:36.388 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50146 10 6452 1 2025-12-20 19:16:36.792 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59126 10 6452 1 2025-12-20 19:17:37.196 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58076 10 6452 1 2025-12-20 19:18:37.596 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56886 10 6452 1 2025-12-20 19:15:19.283 00:05:02.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 19:15:19.285 00:05:02.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 19:19:38.006 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56960 10 6452 1 2025-12-20 19:19:53.355 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:19:53.273 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:19:53.415 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 19:19:53.117 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 19:19:53.148 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:20:38.404 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53962 10 6452 1 2025-12-20 19:21:38.767 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:55278 10 6452 1 2025-12-20 19:22:39.182 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33774 10 6452 1 2025-12-20 19:23:39.544 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43936 10 6452 1 2025-12-20 19:24:53.934 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 19:24:53.489 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 19:24:39.948 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57062 10 6452 1 2025-12-20 19:24:53.138 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:24:53.849 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:24:53.932 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:21:19.290 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 19:21:19.288 00:05:02.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 19:25:40.356 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39158 10 6452 1 2025-12-20 19:26:40.762 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48478 10 6452 1 2025-12-20 19:27:41.168 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57910 10 6452 1 2025-12-20 19:28:41.569 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58562 10 6452 1 2025-12-20 19:29:53.462 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 19:29:41.971 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49206 10 6452 1 2025-12-20 19:29:53.577 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 19:29:53.496 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:29:53.442 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:29:53.524 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:30:42.342 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51792 10 6452 1 2025-12-20 19:27:19.289 00:05:02.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 19:27:19.293 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 19:31:42.743 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46018 10 6452 1 2025-12-20 19:32:43.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55018 10 6452 1 2025-12-20 19:33:43.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44248 10 6452 1 2025-12-20 19:34:53.699 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:34:53.395 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 19:34:53.559 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 19:34:53.519 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:34:43.927 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:39756 10 6452 1 2025-12-20 19:34:53.617 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:35:44.314 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46872 10 6452 1 2025-12-20 19:36:44.730 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39666 10 6452 1 2025-12-20 19:33:19.293 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 19:33:19.289 00:05:02.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 19:37:45.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49646 10 6452 1 2025-12-20 19:38:45.548 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51256 10 6452 1 2025-12-20 19:39:53.896 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:39:53.715 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 19:39:53.770 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 19:39:53.821 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:39:53.812 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:39:45.965 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45786 10 6452 1 2025-12-20 19:40:46.373 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45610 10 6452 1 2025-12-20 19:41:46.778 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:44594 10 6452 1 2025-12-20 19:42:47.139 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56898 10 6452 1 2025-12-20 19:39:19.293 00:05:02.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 19:39:19.291 00:05:02.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 19:43:47.551 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51412 10 6452 1 2025-12-20 19:44:53.980 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 19:44:53.580 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 19:44:53.636 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:44:53.821 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:44:53.904 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:44:47.916 00:00:10.622 TCP 1.101.0.1:3000 -> 23.104.0.1:38514 10 6452 1 2025-12-20 19:45:48.587 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42542 10 6452 1 2025-12-20 19:46:48.987 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52454 10 6452 1 2025-12-20 19:47:49.388 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42610 10 6452 1 2025-12-20 19:48:49.750 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46608 10 6452 1 2025-12-20 19:45:19.292 00:05:02.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 19:45:19.295 00:05:02.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 19:49:53.859 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:49:53.916 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 19:49:53.915 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 19:49:53.684 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:49:53.776 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:49:50.163 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39200 10 6452 1 2025-12-20 19:50:50.566 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39214 10 6452 1 2025-12-20 19:51:50.964 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39408 10 6452 1 2025-12-20 19:52:51.329 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35730 10 6452 1 2025-12-20 19:53:51.689 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43864 10 6452 1 2025-12-20 19:54:53.957 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-20 19:54:53.795 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-20 19:54:53.874 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:54:53.874 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-20 19:54:53.958 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-20 19:54:52.107 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33484 10 6452 1 2025-12-20 19:51:19.293 00:05:02.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-20 19:51:19.296 00:05:02.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-20 19:55:52.505 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38256 10 6452 1 2025-12-20 19:56:52.912 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60834 10 6452 1 2025-12-20 19:57:53.274 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48956 10 6452 1 Summary: total flows: 139, total bytes: 410600, total packets: 1011, avg bps: 901, avg pps: 0, avg bpp: 406 Time window: 2025-12-20 18:57:19 - 2025-12-20 19:58:03 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0056s User: 0.0000s Wall: 0.0019s flows/second: 71905.3 Runtime: 0.0019s