Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 01:59:29.364 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52344 10 6661 1 2025-12-21 02:00:01.413 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:00:01.415 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:00:01.370 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:00:00.974 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:00:01.332 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:00:29.771 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57214 10 6661 1 2025-12-21 01:57:19.412 00:05:02.412 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 01:57:19.411 00:05:02.417 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 02:01:30.187 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60008 10 6661 1 2025-12-21 02:02:30.593 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60916 10 6661 1 2025-12-21 02:03:30.999 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45484 11 6713 1 2025-12-21 02:04:31.442 00:00:11.008 TCP 1.101.0.1:3000 -> 23.104.0.1:60608 10 6661 1 2025-12-21 02:05:01.339 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:05:01.340 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:05:01.287 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:05:01.346 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:05:01.429 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:05:32.500 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34944 10 6661 1 2025-12-21 02:06:32.901 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53248 10 6661 1 2025-12-21 02:03:19.414 00:05:02.415 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 02:03:19.411 00:05:02.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 02:07:33.320 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53616 10 6661 1 2025-12-21 02:08:33.725 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42094 10 6661 1 2025-12-21 02:09:34.149 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58976 10 6661 1 2025-12-21 02:10:01.548 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:10:01.246 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:10:01.524 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:10:01.539 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:10:01.467 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:10:34.564 00:00:11.229 TCP 1.101.0.1:3000 -> 23.104.0.1:48982 10 6661 1 2025-12-21 02:11:35.829 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41786 10 6661 1 2025-12-21 02:12:36.238 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47908 10 6661 1 2025-12-21 02:09:19.415 00:05:02.416 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 02:09:19.412 00:05:02.422 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 02:13:36.598 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50450 10 6661 1 2025-12-21 02:14:37.005 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46544 10 6661 1 2025-12-21 02:15:02.072 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:15:01.753 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:15:01.874 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:15:02.073 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:15:02.155 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:15:37.402 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48222 10 6661 1 2025-12-21 02:16:37.806 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47676 10 6661 1 2025-12-21 02:17:38.211 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52870 10 6661 1 2025-12-21 02:18:38.608 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56998 10 6661 1 2025-12-21 02:15:19.413 00:05:02.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 02:15:19.416 00:05:02.416 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 02:19:39.020 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:57216 10 6661 1 2025-12-21 02:20:01.747 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:20:01.650 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:20:01.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:20:01.616 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:20:01.665 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:20:39.422 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47660 10 6661 1 2025-12-21 02:21:39.828 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49754 10 6661 1 2025-12-21 02:22:40.231 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44452 10 6661 1 2025-12-21 02:23:40.645 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41012 10 6661 1 2025-12-21 02:24:41.010 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40512 10 6661 1 2025-12-21 02:25:02.001 00:00:00.054 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:25:01.937 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:25:01.790 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:25:02.004 00:00:00.039 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:25:02.085 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:21:19.415 00:05:02.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 02:21:19.419 00:05:02.415 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 02:25:41.415 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58310 10 6661 1 2025-12-21 02:26:41.816 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42240 10 6661 1 2025-12-21 02:27:42.229 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49082 10 6661 1 2025-12-21 02:28:42.634 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41778 10 6661 1 2025-12-21 02:29:43.036 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33858 10 6661 1 2025-12-21 02:30:01.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:30:01.994 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:30:01.631 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:30:01.731 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:30:01.814 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:30:43.437 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50496 10 6661 1 2025-12-21 02:27:19.418 00:05:02.419 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 02:27:19.422 00:05:02.414 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 02:31:43.804 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:56202 10 6661 1 2025-12-21 02:32:44.183 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48528 10 6661 1 2025-12-21 02:33:44.580 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34784 10 6661 1 2025-12-21 02:34:44.986 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60012 10 6661 1 2025-12-21 02:35:02.220 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:35:02.102 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:35:02.003 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:35:01.899 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:35:02.136 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:35:45.392 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58722 12 6765 1 2025-12-21 02:36:45.794 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46822 10 6661 1 2025-12-21 02:33:19.423 00:05:02.415 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 02:33:19.425 00:05:02.410 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 02:37:46.194 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54796 10 6661 1 2025-12-21 02:38:46.558 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58454 10 6661 1 2025-12-21 02:39:46.962 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:38066 11 6713 1 2025-12-21 02:40:02.282 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:40:02.162 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:40:02.199 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:40:01.999 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:40:02.201 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:40:47.426 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53872 10 6661 1 2025-12-21 02:41:47.788 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53928 10 6661 1 2025-12-21 02:42:48.190 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56482 10 6661 1 2025-12-21 02:39:19.422 00:05:02.419 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 02:39:19.424 00:05:02.414 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 02:43:48.592 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46082 10 6661 1 2025-12-21 02:44:48.992 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40714 10 6661 1 2025-12-21 02:45:02.085 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:45:02.357 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:45:02.206 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:45:02.168 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:45:02.250 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:45:49.401 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:57430 12 10375 1 2025-12-21 02:46:49.884 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:56660 10 6452 1 2025-12-21 02:47:50.309 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51200 10 6452 1 2025-12-21 02:48:50.719 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51546 10 6452 1 2025-12-21 02:45:19.424 00:05:02.419 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 02:45:19.427 00:05:02.414 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 02:50:02.291 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:49:51.110 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:57524 11 6504 1 2025-12-21 02:50:02.297 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:50:01.933 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:50:02.292 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:50:02.375 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:50:51.565 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36580 10 6452 1 2025-12-21 02:51:51.935 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:48292 10 6452 1 2025-12-21 02:52:52.367 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48968 10 6452 1 2025-12-21 02:53:52.767 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38026 10 6452 1 2025-12-21 02:55:02.381 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 02:55:02.213 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 02:54:53.182 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36030 10 6452 1 2025-12-21 02:55:02.423 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 02:55:02.393 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:55:02.298 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 02:51:19.428 00:05:02.419 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 02:51:19.430 00:05:02.414 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 02:55:53.587 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56962 10 6452 1 2025-12-21 02:56:53.991 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50880 10 6452 1 2025-12-21 02:57:54.394 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40914 10 6452 1 Summary: total flows: 139, total bytes: 424345, total packets: 1017, avg bps: 931, avg pps: 0, avg bpp: 417 Time window: 2025-12-21 01:57:19 - 2025-12-21 02:58:04 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0018s Wall: 0.0019s flows/second: 73196.3 Runtime: 0.0019s