Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 04:58:47.097 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34390 10 6452 1 2025-12-21 05:00:04.857 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 04:59:47.502 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57944 10 6452 1 2025-12-21 05:00:04.773 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:00:04.775 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:00:04.831 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:00:04.774 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:00:47.908 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40800 10 6452 1 2025-12-21 04:57:19.496 00:05:02.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 04:57:19.494 00:05:02.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 05:01:48.279 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58524 10 6452 1 2025-12-21 05:02:48.685 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45710 10 6452 1 2025-12-21 05:03:49.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59910 10 6452 1 2025-12-21 05:04:49.520 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47968 10 6452 1 2025-12-21 05:05:04.825 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:05:04.957 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:05:05.081 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:05:05.119 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:05:05.042 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 05:05:49.925 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:50962 10 6452 1 2025-12-21 05:06:50.356 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57226 10 6452 1 2025-12-21 05:03:19.497 00:05:02.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 05:03:19.495 00:05:02.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 05:07:50.761 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:52486 10 6452 1 2025-12-21 05:08:51.189 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60868 10 6452 1 2025-12-21 05:10:04.816 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:09:51.609 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41534 10 6452 1 2025-12-21 05:10:05.096 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:10:05.003 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:10:05.231 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:10:05.313 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 05:10:52.011 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:35398 12 10369 1 2025-12-21 05:11:52.491 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49336 10 6452 1 2025-12-21 05:12:52.859 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45724 10 6452 1 2025-12-21 05:09:19.498 00:05:02.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 05:09:19.501 00:05:02.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 05:13:53.265 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51952 10 6452 1 2025-12-21 05:14:53.670 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53682 10 6452 1 2025-12-21 05:15:04.925 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:15:04.900 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:15:04.982 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 05:15:05.189 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:15:05.180 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:15:54.031 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45164 10 6452 1 2025-12-21 05:16:54.444 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36950 10 6452 1 2025-12-21 05:17:54.858 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53320 10 6452 1 2025-12-21 05:18:55.272 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48528 10 6452 1 2025-12-21 05:15:19.499 00:05:02.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 05:15:19.503 00:05:02.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 05:20:05.557 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 05:20:05.603 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:20:05.464 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:20:05.272 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:19:55.675 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55580 10 6452 1 2025-12-21 05:20:05.475 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:20:56.108 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48854 10 6452 1 2025-12-21 05:21:56.512 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35840 10 6452 1 2025-12-21 05:22:56.919 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54388 10 6452 1 2025-12-21 05:23:57.323 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41124 10 6452 1 2025-12-21 05:25:05.409 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:25:05.412 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:25:05.415 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:24:57.723 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:55704 10 6452 1 2025-12-21 05:25:05.460 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:25:05.545 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 05:21:19.501 00:05:02.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 05:21:19.502 00:05:02.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 05:25:58.109 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:60932 12 10369 1 2025-12-21 05:26:58.583 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:41964 10 6452 1 2025-12-21 05:27:58.962 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48782 10 6452 1 2025-12-21 05:28:59.365 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:49042 10 6452 1 2025-12-21 05:30:05.676 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 05:30:05.592 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:30:05.359 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:30:05.544 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:30:05.547 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:29:59.744 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59044 10 6452 1 2025-12-21 05:31:00.145 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46604 10 6452 1 2025-12-21 05:27:19.506 00:05:02.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 05:27:19.503 00:05:02.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 05:32:00.511 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48142 10 6452 1 2025-12-21 05:33:00.870 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35300 10 6452 1 2025-12-21 05:34:01.285 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50154 10 6452 1 2025-12-21 05:35:05.807 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 05:35:05.723 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:35:05.721 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:35:05.564 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:35:05.723 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:35:01.685 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59694 10 6452 1 2025-12-21 05:36:02.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58118 10 6452 1 2025-12-21 05:37:02.512 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49166 10 6452 1 2025-12-21 05:33:19.508 00:05:02.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 05:33:19.506 00:05:02.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 05:38:02.920 00:00:10.974 TCP 1.101.0.1:3000 -> 23.104.0.1:35758 10 6452 1 2025-12-21 05:39:03.938 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:48786 10 6452 1 2025-12-21 05:40:06.034 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 05:40:05.951 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:40:05.956 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:40:05.947 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:40:05.792 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:40:04.355 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44280 10 6452 1 2025-12-21 05:41:04.789 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57510 10 6452 1 2025-12-21 05:42:05.199 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41762 10 6452 1 2025-12-21 05:43:05.598 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:49592 10 6452 1 2025-12-21 05:39:19.510 00:05:02.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 05:39:19.507 00:05:02.395 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 05:44:05.972 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33092 10 6452 1 2025-12-21 05:45:05.798 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:45:05.795 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:45:05.718 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:45:05.595 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:45:05.678 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 05:45:06.336 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44608 10 6452 1 2025-12-21 05:46:06.695 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37602 10 6452 1 2025-12-21 05:47:07.065 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49066 10 6452 1 2025-12-21 05:48:07.425 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58556 10 6452 1 2025-12-21 05:49:07.794 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35300 10 6452 1 2025-12-21 05:45:19.509 00:05:02.394 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 05:45:19.512 00:05:02.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 05:50:05.873 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 05:50:05.798 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:50:05.974 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:50:05.732 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:50:05.792 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:50:08.203 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48778 10 6452 1 2025-12-21 05:51:08.599 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:56522 10 6452 1 2025-12-21 05:52:08.998 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34912 10 6452 1 2025-12-21 05:53:09.396 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45232 10 6452 1 2025-12-21 05:54:09.799 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56380 10 6452 1 2025-12-21 05:55:05.955 00:00:00.037 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 05:55:05.891 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 05:55:05.749 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:55:05.786 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 05:55:05.869 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 05:51:19.511 00:05:02.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 05:51:19.513 00:05:02.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 05:55:10.199 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38492 10 6452 1 2025-12-21 05:56:10.606 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54444 10 6452 1 2025-12-21 05:57:11.027 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35612 10 6452 1 2025-12-21 05:58:11.424 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36972 10 6452 1 Summary: total flows: 140, total bytes: 424834, total packets: 1024, avg bps: 928, avg pps: 0, avg bpp: 414 Time window: 2025-12-21 04:57:19 - 2025-12-21 05:58:21 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0053s User: 0.0000s Wall: 0.0039s flows/second: 35713.6 Runtime: 0.0039s