Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 05:59:11.829 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54210 10 6452 1 2025-12-21 06:00:06.256 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:00:06.089 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:00:06.168 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:00:05.830 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:00:06.172 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:00:12.225 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59106 10 6452 1 2025-12-21 05:57:19.513 00:05:02.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 06:01:12.627 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42076 10 6452 1 2025-12-21 05:57:19.511 00:05:02.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 06:02:12.988 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60566 10 6452 1 2025-12-21 06:03:13.397 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56244 10 6452 1 2025-12-21 06:04:13.800 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53376 10 6452 1 2025-12-21 06:05:06.061 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:05:06.281 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:05:05.843 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:05:06.136 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:05:06.220 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:05:14.204 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52476 10 6452 1 2025-12-21 06:06:14.606 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:43510 12 10375 1 2025-12-21 06:03:19.516 00:05:02.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 06:03:19.519 00:05:02.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 06:07:15.096 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:34690 10 6452 1 2025-12-21 06:08:15.465 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56102 10 6452 1 2025-12-21 06:09:15.872 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60496 10 6452 1 2025-12-21 06:10:06.476 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:10:06.503 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:10:06.394 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:10:06.115 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:10:06.395 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:10:16.277 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38058 10 6452 1 2025-12-21 06:11:16.682 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37996 10 6452 1 2025-12-21 06:12:17.111 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38168 10 6452 1 2025-12-21 06:09:19.521 00:05:02.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 06:09:19.523 00:05:02.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 06:13:17.512 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45338 10 6452 1 2025-12-21 06:14:17.873 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59352 10 6452 1 2025-12-21 06:15:06.387 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:15:06.461 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:15:06.182 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:15:06.382 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:15:06.465 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:15:18.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47864 10 6452 1 2025-12-21 06:16:18.685 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40752 10 6452 1 2025-12-21 06:17:19.112 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48944 10 6452 1 2025-12-21 06:18:19.480 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:34212 10 6452 1 2025-12-21 06:15:19.525 00:05:02.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 06:15:19.523 00:05:02.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 06:19:19.914 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37362 10 6452 1 2025-12-21 06:20:06.725 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:20:06.413 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:20:06.504 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:20:06.486 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:20:06.644 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:20:20.331 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49170 12 6556 1 2025-12-21 06:21:20.732 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48248 10 6452 1 2025-12-21 06:22:21.142 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38128 10 6452 1 2025-12-21 06:23:21.546 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60228 10 6452 1 2025-12-21 06:24:21.948 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33848 10 6452 1 2025-12-21 06:25:06.722 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:25:06.676 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:25:06.572 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:25:06.247 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:25:06.638 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:21:19.524 00:05:02.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 06:21:19.526 00:05:02.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 06:25:22.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37860 10 6452 1 2025-12-21 06:26:22.763 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:33904 10 6452 1 2025-12-21 06:27:23.132 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:48632 10 6452 1 2025-12-21 06:28:23.522 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44950 10 6452 1 2025-12-21 06:29:23.924 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41142 10 6452 1 2025-12-21 06:30:06.808 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:30:06.713 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:30:06.622 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:30:06.639 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:30:06.722 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:30:24.329 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:50164 10 6452 1 2025-12-21 06:27:19.527 00:05:02.387 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 06:27:19.524 00:05:02.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 06:31:24.697 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56464 10 6452 1 2025-12-21 06:32:25.067 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54652 10 6452 1 2025-12-21 06:33:25.469 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45498 10 6452 1 2025-12-21 06:34:25.874 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50306 10 6452 1 2025-12-21 06:35:06.976 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:35:06.670 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:35:06.831 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:35:06.704 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:35:06.894 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:35:26.247 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53240 10 6452 1 2025-12-21 06:36:26.655 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51662 10 6452 1 2025-12-21 06:33:19.526 00:05:02.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 06:33:19.528 00:05:02.388 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 06:37:27.067 00:00:10.733 TCP 1.101.0.1:3000 -> 23.104.0.1:47484 10 6452 1 2025-12-21 06:38:27.839 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:44942 10 6452 1 2025-12-21 06:39:28.222 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36096 10 6452 1 2025-12-21 06:40:06.974 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:40:06.906 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:40:06.882 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:40:06.821 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:40:06.892 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:40:28.584 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52700 10 6452 1 2025-12-21 06:41:28.997 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:34520 12 6556 1 2025-12-21 06:42:29.473 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50968 10 6452 1 2025-12-21 06:39:19.527 00:05:02.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 06:39:19.530 00:05:02.387 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 06:43:29.873 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43192 10 6452 1 2025-12-21 06:44:30.255 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54806 10 6452 1 2025-12-21 06:45:07.084 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:45:07.117 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:45:07.120 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:45:07.065 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:45:07.003 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:45:30.622 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44606 10 6452 1 2025-12-21 06:46:31.027 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58664 10 6452 1 2025-12-21 06:47:31.426 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55562 10 6452 1 2025-12-21 06:48:31.828 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35466 10 6452 1 2025-12-21 06:45:19.530 00:05:02.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 06:45:19.533 00:05:02.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 06:49:32.230 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60176 10 6452 1 2025-12-21 06:50:07.141 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:50:07.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:50:07.220 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:50:06.881 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:50:07.057 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:50:32.642 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35110 10 6452 1 2025-12-21 06:51:33.066 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55408 10 6452 1 2025-12-21 06:52:33.478 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50862 10 6452 1 2025-12-21 06:53:33.880 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57484 10 6452 1 2025-12-21 06:54:34.239 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39142 10 6452 1 2025-12-21 06:55:07.298 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 06:55:07.266 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 06:55:07.133 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 06:55:07.150 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:55:07.215 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 06:51:19.531 00:05:02.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 06:51:19.533 00:05:02.387 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 06:55:34.644 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44580 10 6452 1 2025-12-21 06:56:35.056 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40974 10 6452 1 2025-12-21 06:57:35.457 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36698 10 6452 1 2025-12-21 06:58:35.859 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36982 10 6452 1 Summary: total flows: 140, total bytes: 421131, total packets: 1026, avg bps: 913, avg pps: 0, avg bpp: 410 Time window: 2025-12-21 05:57:19 - 2025-12-21 06:58:46 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0045s User: 0.0018s Wall: 0.0026s flows/second: 53640.5 Runtime: 0.0026s