Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 11:58:47.332 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56442 10 6452 1 2025-12-21 11:59:47.694 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56790 10 6452 1 2025-12-21 12:00:13.356 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:00:13.402 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:00:13.059 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:00:13.297 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:00:13.380 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:00:48.112 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:45024 10 6452 1 2025-12-21 11:57:19.638 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 11:57:19.639 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 12:01:48.510 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40254 10 6452 1 2025-12-21 12:02:48.913 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48508 10 6452 1 2025-12-21 12:03:49.278 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58770 10 6452 1 2025-12-21 12:04:49.637 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40134 10 6452 1 2025-12-21 12:05:13.144 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:05:13.119 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:05:13.400 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:05:13.214 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:05:13.202 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:05:50.036 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45978 10 6452 1 2025-12-21 12:06:50.445 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50104 10 6452 1 2025-12-21 12:03:19.638 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 12:03:19.640 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 12:07:50.849 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:34116 10 6452 1 2025-12-21 12:08:51.278 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38186 10 6452 1 2025-12-21 12:09:51.691 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45390 10 6452 1 2025-12-21 12:10:13.549 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:10:13.650 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:10:13.502 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:10:13.248 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:10:13.331 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:10:52.054 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:44468 10 6452 1 2025-12-21 12:11:52.477 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:58430 10 6452 1 2025-12-21 12:12:52.880 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:49056 10 6452 1 2025-12-21 12:09:19.644 00:05:02.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 12:09:19.642 00:05:02.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 12:13:53.295 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37798 10 6452 1 2025-12-21 12:14:53.695 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54676 10 6452 1 2025-12-21 12:15:13.711 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:15:13.671 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:15:13.619 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:15:13.496 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:15:13.629 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:15:54.144 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45774 10 6452 1 2025-12-21 12:16:54.554 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43938 10 6452 1 2025-12-21 12:17:54.978 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53886 10 6452 1 2025-12-21 12:18:55.386 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:43288 10 6452 1 2025-12-21 12:15:19.644 00:05:02.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 12:15:19.647 00:05:02.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 12:19:55.770 00:00:10.588 TCP 1.101.0.1:3000 -> 23.104.0.1:34048 10 6452 1 2025-12-21 12:20:13.821 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:20:13.637 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:20:13.821 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:20:13.519 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:20:13.904 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:20:56.392 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33436 10 6452 1 2025-12-21 12:21:56.755 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53484 10 6452 1 2025-12-21 12:22:57.155 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37732 10 6452 1 2025-12-21 12:23:57.566 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:35078 10 6452 1 2025-12-21 12:25:13.881 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:24:57.923 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:45462 10 6452 1 2025-12-21 12:25:13.798 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:25:13.813 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:25:13.639 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:25:13.798 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:21:19.649 00:05:02.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 12:21:19.650 00:05:02.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 12:25:58.350 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36498 10 6452 1 2025-12-21 12:26:58.766 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49492 10 6452 1 2025-12-21 12:27:59.171 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50386 10 6452 1 2025-12-21 12:28:59.577 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41112 10 6452 1 2025-12-21 12:30:14.597 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:30:14.427 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:30:14.530 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:30:14.108 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:30:14.515 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:29:59.983 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52800 10 6452 1 2025-12-21 12:31:00.385 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37456 10 6452 1 2025-12-21 12:27:19.650 00:05:02.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 12:27:19.653 00:05:02.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 12:32:00.785 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59780 10 6452 1 2025-12-21 12:33:01.151 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37982 10 6452 1 2025-12-21 12:34:01.559 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60650 10 6452 1 2025-12-21 12:35:14.166 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:35:13.939 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:35:13.831 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:35:01.959 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47218 10 6452 1 2025-12-21 12:35:13.932 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:35:14.083 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:36:02.362 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58454 10 6452 1 2025-12-21 12:37:02.770 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39416 10 6452 1 2025-12-21 12:33:19.655 00:05:02.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 12:33:19.657 00:05:02.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 12:38:03.189 00:00:11.791 TCP 1.101.0.1:3000 -> 23.104.0.1:42296 10 6452 1 2025-12-21 12:39:05.019 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39420 10 6452 1 2025-12-21 12:40:14.097 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:40:14.094 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:40:14.237 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:40:14.090 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:40:14.179 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:40:05.388 00:00:10.663 TCP 1.101.0.1:3000 -> 23.104.0.1:60054 10 6452 1 2025-12-21 12:41:06.107 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46508 10 6452 1 2025-12-21 12:42:06.473 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57782 10 6452 1 2025-12-21 12:39:19.657 00:05:02.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 12:43:06.872 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42870 10 6452 1 2025-12-21 12:39:19.659 00:05:02.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 12:44:07.290 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59698 10 6452 1 2025-12-21 12:45:14.419 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:45:15.841 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:45:15.538 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:45:15.600 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:45:15.759 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:45:07.695 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43426 10 6452 1 2025-12-21 12:46:08.117 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:41670 12 10375 1 2025-12-21 12:47:08.589 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57046 10 6452 1 2025-12-21 12:48:08.990 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45962 10 6452 1 2025-12-21 12:49:09.394 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60838 10 6452 1 2025-12-21 12:45:19.662 00:05:02.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 12:45:19.660 00:05:02.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 12:50:14.301 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:50:14.282 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:50:14.320 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:50:13.952 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:50:14.219 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:50:09.757 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35802 10 6452 1 2025-12-21 12:51:10.174 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33964 10 6452 1 2025-12-21 12:52:10.579 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:36888 10 6452 1 2025-12-21 12:53:11.058 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45656 10 6452 1 2025-12-21 12:54:11.469 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53038 10 6452 1 2025-12-21 12:55:14.431 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 12:55:14.249 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 12:55:14.487 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 12:55:14.296 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:55:14.349 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 12:51:19.673 00:05:02.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 12:55:11.874 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58028 10 6452 1 2025-12-21 12:51:19.670 00:05:02.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 12:56:12.278 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47804 10 6452 1 2025-12-21 12:57:12.684 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57004 10 6452 1 2025-12-21 12:58:13.114 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37188 10 6452 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 919, avg pps: 0, avg bpp: 411 Time window: 2025-12-21 11:57:19 - 2025-12-21 12:58:23 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0046s User: 0.0009s Wall: 0.0021s flows/second: 65763.5 Runtime: 0.0021s