Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 12:59:13.521 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44648 10 6452 1 2025-12-21 13:00:14.533 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:00:14.514 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:00:14.355 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:00:14.588 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:00:14.450 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:00:13.924 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47410 10 6452 1 2025-12-21 12:57:19.674 00:05:02.428 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 13:01:14.348 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:34664 12 10375 1 2025-12-21 12:57:19.671 00:05:02.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 13:02:14.823 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:33656 10 6452 1 2025-12-21 13:03:15.260 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60870 10 6452 1 2025-12-21 13:04:15.667 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53558 10 6452 1 2025-12-21 13:05:14.668 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:05:14.820 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:05:14.582 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:05:14.659 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:05:14.743 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:05:16.095 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52016 10 6452 1 2025-12-21 13:06:16.501 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36572 10 6452 1 2025-12-21 13:03:19.674 00:05:02.430 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 13:03:19.672 00:05:02.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 13:07:16.908 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:49158 10 6452 1 2025-12-21 13:08:17.292 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:32962 10 6452 1 2025-12-21 13:09:17.707 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39958 10 6452 1 2025-12-21 13:10:14.709 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:10:14.439 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:10:14.644 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:10:14.644 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:10:14.726 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:10:18.108 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39086 10 6452 1 2025-12-21 13:11:18.507 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54546 10 6452 1 2025-12-21 13:12:18.912 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43590 10 6452 1 2025-12-21 13:09:19.675 00:05:02.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 13:09:19.678 00:05:02.430 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 13:13:19.278 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52196 10 6452 1 2025-12-21 13:14:19.680 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44458 10 6452 1 2025-12-21 13:15:14.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:15:14.636 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:15:14.549 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:15:14.917 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:15:15.001 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:15:20.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33370 10 6452 1 2025-12-21 13:16:20.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35562 10 6452 1 2025-12-21 13:17:20.916 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59110 10 6452 1 2025-12-21 13:18:21.317 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56962 10 6452 1 2025-12-21 13:15:19.676 00:05:02.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 13:15:19.677 00:05:02.430 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 13:19:21.716 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49302 10 6452 1 2025-12-21 13:20:14.740 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:20:14.834 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:20:14.804 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:20:14.739 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:20:14.823 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:20:22.132 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44794 10 6452 1 2025-12-21 13:21:22.494 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34232 10 6452 1 2025-12-21 13:22:22.894 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:39518 10 6452 1 2025-12-21 13:23:23.273 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49908 10 6452 1 2025-12-21 13:24:23.673 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35416 10 6452 1 2025-12-21 13:25:15.196 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:25:14.942 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:25:14.942 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:25:14.880 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:25:15.112 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:21:19.681 00:05:02.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 13:21:19.678 00:05:02.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 13:25:24.097 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41384 10 6452 1 2025-12-21 13:26:24.466 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55114 10 6452 1 2025-12-21 13:27:24.831 00:00:11.111 TCP 1.101.0.1:3000 -> 23.104.0.1:41540 10 6452 1 2025-12-21 13:28:25.980 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41732 10 6452 1 2025-12-21 13:29:26.387 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34320 10 6452 1 2025-12-21 13:30:15.450 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:30:15.367 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:30:15.431 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:30:15.272 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:30:15.388 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:30:26.794 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52742 10 6452 1 2025-12-21 13:27:19.677 00:05:02.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 13:27:19.681 00:05:02.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 13:31:27.155 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55018 10 6452 1 2025-12-21 13:32:27.558 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56692 10 6452 1 2025-12-21 13:33:27.959 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57938 10 6452 1 2025-12-21 13:34:28.320 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46282 10 6452 1 2025-12-21 13:35:15.244 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:35:15.208 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:35:15.095 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:35:15.143 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:35:15.226 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:35:28.721 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57734 10 6452 1 2025-12-21 13:36:29.108 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48000 10 6452 1 2025-12-21 13:33:19.682 00:05:02.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 13:33:19.684 00:05:02.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 13:37:29.476 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58398 10 6452 1 2025-12-21 13:38:29.839 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:54266 10 6452 1 2025-12-21 13:39:30.265 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48492 10 6452 1 2025-12-21 13:40:15.460 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:40:15.378 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:40:15.376 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:40:15.398 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:40:15.283 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:40:30.671 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48836 10 6452 1 2025-12-21 13:41:31.106 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39370 10 6452 1 2025-12-21 13:42:31.522 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49396 10 6452 1 2025-12-21 13:39:19.684 00:05:02.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 13:39:19.682 00:05:02.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 13:43:31.933 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:37788 10 6452 1 2025-12-21 13:44:32.310 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:49506 10 6452 1 2025-12-21 13:45:15.421 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:45:15.440 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:45:15.099 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:45:15.319 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:45:15.402 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:45:32.746 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60288 10 6452 1 2025-12-21 13:46:33.151 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34742 10 6452 1 2025-12-21 13:47:33.552 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50788 10 6452 1 2025-12-21 13:48:33.962 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:48164 11 6504 1 2025-12-21 13:45:19.683 00:05:02.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 13:45:19.685 00:05:02.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 13:49:34.418 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40262 10 6452 1 2025-12-21 13:50:16.049 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:50:15.499 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:50:15.747 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:50:15.912 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:50:15.966 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:50:34.814 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:37474 10 6452 1 2025-12-21 13:51:35.243 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:56254 12 10375 1 2025-12-21 13:52:35.727 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49434 10 6452 1 2025-12-21 13:53:36.106 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53336 10 6452 1 2025-12-21 13:54:36.464 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59964 10 6452 1 2025-12-21 13:55:16.112 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 13:51:19.686 00:05:02.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 13:55:16.029 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:55:16.480 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 13:55:16.202 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 13:55:15.918 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 13:51:19.690 00:05:02.428 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 13:55:36.869 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35714 10 6452 1 2025-12-21 13:56:37.281 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57246 10 6452 1 2025-12-21 13:57:37.643 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60056 10 6452 1 2025-12-21 13:58:38.064 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47542 10 6452 1 Summary: total flows: 140, total bytes: 424898, total packets: 1025, avg bps: 921, avg pps: 0, avg bpp: 414 Time window: 2025-12-21 12:57:19 - 2025-12-21 13:58:48 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0036s User: 0.0018s Wall: 0.0022s flows/second: 62441.8 Runtime: 0.0023s