Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 15:59:29.190 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37356 12 6556 1 2025-12-21 16:00:17.921 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:00:17.936 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:00:18.128 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:00:18.139 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:00:18.221 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:00:29.595 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49472 10 6452 1 2025-12-21 15:57:19.744 00:05:02.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 15:57:19.746 00:05:02.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 16:01:29.955 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51074 10 6452 1 2025-12-21 16:02:30.379 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35866 10 6452 1 2025-12-21 16:03:30.778 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56624 10 6452 1 2025-12-21 16:04:31.189 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51150 10 6452 1 2025-12-21 16:05:18.293 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:05:18.307 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:05:18.405 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:05:18.476 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:05:18.560 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:05:31.594 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53020 10 6452 1 2025-12-21 16:06:31.958 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38986 10 6452 1 2025-12-21 16:03:19.748 00:05:02.427 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 16:03:19.746 00:05:02.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 16:07:32.364 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49824 10 6452 1 2025-12-21 16:08:32.726 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41634 10 6452 1 2025-12-21 16:09:33.142 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54542 10 6452 1 2025-12-21 16:10:18.260 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:10:18.187 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:10:18.160 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:10:18.257 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:10:18.244 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:10:33.503 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33326 10 6452 1 2025-12-21 16:11:33.910 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:60936 12 10369 1 2025-12-21 16:12:34.354 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46260 10 6452 1 2025-12-21 16:09:19.751 00:05:02.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 16:09:19.749 00:05:02.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 16:13:34.758 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38982 10 6452 1 2025-12-21 16:14:35.176 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38018 10 6452 1 2025-12-21 16:15:18.417 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:15:18.492 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:15:18.367 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:15:18.491 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:15:18.575 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:15:35.578 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38542 10 6452 1 2025-12-21 16:16:35.986 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44492 10 6452 1 2025-12-21 16:17:36.351 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35618 10 6452 1 2025-12-21 16:18:36.762 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45988 10 6452 1 2025-12-21 16:15:19.753 00:05:02.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 16:15:19.749 00:05:02.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 16:19:37.186 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47896 10 6452 1 2025-12-21 16:20:18.550 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:20:18.551 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:20:18.142 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:20:18.502 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:20:18.585 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:20:37.594 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45548 10 6452 1 2025-12-21 16:21:38.016 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37008 10 6452 1 2025-12-21 16:22:38.375 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39904 10 6452 1 2025-12-21 16:23:38.737 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36598 10 6452 1 2025-12-21 16:24:39.152 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47002 10 6452 1 2025-12-21 16:25:18.651 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:25:18.572 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:25:18.746 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:25:18.730 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:25:18.569 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:21:19.750 00:05:02.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 16:21:19.753 00:05:02.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 16:25:39.553 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58350 10 6452 1 2025-12-21 16:26:39.956 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60648 10 6452 1 2025-12-21 16:27:40.370 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57854 10 6452 1 2025-12-21 16:28:40.772 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48618 10 6452 1 2025-12-21 16:29:41.145 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43044 10 6452 1 2025-12-21 16:30:18.945 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:30:18.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:30:18.781 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:30:18.704 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:30:18.863 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:30:41.508 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36130 10 6452 1 2025-12-21 16:27:19.756 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 16:27:19.753 00:05:02.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 16:31:41.917 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:41542 10 6452 1 2025-12-21 16:32:42.302 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37850 10 6452 1 2025-12-21 16:33:42.710 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50410 10 6452 1 2025-12-21 16:34:43.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49432 10 6452 1 2025-12-21 16:35:18.787 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:35:18.614 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:35:19.024 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:35:18.787 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:35:18.869 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:35:43.518 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53262 10 6452 1 2025-12-21 16:36:43.922 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49600 10 6452 1 2025-12-21 16:33:19.754 00:05:02.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 16:33:19.758 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 16:37:44.327 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55028 10 6452 1 2025-12-21 16:38:44.692 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42814 10 6452 1 2025-12-21 16:39:45.107 00:00:11.010 TCP 1.101.0.1:3000 -> 23.104.0.1:43130 10 6452 1 2025-12-21 16:40:18.651 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:40:18.809 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:40:18.888 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:40:18.811 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:40:18.891 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:40:46.151 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45156 10 6452 1 2025-12-21 16:41:46.562 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52158 10 6452 1 2025-12-21 16:42:46.963 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34934 10 6452 1 2025-12-21 16:39:19.760 00:05:02.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 16:39:19.758 00:05:02.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 16:43:47.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59702 10 6452 1 2025-12-21 16:44:47.766 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60622 10 6452 1 2025-12-21 16:45:19.137 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:45:18.967 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:45:18.971 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:45:18.853 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:45:19.054 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:45:48.185 00:00:10.590 TCP 1.101.0.1:3000 -> 23.104.0.1:38690 10 6452 1 2025-12-21 16:46:48.814 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53564 10 6452 1 2025-12-21 16:47:49.214 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59796 10 6452 1 2025-12-21 16:48:49.620 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40108 10 6452 1 2025-12-21 16:45:19.758 00:05:02.433 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 16:45:19.760 00:05:02.428 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 16:49:50.028 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49912 12 6556 1 2025-12-21 16:50:18.944 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:50:19.462 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:50:19.181 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:50:18.936 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:50:19.021 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:50:50.430 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45452 10 6452 1 2025-12-21 16:51:50.859 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47858 10 6452 1 2025-12-21 16:52:51.287 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49712 10 6452 1 2025-12-21 16:53:51.700 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42806 10 6452 1 2025-12-21 16:54:52.099 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33320 10 6452 1 2025-12-21 16:55:19.080 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 16:55:19.231 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 16:55:18.897 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:55:19.068 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 16:51:19.762 00:05:02.428 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 16:55:19.150 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 16:51:19.759 00:05:02.433 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 16:55:52.472 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58336 10 6452 1 2025-12-21 16:56:52.872 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48046 10 6452 1 2025-12-21 16:57:53.279 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:40130 10 6452 1 Summary: total flows: 139, total bytes: 414673, total packets: 1016, avg bps: 910, avg pps: 0, avg bpp: 408 Time window: 2025-12-21 15:57:19 - 2025-12-21 16:58:03 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0027s User: 0.0027s Wall: 0.0022s flows/second: 62108.0 Runtime: 0.0023s