Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 16:58:53.637 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43658 10 6452 1 2025-12-21 16:59:54.039 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48486 10 6452 1 2025-12-21 17:00:19.474 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:00:19.363 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:00:19.441 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:00:19.351 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:00:19.435 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:00:54.446 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52696 10 6452 1 2025-12-21 16:57:19.767 00:05:02.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 16:57:19.764 00:05:02.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 17:01:54.850 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53418 10 6452 1 2025-12-21 17:02:55.277 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38710 10 6452 1 2025-12-21 17:03:55.641 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40262 10 6452 1 2025-12-21 17:04:56.068 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44172 10 6452 1 2025-12-21 17:05:19.497 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:05:19.545 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:05:19.342 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:05:19.419 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:05:19.502 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:05:56.466 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53646 10 6452 1 2025-12-21 17:06:56.878 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38192 10 6452 1 2025-12-21 17:03:19.768 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 17:03:19.765 00:05:02.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 17:07:57.282 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58380 10 6452 1 2025-12-21 17:08:57.647 00:00:11.789 TCP 1.101.0.1:3000 -> 23.104.0.1:42584 10 6452 1 2025-12-21 17:09:59.473 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47782 10 6452 1 2025-12-21 17:10:19.537 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:10:19.534 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:10:19.369 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:10:19.539 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:10:19.453 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:10:59.882 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:37556 12 10369 1 2025-12-21 17:12:00.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 10 6452 1 2025-12-21 17:13:00.767 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40508 10 6452 1 2025-12-21 17:09:19.773 00:05:02.426 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 17:09:19.775 00:05:02.420 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 17:14:01.176 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43852 10 6452 1 2025-12-21 17:15:01.576 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59588 10 6452 1 2025-12-21 17:15:19.851 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:15:19.854 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:15:19.479 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:15:19.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:15:19.773 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:16:01.985 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:59504 10 6452 1 2025-12-21 17:17:02.347 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45584 12 6556 1 2025-12-21 17:18:02.752 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45090 10 6452 1 2025-12-21 17:19:03.154 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51372 10 6452 1 2025-12-21 17:15:19.779 00:05:02.417 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 17:15:19.778 00:05:02.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 17:20:03.586 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58122 10 6452 1 2025-12-21 17:20:19.860 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:20:19.777 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:20:19.720 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:20:19.580 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:20:19.347 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:21:03.996 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32878 10 6452 1 2025-12-21 17:22:04.401 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59646 10 6452 1 2025-12-21 17:23:04.805 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48994 10 6452 1 2025-12-21 17:24:05.212 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54848 10 6452 1 2025-12-21 17:25:05.612 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37746 10 6452 1 2025-12-21 17:25:19.871 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:25:19.868 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:25:19.603 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:25:19.964 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:21:19.782 00:05:02.416 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 17:21:19.780 00:05:02.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 17:25:20.048 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:26:06.018 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48220 10 6452 1 2025-12-21 17:27:06.426 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34584 10 6452 1 2025-12-21 17:28:06.825 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58122 10 6452 1 2025-12-21 17:29:07.229 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51930 10 6452 1 2025-12-21 17:30:19.928 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:30:19.925 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:30:07.638 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:57842 10 6452 1 2025-12-21 17:30:19.970 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:30:20.052 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:30:19.990 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:31:07.993 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35614 10 6452 1 2025-12-21 17:27:19.785 00:05:02.415 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 17:27:19.784 00:05:02.420 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 17:32:08.401 00:00:11.848 TCP 1.101.0.1:3000 -> 23.104.0.1:37330 10 6452 1 2025-12-21 17:33:10.282 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38682 10 6452 1 2025-12-21 17:34:10.685 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:56558 10 6452 1 2025-12-21 17:35:19.902 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:35:19.985 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:35:20.057 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:35:20.117 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:35:20.002 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:35:11.063 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35796 10 6452 1 2025-12-21 17:36:11.472 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41676 10 6452 1 2025-12-21 17:33:19.788 00:05:02.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 17:33:19.789 00:05:02.416 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 17:37:11.877 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46960 10 6452 1 2025-12-21 17:38:12.283 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48896 10 6452 1 2025-12-21 17:39:12.686 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34036 10 6452 1 2025-12-21 17:40:19.964 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:40:20.217 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:40:20.137 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:40:20.191 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:40:20.135 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:40:13.118 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40562 10 6452 1 2025-12-21 17:41:13.545 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:47214 10 6452 1 2025-12-21 17:42:14.032 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50614 10 6452 1 2025-12-21 17:39:19.788 00:05:02.425 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 17:39:19.789 00:05:02.421 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 17:43:14.430 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37046 10 6452 1 2025-12-21 17:44:14.793 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53942 10 6452 1 2025-12-21 17:45:20.103 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:45:20.198 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:45:20.207 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:45:20.103 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:45:20.282 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:45:15.203 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34806 10 6452 1 2025-12-21 17:46:15.608 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:39740 12 10369 1 2025-12-21 17:47:16.055 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36650 10 6452 1 2025-12-21 17:48:16.461 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33040 10 6452 1 2025-12-21 17:45:19.791 00:05:02.420 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 17:45:19.789 00:05:02.425 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 17:49:16.823 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55578 10 6452 1 2025-12-21 17:50:20.427 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:50:20.411 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:50:20.481 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:50:20.377 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:50:20.346 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:50:17.233 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35146 10 6452 1 2025-12-21 17:51:17.634 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42896 10 6452 1 2025-12-21 17:52:18.037 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51824 10 6452 1 2025-12-21 17:53:18.447 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52198 10 6452 1 2025-12-21 17:54:18.814 00:00:10.767 TCP 1.101.0.1:3000 -> 23.104.0.1:34694 10 6452 1 2025-12-21 17:51:19.795 00:05:02.419 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 17:55:20.237 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 17:55:20.274 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:55:20.436 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 17:55:20.232 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 17:55:20.519 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 17:51:19.793 00:05:02.424 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 17:55:19.623 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44012 10 6452 1 2025-12-21 17:56:20.027 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49950 10 6452 1 2025-12-21 17:57:20.389 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:45050 10 6452 1 2025-12-21 17:58:20.754 00:00:11.020 TCP 1.101.0.1:3000 -> 23.104.0.1:32860 10 6452 1 Summary: total flows: 140, total bytes: 424938, total packets: 1026, avg bps: 925, avg pps: 0, avg bpp: 414 Time window: 2025-12-21 16:57:19 - 2025-12-21 17:58:31 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0038s User: 0.0019s Wall: 0.0018s flows/second: 78956.9 Runtime: 0.0018s