Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 17:59:21.813 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57278 10 6452 1 2025-12-21 18:00:20.616 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:00:20.524 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:00:20.431 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:00:20.476 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:00:20.534 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:00:22.228 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41298 10 6452 1 2025-12-21 17:57:19.790 00:05:02.427 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 17:57:19.793 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 18:01:22.631 00:00:10.925 TCP 1.101.0.1:3000 -> 23.104.0.1:43936 10 6452 1 2025-12-21 18:02:23.596 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58138 10 6452 1 2025-12-21 18:03:23.960 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51922 10 6452 1 2025-12-21 18:04:24.369 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51830 10 6452 1 2025-12-21 18:05:20.700 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:05:20.416 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:05:20.745 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:05:20.580 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:05:20.828 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:05:24.772 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47438 10 6452 1 2025-12-21 18:06:25.175 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47122 10 6452 1 2025-12-21 18:03:19.793 00:05:02.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 18:03:19.795 00:05:02.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 18:07:25.543 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36408 10 6452 1 2025-12-21 18:08:25.908 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40504 10 6452 1 2025-12-21 18:09:26.313 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42426 10 6452 1 2025-12-21 18:10:20.879 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:10:20.706 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:10:20.756 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:10:20.882 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:10:20.966 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:10:26.675 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55854 10 6452 1 2025-12-21 18:11:27.105 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43566 10 6452 1 2025-12-21 18:12:27.522 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34636 10 6452 1 2025-12-21 18:09:19.799 00:05:02.421 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 18:09:19.796 00:05:02.427 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 18:13:27.931 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:55916 10 6452 1 2025-12-21 18:14:28.361 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39984 10 6452 1 2025-12-21 18:15:20.853 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:15:20.970 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:15:20.806 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:15:20.761 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:15:20.844 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:15:28.769 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36258 10 6452 1 2025-12-21 18:16:29.175 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55626 10 6452 1 2025-12-21 18:17:29.606 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56426 10 6452 1 2025-12-21 18:18:29.973 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56990 10 6452 1 2025-12-21 18:15:19.797 00:05:02.427 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 18:15:19.800 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 18:19:30.381 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45610 10 6452 1 2025-12-21 18:20:21.038 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:20:21.066 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:20:20.822 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:20:20.845 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:20:20.955 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:20:30.748 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33386 10 6452 1 2025-12-21 18:21:31.146 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33354 12 6556 1 2025-12-21 18:22:31.546 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33012 10 6452 1 2025-12-21 18:23:31.949 00:00:10.430 TCP 1.101.0.1:3000 -> 23.104.0.1:37028 11 6504 1 2025-12-21 18:24:32.419 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44272 10 6452 1 2025-12-21 18:25:21.160 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:21:19.797 00:05:02.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 18:25:20.908 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:21:19.800 00:05:02.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 18:25:20.992 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:25:21.011 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:25:21.077 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:25:32.822 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46472 10 6452 1 2025-12-21 18:26:33.239 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36486 10 6452 1 2025-12-21 18:27:33.603 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39544 10 6452 1 2025-12-21 18:28:33.980 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53562 10 6452 1 2025-12-21 18:29:34.351 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51156 10 6452 1 2025-12-21 18:30:21.154 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:30:20.862 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:30:20.928 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:30:21.154 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:30:21.237 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:30:34.752 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53260 10 6452 1 2025-12-21 18:27:19.801 00:05:02.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 18:27:19.800 00:05:02.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 18:31:35.158 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44128 10 6452 1 2025-12-21 18:32:35.560 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54372 10 6452 1 2025-12-21 18:33:35.963 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48448 10 6452 1 2025-12-21 18:34:36.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47154 10 6452 1 2025-12-21 18:35:21.100 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:35:21.245 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:35:21.186 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:35:21.408 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:35:21.491 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:35:36.760 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34342 10 6452 1 2025-12-21 18:36:37.127 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59646 10 6452 1 2025-12-21 18:33:19.804 00:05:02.422 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 18:33:19.801 00:05:02.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 18:37:37.489 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47450 10 6452 1 2025-12-21 18:38:37.895 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33600 10 6452 1 2025-12-21 18:39:38.316 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34442 10 6452 1 2025-12-21 18:40:21.609 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:40:21.416 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:40:21.473 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:40:21.212 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:40:21.526 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:40:38.721 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33272 10 6452 1 2025-12-21 18:41:39.110 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56662 10 6452 1 2025-12-21 18:42:39.515 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56972 10 6452 1 2025-12-21 18:39:19.806 00:05:02.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 18:39:19.803 00:05:02.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 18:43:39.927 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:38174 10 6452 1 2025-12-21 18:44:40.353 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58132 10 6452 1 2025-12-21 18:45:21.622 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:45:21.579 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:45:21.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:45:21.348 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:45:21.539 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:45:40.763 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60214 10 6452 1 2025-12-21 18:46:41.190 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38208 10 6452 1 2025-12-21 18:47:41.589 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58510 10 6452 1 2025-12-21 18:48:42.003 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37804 10 6452 1 2025-12-21 18:45:19.807 00:05:02.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 18:45:19.805 00:05:02.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 18:49:42.417 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59152 10 6452 1 2025-12-21 18:50:21.568 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:50:21.516 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:50:21.374 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:50:21.453 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:50:21.535 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:50:42.825 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48684 10 6452 1 2025-12-21 18:51:43.225 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56672 10 6452 1 2025-12-21 18:52:43.629 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41146 10 6452 1 2025-12-21 18:53:44.032 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35514 10 6452 1 2025-12-21 18:54:44.432 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60136 10 6452 1 2025-12-21 18:55:21.912 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 18:51:19.808 00:05:02.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 18:51:19.810 00:05:02.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 18:55:21.828 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 18:55:21.760 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:55:21.828 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 18:55:21.910 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 18:55:44.834 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:55602 10 6452 1 2025-12-21 18:56:45.211 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46780 10 6452 1 2025-12-21 18:57:45.584 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38874 10 6452 1 Summary: total flows: 139, total bytes: 410704, total packets: 1013, avg bps: 903, avg pps: 0, avg bpp: 405 Time window: 2025-12-21 17:57:19 - 2025-12-21 18:57:55 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0040s User: 0.0010s Wall: 0.0022s flows/second: 63411.8 Runtime: 0.0022s