Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 18:58:45.993 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41078 10 6452 1 2025-12-21 18:59:46.404 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:43258 10 6452 1 2025-12-21 19:00:21.636 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:00:21.744 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:00:21.580 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:00:21.686 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:00:21.826 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:00:46.855 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:49002 10 6452 1 2025-12-21 18:57:19.808 00:05:02.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 18:57:19.806 00:05:02.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 19:01:47.233 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53348 10 6452 1 2025-12-21 19:02:47.634 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51292 10 6452 1 2025-12-21 19:03:48.066 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38320 10 6452 1 2025-12-21 19:04:48.428 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38040 10 6452 1 2025-12-21 19:05:21.902 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:05:21.829 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:05:21.828 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:05:21.660 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:05:21.819 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:05:48.834 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:57452 10 6452 1 2025-12-21 19:06:49.217 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56762 10 6452 1 2025-12-21 19:03:19.810 00:05:02.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 19:03:19.808 00:05:02.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 19:07:49.623 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33888 10 6452 1 2025-12-21 19:08:50.022 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45810 10 6452 1 2025-12-21 19:09:50.387 00:00:10.911 TCP 1.101.0.1:3000 -> 23.104.0.1:37652 10 6452 1 2025-12-21 19:10:22.056 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:10:21.973 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:10:21.959 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:10:22.055 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:10:21.925 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:10:51.339 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47692 10 6452 1 2025-12-21 19:11:51.742 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48814 10 6452 1 2025-12-21 19:12:52.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44532 10 6452 1 2025-12-21 19:09:19.809 00:05:02.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 19:09:19.812 00:05:02.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 19:13:52.550 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53668 10 6452 1 2025-12-21 19:14:52.948 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52600 10 6452 1 2025-12-21 19:15:22.614 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:15:22.454 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:15:22.384 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:15:22.550 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:15:22.632 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:15:53.376 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:49784 12 10369 1 2025-12-21 19:16:53.850 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:35706 10 6452 1 2025-12-21 19:17:54.279 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50040 10 6452 1 2025-12-21 19:18:54.685 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39696 10 6452 1 2025-12-21 19:15:19.813 00:05:02.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 19:15:19.811 00:05:02.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 19:19:55.116 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45930 10 6452 1 2025-12-21 19:20:22.185 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:20:22.002 00:00:00.050 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:20:22.243 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:20:21.846 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:20:22.103 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:20:55.519 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32784 10 6452 1 2025-12-21 19:21:55.922 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36112 10 6452 1 2025-12-21 19:22:56.332 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:49272 10 6452 1 2025-12-21 19:23:56.767 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:34004 10 6452 1 2025-12-21 19:24:57.185 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40130 10 6452 1 2025-12-21 19:25:22.448 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:21:19.814 00:05:02.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 19:25:22.293 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:25:22.113 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:25:22.446 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:25:22.530 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:21:19.813 00:05:02.437 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 19:25:57.591 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36078 10 6452 1 2025-12-21 19:26:57.991 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47498 10 6452 1 2025-12-21 19:27:58.360 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:37764 10 6452 1 2025-12-21 19:28:58.741 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56686 10 6452 1 2025-12-21 19:29:59.147 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33904 10 6452 1 2025-12-21 19:30:22.155 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:30:22.175 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:30:22.349 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:30:22.400 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:30:22.431 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:30:59.517 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56370 10 6452 1 2025-12-21 19:27:19.815 00:05:02.432 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 19:27:19.814 00:05:02.437 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 19:31:59.926 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:50800 10 6452 1 2025-12-21 19:33:00.352 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53564 10 6452 1 2025-12-21 19:34:00.710 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34730 10 6452 1 2025-12-21 19:35:01.116 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37446 10 6452 1 2025-12-21 19:35:22.644 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:35:22.547 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:35:22.817 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:35:22.544 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:35:22.631 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:36:01.521 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40766 10 6452 1 2025-12-21 19:37:01.932 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:49362 10 6452 1 2025-12-21 19:33:19.815 00:05:02.437 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 19:33:19.817 00:05:02.432 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 19:38:02.366 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42306 10 6452 1 2025-12-21 19:39:02.770 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:46398 10 6452 1 2025-12-21 19:40:03.148 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33646 12 6556 1 2025-12-21 19:40:22.445 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:40:22.530 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:40:22.498 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:40:22.531 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:40:22.614 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:41:03.552 00:00:10.659 TCP 1.101.0.1:3000 -> 23.104.0.1:36010 12 10375 1 2025-12-21 19:42:04.247 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59206 10 6452 1 2025-12-21 19:43:04.650 00:00:10.714 TCP 1.101.0.1:3000 -> 23.104.0.1:55356 10 6452 1 2025-12-21 19:39:19.819 00:05:02.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 19:39:19.817 00:05:02.436 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 19:44:05.385 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41370 10 6452 1 2025-12-21 19:45:05.797 00:00:11.133 TCP 1.101.0.1:3000 -> 23.104.0.1:49362 10 6452 1 2025-12-21 19:45:22.854 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:45:22.828 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:45:22.513 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:45:22.747 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:45:22.772 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:46:06.968 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36602 10 6452 1 2025-12-21 19:47:07.373 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39628 10 6452 1 2025-12-21 19:48:07.792 00:00:10.884 TCP 1.101.0.1:3000 -> 23.104.0.1:53306 10 6452 1 2025-12-21 19:49:08.726 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45994 10 6452 1 2025-12-21 19:45:19.823 00:05:02.428 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 19:45:19.819 00:05:02.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 19:50:09.138 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40856 10 6452 1 2025-12-21 19:50:22.713 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:50:22.734 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:50:22.718 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:50:22.717 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:50:22.801 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:51:09.545 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37150 10 6452 1 2025-12-21 19:52:09.947 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45022 10 6452 1 2025-12-21 19:53:10.375 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55800 10 6452 1 2025-12-21 19:54:10.794 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32962 10 6452 1 2025-12-21 19:55:22.728 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:55:22.792 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 19:55:22.927 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 19:55:11.201 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49514 10 6452 1 2025-12-21 19:51:19.824 00:05:02.430 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 19:55:22.918 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 19:55:22.875 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 19:51:19.822 00:05:02.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 19:56:11.606 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37582 10 6452 1 2025-12-21 19:57:12.005 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49582 10 6452 1 2025-12-21 19:58:12.359 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50164 10 6452 1 Summary: total flows: 140, total bytes: 424944, total packets: 1026, avg bps: 928, avg pps: 0, avg bpp: 414 Time window: 2025-12-21 18:57:19 - 2025-12-21 19:58:22 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0038s User: 0.0015s Wall: 0.0022s flows/second: 63351.2 Runtime: 0.0022s