Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 21:59:01.381 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:49398 10 6452 1 2025-12-21 22:00:01.735 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 10 6452 1 2025-12-21 22:00:25.165 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:00:25.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:00:25.219 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:00:25.341 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:00:25.424 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:01:02.112 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34506 10 6452 1 2025-12-21 21:57:19.861 00:05:02.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 21:57:19.860 00:05:02.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 22:02:02.477 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44194 10 6452 1 2025-12-21 22:03:02.848 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:59972 10 6452 1 2025-12-21 22:04:03.242 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 10 6452 1 2025-12-21 22:05:03.603 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56384 10 6452 1 2025-12-21 22:05:25.371 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:05:25.392 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:05:25.357 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:05:25.288 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:05:25.383 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:06:03.966 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36952 10 6452 1 2025-12-21 22:07:04.369 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56390 10 6452 1 2025-12-21 22:03:19.861 00:05:02.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 22:03:19.859 00:05:02.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 22:08:04.773 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43956 10 6452 1 2025-12-21 22:09:05.195 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44232 10 6452 1 2025-12-21 22:10:05.593 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40946 10 6452 1 2025-12-21 22:10:25.740 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:10:25.639 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:10:25.700 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:10:25.570 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:10:25.652 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:11:05.993 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51632 10 6452 1 2025-12-21 22:12:06.414 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39030 10 6452 1 2025-12-21 22:13:06.827 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46524 10 6452 1 2025-12-21 22:09:19.862 00:05:02.441 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 22:09:19.861 00:05:02.446 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 22:14:07.187 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33008 10 6452 1 2025-12-21 22:15:07.593 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58670 10 6452 1 2025-12-21 22:15:25.954 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:15:25.758 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:15:25.681 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:15:25.798 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:15:25.871 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:16:07.996 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34698 10 6452 1 2025-12-21 22:17:08.365 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51006 10 6452 1 2025-12-21 22:18:08.764 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41506 10 6452 1 2025-12-21 22:19:09.177 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59128 10 6452 1 2025-12-21 22:15:19.867 00:05:02.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 22:15:19.865 00:05:02.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 22:20:09.580 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33490 10 6452 1 2025-12-21 22:20:25.675 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:20:25.949 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:20:25.777 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:20:25.912 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:20:25.995 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:21:09.992 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43948 10 6452 1 2025-12-21 22:22:10.403 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39874 10 6452 1 2025-12-21 22:23:10.768 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50888 10 6452 1 2025-12-21 22:24:11.135 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60846 10 6452 1 2025-12-21 22:25:11.536 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52518 10 6452 1 2025-12-21 22:21:19.868 00:05:02.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 22:25:26.041 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:25:26.067 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:25:26.108 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:25:26.152 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:21:19.866 00:05:02.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 22:25:26.236 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:26:11.941 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34032 10 6452 1 2025-12-21 22:27:12.358 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51890 10 6452 1 2025-12-21 22:28:12.765 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47496 10 6452 1 2025-12-21 22:29:13.168 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39644 10 6452 1 2025-12-21 22:30:13.566 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36148 10 6452 1 2025-12-21 22:30:25.865 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:30:25.903 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:30:26.106 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:30:25.888 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:30:25.783 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:31:13.971 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38098 11 6504 1 2025-12-21 22:27:19.869 00:05:02.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 22:27:19.866 00:05:02.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 22:32:14.394 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55552 10 6452 1 2025-12-21 22:33:14.803 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53100 10 6452 1 2025-12-21 22:34:15.209 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35268 10 6452 1 2025-12-21 22:35:26.099 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:35:26.018 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:35:15.633 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54158 10 6452 1 2025-12-21 22:35:26.069 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:35:26.389 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:35:25.925 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:36:16.032 00:00:16.556 TCP 1.101.0.1:3000 -> 23.104.0.1:56060 12 10369 1 2025-12-21 22:33:19.870 00:05:02.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 22:33:19.867 00:05:02.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 22:37:22.631 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45996 10 6452 1 2025-12-21 22:38:23.033 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40710 10 6452 1 2025-12-21 22:39:23.438 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32868 10 6452 1 2025-12-21 22:40:26.333 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:40:26.338 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:40:26.180 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:40:26.188 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:40:26.252 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:40:23.846 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35836 10 6452 1 2025-12-21 22:41:24.267 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35192 10 6452 1 2025-12-21 22:42:24.622 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53216 10 6452 1 2025-12-21 22:39:19.870 00:05:02.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 22:39:19.869 00:05:02.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 22:43:25.028 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33934 10 6452 1 2025-12-21 22:44:25.433 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40020 10 6452 1 2025-12-21 22:45:26.415 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:45:26.096 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:45:26.242 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:45:26.462 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:45:26.546 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:45:25.795 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48376 10 6452 1 2025-12-21 22:46:26.200 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39386 10 6452 1 2025-12-21 22:47:26.604 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55586 10 6452 1 2025-12-21 22:48:27.011 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38006 10 6452 1 2025-12-21 22:45:19.876 00:05:02.441 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 22:45:19.874 00:05:02.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 22:49:27.428 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36646 10 6452 1 2025-12-21 22:50:27.076 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:50:27.187 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:50:27.149 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:50:26.867 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:50:26.949 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:50:27.829 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:39158 10 6452 1 2025-12-21 22:51:28.278 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54740 10 6452 1 2025-12-21 22:52:28.641 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40666 10 6452 1 2025-12-21 22:53:29.047 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48970 10 6452 1 2025-12-21 22:54:29.407 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50172 10 6452 1 2025-12-21 22:51:19.876 00:05:02.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-21 22:55:26.481 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-21 22:55:26.608 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-21 22:55:26.496 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:55:26.610 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-21 22:51:19.874 00:05:02.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-21 22:55:26.693 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-21 22:55:29.814 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39478 10 6452 1 2025-12-21 22:56:30.216 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54520 10 6452 1 2025-12-21 22:57:30.619 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59390 10 6452 1 2025-12-21 22:58:31.024 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49946 10 6452 1 Summary: total flows: 140, total bytes: 420969, total packets: 1023, avg bps: 914, avg pps: 0, avg bpp: 411 Time window: 2025-12-21 21:57:19 - 2025-12-21 22:58:41 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0047s User: 0.0000s Wall: 0.0019s flows/second: 72583.8 Runtime: 0.0019s