Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-24 18:59:28.517 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52964 10 6452 1 2025-12-24 19:00:28.920 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46182 10 6452 1 2025-12-24 18:57:21.366 00:05:02.520 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-24 18:57:21.368 00:05:02.515 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-24 19:01:29.331 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41254 10 6452 1 2025-12-24 19:01:48.234 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:01:48.276 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:01:48.559 00:00:00.017 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:01:48.559 00:00:00.017 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:01:48.640 00:00:00.018 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:02:29.737 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57236 10 6452 1 2025-12-24 19:03:30.144 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41248 10 6452 1 2025-12-24 19:04:30.511 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57380 10 6452 1 2025-12-24 19:05:30.928 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53708 10 6452 1 2025-12-24 19:06:31.356 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36526 10 6452 1 2025-12-24 19:06:48.645 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:06:48.632 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:06:48.629 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:06:48.372 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:06:48.563 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:03:21.366 00:05:02.522 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-24 19:03:21.368 00:05:02.517 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-24 19:07:31.759 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54734 10 6452 1 2025-12-24 19:08:32.182 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55520 10 6452 1 2025-12-24 19:09:32.587 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41120 10 6452 1 2025-12-24 19:10:32.984 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54252 10 6452 1 2025-12-24 19:11:33.398 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37430 10 6452 1 2025-12-24 19:11:48.702 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:11:48.775 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:11:48.764 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:11:48.617 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:11:48.699 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:12:33.762 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38684 10 6452 1 2025-12-24 19:09:21.368 00:05:02.522 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-24 19:09:21.370 00:05:02.516 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-24 19:13:34.172 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45590 10 6452 1 2025-12-24 19:14:34.534 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60698 10 6452 1 2025-12-24 19:15:34.938 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44940 10 6452 1 2025-12-24 19:16:35.313 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57626 10 6452 1 2025-12-24 19:16:48.615 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:16:48.709 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:16:48.595 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:16:48.869 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:16:48.952 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:17:35.679 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57830 10 6452 1 2025-12-24 19:18:36.112 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34444 10 6452 1 2025-12-24 19:15:21.372 00:05:02.516 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-24 19:15:21.370 00:05:02.520 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-24 19:19:36.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51686 10 6452 1 2025-12-24 19:20:36.926 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:37422 10 6452 1 2025-12-24 19:21:49.431 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:21:49.199 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:21:49.110 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:21:49.053 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:21:49.347 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:21:37.311 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54818 10 6452 1 2025-12-24 19:22:37.716 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52972 10 6452 1 2025-12-24 19:23:38.103 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:38442 10 6452 1 2025-12-24 19:24:38.488 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56842 10 6452 1 2025-12-24 19:21:21.370 00:05:02.521 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-24 19:21:21.373 00:05:02.516 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-24 19:25:38.853 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48126 10 6452 1 2025-12-24 19:26:49.291 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:26:49.212 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:26:49.212 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:26:48.977 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:26:49.208 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:26:39.275 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43492 10 6452 1 2025-12-24 19:27:39.676 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49262 10 6452 1 2025-12-24 19:28:40.104 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34924 10 6452 1 2025-12-24 19:29:40.530 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57606 10 6452 1 2025-12-24 19:30:40.933 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:33386 10 6452 1 2025-12-24 19:27:21.375 00:05:02.516 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-24 19:27:21.372 00:05:02.521 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-24 19:31:49.070 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:31:49.066 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:31:48.965 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:31:48.978 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:31:49.152 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:31:41.318 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43180 10 6452 1 2025-12-24 19:32:41.738 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39206 10 6452 1 2025-12-24 19:33:42.113 00:00:10.687 TCP 1.101.0.1:3000 -> 23.104.0.1:57046 10 6452 1 2025-12-24 19:34:42.862 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44212 10 6452 1 2025-12-24 19:35:43.272 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54416 10 6452 1 2025-12-24 19:36:49.593 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:36:49.508 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:36:49.591 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:36:49.550 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:36:49.511 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:36:43.677 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45252 10 6452 1 2025-12-24 19:33:21.373 00:05:02.522 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-24 19:33:21.378 00:05:02.517 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-24 19:37:44.109 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54450 10 6452 1 2025-12-24 19:38:44.468 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:48384 11 6504 1 2025-12-24 19:39:44.924 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47852 10 6452 1 2025-12-24 19:40:45.342 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51810 10 6452 1 2025-12-24 19:41:49.467 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:41:49.045 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:41:49.158 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:41:49.466 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:41:49.548 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:41:45.748 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38770 10 6452 1 2025-12-24 19:42:46.146 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44656 10 6452 1 2025-12-24 19:39:21.376 00:05:02.524 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-24 19:39:21.379 00:05:02.519 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-24 19:43:46.556 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33778 10 6452 1 2025-12-24 19:44:46.956 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39192 10 6452 1 2025-12-24 19:45:47.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42392 10 6452 1 2025-12-24 19:46:49.447 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:46:49.511 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:46:49.283 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:46:49.472 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:46:49.556 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:46:47.764 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54802 10 6452 1 2025-12-24 19:47:48.182 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53096 10 6452 1 2025-12-24 19:48:48.586 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34736 10 6452 1 2025-12-24 19:45:21.380 00:05:02.519 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-24 19:45:21.377 00:05:02.524 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-24 19:49:48.990 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56224 10 6452 1 2025-12-24 19:50:49.398 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36920 10 6452 1 2025-12-24 19:51:49.548 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:51:49.550 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:51:49.366 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:51:49.524 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:51:49.466 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:51:49.801 00:00:11.073 TCP 1.101.0.1:3000 -> 23.104.0.1:38452 10 6452 1 2025-12-24 19:52:50.907 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35544 10 6452 1 2025-12-24 19:53:51.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46896 10 6452 1 2025-12-24 19:54:51.729 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38746 10 6452 1 2025-12-24 19:51:21.378 00:05:02.525 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-24 19:51:21.381 00:05:02.519 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-24 19:55:52.143 00:00:11.238 TCP 1.101.0.1:3000 -> 23.104.0.1:46016 10 6452 1 2025-12-24 19:56:49.666 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-24 19:56:49.581 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-24 19:56:49.693 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:56:49.823 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-24 19:56:49.907 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-24 19:56:53.423 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43444 10 6452 1 2025-12-24 19:57:53.824 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39076 10 6452 1 Summary: total flows: 139, total bytes: 410600, total packets: 1011, avg bps: 901, avg pps: 0, avg bpp: 406 Time window: 2025-12-24 18:57:21 - 2025-12-24 19:58:04 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0056s User: 0.0019s Wall: 0.0027s flows/second: 50692.0 Runtime: 0.0028s