Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-27 23:59:25.330 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51560 10 6452 1 2025-12-28 00:00:25.731 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56740 10 6452 1 2025-12-27 23:57:22.954 00:05:02.659 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-27 23:57:22.953 00:05:02.663 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 00:01:26.139 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44144 10 6452 1 2025-12-28 00:02:26.539 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41394 10 6452 1 2025-12-28 00:03:20.994 00:00:00.049 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:03:20.680 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:03:21.001 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:03:20.937 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:03:21.083 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 00:03:26.948 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55226 10 6452 1 2025-12-28 00:04:27.357 00:00:11.045 TCP 1.101.0.1:3000 -> 23.104.0.1:40222 10 6452 1 2025-12-28 00:05:28.438 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46408 10 6452 1 2025-12-28 00:06:28.843 00:00:11.773 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-12-28 00:03:22.959 00:05:02.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 00:03:22.956 00:05:02.663 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 00:07:30.657 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38446 10 6452 1 2025-12-28 00:08:21.613 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 00:08:21.184 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:08:21.188 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:08:21.549 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:08:21.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:08:31.064 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41836 10 6452 1 2025-12-28 00:09:31.465 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49644 10 6452 1 2025-12-28 00:10:31.865 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48434 10 6452 1 2025-12-28 00:11:32.286 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53830 10 6452 1 2025-12-28 00:12:32.690 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35550 10 6452 1 2025-12-28 00:13:21.294 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:13:21.419 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:13:21.137 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:13:21.217 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:09:22.960 00:05:02.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 00:13:21.300 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 00:09:22.957 00:05:02.663 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 00:13:33.128 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60450 10 6452 1 2025-12-28 00:14:33.542 00:00:19.183 TCP 1.101.0.1:3000 -> 23.104.0.1:38116 10 6452 1 2025-12-28 00:15:42.787 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46850 10 6452 1 2025-12-28 00:16:43.194 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45178 10 6452 1 2025-12-28 00:17:43.603 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45344 10 6452 1 2025-12-28 00:18:21.401 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 00:18:21.683 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:18:21.530 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:18:21.397 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:18:21.319 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:18:44.008 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45762 10 6452 1 2025-12-28 00:15:22.960 00:05:02.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 00:15:22.957 00:05:02.664 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 00:19:44.407 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51338 10 6452 1 2025-12-28 00:20:44.817 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38784 10 6452 1 2025-12-28 00:21:45.228 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34822 10 6452 1 2025-12-28 00:22:45.590 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57804 10 6452 1 2025-12-28 00:23:21.658 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 00:23:21.340 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:23:21.528 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:23:21.192 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:23:21.575 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:23:45.955 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39270 10 6452 1 2025-12-28 00:24:46.357 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41462 10 6452 1 2025-12-28 00:21:22.964 00:05:02.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 00:21:22.965 00:05:02.655 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 00:25:46.763 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39906 10 6452 1 2025-12-28 00:26:47.175 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36500 10 6452 1 2025-12-28 00:27:47.580 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:53952 12 10375 1 2025-12-28 00:28:21.742 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 00:28:21.526 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:28:21.657 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:28:21.553 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:28:21.659 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:28:48.064 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50060 10 6452 1 2025-12-28 00:29:48.465 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39922 10 6452 1 2025-12-28 00:30:48.866 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:39122 10 6452 1 2025-12-28 00:27:22.963 00:05:02.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 00:27:22.960 00:05:02.664 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 00:31:49.245 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35576 10 6452 1 2025-12-28 00:32:49.609 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49250 10 6452 1 2025-12-28 00:33:21.712 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:33:21.710 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:33:21.590 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:33:21.647 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:33:21.731 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 00:33:50.016 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57766 10 6452 1 2025-12-28 00:34:50.420 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45180 10 6452 1 2025-12-28 00:35:50.829 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39588 10 6452 1 2025-12-28 00:36:51.230 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:53826 10 6452 1 2025-12-28 00:33:22.966 00:05:02.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 00:33:22.963 00:05:02.663 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 00:37:51.603 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37330 10 6452 1 2025-12-28 00:38:21.953 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 00:38:21.975 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:38:22.215 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:38:21.900 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:38:21.870 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:38:51.968 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58624 10 6452 1 2025-12-28 00:39:52.373 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50838 10 6452 1 2025-12-28 00:40:52.778 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58454 10 6452 1 2025-12-28 00:41:53.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45102 10 6452 1 2025-12-28 00:42:53.596 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44306 10 6452 1 2025-12-28 00:43:22.663 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:43:22.663 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:43:22.610 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:43:22.608 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:43:22.690 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 00:39:22.966 00:05:02.665 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 00:39:22.968 00:05:02.660 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 00:43:54.016 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51220 10 6452 1 2025-12-28 00:44:54.421 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44774 10 6452 1 2025-12-28 00:45:54.824 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43720 10 6452 1 2025-12-28 00:46:55.223 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36720 10 6452 1 2025-12-28 00:47:55.583 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51598 10 6452 1 2025-12-28 00:48:21.972 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:48:22.144 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:48:22.100 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:48:22.101 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:48:22.184 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 00:48:55.986 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6452 1 2025-12-28 00:45:22.969 00:05:02.665 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 00:45:22.971 00:05:02.660 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 00:49:56.393 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44988 10 6452 1 2025-12-28 00:50:56.798 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44816 10 6452 1 2025-12-28 00:51:57.209 00:00:10.531 TCP 1.101.0.1:3000 -> 23.104.0.1:48094 10 6452 1 2025-12-28 00:52:57.777 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:34988 12 10375 1 2025-12-28 00:53:22.100 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:53:22.177 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:53:22.174 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:53:22.168 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:53:22.250 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 00:53:58.255 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56084 10 6452 1 2025-12-28 00:54:58.657 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33088 10 6452 1 2025-12-28 00:51:22.973 00:05:02.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 00:51:22.972 00:05:02.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 00:55:59.023 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38404 10 6452 1 2025-12-28 00:56:59.425 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45370 10 6452 1 2025-12-28 00:57:59.845 00:00:11.413 TCP 1.101.0.1:3000 -> 23.104.0.1:46354 10 6452 1 2025-12-28 00:58:22.425 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 00:58:22.321 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 00:58:22.239 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:58:22.423 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 00:58:22.505 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 139, total bytes: 418394, total packets: 1014, avg bps: 914, avg pps: 0, avg bpp: 412 Time window: 2025-12-27 23:57:22 - 2025-12-28 00:58:22 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0013s Wall: 0.0019s flows/second: 73352.8 Runtime: 0.0019s