Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-30 12:59:34.769 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 12:59:34.694 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 12:59:21.039 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59344 10 6452 1 2025-12-30 12:59:34.411 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 12:59:34.606 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 12:59:34.688 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 12:56:24.338 00:05:02.745 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 12:56:24.340 00:05:02.740 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 13:00:21.450 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40982 10 6452 1 2025-12-30 13:01:21.855 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33720 10 6452 1 2025-12-30 13:02:22.272 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54068 10 6452 1 2025-12-30 13:03:22.678 00:00:15.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55592 10 6452 1 2025-12-30 13:04:34.615 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 13:04:34.473 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 13:04:34.359 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 13:04:34.182 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:04:34.534 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:04:28.057 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52598 10 6452 1 2025-12-30 13:05:28.474 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45394 10 6452 1 2025-12-30 13:02:24.340 00:05:02.741 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 13:02:24.338 00:05:02.746 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 13:06:28.890 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:46808 10 6452 1 2025-12-30 13:07:29.317 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58766 10 6452 1 2025-12-30 13:08:29.717 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 10 6452 1 2025-12-30 13:09:34.497 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 13:09:34.624 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 13:09:34.221 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:09:34.496 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:09:34.577 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 13:09:30.132 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47804 10 6452 1 2025-12-30 13:10:30.533 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34546 10 6452 1 2025-12-30 13:11:30.936 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:57480 10 6452 1 2025-12-30 13:08:24.342 00:05:02.740 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 13:08:24.341 00:05:02.746 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 13:12:31.353 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:52814 11 6504 1 2025-12-30 13:13:31.811 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50186 10 6452 1 2025-12-30 13:14:34.853 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 13:14:34.796 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 13:14:34.732 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:14:34.800 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:14:34.882 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 13:14:32.216 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58942 10 6452 1 2025-12-30 13:15:32.631 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35908 10 6452 1 2025-12-30 13:16:33.070 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53484 10 6452 1 2025-12-30 13:17:33.472 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37572 10 6452 1 2025-12-30 13:14:24.344 00:05:02.741 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 13:14:24.342 00:05:02.746 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 13:18:33.873 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40180 10 6452 1 2025-12-30 13:19:34.891 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 13:19:34.899 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 13:19:34.938 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:19:34.887 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:19:34.970 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 13:19:34.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59682 10 6452 1 2025-12-30 13:20:34.680 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41034 10 6452 1 2025-12-30 13:21:35.041 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51300 10 6452 1 2025-12-30 13:22:35.445 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51748 10 6452 1 2025-12-30 13:23:35.850 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:54782 10 6452 1 2025-12-30 13:20:24.347 00:05:02.740 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 13:20:24.346 00:05:02.745 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 13:24:34.764 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 13:24:34.681 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:24:34.930 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 13:24:34.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 13:24:34.835 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:24:36.231 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46964 10 6452 1 2025-12-30 13:25:36.638 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51886 10 6452 1 2025-12-30 13:26:37.059 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58614 10 6452 1 2025-12-30 13:27:37.463 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38704 10 6452 1 2025-12-30 13:28:37.860 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54608 10 6452 1 2025-12-30 13:29:34.680 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:29:35.105 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 13:29:35.294 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 13:29:35.241 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:29:35.323 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 13:29:38.279 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:32768 10 6452 1 2025-12-30 13:26:24.348 00:05:02.743 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 13:26:24.350 00:05:02.738 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 13:30:38.688 00:00:22.806 TCP 1.101.0.1:3000 -> 23.104.0.1:60614 10 6452 1 2025-12-30 13:31:51.577 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46384 10 6452 1 2025-12-30 13:32:51.981 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:57558 10 6452 1 2025-12-30 13:33:52.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33166 10 6452 1 2025-12-30 13:34:34.956 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 13:34:34.877 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 13:34:34.874 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:34:34.878 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 13:34:35.110 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:34:52.764 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:56944 10 6452 1 2025-12-30 13:35:53.144 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:49540 10 6452 1 2025-12-30 13:32:24.355 00:05:02.734 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 13:32:24.352 00:05:02.739 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 13:36:53.509 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57178 10 6452 1 2025-12-30 13:37:53.924 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:57712 10 6452 1 2025-12-30 13:38:54.346 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57008 10 6452 1 2025-12-30 13:39:35.456 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 13:39:35.204 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 13:39:35.454 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 13:39:34.985 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:39:35.372 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:39:54.750 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38258 10 6452 1 2025-12-30 13:40:55.152 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43976 10 6452 1 2025-12-30 13:41:55.562 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47186 10 6452 1 2025-12-30 13:38:24.356 00:05:02.733 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 13:38:24.353 00:05:02.738 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 13:42:55.924 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52498 10 6452 1 2025-12-30 13:43:56.339 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43200 10 6452 1 2025-12-30 13:44:35.465 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 13:44:35.184 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 13:44:35.439 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 13:44:35.319 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:44:35.382 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:44:56.751 00:00:10.748 TCP 1.101.0.1:3000 -> 23.104.0.1:49206 10 6452 1 2025-12-30 13:45:57.539 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60788 10 6452 1 2025-12-30 13:46:57.900 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 12 6556 1 2025-12-30 13:47:58.316 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57540 10 6452 1 2025-12-30 13:44:24.358 00:05:02.739 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 13:44:24.355 00:05:02.744 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 13:48:58.713 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:35430 12 10369 1 2025-12-30 13:49:35.508 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 13:49:35.426 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 13:49:35.085 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:49:35.422 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:49:35.506 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 13:49:59.194 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39348 10 6452 1 2025-12-30 13:50:59.596 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59854 10 6452 1 2025-12-30 13:51:59.996 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54312 10 6452 1 2025-12-30 13:53:00.405 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42480 10 6452 1 2025-12-30 13:54:00.811 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59406 10 6452 1 2025-12-30 13:50:24.357 00:05:02.740 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 13:50:24.355 00:05:02.746 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 13:54:35.377 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 13:54:35.404 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:54:35.577 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 13:54:35.452 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 13:54:35.661 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 13:55:01.218 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45506 10 6452 1 2025-12-30 13:56:01.629 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53746 10 6452 1 2025-12-30 13:57:02.032 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33798 10 6452 1 2025-12-30 13:58:02.439 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58854 10 6452 1 Summary: total flows: 139, total bytes: 414621, total packets: 1015, avg bps: 894, avg pps: 0, avg bpp: 408 Time window: 2025-12-30 12:56:24 - 2025-12-30 13:58:12 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0040s User: 0.0020s Wall: 0.0018s flows/second: 77476.2 Runtime: 0.0018s