Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-30 18:58:48.658 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48214 10 6452 1 2025-12-30 18:59:42.071 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 18:59:41.752 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 18:59:41.879 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 18:59:41.852 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 18:59:41.935 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 18:59:49.067 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33182 10 6452 1 2025-12-30 18:56:24.458 00:05:02.754 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 18:56:24.456 00:05:02.759 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 19:00:49.469 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55888 10 6452 1 2025-12-30 19:01:49.828 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60606 10 6452 1 2025-12-30 19:02:50.231 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43074 10 6452 1 2025-12-30 19:03:50.628 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53058 10 6452 1 2025-12-30 19:04:41.839 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 19:04:41.691 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 19:04:41.749 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 19:04:41.615 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:04:41.756 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:04:51.028 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48482 10 6452 1 2025-12-30 19:05:51.441 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40518 10 6452 1 2025-12-30 19:02:24.458 00:05:02.759 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 19:02:24.461 00:05:02.754 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 19:06:51.842 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:35136 11 6504 1 2025-12-30 19:07:52.333 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:54968 10 6452 1 2025-12-30 19:08:52.710 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56344 10 6452 1 2025-12-30 19:09:42.085 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 19:09:41.913 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 19:09:41.784 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 19:09:41.704 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:09:42.004 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:09:53.118 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40578 10 6452 1 2025-12-30 19:10:53.530 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45518 10 6452 1 2025-12-30 19:11:53.941 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41698 10 6452 1 2025-12-30 19:08:24.463 00:05:02.752 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 19:08:24.462 00:05:02.757 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 19:12:54.356 00:00:18.867 TCP 1.101.0.1:3000 -> 23.104.0.1:57686 10 6452 1 2025-12-30 19:14:03.294 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59664 10 6452 1 2025-12-30 19:14:42.401 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 19:14:42.149 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 19:14:42.076 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 19:14:42.118 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:14:42.318 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:15:03.656 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45480 10 6452 1 2025-12-30 19:16:04.069 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56506 10 6452 1 2025-12-30 19:17:04.469 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38676 10 6452 1 2025-12-30 19:18:04.839 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:49600 10 6452 1 2025-12-30 19:14:24.462 00:05:02.757 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 19:14:24.466 00:05:02.751 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 19:19:05.227 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54996 10 6452 1 2025-12-30 19:19:42.038 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 19:19:42.033 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 19:19:42.007 00:00:00.034 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:19:42.111 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:19:42.194 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 19:20:05.627 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43422 10 6452 1 2025-12-30 19:21:06.048 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38422 10 6452 1 2025-12-30 19:22:06.448 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58038 10 6452 1 2025-12-30 19:23:06.854 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:50782 10 6452 1 2025-12-30 19:24:07.281 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54984 10 6452 1 2025-12-30 19:20:24.466 00:05:02.752 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 19:20:24.466 00:05:02.756 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 19:24:42.159 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 19:24:42.078 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:24:42.079 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 19:24:42.245 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 19:24:42.011 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:25:07.690 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56274 10 6452 1 2025-12-30 19:26:08.110 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42216 10 6452 1 2025-12-30 19:27:08.518 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45860 10 6452 1 2025-12-30 19:28:08.922 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46642 10 6452 1 2025-12-30 19:29:09.335 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:44476 12 10369 1 2025-12-30 19:29:42.364 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 19:29:42.149 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 19:29:42.253 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:29:42.399 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:29:42.482 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 19:30:09.770 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47502 10 6452 1 2025-12-30 19:26:24.467 00:05:02.773 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 19:26:24.469 00:05:02.769 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 19:31:10.185 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36646 10 6452 1 2025-12-30 19:32:10.588 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39998 10 6452 1 2025-12-30 19:33:10.994 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32860 10 6452 1 2025-12-30 19:34:11.397 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48782 10 6452 1 2025-12-30 19:34:42.169 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 19:34:42.304 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:34:42.346 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:34:42.356 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 19:34:42.429 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 19:35:11.796 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46380 10 6452 1 2025-12-30 19:36:12.211 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55444 12 6556 1 2025-12-30 19:32:24.478 00:05:02.759 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 19:32:24.475 00:05:02.765 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 19:37:12.614 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33484 10 6452 1 2025-12-30 19:38:13.035 00:00:11.219 TCP 1.101.0.1:3000 -> 23.104.0.1:54972 10 6452 1 2025-12-30 19:39:14.313 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39750 10 6452 1 2025-12-30 19:39:42.767 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 19:39:42.759 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 19:39:42.686 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 19:39:42.544 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:39:42.686 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:40:14.718 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57586 10 6452 1 2025-12-30 19:41:15.130 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58876 10 6452 1 2025-12-30 19:38:24.479 00:05:02.760 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 19:42:15.531 00:00:10.841 TCP 1.101.0.1:3000 -> 23.104.0.1:33078 10 6452 1 2025-12-30 19:38:24.476 00:05:02.765 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 19:43:16.415 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48364 10 6452 1 2025-12-30 19:44:16.818 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42484 10 6452 1 2025-12-30 19:44:42.532 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 19:44:42.575 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 19:44:42.271 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:44:42.581 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:44:42.664 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 19:45:17.222 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52258 10 6452 1 2025-12-30 19:46:17.583 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57802 10 6452 1 2025-12-30 19:47:17.987 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:53178 11 6504 1 2025-12-30 19:44:24.482 00:05:02.758 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 19:48:18.456 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37300 10 6452 1 2025-12-30 19:44:24.480 00:05:02.763 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 19:49:18.857 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50210 10 6452 1 2025-12-30 19:49:42.783 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 19:49:42.704 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 19:49:42.710 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 19:49:42.568 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:49:42.701 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:50:19.275 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45838 10 6452 1 2025-12-30 19:51:19.682 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33194 10 6452 1 2025-12-30 19:52:20.041 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51366 10 6452 1 2025-12-30 19:53:20.444 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49682 10 6452 1 2025-12-30 19:50:24.483 00:05:02.759 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 19:50:24.482 00:05:02.763 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 19:54:20.846 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:43426 10 6452 1 2025-12-30 19:54:43.079 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 19:54:43.073 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 19:54:42.952 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:54:42.895 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 19:54:42.977 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 19:55:21.272 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43714 12 6556 1 2025-12-30 19:56:21.674 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49792 10 6452 1 2025-12-30 19:57:22.105 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:51354 10 6452 1 2025-12-30 19:58:22.527 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45950 10 6452 1 Summary: total flows: 140, total bytes: 421229, total packets: 1028, avg bps: 903, avg pps: 0, avg bpp: 409 Time window: 2025-12-30 18:56:24 - 2025-12-30 19:58:32 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0044s User: 0.0017s Wall: 0.0021s flows/second: 67047.6 Runtime: 0.0021s