Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-30 20:59:01.735 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60698 10 6452 1 2025-12-30 20:59:44.322 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 20:59:44.308 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 20:59:44.312 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 20:59:44.318 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 20:59:44.400 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:00:02.144 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34832 10 6452 1 2025-12-30 20:56:24.509 00:05:02.751 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 20:56:24.507 00:05:02.756 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 21:01:02.549 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:45878 10 6452 1 2025-12-30 21:02:02.950 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51686 10 6452 1 2025-12-30 21:03:03.368 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38250 10 6452 1 2025-12-30 21:04:03.774 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41300 10 6452 1 2025-12-30 21:04:44.155 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 21:04:44.158 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 21:04:43.789 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:04:43.960 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:04:44.044 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:05:04.189 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58454 10 6452 1 2025-12-30 21:06:04.592 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33782 10 6452 1 2025-12-30 21:02:24.506 00:05:02.757 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 21:02:24.509 00:05:02.751 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 21:07:04.954 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35476 10 6452 1 2025-12-30 21:08:05.364 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40728 10 6452 1 2025-12-30 21:09:05.769 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48400 10 6452 1 2025-12-30 21:09:44.318 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 21:09:44.270 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 21:09:43.994 00:00:00.051 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:09:44.316 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:09:44.398 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:10:06.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58798 10 6452 1 2025-12-30 21:11:06.590 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45830 10 6452 1 2025-12-30 21:12:07.011 00:00:10.632 TCP 1.101.0.1:3000 -> 23.104.0.1:50998 10 6452 1 2025-12-30 21:08:24.514 00:05:02.751 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 21:08:24.516 00:05:02.746 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 21:13:07.677 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39660 10 6452 1 2025-12-30 21:14:08.040 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44592 10 6452 1 2025-12-30 21:14:44.683 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 21:14:44.822 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 21:14:44.307 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:14:44.583 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:14:44.666 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:15:08.459 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46144 10 6452 1 2025-12-30 21:16:08.859 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43554 10 6452 1 2025-12-30 21:17:09.279 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53664 10 6452 1 2025-12-30 21:18:09.681 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49202 10 6452 1 2025-12-30 21:14:24.518 00:05:02.746 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 21:14:24.515 00:05:02.751 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 21:19:10.045 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48822 10 6452 1 2025-12-30 21:19:44.636 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:19:44.480 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 21:19:44.604 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 21:19:44.065 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:19:44.552 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:20:10.445 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46862 10 6452 1 2025-12-30 21:21:10.847 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:42348 10 6452 1 2025-12-30 21:22:11.230 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43800 10 6452 1 2025-12-30 21:23:11.634 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44012 10 6452 1 2025-12-30 21:24:12.053 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54822 10 6452 1 2025-12-30 21:20:24.520 00:05:02.759 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 21:20:24.517 00:05:02.764 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 21:24:44.537 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 21:24:44.480 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:24:44.373 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:24:44.578 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 21:24:44.456 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:25:12.459 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42740 10 6452 1 2025-12-30 21:26:12.824 00:00:10.807 TCP 1.101.0.1:3000 -> 23.104.0.1:45334 10 6452 1 2025-12-30 21:27:13.671 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41674 10 6452 1 2025-12-30 21:28:14.097 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35430 10 6452 1 2025-12-30 21:29:14.462 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36310 10 6452 1 2025-12-30 21:29:44.564 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 21:29:44.457 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 21:29:44.338 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:29:44.657 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:29:44.740 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:26:24.523 00:05:02.760 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 21:30:14.869 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51252 10 6452 1 2025-12-30 21:26:24.526 00:05:02.754 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 21:31:15.274 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52110 10 6452 1 2025-12-30 21:32:15.633 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49448 10 6452 1 2025-12-30 21:33:16.047 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38824 10 6452 1 2025-12-30 21:34:16.410 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:38498 12 10369 1 2025-12-30 21:34:44.909 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 21:34:44.910 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 21:34:44.775 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:34:44.836 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:34:44.919 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:35:16.892 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41046 12 6556 1 2025-12-30 21:32:24.529 00:05:02.752 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 21:36:17.325 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60564 10 6452 1 2025-12-30 21:32:24.525 00:05:02.758 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 21:37:17.726 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51782 10 6452 1 2025-12-30 21:38:18.108 00:00:10.866 TCP 1.101.0.1:3000 -> 23.104.0.1:53308 10 6452 1 2025-12-30 21:39:19.015 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:60174 12 10375 1 2025-12-30 21:39:44.827 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 21:39:44.654 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 21:39:44.685 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:39:44.809 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:39:44.891 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:40:19.496 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56832 10 6452 1 2025-12-30 21:41:19.868 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50540 10 6452 1 2025-12-30 21:38:24.527 00:05:02.763 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 21:38:24.529 00:05:02.759 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 21:42:20.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60422 10 6452 1 2025-12-30 21:43:20.680 00:00:10.574 TCP 1.101.0.1:3000 -> 23.104.0.1:38746 10 6452 1 2025-12-30 21:44:21.295 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38914 10 6452 1 2025-12-30 21:44:44.858 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 21:44:44.855 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 21:44:44.870 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:44:44.845 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:44:44.928 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:45:21.700 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36558 10 6452 1 2025-12-30 21:46:22.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41644 10 6452 1 2025-12-30 21:47:22.517 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35996 10 6452 1 2025-12-30 21:44:24.531 00:05:02.764 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 21:44:24.529 00:05:02.769 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 21:48:22.923 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57196 10 6452 1 2025-12-30 21:49:23.324 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:37744 12 10375 1 2025-12-30 21:49:44.939 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:49:45.055 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 21:49:45.107 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 21:49:45.039 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:49:45.121 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:50:23.801 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37890 10 6452 1 2025-12-30 21:51:24.204 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43404 10 6452 1 2025-12-30 21:52:24.612 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42384 10 6452 1 2025-12-30 21:53:25.017 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59638 10 6452 1 2025-12-30 21:50:24.529 00:05:02.772 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-30 21:50:24.533 00:05:02.767 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-30 21:54:25.422 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37658 10 6452 1 2025-12-30 21:54:45.293 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-30 21:54:45.153 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-30 21:54:45.094 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:54:45.211 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-30 21:54:45.212 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-30 21:55:25.833 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:51136 10 6452 1 2025-12-30 21:56:26.222 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38612 10 6452 1 2025-12-30 21:57:26.621 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38758 10 6452 1 2025-12-30 21:58:27.021 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39800 10 6452 1 Summary: total flows: 140, total bytes: 428867, total packets: 1028, avg bps: 919, avg pps: 0, avg bpp: 417 Time window: 2025-12-30 20:56:24 - 2025-12-30 21:58:37 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0022s User: 0.0022s Wall: 0.0017s flows/second: 84090.3 Runtime: 0.0017s