Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-06 18:59:20.965 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:34782 10 6452 1 2025-12-06 19:00:21.334 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38816 10 6452 1 2025-12-06 19:01:21.741 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55238 10 6452 1 2025-12-06 18:58:11.830 00:05:02.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 18:58:11.832 00:05:02.304 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 19:02:22.143 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 10 6452 1 2025-12-06 19:03:08.331 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 19:03:08.586 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:03:08.355 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:03:08.480 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:03:08.247 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:03:22.553 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 10 6452 1 2025-12-06 19:04:22.955 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37068 10 6452 1 2025-12-06 19:05:23.367 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57520 10 6452 1 2025-12-06 19:06:23.731 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45998 10 6452 1 2025-12-06 19:07:24.152 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34180 10 6452 1 2025-12-06 19:08:09.031 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 19:08:08.687 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:08:08.585 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:08:08.801 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:08:08.948 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:04:11.835 00:05:02.302 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 19:04:11.833 00:05:02.307 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 19:08:24.552 00:00:10.920 TCP 1.101.0.1:3000 -> 23.104.0.1:54000 10 6452 1 2025-12-06 19:09:25.511 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51116 10 6452 1 2025-12-06 19:10:25.913 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41074 10 6452 1 2025-12-06 19:11:26.273 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33396 10 6452 1 2025-12-06 19:12:26.635 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59436 10 6452 1 2025-12-06 19:13:08.964 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 19:13:08.863 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:13:08.790 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:13:08.822 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:13:08.883 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:13:27.040 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:53518 12 10375 1 2025-12-06 19:10:11.837 00:05:02.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 19:10:11.839 00:05:02.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 19:14:27.494 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37368 10 6452 1 2025-12-06 19:15:27.908 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52772 10 6452 1 2025-12-06 19:16:28.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36400 10 6452 1 2025-12-06 19:17:28.689 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36640 10 6452 1 2025-12-06 19:18:08.791 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:18:08.897 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:18:08.740 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:18:08.723 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:18:08.805 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 19:18:29.062 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59002 10 6452 1 2025-12-06 19:19:29.427 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40920 10 6452 1 2025-12-06 19:16:11.842 00:05:02.302 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 19:16:11.845 00:05:02.297 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 19:20:29.831 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39432 10 6452 1 2025-12-06 19:21:30.242 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58264 10 6452 1 2025-12-06 19:22:30.643 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48772 10 6452 1 2025-12-06 19:23:09.446 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 19:23:09.280 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:23:09.270 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:23:09.387 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:23:09.364 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:23:31.057 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57604 10 6452 1 2025-12-06 19:24:31.463 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56840 10 6452 1 2025-12-06 19:25:31.866 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48690 10 6452 1 2025-12-06 19:22:11.843 00:05:02.307 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 19:22:11.848 00:05:02.302 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 19:26:32.281 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:40992 10 6452 1 2025-12-06 19:27:32.707 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:55238 10 6452 1 2025-12-06 19:28:08.845 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 19:28:09.043 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:28:08.957 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:28:09.086 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:28:08.762 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:28:33.143 00:00:10.600 TCP 1.101.0.1:3000 -> 23.104.0.1:56486 10 6452 1 2025-12-06 19:29:33.782 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:57790 11 6504 1 2025-12-06 19:30:34.238 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44440 10 6452 1 2025-12-06 19:31:34.652 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33490 10 6452 1 2025-12-06 19:28:11.847 00:05:02.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 19:28:11.849 00:05:02.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 19:32:35.072 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42610 10 6452 1 2025-12-06 19:33:09.192 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 19:33:09.059 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:33:09.054 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:33:09.075 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:33:09.110 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:33:35.504 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59226 10 6452 1 2025-12-06 19:34:35.869 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38674 10 6452 1 2025-12-06 19:35:36.299 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33962 10 6452 1 2025-12-06 19:36:36.710 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58160 10 6452 1 2025-12-06 19:37:37.119 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57642 10 6452 1 2025-12-06 19:38:09.375 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 19:38:09.293 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:38:09.295 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:38:08.985 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:38:09.292 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:34:11.847 00:05:02.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 19:34:11.849 00:05:02.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 19:38:37.527 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47040 10 6452 1 2025-12-06 19:39:37.931 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:46908 10 6452 1 2025-12-06 19:40:38.357 00:00:11.355 TCP 1.101.0.1:3000 -> 23.104.0.1:46010 10 6452 1 2025-12-06 19:41:39.752 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37886 10 6452 1 2025-12-06 19:42:40.153 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51438 10 6452 1 2025-12-06 19:43:09.478 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 19:43:09.471 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:43:09.464 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:43:09.354 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:43:09.396 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:43:40.558 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48230 10 6452 1 2025-12-06 19:40:11.851 00:05:02.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 19:40:11.848 00:05:02.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 19:44:40.960 00:00:11.071 TCP 1.101.0.1:3000 -> 23.104.0.1:54510 10 6452 1 2025-12-06 19:45:42.118 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34104 10 6452 1 2025-12-06 19:46:42.522 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37358 10 6452 1 2025-12-06 19:47:42.932 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6452 1 2025-12-06 19:48:10.792 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 19:48:10.631 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:48:10.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:48:10.725 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:48:10.709 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:48:43.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50982 10 6452 1 2025-12-06 19:49:43.759 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:57516 10 6452 1 2025-12-06 19:46:11.850 00:05:02.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 19:46:11.853 00:05:02.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 19:50:44.188 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47622 10 6452 1 2025-12-06 19:51:44.549 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33368 10 6452 1 2025-12-06 19:52:44.945 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36688 10 6452 1 2025-12-06 19:53:09.743 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 19:53:09.526 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:53:09.454 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:53:09.552 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:53:09.659 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:53:45.371 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39274 10 6452 1 2025-12-06 19:54:45.731 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47706 10 6452 1 2025-12-06 19:55:46.156 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41748 10 6452 1 2025-12-06 19:52:11.853 00:05:02.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 19:52:11.854 00:05:02.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 19:56:46.570 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40430 10 6452 1 2025-12-06 19:57:46.969 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46816 10 6452 1 2025-12-06 19:58:09.512 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 19:58:09.622 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 19:58:09.547 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:58:09.689 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 19:58:09.772 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 139, total bytes: 414523, total packets: 1013, avg bps: 921, avg pps: 0, avg bpp: 409 Time window: 2025-12-06 18:58:11 - 2025-12-06 19:58:09 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0033s User: 0.0008s Wall: 0.0014s flows/second: 99151.1 Runtime: 0.0014s