Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-09 17:59:04.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47004 10 6452 1 2025-12-09 17:59:33.977 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 17:59:33.933 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 17:59:33.888 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 17:59:33.945 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 17:59:34.029 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:00:04.948 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:55088 10 6452 1 2025-12-09 18:01:05.324 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37972 10 6452 1 2025-12-09 17:57:15.830 00:05:57.581 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 17:57:15.834 00:05:57.575 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 18:02:05.728 00:00:10.848 TCP 1.101.0.1:3000 -> 23.104.0.1:58476 10 6452 1 2025-12-09 18:03:06.613 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34266 10 6452 1 2025-12-09 18:04:07.019 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36876 10 6452 1 2025-12-09 18:04:34.203 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:04:34.068 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:04:33.968 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:04:34.168 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:04:34.250 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:05:07.382 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54102 10 6452 1 2025-12-09 18:06:07.749 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50900 10 6452 1 2025-12-09 18:07:08.150 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41876 10 6452 1 2025-12-09 18:03:15.837 00:05:57.573 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 18:03:15.835 00:05:57.577 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 18:08:08.519 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55510 10 6452 1 2025-12-09 18:09:08.925 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46782 10 6452 1 2025-12-09 18:09:34.078 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:09:34.202 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:09:34.118 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:09:34.007 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:09:33.996 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:10:09.346 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57854 10 6452 1 2025-12-09 18:11:09.753 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43068 10 6452 1 2025-12-09 18:12:10.117 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49338 10 6452 1 2025-12-09 18:13:10.519 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38076 10 6452 1 2025-12-09 18:09:15.838 00:05:57.575 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 18:09:15.836 00:05:57.580 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 18:14:10.883 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40318 10 6452 1 2025-12-09 18:14:34.321 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:14:34.237 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:14:34.236 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:14:34.344 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:14:34.239 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:15:11.293 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54858 10 6452 1 2025-12-09 18:16:11.698 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35144 12 6556 1 2025-12-09 18:17:12.109 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50534 10 6452 1 2025-12-09 18:18:12.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60658 10 6452 1 2025-12-09 18:19:12.925 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50750 10 6452 1 2025-12-09 18:19:34.290 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:19:34.290 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:19:34.046 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:19:34.398 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:19:34.373 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:15:15.839 00:05:57.575 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 18:15:15.836 00:05:57.580 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 18:20:13.341 00:00:10.567 TCP 1.101.0.1:3000 -> 23.104.0.1:58356 10 6452 1 2025-12-09 18:21:13.953 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46312 10 6452 1 2025-12-09 18:22:14.327 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47490 10 6452 1 2025-12-09 18:23:14.690 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48982 10 6452 1 2025-12-09 18:24:15.110 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:40110 10 6452 1 2025-12-09 18:24:34.398 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:24:34.288 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:24:34.341 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:24:34.513 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:24:34.595 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:25:15.471 00:00:10.697 TCP 1.101.0.1:3000 -> 23.104.0.1:37354 10 6452 1 2025-12-09 18:21:15.840 00:05:57.577 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 18:21:15.843 00:05:57.572 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 18:26:16.206 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45098 10 6452 1 2025-12-09 18:27:16.605 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43686 10 6452 1 2025-12-09 18:28:17.013 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:42032 10 6452 1 2025-12-09 18:29:17.375 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43700 10 6452 1 2025-12-09 18:29:34.948 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:29:34.930 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:29:34.877 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:29:34.819 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:29:34.865 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:30:17.779 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56070 10 6452 1 2025-12-09 18:31:18.191 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34934 10 6452 1 2025-12-09 18:27:15.838 00:05:57.581 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 18:27:15.841 00:05:57.576 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 18:32:18.551 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39064 10 6452 1 2025-12-09 18:33:18.952 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46990 10 6452 1 2025-12-09 18:34:19.365 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40252 10 6452 1 2025-12-09 18:34:34.595 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:34:34.819 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:34:34.428 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:34:35.150 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:34:35.232 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:35:19.768 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56312 10 6452 1 2025-12-09 18:36:20.176 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34100 10 6452 1 2025-12-09 18:37:20.574 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54090 10 6452 1 2025-12-09 18:33:15.841 00:05:57.577 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 18:33:15.839 00:05:57.583 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 18:38:20.977 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:44084 10 6452 1 2025-12-09 18:39:34.916 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:39:34.886 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:39:34.759 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:39:34.731 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:39:21.421 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53162 10 6452 1 2025-12-09 18:39:34.835 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:40:21.786 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56966 10 6452 1 2025-12-09 18:41:22.159 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46618 10 6452 1 2025-12-09 18:42:22.561 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35322 10 6452 1 2025-12-09 18:43:22.962 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60164 10 6452 1 2025-12-09 18:39:15.843 00:05:57.576 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 18:39:15.840 00:05:57.582 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 18:44:34.876 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:44:34.852 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:44:34.857 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:44:34.931 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:44:34.793 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:44:23.325 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41524 10 6452 1 2025-12-09 18:45:23.730 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33252 10 6452 1 2025-12-09 18:46:24.152 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49944 10 6452 1 2025-12-09 18:47:24.517 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58440 10 6452 1 2025-12-09 18:48:24.927 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:38694 10 6452 1 2025-12-09 18:49:34.959 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:49:34.816 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:49:34.974 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:49:35.071 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:49:25.320 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:60628 12 10375 1 2025-12-09 18:49:35.057 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:45:15.843 00:05:57.580 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 18:45:15.844 00:05:57.576 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 18:50:25.795 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42008 10 6452 1 2025-12-09 18:51:26.208 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40736 10 6452 1 2025-12-09 18:52:26.605 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59992 10 6452 1 2025-12-09 18:53:27.010 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44952 10 6452 1 2025-12-09 18:54:34.893 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:54:34.803 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:54:35.113 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:54:27.406 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54302 10 6452 1 2025-12-09 18:54:35.030 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:54:35.005 00:00:00.045 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:55:27.805 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39656 10 6452 1 2025-12-09 18:51:15.845 00:05:57.584 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 18:51:15.846 00:05:57.580 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 18:56:28.212 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41262 10 6452 1 2025-12-09 18:57:28.612 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51982 10 6452 1 2025-12-09 18:58:29.021 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33972 10 6452 1 Summary: total flows: 140, total bytes: 421027, total packets: 1024, avg bps: 914, avg pps: 0, avg bpp: 411 Time window: 2025-12-09 17:57:15 - 2025-12-09 18:58:39 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0016s Wall: 0.0022s flows/second: 63262.5 Runtime: 0.0022s