Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-10 05:59:08.640 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57158 10 6452 1 2025-12-10 05:59:48.474 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 05:59:48.519 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 05:59:48.448 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 05:59:48.426 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 05:59:48.508 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:00:09.050 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:34216 10 6452 1 2025-12-10 05:57:13.677 00:05:02.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-10 05:57:13.680 00:05:02.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-10 06:01:09.410 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52010 10 6452 1 2025-12-10 06:02:09.818 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53952 10 6452 1 2025-12-10 06:03:10.218 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55688 10 6452 1 2025-12-10 06:04:10.585 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59240 10 6452 1 2025-12-10 06:04:48.638 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:04:48.632 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 06:04:48.641 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 06:04:48.498 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:04:48.555 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:05:10.988 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43578 10 6452 1 2025-12-10 06:06:11.391 00:00:10.986 TCP 1.101.0.1:3000 -> 23.104.0.1:48066 10 6452 1 2025-12-10 06:03:13.693 00:05:02.422 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-10 06:03:13.689 00:05:02.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-10 06:07:12.418 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:40900 10 6452 1 2025-12-10 06:08:12.792 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60700 10 6452 1 2025-12-10 06:09:13.200 00:00:10.483 TCP 1.101.0.1:3000 -> 23.104.0.1:42342 14 10479 1 2025-12-10 06:09:48.595 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:09:48.429 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 06:09:48.709 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 06:09:48.712 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:09:48.511 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:10:13.720 00:00:10.428 TCP 1.101.0.1:3000 -> 23.104.0.1:52068 12 6556 1 2025-12-10 06:11:14.191 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36552 10 6452 1 2025-12-10 06:12:14.590 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:32964 10 6452 1 2025-12-10 06:09:13.693 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-10 06:09:13.691 00:05:02.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-10 06:13:14.964 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42964 10 6452 1 2025-12-10 06:14:15.370 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39964 10 6452 1 2025-12-10 06:14:48.679 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 06:14:48.681 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 06:14:48.610 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:14:48.824 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:14:48.908 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:15:15.771 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:50862 10 6452 1 2025-12-10 06:16:16.139 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37866 10 6452 1 2025-12-10 06:17:16.550 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51296 10 6452 1 2025-12-10 06:18:16.915 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58176 10 6452 1 2025-12-10 06:15:13.694 00:05:02.430 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-10 06:15:13.691 00:05:02.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-10 06:19:17.326 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34850 10 6452 1 2025-12-10 06:19:48.818 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:19:48.901 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 06:19:48.718 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 06:19:48.753 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:19:48.900 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:20:17.728 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53756 10 6452 1 2025-12-10 06:21:18.151 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52986 10 6452 1 2025-12-10 06:22:18.560 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-12-10 06:23:18.924 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39236 10 6452 1 2025-12-10 06:24:19.347 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:34562 12 10375 1 2025-12-10 06:24:48.755 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 06:24:48.740 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 06:24:48.869 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:24:49.210 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:24:49.292 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:21:13.699 00:05:02.427 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-10 06:21:13.696 00:05:02.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-10 06:25:19.829 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34034 10 6452 1 2025-12-10 06:26:20.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46180 10 6452 1 2025-12-10 06:27:20.599 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35984 10 6452 1 2025-12-10 06:28:21.008 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58102 10 6452 1 2025-12-10 06:29:21.408 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44344 10 6452 1 2025-12-10 06:29:49.147 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:29:49.065 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 06:29:49.067 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 06:29:49.091 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:29:49.064 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:30:21.812 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:53538 10 6452 1 2025-12-10 06:27:13.702 00:05:02.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-10 06:27:13.704 00:05:02.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-10 06:31:22.180 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58046 10 6452 1 2025-12-10 06:32:22.586 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36388 10 6452 1 2025-12-10 06:33:22.949 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35156 10 6452 1 2025-12-10 06:34:23.316 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:46588 12 10369 1 2025-12-10 06:34:49.348 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:34:49.266 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:34:49.176 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 06:34:49.295 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 06:34:48.857 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:35:23.801 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:41242 10 6452 1 2025-12-10 06:36:24.191 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34908 10 6452 1 2025-12-10 06:33:13.705 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-10 06:33:13.702 00:05:02.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-10 06:37:24.601 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48136 10 6452 1 2025-12-10 06:38:25.007 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42100 10 6452 1 2025-12-10 06:39:25.406 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:54682 10 6452 1 2025-12-10 06:39:49.378 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 06:39:49.379 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 06:39:49.266 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:39:49.243 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:39:49.327 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:40:25.798 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53546 10 6452 1 2025-12-10 06:41:26.201 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58786 10 6452 1 2025-12-10 06:42:26.616 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43608 10 6452 1 2025-12-10 06:39:13.704 00:05:02.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-10 06:39:13.707 00:05:02.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-10 06:43:27.032 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56552 10 6452 1 2025-12-10 06:44:27.434 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48326 10 6452 1 2025-12-10 06:44:49.737 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 06:44:49.500 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:44:49.446 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:44:49.539 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 06:44:49.528 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:45:27.844 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:37714 10 6452 1 2025-12-10 06:46:28.279 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58044 10 6452 1 2025-12-10 06:47:28.678 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44414 10 6452 1 2025-12-10 06:48:29.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41834 10 6452 1 2025-12-10 06:45:13.706 00:05:02.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-10 06:45:13.709 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-10 06:49:29.511 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:60528 12 10375 1 2025-12-10 06:49:49.433 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 06:49:49.262 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:49:49.437 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:49:49.428 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 06:49:49.519 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:50:29.957 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43690 10 6452 1 2025-12-10 06:51:30.361 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37310 10 6452 1 2025-12-10 06:52:30.757 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37574 10 6452 1 2025-12-10 06:53:31.162 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46150 10 6452 1 2025-12-10 06:54:31.565 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52880 10 6452 1 2025-12-10 06:54:49.326 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-10 06:54:49.496 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:54:49.528 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-10 06:54:49.326 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-10 06:54:49.609 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-10 06:51:13.708 00:05:02.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-10 06:51:13.710 00:05:02.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-10 06:55:31.973 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:49774 11 6504 1 2025-12-10 06:56:32.435 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52004 10 6452 1 2025-12-10 06:57:32.839 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:54422 10 6452 1 2025-12-10 06:58:33.230 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36148 10 6452 1 Summary: total flows: 140, total bytes: 432946, total packets: 1033, avg bps: 938, avg pps: 0, avg bpp: 419 Time window: 2025-12-10 05:57:13 - 2025-12-10 06:58:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0025s User: 0.0025s Wall: 0.0026s flows/second: 53995.6 Runtime: 0.0026s