Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-11 00:59:27.562 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:41400 12 10375 1 2025-12-11 01:00:11.124 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:00:11.301 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:00:11.183 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:00:11.494 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:00:11.577 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:00:28.040 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49192 10 6452 1 2025-12-11 00:57:14.104 00:05:02.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 00:57:14.106 00:05:02.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 01:01:28.436 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57058 10 6452 1 2025-12-11 01:02:28.837 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:55642 10 6452 1 2025-12-11 01:03:29.211 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56648 10 6452 1 2025-12-11 01:04:29.622 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:46570 12 10375 1 2025-12-11 01:05:11.370 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:05:11.744 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:05:11.560 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:05:11.517 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:05:11.601 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:05:30.108 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51178 10 6452 1 2025-12-11 01:06:30.512 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42954 10 6452 1 2025-12-11 01:03:14.109 00:05:02.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 01:03:14.107 00:05:02.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 01:07:30.917 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 10 6452 1 2025-12-11 01:08:31.322 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37572 10 6452 1 2025-12-11 01:09:31.754 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56506 10 6452 1 2025-12-11 01:10:11.374 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:10:11.304 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:10:11.582 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:10:11.442 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:10:11.292 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:10:32.155 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41400 10 6452 1 2025-12-11 01:11:32.564 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35744 10 6452 1 2025-12-11 01:12:32.972 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33486 10 6452 1 2025-12-11 01:09:14.105 00:05:02.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 01:09:14.109 00:05:02.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 01:13:33.397 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55710 10 6452 1 2025-12-11 01:14:33.800 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56224 10 6452 1 2025-12-11 01:15:11.918 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:15:12.002 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:15:11.831 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:15:11.795 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:15:11.836 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:15:34.202 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38398 10 6452 1 2025-12-11 01:16:34.608 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38728 10 6452 1 2025-12-11 01:17:35.017 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37516 10 6452 1 2025-12-11 01:18:35.415 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34798 10 6452 1 2025-12-11 01:15:14.109 00:05:02.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 01:15:14.107 00:05:02.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 01:19:35.817 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43206 10 6452 1 2025-12-11 01:20:11.853 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:20:11.570 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:20:11.853 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:20:11.851 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:20:11.936 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:20:36.226 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:46996 11 6504 1 2025-12-11 01:21:36.676 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59024 10 6452 1 2025-12-11 01:22:37.109 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36436 10 6452 1 2025-12-11 01:23:37.511 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44030 10 6452 1 2025-12-11 01:24:37.870 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42394 10 6452 1 2025-12-11 01:25:11.970 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:25:11.851 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:25:11.846 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:25:11.713 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:25:11.888 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:21:14.112 00:05:02.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 01:21:14.109 00:05:02.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 01:25:38.241 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36330 10 6452 1 2025-12-11 01:26:38.675 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49646 10 6452 1 2025-12-11 01:27:39.098 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57240 10 6452 1 2025-12-11 01:28:39.464 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56818 12 6556 1 2025-12-11 01:29:39.871 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43646 10 6452 1 2025-12-11 01:30:11.892 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:30:11.896 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:30:12.033 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:30:11.920 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:30:11.809 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:30:40.276 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42842 10 6452 1 2025-12-11 01:27:14.110 00:05:02.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 01:27:14.113 00:05:02.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 01:31:40.688 00:00:10.591 TCP 1.101.0.1:3000 -> 23.104.0.1:59170 10 6452 1 2025-12-11 01:32:41.325 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40370 10 6452 1 2025-12-11 01:33:41.728 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47484 10 6452 1 2025-12-11 01:34:42.138 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56176 10 6452 1 2025-12-11 01:35:12.143 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:35:12.058 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:35:12.055 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:35:11.952 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:35:12.060 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:35:42.544 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42732 10 6452 1 2025-12-11 01:36:42.946 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58566 10 6452 1 2025-12-11 01:33:14.114 00:05:02.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 01:33:14.111 00:05:02.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 01:37:43.357 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45630 10 6452 1 2025-12-11 01:38:43.759 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44816 10 6452 1 2025-12-11 01:39:44.178 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57564 10 6452 1 2025-12-11 01:40:12.594 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:40:12.432 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:40:12.434 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:40:12.512 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:40:12.427 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:40:44.542 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51058 10 6452 1 2025-12-11 01:41:44.957 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57068 10 6452 1 2025-12-11 01:42:45.366 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50686 10 6452 1 2025-12-11 01:39:14.116 00:05:02.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 01:39:14.113 00:05:02.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 01:43:45.773 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:45564 11 6504 1 2025-12-11 01:44:46.235 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:44466 12 10375 1 2025-12-11 01:45:12.007 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:45:12.371 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:45:12.085 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:45:12.240 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:45:12.325 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:45:46.717 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54916 10 6452 1 2025-12-11 01:46:47.129 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44590 10 6452 1 2025-12-11 01:47:47.527 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48074 10 6452 1 2025-12-11 01:48:47.933 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35870 10 6452 1 2025-12-11 01:45:14.117 00:05:02.365 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 01:45:14.120 00:05:02.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 01:49:48.350 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42464 10 6452 1 2025-12-11 01:50:12.395 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:50:12.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:50:12.829 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:50:12.827 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:50:12.909 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:50:48.751 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45958 10 6452 1 2025-12-11 01:51:49.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57052 10 6452 1 2025-12-11 01:52:49.520 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57406 10 6452 1 2025-12-11 01:53:49.924 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53844 10 6452 1 2025-12-11 01:54:50.348 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34712 10 6452 1 2025-12-11 01:55:12.540 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 01:55:12.542 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 01:55:12.425 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:55:12.549 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 01:55:12.630 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 01:51:14.121 00:05:02.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 01:51:14.119 00:05:02.365 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 01:55:50.761 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33786 10 6452 1 2025-12-11 01:56:51.184 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37682 10 6452 1 2025-12-11 01:57:51.558 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43398 10 6452 1 Summary: total flows: 139, total bytes: 422525, total packets: 1020, avg bps: 926, avg pps: 0, avg bpp: 414 Time window: 2025-12-11 00:57:14 - 2025-12-11 01:58:01 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0037s User: 0.0024s Wall: 0.0021s flows/second: 65817.1 Runtime: 0.0021s