Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-11 19:58:43.901 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34670 10 6452 1 2025-12-11 19:59:44.265 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60220 10 6452 1 2025-12-11 20:00:34.048 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:00:34.118 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:00:34.179 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:00:34.158 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:00:33.966 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:00:44.676 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 10 6452 1 2025-12-11 19:57:14.480 00:05:02.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 19:57:14.478 00:05:02.395 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 20:01:45.066 00:00:11.002 TCP 1.101.0.1:3000 -> 23.104.0.1:46738 10 6452 1 2025-12-11 20:02:46.121 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49728 10 6452 1 2025-12-11 20:03:46.520 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54210 10 6452 1 2025-12-11 20:04:46.884 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48320 10 6452 1 2025-12-11 20:05:34.124 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:05:34.314 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:05:34.361 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:05:34.231 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:05:34.042 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:05:47.324 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33484 10 6452 1 2025-12-11 20:06:47.724 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53240 10 6452 1 2025-12-11 20:03:14.482 00:05:02.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 20:03:14.478 00:05:02.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 20:07:48.143 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60838 10 6452 1 2025-12-11 20:08:48.549 00:00:10.484 TCP 1.101.0.1:3000 -> 23.104.0.1:60880 10 6452 1 2025-12-11 20:09:49.097 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35068 10 6452 1 2025-12-11 20:10:34.182 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:10:34.352 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:10:34.366 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:10:34.266 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:10:34.348 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:10:49.458 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52478 10 6452 1 2025-12-11 20:11:49.868 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37336 10 6452 1 2025-12-11 20:12:50.236 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-12-11 20:09:14.481 00:05:02.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 20:09:14.484 00:05:02.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 20:13:50.636 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59454 10 6452 1 2025-12-11 20:14:51.042 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41348 10 6452 1 2025-12-11 20:15:34.570 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:15:34.297 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:15:34.338 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:15:34.403 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:15:34.485 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:15:51.449 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:59540 10 6452 1 2025-12-11 20:16:51.835 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:60658 10 6452 1 2025-12-11 20:17:52.266 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40044 10 6452 1 2025-12-11 20:18:52.673 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50684 10 6452 1 2025-12-11 20:15:14.484 00:05:02.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 20:15:14.485 00:05:02.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 20:19:53.111 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35848 10 6452 1 2025-12-11 20:20:34.728 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:20:34.561 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:20:34.647 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:20:34.581 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:20:34.645 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:20:53.511 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47788 10 6452 1 2025-12-11 20:21:53.914 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47858 10 6452 1 2025-12-11 20:22:54.279 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48534 10 6452 1 2025-12-11 20:23:54.681 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49594 10 6452 1 2025-12-11 20:24:55.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48468 10 6452 1 2025-12-11 20:21:14.485 00:05:02.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 20:21:14.483 00:05:02.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 20:25:34.772 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:25:34.816 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:25:34.561 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:25:34.773 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:25:34.856 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:25:55.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47014 10 6452 1 2025-12-11 20:26:55.920 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52774 10 6452 1 2025-12-11 20:27:56.282 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50622 10 6452 1 2025-12-11 20:28:56.684 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48064 10 6452 1 2025-12-11 20:29:57.115 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43546 10 6452 1 2025-12-11 20:30:34.770 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:30:34.688 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:30:34.816 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:30:34.688 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:30:34.603 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:30:57.522 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41892 10 6452 1 2025-12-11 20:27:14.484 00:05:02.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 20:27:14.487 00:05:02.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 20:31:57.930 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47640 10 6452 1 2025-12-11 20:32:58.353 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58724 10 6452 1 2025-12-11 20:33:58.753 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:58596 10 6452 1 2025-12-11 20:34:59.177 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:60860 12 10375 1 2025-12-11 20:35:34.904 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:35:35.204 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:35:35.094 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:35:34.986 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:35:35.122 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:35:59.616 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51404 10 6452 1 2025-12-11 20:33:14.485 00:05:02.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 20:37:00.022 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45772 10 6452 1 2025-12-11 20:33:14.487 00:05:02.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 20:38:00.428 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38152 12 6556 1 2025-12-11 20:39:00.833 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:39882 10 6452 1 2025-12-11 20:40:01.251 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38728 10 6452 1 2025-12-11 20:40:35.027 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:40:34.939 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:40:34.942 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:40:35.221 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:40:35.075 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:41:01.658 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42778 10 6452 1 2025-12-11 20:42:02.079 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60450 10 6452 1 2025-12-11 20:43:02.485 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36404 10 6452 1 2025-12-11 20:39:14.486 00:05:02.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 20:39:14.488 00:05:02.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 20:44:02.884 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:59036 10 6452 1 2025-12-11 20:45:03.319 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38940 10 6452 1 2025-12-11 20:45:34.899 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:45:35.186 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:45:35.107 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:45:35.109 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:45:35.104 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:46:03.732 00:00:14.405 TCP 1.101.0.1:3000 -> 23.104.0.1:35490 10 6452 1 2025-12-11 20:47:08.200 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38176 10 6452 1 2025-12-11 20:48:08.605 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60760 10 6452 1 2025-12-11 20:45:14.486 00:05:02.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 20:49:08.963 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:48448 12 10369 1 2025-12-11 20:45:14.490 00:05:02.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 20:50:09.438 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 10 6452 1 2025-12-11 20:50:34.950 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:50:35.033 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:50:35.164 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:50:35.092 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:50:35.171 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:51:09.841 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:46034 10 6452 1 2025-12-11 20:52:10.227 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33828 10 6452 1 2025-12-11 20:53:10.588 00:00:10.967 TCP 1.101.0.1:3000 -> 23.104.0.1:40632 10 6452 1 2025-12-11 20:54:11.590 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60340 10 6452 1 2025-12-11 20:51:14.490 00:05:02.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-11 20:51:14.492 00:05:02.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-11 20:55:11.994 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56476 10 6452 1 2025-12-11 20:55:35.249 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-11 20:55:35.060 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-11 20:55:35.232 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-11 20:55:35.177 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:55:35.168 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-11 20:56:12.403 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45662 10 6452 1 2025-12-11 20:57:12.802 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33300 10 6452 1 2025-12-11 20:58:13.204 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58740 10 6452 1 Summary: total flows: 140, total bytes: 424944, total packets: 1026, avg bps: 926, avg pps: 0, avg bpp: 414 Time window: 2025-12-11 19:57:14 - 2025-12-11 20:58:23 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0040s User: 0.0024s Wall: 0.0022s flows/second: 63577.6 Runtime: 0.0022s