Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-12 22:59:35.167 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42328 10 6452 1 2025-12-12 23:00:35.567 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50346 10 6452 1 2025-12-12 23:01:06.776 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:01:06.694 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:01:06.431 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:01:06.623 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:01:06.707 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 22:57:15.124 00:05:02.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-12 22:57:15.127 00:05:02.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-12 23:01:35.965 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46914 10 6452 1 2025-12-12 23:02:36.365 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58672 10 6452 1 2025-12-12 23:03:36.767 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59870 10 6452 1 2025-12-12 23:04:37.178 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41996 10 6452 1 2025-12-12 23:05:37.579 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47232 10 6452 1 2025-12-12 23:06:06.861 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:06:06.792 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:06:06.681 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:06:06.791 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:06:06.875 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 23:06:37.985 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:49644 11 6504 1 2025-12-12 23:03:15.126 00:05:02.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-12 23:03:15.128 00:05:02.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-12 23:07:38.446 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34426 10 6452 1 2025-12-12 23:08:38.851 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:42772 10 6452 1 2025-12-12 23:09:39.276 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60736 10 6452 1 2025-12-12 23:10:39.686 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55074 10 6452 1 2025-12-12 23:11:07.381 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 23:11:06.768 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:11:06.768 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:11:06.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:11:07.300 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:11:40.108 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44992 10 6452 1 2025-12-12 23:12:40.518 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43908 10 6452 1 2025-12-12 23:09:15.128 00:05:02.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-12 23:09:15.130 00:05:02.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-12 23:13:40.925 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:32968 12 6556 1 2025-12-12 23:14:41.349 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41496 10 6452 1 2025-12-12 23:15:41.783 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33124 10 6452 1 2025-12-12 23:16:07.242 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:16:07.093 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:16:06.921 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:16:06.981 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:16:07.065 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 23:16:42.145 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45176 10 6452 1 2025-12-12 23:17:42.548 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57104 10 6452 1 2025-12-12 23:18:42.951 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34578 10 6452 1 2025-12-12 23:15:15.131 00:05:02.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-12 23:15:15.129 00:05:02.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-12 23:19:43.358 00:00:10.506 TCP 1.101.0.1:3000 -> 23.104.0.1:59464 10 6452 1 2025-12-12 23:20:43.907 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39102 10 6452 1 2025-12-12 23:21:07.168 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 23:21:07.086 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:21:07.083 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:21:06.856 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:21:07.085 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:21:44.316 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47352 10 6452 1 2025-12-12 23:22:44.684 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49606 10 6452 1 2025-12-12 23:23:45.116 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45790 10 6452 1 2025-12-12 23:24:45.512 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44364 10 6452 1 2025-12-12 23:21:15.134 00:05:02.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-12 23:21:15.132 00:05:02.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-12 23:25:45.874 00:00:10.714 TCP 1.101.0.1:3000 -> 23.104.0.1:51316 10 6452 1 2025-12-12 23:26:07.146 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:26:07.146 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:26:06.848 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:26:07.306 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:26:07.388 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 23:26:46.625 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56456 10 6452 1 2025-12-12 23:27:46.991 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45376 10 6452 1 2025-12-12 23:28:47.391 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37068 10 6452 1 2025-12-12 23:29:47.799 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:40012 12 10375 1 2025-12-12 23:30:48.281 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45156 10 6452 1 2025-12-12 23:31:07.683 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:31:07.685 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:31:07.677 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:31:07.739 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:31:07.823 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 23:27:15.135 00:05:02.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-12 23:27:15.132 00:05:02.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-12 23:31:48.685 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57806 10 6452 1 2025-12-12 23:32:49.116 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55744 10 6452 1 2025-12-12 23:33:49.524 00:00:10.861 TCP 1.101.0.1:3000 -> 23.104.0.1:59160 10 6452 1 2025-12-12 23:34:50.423 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33886 10 6452 1 2025-12-12 23:35:50.825 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45862 10 6452 1 2025-12-12 23:36:07.604 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 23:36:07.526 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:36:07.462 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:36:07.311 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:36:07.521 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:36:51.188 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56646 10 6452 1 2025-12-12 23:33:15.136 00:05:02.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-12 23:33:15.138 00:05:02.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-12 23:37:51.596 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42636 10 6452 1 2025-12-12 23:38:51.958 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50676 10 6452 1 2025-12-12 23:39:52.372 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45938 10 6452 1 2025-12-12 23:40:52.779 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53840 10 6452 1 2025-12-12 23:41:07.631 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 23:41:07.420 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:41:07.626 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:41:07.339 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:41:07.549 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:41:53.209 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55386 10 6452 1 2025-12-12 23:42:53.624 00:00:10.737 TCP 1.101.0.1:3000 -> 23.104.0.1:33152 10 6452 1 2025-12-12 23:39:15.136 00:05:02.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-12 23:39:15.138 00:05:02.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-12 23:43:54.402 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48472 10 6452 1 2025-12-12 23:44:54.815 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45232 10 6452 1 2025-12-12 23:46:07.343 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:46:07.558 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:46:07.667 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:45:55.226 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46088 10 6452 1 2025-12-12 23:46:07.548 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:46:07.641 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 23:46:55.627 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:37666 11 6504 1 2025-12-12 23:47:56.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49804 10 6452 1 2025-12-12 23:48:56.515 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52634 10 6452 1 2025-12-12 23:45:15.148 00:05:02.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-12 23:45:15.144 00:05:02.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-12 23:49:56.926 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36300 10 6452 1 2025-12-12 23:51:08.198 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 23:51:08.109 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:51:07.643 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:51:07.948 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:51:08.113 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:50:57.335 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38970 10 6452 1 2025-12-12 23:51:57.695 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48138 10 6452 1 2025-12-12 23:52:58.114 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43398 10 6452 1 2025-12-12 23:53:58.476 00:00:10.784 TCP 1.101.0.1:3000 -> 23.104.0.1:60414 12 6556 1 2025-12-12 23:54:59.298 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57678 10 6452 1 2025-12-12 23:51:15.145 00:05:02.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-12 23:51:15.148 00:05:02.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-12 23:56:07.732 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-12 23:56:07.824 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-12 23:56:07.578 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:56:07.649 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-12 23:56:07.829 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-12 23:55:59.695 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53648 10 6452 1 2025-12-12 23:57:00.062 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47506 10 6452 1 2025-12-12 23:58:00.425 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 Summary: total flows: 139, total bytes: 414783, total packets: 1018, avg bps: 907, avg pps: 0, avg bpp: 407 Time window: 2025-12-12 22:57:15 - 2025-12-12 23:58:10 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0042s User: 0.0021s Wall: 0.0023s flows/second: 60939.5 Runtime: 0.0023s