Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-12 23:59:00.787 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58678 10 6452 1 2025-12-13 00:00:01.197 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58988 10 6452 1 2025-12-13 00:01:07.819 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:01:07.735 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:01:07.813 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:01:07.623 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:01:07.736 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:01:01.599 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42902 10 6452 1 2025-12-12 23:57:15.147 00:05:02.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-12 23:57:15.150 00:05:02.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 00:02:02.003 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41868 10 6452 1 2025-12-13 00:03:02.405 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53918 10 6452 1 2025-12-13 00:04:02.811 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52274 10 6452 1 2025-12-13 00:05:03.179 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39874 10 6452 1 2025-12-13 00:06:07.886 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:06:08.007 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:06:07.972 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:06:07.951 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:06:08.034 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:06:03.580 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60714 10 6452 1 2025-12-13 00:07:03.992 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56568 10 6452 1 2025-12-13 00:03:15.150 00:05:02.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 00:03:15.152 00:05:02.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 00:08:04.349 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58104 10 6452 1 2025-12-13 00:09:04.750 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46700 10 6452 1 2025-12-13 00:10:05.153 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60158 10 6452 1 2025-12-13 00:11:08.217 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:11:07.996 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:11:08.090 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:11:08.135 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:11:08.021 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:11:05.558 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51550 10 6452 1 2025-12-13 00:12:05.951 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50896 10 6452 1 2025-12-13 00:09:15.154 00:05:02.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 00:13:06.367 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52914 10 6452 1 2025-12-13 00:09:15.151 00:05:02.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 00:14:06.770 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42784 10 6452 1 2025-12-13 00:15:07.185 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37140 10 6452 1 2025-12-13 00:16:08.285 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:16:08.564 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:16:08.775 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:16:08.239 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:16:08.202 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:16:07.544 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44832 10 6452 1 2025-12-13 00:17:07.957 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49590 10 6452 1 2025-12-13 00:18:08.360 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37896 10 6452 1 2025-12-13 00:19:08.764 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:51974 10 6452 1 2025-12-13 00:15:15.156 00:05:02.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 00:15:15.154 00:05:02.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 00:20:09.140 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46184 10 6452 1 2025-12-13 00:21:08.443 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:21:08.362 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:21:08.365 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:21:08.381 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:21:08.362 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:21:09.547 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6452 1 2025-12-13 00:22:09.917 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42542 11 6492 1 2025-12-13 00:23:10.325 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37658 10 6452 1 2025-12-13 00:24:10.730 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:58120 10 6452 1 2025-12-13 00:21:15.155 00:05:02.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 00:21:15.156 00:05:02.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 00:25:11.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48614 10 6452 1 2025-12-13 00:26:08.373 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:26:08.493 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:26:08.398 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:26:08.284 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:26:08.366 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:26:11.517 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40910 10 6452 1 2025-12-13 00:27:11.922 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45258 10 6452 1 2025-12-13 00:28:12.328 00:00:10.875 TCP 1.101.0.1:3000 -> 23.104.0.1:35702 10 6452 1 2025-12-13 00:29:13.242 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47884 10 6452 1 2025-12-13 00:30:13.601 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59360 10 6452 1 2025-12-13 00:31:08.645 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:31:08.421 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:31:08.389 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:31:08.423 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:31:08.506 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:27:15.155 00:05:02.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 00:27:15.157 00:05:02.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 00:31:14.005 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49718 10 6452 1 2025-12-13 00:32:14.411 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59538 10 6452 1 2025-12-13 00:33:14.816 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44906 10 6452 1 2025-12-13 00:34:15.216 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60366 10 6452 1 2025-12-13 00:35:15.578 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53746 10 6452 1 2025-12-13 00:36:08.720 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:36:08.835 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:36:08.622 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:36:08.849 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:36:08.638 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:36:15.946 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:58432 10 6452 1 2025-12-13 00:33:15.156 00:05:02.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 00:33:15.159 00:05:02.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 00:37:16.318 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42840 10 6452 1 2025-12-13 00:38:16.724 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:54648 10 6452 1 2025-12-13 00:39:17.112 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38528 10 6452 1 2025-12-13 00:40:17.521 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:55498 10 6452 1 2025-12-13 00:41:08.835 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:41:08.993 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:41:08.951 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:41:08.838 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:41:08.920 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:41:17.887 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:51112 10 6452 1 2025-12-13 00:42:18.314 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42618 10 6452 1 2025-12-13 00:39:15.158 00:05:02.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 00:39:15.161 00:05:02.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 00:43:18.673 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56016 10 6452 1 2025-12-13 00:44:19.115 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32842 10 6452 1 2025-12-13 00:45:19.523 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35248 10 6452 1 2025-12-13 00:46:08.834 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:46:08.832 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:46:08.839 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:46:08.752 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:46:08.837 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:46:19.938 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:52456 13 6608 1 2025-12-13 00:47:20.372 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55284 10 6452 1 2025-12-13 00:48:20.775 00:00:10.748 TCP 1.101.0.1:3000 -> 23.104.0.1:40590 10 6452 1 2025-12-13 00:45:15.159 00:05:02.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 00:45:15.161 00:05:02.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 00:49:21.565 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42232 10 6452 1 2025-12-13 00:50:21.924 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52636 10 6452 1 2025-12-13 00:51:08.883 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:51:08.942 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:51:08.991 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:51:08.852 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:51:08.801 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:51:22.345 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56852 10 6452 1 2025-12-13 00:52:22.721 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41474 10 6452 1 2025-12-13 00:53:23.141 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41232 10 6452 1 2025-12-13 00:54:23.542 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43712 10 6452 1 2025-12-13 00:51:15.163 00:05:02.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 00:51:15.161 00:05:02.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 00:55:23.948 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53072 10 6452 1 2025-12-13 00:56:09.015 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:56:08.932 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 00:56:08.929 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 00:56:08.951 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:56:08.932 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 00:56:24.359 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43978 10 6452 1 2025-12-13 00:57:24.760 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35998 10 6452 1 2025-12-13 00:58:25.125 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39398 10 6452 1 Summary: total flows: 140, total bytes: 417196, total packets: 1024, avg bps: 906, avg pps: 0, avg bpp: 407 Time window: 2025-12-12 23:57:15 - 2025-12-13 00:58:35 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0029s User: 0.0039s Wall: 0.0019s flows/second: 74470.8 Runtime: 0.0019s