Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-13 00:59:25.528 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58000 10 6452 1 2025-12-13 01:00:25.934 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37442 10 6452 1 2025-12-13 01:01:09.144 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:01:09.139 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:01:09.203 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:01:08.955 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:01:09.038 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 00:57:15.161 00:05:02.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 00:57:15.164 00:05:02.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 01:01:26.356 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48778 10 6452 1 2025-12-13 01:02:26.759 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:59250 10 6452 1 2025-12-13 01:03:27.180 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37398 10 6452 1 2025-12-13 01:04:27.543 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56204 10 6452 1 2025-12-13 01:05:27.942 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40640 10 6452 1 2025-12-13 01:06:09.328 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:06:09.290 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:06:09.251 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:06:08.994 00:00:00.051 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:06:09.246 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:06:28.365 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38186 10 6452 1 2025-12-13 01:03:15.168 00:05:02.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 01:03:15.165 00:05:02.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 01:07:28.767 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:45492 10 6452 1 2025-12-13 01:08:29.138 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55602 10 6452 1 2025-12-13 01:09:29.505 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36780 10 6452 1 2025-12-13 01:10:29.907 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:53402 11 6504 1 2025-12-13 01:11:09.158 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:11:09.424 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:11:09.399 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:11:09.249 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:11:09.332 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:11:30.371 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:55350 10 6452 1 2025-12-13 01:12:30.739 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41012 10 6452 1 2025-12-13 01:09:15.170 00:05:02.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 01:09:15.167 00:05:02.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 01:13:31.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56428 10 6452 1 2025-12-13 01:14:31.509 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59686 10 6452 1 2025-12-13 01:15:31.910 00:00:10.797 TCP 1.101.0.1:3000 -> 23.104.0.1:47548 10 6452 1 2025-12-13 01:16:09.475 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:16:09.504 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:16:09.302 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:16:09.335 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:16:09.392 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:16:32.748 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58054 10 6452 1 2025-12-13 01:17:33.146 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:56992 10 6452 1 2025-12-13 01:18:33.628 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56426 10 6452 1 2025-12-13 01:15:15.171 00:05:02.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 01:15:15.173 00:05:02.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 01:19:34.030 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41950 10 6452 1 2025-12-13 01:20:34.433 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:47340 10 6452 1 2025-12-13 01:21:09.568 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:21:09.786 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:21:09.206 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:21:09.790 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:21:09.873 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:21:34.804 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53346 10 6452 1 2025-12-13 01:22:35.218 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34682 10 6452 1 2025-12-13 01:23:35.624 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52288 10 6452 1 2025-12-13 01:24:35.988 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41404 10 6452 1 2025-12-13 01:21:15.175 00:05:02.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 01:21:15.173 00:05:02.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 01:25:36.394 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53164 10 6452 1 2025-12-13 01:26:09.635 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:26:09.554 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:26:09.688 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:26:09.612 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:26:09.613 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:26:36.793 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35860 10 6452 1 2025-12-13 01:27:37.209 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58450 10 6452 1 2025-12-13 01:28:37.612 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45198 10 6452 1 2025-12-13 01:29:37.975 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:48442 12 10375 1 2025-12-13 01:30:38.453 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:55172 10 6452 1 2025-12-13 01:31:09.755 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:31:09.718 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:31:09.671 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:31:09.644 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:31:09.727 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:27:15.177 00:05:02.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 01:27:15.174 00:05:02.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 01:31:38.848 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:55698 10 6452 1 2025-12-13 01:32:39.231 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47338 10 6452 1 2025-12-13 01:33:39.599 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58534 10 6452 1 2025-12-13 01:34:39.964 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33558 10 6452 1 2025-12-13 01:35:40.367 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56246 10 6452 1 2025-12-13 01:36:09.842 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:36:09.649 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:36:09.529 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:36:09.842 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:36:09.926 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:36:40.732 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42832 10 6452 1 2025-12-13 01:33:15.175 00:05:02.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 01:33:15.178 00:05:02.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 01:37:41.142 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39618 10 6452 1 2025-12-13 01:38:41.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43488 10 6452 1 2025-12-13 01:39:41.947 00:00:10.462 TCP 1.101.0.1:3000 -> 23.104.0.1:59774 12 10369 1 2025-12-13 01:40:42.434 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55642 10 6452 1 2025-12-13 01:41:09.843 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:41:09.972 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:41:09.870 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:41:09.845 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:41:09.925 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:41:42.794 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36242 10 6452 1 2025-12-13 01:42:43.209 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41352 10 6452 1 2025-12-13 01:39:15.176 00:05:02.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 01:39:15.180 00:05:02.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 01:43:43.615 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55114 10 6452 1 2025-12-13 01:44:43.976 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43294 10 6452 1 2025-12-13 01:45:44.380 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41420 10 6452 1 2025-12-13 01:46:09.865 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:46:09.963 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:46:09.731 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:46:10.061 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:46:09.980 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:46:44.786 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34158 10 6452 1 2025-12-13 01:47:45.193 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34860 10 6452 1 2025-12-13 01:48:45.610 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35852 10 6452 1 2025-12-13 01:45:15.180 00:05:02.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 01:45:15.179 00:05:02.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 01:49:46.015 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49412 10 6452 1 2025-12-13 01:50:46.416 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46892 10 6452 1 2025-12-13 01:51:10.076 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:51:10.122 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:51:10.363 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:51:09.993 00:00:00.048 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:51:10.124 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:51:46.786 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53970 10 6452 1 2025-12-13 01:52:47.188 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48790 10 6452 1 2025-12-13 01:53:47.552 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:50186 10 6452 1 2025-12-13 01:54:47.936 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:44522 10 6452 1 2025-12-13 01:51:15.182 00:05:02.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 01:51:15.181 00:05:02.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 01:55:48.337 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44346 10 6452 1 2025-12-13 01:56:09.971 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:56:10.160 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 01:56:10.168 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 01:56:10.308 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:56:10.390 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:56:48.746 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60316 10 6452 1 2025-12-13 01:57:49.149 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37184 10 6452 1 Summary: total flows: 139, total bytes: 418440, total packets: 1015, avg bps: 918, avg pps: 0, avg bpp: 412 Time window: 2025-12-13 00:57:15 - 2025-12-13 01:57:59 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0009s Wall: 0.0024s flows/second: 57558.3 Runtime: 0.0024s