Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-13 01:58:49.554 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43252 10 6452 1 2025-12-13 01:59:49.961 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45590 10 6452 1 2025-12-13 02:00:50.369 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39048 10 6452 1 2025-12-13 02:01:10.461 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:01:10.330 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:01:10.329 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:01:10.274 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 01:57:15.184 00:05:02.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 02:01:10.544 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 01:57:15.182 00:05:02.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 02:01:50.778 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58112 10 6452 1 2025-12-13 02:02:51.188 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50406 10 6452 1 2025-12-13 02:03:51.549 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57266 10 6452 1 2025-12-13 02:04:51.957 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35558 10 6452 1 2025-12-13 02:05:52.331 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:40394 10 6452 1 2025-12-13 02:06:10.629 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:06:10.478 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:06:10.599 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:06:10.468 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:06:10.547 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:06:52.709 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:49350 10 6452 1 2025-12-13 02:03:15.191 00:05:02.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 02:03:15.188 00:05:02.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 02:07:53.134 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48704 10 6452 1 2025-12-13 02:08:53.555 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58048 10 6452 1 2025-12-13 02:09:53.962 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:57760 10 6452 1 2025-12-13 02:10:54.339 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60204 10 6452 1 2025-12-13 02:11:10.772 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:11:10.610 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:11:10.761 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:11:10.313 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:11:10.688 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:11:54.737 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35126 10 6452 1 2025-12-13 02:12:55.143 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44204 10 6452 1 2025-12-13 02:09:15.192 00:05:02.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 02:09:15.190 00:05:02.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 02:13:55.513 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58134 10 6452 1 2025-12-13 02:14:55.876 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44386 10 6452 1 2025-12-13 02:15:56.283 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59792 10 6452 1 2025-12-13 02:16:10.661 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:16:10.710 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:16:10.651 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:16:10.661 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:16:10.744 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:16:56.649 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58432 10 6452 1 2025-12-13 02:17:57.010 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47016 10 6452 1 2025-12-13 02:18:57.376 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51398 10 6452 1 2025-12-13 02:15:15.191 00:05:02.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 02:15:15.194 00:05:02.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 02:19:57.776 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39026 10 6452 1 2025-12-13 02:20:58.188 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37786 10 6452 1 2025-12-13 02:21:10.941 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:21:10.780 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:21:10.781 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:21:10.743 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:21:10.858 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:21:58.604 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36546 10 6452 1 2025-12-13 02:22:59.011 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58350 10 6452 1 2025-12-13 02:23:59.419 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34478 12 6556 1 2025-12-13 02:24:59.820 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:34404 12 10375 1 2025-12-13 02:21:15.196 00:05:02.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 02:21:15.193 00:05:02.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 02:26:11.014 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:26:10.736 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:26:10.653 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:26:00.257 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:41930 10 6452 1 2025-12-13 02:26:10.698 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:26:10.929 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:27:00.633 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47238 10 6452 1 2025-12-13 02:28:01.033 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50306 10 6452 1 2025-12-13 02:29:01.441 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39934 10 6452 1 2025-12-13 02:30:01.843 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:40462 10 6452 1 2025-12-13 02:31:10.709 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:31:10.745 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:31:10.842 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:31:10.753 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:31:02.272 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50854 10 6452 1 2025-12-13 02:31:10.628 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:27:15.197 00:05:02.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 02:27:15.194 00:05:02.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 02:32:02.674 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56276 10 6452 1 2025-12-13 02:33:03.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52510 10 6452 1 2025-12-13 02:34:03.514 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:39496 10 6452 1 2025-12-13 02:35:03.881 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:39154 12 10375 1 2025-12-13 02:36:10.835 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:36:10.928 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:36:10.972 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:36:11.010 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:36:04.363 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42380 10 6452 1 2025-12-13 02:36:11.092 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:33:15.204 00:05:02.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 02:37:04.767 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33412 10 6452 1 2025-12-13 02:33:15.201 00:05:02.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 02:38:05.183 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52956 10 6452 1 2025-12-13 02:39:05.588 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44524 10 6452 1 2025-12-13 02:40:05.954 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54586 10 6452 1 2025-12-13 02:41:11.258 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:41:11.214 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:41:11.008 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:41:11.077 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:41:11.175 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:41:06.358 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42082 10 6452 1 2025-12-13 02:42:06.727 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35836 10 6452 1 2025-12-13 02:43:07.136 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38536 10 6452 1 2025-12-13 02:39:15.203 00:05:02.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 02:39:15.201 00:05:02.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 02:44:07.543 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:35952 10 6452 1 2025-12-13 02:45:07.975 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:41540 10 6452 1 2025-12-13 02:46:11.213 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:46:11.042 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:46:11.130 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:46:11.210 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:46:11.114 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:46:08.347 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36564 10 6452 1 2025-12-13 02:47:08.712 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45528 10 6452 1 2025-12-13 02:48:09.130 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46032 10 6452 1 2025-12-13 02:45:15.205 00:05:02.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 02:49:09.526 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59556 10 6452 1 2025-12-13 02:45:15.203 00:05:02.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 02:50:09.934 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41502 10 6452 1 2025-12-13 02:51:11.431 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:51:11.363 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:51:11.185 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:51:11.204 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:51:11.349 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:51:10.347 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49926 10 6452 1 2025-12-13 02:52:10.710 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47540 10 6452 1 2025-12-13 02:53:11.114 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49464 10 6452 1 2025-12-13 02:54:11.483 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45428 10 6452 1 2025-12-13 02:51:15.206 00:05:02.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 02:51:15.203 00:05:02.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 02:55:11.885 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:33642 10 6452 1 2025-12-13 02:56:11.526 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 02:56:11.481 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 02:56:11.340 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:56:11.533 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 02:56:11.616 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:56:12.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39942 10 6452 1 2025-12-13 02:57:12.681 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52866 10 6452 1 2025-12-13 02:58:13.108 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59784 10 6452 1 Summary: total flows: 140, total bytes: 424950, total packets: 1026, avg bps: 926, avg pps: 0, avg bpp: 414 Time window: 2025-12-13 01:57:15 - 2025-12-13 02:58:23 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0013s Wall: 0.0018s flows/second: 77010.2 Runtime: 0.0018s