Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-13 02:59:13.515 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57070 10 6452 1 2025-12-13 03:00:13.917 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53108 10 6452 1 2025-12-13 03:01:11.333 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:01:11.356 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:01:11.292 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:01:11.584 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:01:11.668 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 02:57:15.206 00:05:02.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 02:57:15.208 00:05:02.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 03:01:14.317 00:00:10.696 TCP 1.101.0.1:3000 -> 23.104.0.1:38624 10 6452 1 2025-12-13 03:02:15.063 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40116 10 6452 1 2025-12-13 03:03:15.464 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40972 10 6452 1 2025-12-13 03:04:15.860 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44432 10 6452 1 2025-12-13 03:05:16.279 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47864 10 6452 1 2025-12-13 03:06:11.757 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 03:06:11.761 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:06:11.476 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:06:11.725 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:06:11.673 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:06:16.680 00:00:10.884 TCP 1.101.0.1:3000 -> 23.104.0.1:46534 10 6452 1 2025-12-13 03:03:15.207 00:05:02.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 03:03:15.209 00:05:02.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 03:07:17.599 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35926 10 6452 1 2025-12-13 03:08:18.003 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41674 10 6452 1 2025-12-13 03:09:18.404 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48396 10 6452 1 2025-12-13 03:10:18.818 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44334 10 6452 1 2025-12-13 03:11:12.511 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 03:11:12.261 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:11:12.415 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:11:11.952 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:11:12.428 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:11:19.218 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55622 10 6452 1 2025-12-13 03:12:19.618 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38366 10 6452 1 2025-12-13 03:09:15.211 00:05:02.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 03:09:15.213 00:05:02.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 03:13:20.029 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51906 10 6452 1 2025-12-13 03:14:20.430 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:39230 12 10375 1 2025-12-13 03:15:20.911 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35778 10 6452 1 2025-12-13 03:16:11.938 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 03:16:11.774 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:16:11.903 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:16:11.904 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:16:11.856 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:16:21.319 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37250 10 6452 1 2025-12-13 03:17:21.685 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53250 10 6452 1 2025-12-13 03:18:22.108 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:34282 10 6452 1 2025-12-13 03:15:15.214 00:05:02.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 03:15:15.212 00:05:02.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 03:19:22.496 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36004 10 6452 1 2025-12-13 03:20:22.903 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51866 10 6452 1 2025-12-13 03:21:11.693 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 03:21:11.818 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:21:11.862 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:21:11.610 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:21:11.957 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:21:23.319 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44184 10 6452 1 2025-12-13 03:22:23.722 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46650 10 6452 1 2025-12-13 03:23:24.110 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45892 10 6452 1 2025-12-13 03:24:24.471 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36242 12 6556 1 2025-12-13 03:21:15.214 00:05:02.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 03:21:15.211 00:05:02.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 03:25:24.878 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48460 10 6452 1 2025-12-13 03:26:12.285 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 03:26:12.264 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:26:12.150 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:26:12.104 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:26:12.203 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:26:25.282 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56070 10 6452 1 2025-12-13 03:27:25.655 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:49076 11 6504 1 2025-12-13 03:28:26.112 00:00:10.472 TCP 1.101.0.1:3000 -> 23.104.0.1:44788 10 6452 1 2025-12-13 03:29:26.622 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33490 10 6452 1 2025-12-13 03:30:27.027 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35418 10 6452 1 2025-12-13 03:31:12.405 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 03:27:15.214 00:05:02.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 03:31:11.981 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:31:12.321 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:31:12.115 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:31:11.957 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:27:15.216 00:05:02.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 03:31:27.430 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51432 10 6452 1 2025-12-13 03:32:27.794 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54898 10 6452 1 2025-12-13 03:33:28.202 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57640 10 6452 1 2025-12-13 03:34:28.601 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44016 10 6452 1 2025-12-13 03:35:28.964 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37602 10 6452 1 2025-12-13 03:36:12.172 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:36:12.164 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:36:12.203 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:36:12.159 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:36:12.243 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 03:36:29.371 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34302 10 6452 1 2025-12-13 03:33:15.218 00:05:02.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 03:33:15.217 00:05:02.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 03:37:29.776 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49846 10 6452 1 2025-12-13 03:38:30.183 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58860 10 6452 1 2025-12-13 03:39:30.548 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:48114 11 6504 1 2025-12-13 03:40:31.007 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34978 10 6452 1 2025-12-13 03:41:12.699 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 03:41:12.434 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:41:12.429 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:41:12.530 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:41:12.617 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:41:31.407 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35292 10 6452 1 2025-12-13 03:42:31.813 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35848 10 6452 1 2025-12-13 03:39:15.219 00:05:02.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 03:39:15.216 00:05:02.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 03:43:32.224 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42672 10 6452 1 2025-12-13 03:44:32.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53234 10 6452 1 2025-12-13 03:45:32.985 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34996 10 6452 1 2025-12-13 03:46:12.333 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:46:12.411 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:46:12.411 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:46:12.085 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:46:12.416 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 03:46:33.388 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38130 10 6452 1 2025-12-13 03:47:33.790 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60528 10 6452 1 2025-12-13 03:48:34.193 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44138 10 6452 1 2025-12-13 03:45:15.218 00:05:02.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 03:45:15.221 00:05:02.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 03:49:34.595 00:00:10.788 TCP 1.101.0.1:3000 -> 23.104.0.1:50740 10 6452 1 2025-12-13 03:50:35.425 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49456 10 6452 1 2025-12-13 03:51:12.569 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 03:51:12.485 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:51:12.284 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:51:12.486 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:51:12.539 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:51:35.787 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33486 10 6452 1 2025-12-13 03:52:36.189 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35134 10 6452 1 2025-12-13 03:53:36.552 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33422 10 6452 1 2025-12-13 03:54:36.956 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54624 10 6452 1 2025-12-13 03:51:15.222 00:05:02.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 03:51:15.221 00:05:02.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 03:55:37.364 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33272 10 6452 1 2025-12-13 03:56:12.611 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 03:56:12.430 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:56:12.450 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 03:56:12.657 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 03:56:12.533 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 03:56:37.730 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40954 10 6452 1 2025-12-13 03:57:38.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35794 10 6452 1 2025-12-13 03:58:38.540 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58468 10 6452 1 Summary: total flows: 140, total bytes: 421131, total packets: 1026, avg bps: 912, avg pps: 0, avg bpp: 410 Time window: 2025-12-13 02:57:15 - 2025-12-13 03:58:48 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0054s User: 0.0011s Wall: 0.0023s flows/second: 60139.5 Runtime: 0.0023s