Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-13 04:59:08.023 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:36346 10 6452 1 2025-12-13 05:00:08.404 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33612 10 6452 1 2025-12-13 05:01:14.078 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:01:14.104 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:01:13.856 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:01:13.900 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 04:57:15.253 00:05:02.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 05:01:08.763 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50204 10 6452 1 2025-12-13 05:01:14.160 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 04:57:15.249 00:05:02.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 05:02:09.176 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41270 10 6452 1 2025-12-13 05:03:09.585 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41746 10 6452 1 2025-12-13 05:04:09.949 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46784 10 6452 1 2025-12-13 05:05:10.359 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40432 10 6452 1 2025-12-13 05:06:14.075 00:00:00.049 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 05:06:13.993 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:06:14.184 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:06:13.750 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:06:13.990 00:00:00.052 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:06:10.719 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:52980 10 6452 1 2025-12-13 05:03:15.254 00:05:02.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 05:03:15.252 00:05:02.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 05:07:11.144 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46884 10 6452 1 2025-12-13 05:08:11.544 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39160 10 6452 1 2025-12-13 05:09:11.907 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36920 10 6452 1 2025-12-13 05:10:12.310 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52916 10 6452 1 2025-12-13 05:11:14.219 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 05:11:14.251 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:11:13.930 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:11:13.958 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:11:14.135 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:11:12.715 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34590 10 6452 1 2025-12-13 05:12:13.106 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57040 10 6452 1 2025-12-13 05:09:15.258 00:05:02.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 05:09:15.255 00:05:02.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 05:13:13.463 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49856 10 6452 1 2025-12-13 05:14:13.866 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45564 10 6452 1 2025-12-13 05:15:14.234 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60380 10 6452 1 2025-12-13 05:16:14.258 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 05:16:14.296 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:16:14.446 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:16:14.307 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:16:14.176 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:16:14.649 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37032 10 6452 1 2025-12-13 05:17:15.055 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42278 10 6452 1 2025-12-13 05:18:15.462 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36224 10 6452 1 2025-12-13 05:15:15.258 00:05:02.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 05:15:15.256 00:05:02.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 05:19:15.865 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36828 10 6452 1 2025-12-13 05:20:16.281 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37884 10 6452 1 2025-12-13 05:21:14.380 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:21:14.435 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:21:14.295 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:21:14.433 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:21:14.517 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 05:21:16.692 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58222 10 6452 1 2025-12-13 05:22:17.055 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35424 10 6452 1 2025-12-13 05:23:17.461 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47196 10 6452 1 2025-12-13 05:24:17.858 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:37884 10 6452 1 2025-12-13 05:21:15.256 00:05:02.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 05:21:15.260 00:05:02.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 05:25:18.233 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35634 10 6452 1 2025-12-13 05:26:14.489 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 05:26:14.407 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:26:14.324 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:26:14.290 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:26:14.407 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:26:18.638 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39550 10 6452 1 2025-12-13 05:27:19.055 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58852 10 6452 1 2025-12-13 05:28:19.461 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56394 10 6452 1 2025-12-13 05:29:19.861 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:40056 10 6452 1 2025-12-13 05:30:20.235 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43322 10 6452 1 2025-12-13 05:31:14.634 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:31:14.599 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:31:14.555 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:31:14.543 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:31:14.627 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 05:27:15.262 00:05:02.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 05:27:15.258 00:05:02.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 05:31:20.644 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47952 10 6452 1 2025-12-13 05:32:21.056 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36094 10 6452 1 2025-12-13 05:33:21.457 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32862 10 6452 1 2025-12-13 05:34:21.862 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:58160 12 10369 1 2025-12-13 05:35:22.308 00:00:10.494 TCP 1.101.0.1:3000 -> 23.104.0.1:36326 10 6452 1 2025-12-13 05:36:14.530 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:36:14.948 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:36:15.133 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:36:15.152 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:36:15.031 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 05:36:22.840 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-12-13 05:33:15.261 00:05:02.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 05:33:15.264 00:05:02.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 05:37:23.225 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47152 10 6452 1 2025-12-13 05:38:23.627 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36528 10 6452 1 2025-12-13 05:39:24.030 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54490 10 6452 1 2025-12-13 05:40:24.436 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42988 10 6452 1 2025-12-13 05:41:14.729 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:41:14.728 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:41:14.683 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:41:14.729 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:41:14.813 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 05:41:24.842 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:34178 10 6452 1 2025-12-13 05:42:25.272 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:54156 10 6452 1 2025-12-13 05:39:15.265 00:05:02.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 05:39:15.263 00:05:02.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 05:43:25.672 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35982 10 6452 1 2025-12-13 05:44:26.119 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44324 10 6452 1 2025-12-13 05:45:26.519 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32910 10 6452 1 2025-12-13 05:46:14.710 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:46:14.785 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:46:14.783 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:46:14.869 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 05:46:14.978 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:46:26.921 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59362 10 6452 1 2025-12-13 05:47:27.321 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40602 10 6452 1 2025-12-13 05:48:27.730 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55150 10 6452 1 2025-12-13 05:45:15.266 00:05:02.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 05:45:15.265 00:05:02.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 05:49:28.117 00:00:10.500 TCP 1.101.0.1:3000 -> 23.104.0.1:48128 10 6452 1 2025-12-13 05:50:28.658 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33214 10 6452 1 2025-12-13 05:51:14.870 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:51:14.732 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:51:14.919 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:51:14.626 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:51:14.814 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 05:51:29.070 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45508 10 6452 1 2025-12-13 05:52:29.473 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54620 10 6452 1 2025-12-13 05:53:29.878 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43880 10 6452 1 2025-12-13 05:54:30.246 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54578 10 6452 1 2025-12-13 05:51:15.265 00:05:02.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 05:51:15.268 00:05:02.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 05:55:30.607 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37928 10 6452 1 2025-12-13 05:56:15.264 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 05:56:15.254 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 05:56:15.130 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:56:15.263 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 05:56:15.346 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 05:56:31.012 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33384 10 6452 1 2025-12-13 05:57:31.414 00:00:13.838 TCP 1.101.0.1:3000 -> 23.104.0.1:43418 10 6452 1 2025-12-13 05:58:35.294 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53348 10 6452 1 Summary: total flows: 140, total bytes: 420917, total packets: 1022, avg bps: 912, avg pps: 0, avg bpp: 411 Time window: 2025-12-13 04:57:15 - 2025-12-13 05:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0025s User: 0.0025s Wall: 0.0032s flows/second: 44263.7 Runtime: 0.0032s