Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-13 06:59:00.598 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42858 10 6452 1 2025-12-13 07:00:01.004 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:33490 12 10375 1 2025-12-13 07:01:16.850 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 06:57:15.285 00:05:02.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 07:01:01.475 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42022 10 6452 1 2025-12-13 07:01:16.353 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 06:57:15.288 00:05:02.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 07:01:16.502 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:01:16.310 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:01:16.767 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:02:01.837 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:39206 10 6452 1 2025-12-13 07:03:02.231 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32872 10 6452 1 2025-12-13 07:04:02.633 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48248 10 6452 1 2025-12-13 07:05:03.039 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33868 10 6452 1 2025-12-13 07:06:03.446 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52040 10 6452 1 2025-12-13 07:06:16.449 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 07:06:16.501 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:06:16.301 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:06:16.499 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:06:16.583 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 07:07:03.850 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59764 10 6452 1 2025-12-13 07:03:15.288 00:05:02.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 07:03:15.292 00:05:02.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 07:08:04.271 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55250 10 6452 1 2025-12-13 07:09:04.674 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42350 10 6452 1 2025-12-13 07:10:05.099 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41210 10 6452 1 2025-12-13 07:11:16.693 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 07:11:16.561 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:11:16.574 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:11:16.612 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:11:05.502 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38332 10 6452 1 2025-12-13 07:11:16.382 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 07:12:05.865 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53660 10 6452 1 2025-12-13 07:09:15.289 00:05:02.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 07:09:15.290 00:05:02.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 07:13:06.272 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45094 10 6452 1 2025-12-13 07:14:06.675 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34164 10 6452 1 2025-12-13 07:15:07.100 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34828 10 6452 1 2025-12-13 07:16:07.505 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44344 10 6452 1 2025-12-13 07:16:16.704 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 07:16:16.586 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:16:16.557 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:16:16.698 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:16:16.782 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 07:17:07.938 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:50786 10 6452 1 2025-12-13 07:18:08.380 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37584 10 6452 1 2025-12-13 07:15:15.291 00:05:02.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 07:15:15.293 00:05:02.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 07:19:08.800 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59810 10 6452 1 2025-12-13 07:20:09.220 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57042 10 6452 1 2025-12-13 07:21:16.661 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 07:21:16.571 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:21:16.695 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:21:09.582 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55144 10 6452 1 2025-12-13 07:21:16.777 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:21:16.860 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 07:22:09.984 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59574 10 6452 1 2025-12-13 07:23:10.387 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59446 10 6452 1 2025-12-13 07:24:10.786 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57066 10 6452 1 2025-12-13 07:21:15.294 00:05:02.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 07:21:15.296 00:05:02.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 07:25:11.198 00:00:10.315 TCP 1.101.0.1:3000 -> 23.104.0.1:47992 10 6452 1 2025-12-13 07:26:16.956 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 07:26:16.867 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 07:26:16.866 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:26:16.594 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:26:16.874 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:26:11.553 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50296 10 6452 1 2025-12-13 07:27:11.955 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57926 10 6452 1 2025-12-13 07:28:12.359 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58630 10 6452 1 2025-12-13 07:29:12.763 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53290 10 6452 1 2025-12-13 07:30:13.181 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33718 10 6452 1 2025-12-13 07:27:15.296 00:05:02.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 07:31:16.976 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:31:17.088 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:31:17.137 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:31:17.073 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 07:31:17.221 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 07:27:15.295 00:05:02.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 07:31:13.553 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59802 10 6452 1 2025-12-13 07:32:13.961 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59504 10 6452 1 2025-12-13 07:33:14.373 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40334 10 6452 1 2025-12-13 07:34:14.779 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50624 10 6452 1 2025-12-13 07:35:15.188 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:54730 10 6452 1 2025-12-13 07:36:17.136 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 07:36:16.935 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:36:16.782 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:36:17.065 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:36:17.148 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 07:36:15.545 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-12-13 07:33:15.298 00:05:02.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 07:33:15.300 00:05:02.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 07:37:15.916 00:00:10.561 TCP 1.101.0.1:3000 -> 23.104.0.1:43078 10 6452 1 2025-12-13 07:38:16.525 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37894 10 6452 1 2025-12-13 07:39:16.890 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:48702 10 6452 1 2025-12-13 07:40:17.266 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51658 10 6452 1 2025-12-13 07:41:17.093 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:41:16.867 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:41:17.166 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:41:17.160 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 07:41:17.250 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 07:41:17.663 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36710 10 6452 1 2025-12-13 07:42:18.023 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45778 10 6452 1 2025-12-13 07:39:15.299 00:05:02.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 07:39:15.301 00:05:02.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 07:43:18.437 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34392 10 6452 1 2025-12-13 07:44:18.842 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:51300 10 6452 1 2025-12-13 07:45:19.266 00:00:11.079 TCP 1.101.0.1:3000 -> 23.104.0.1:33446 10 6452 1 2025-12-13 07:46:17.444 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 07:46:17.234 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 07:46:17.311 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:46:17.163 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:46:17.362 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:46:20.393 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50038 10 6452 1 2025-12-13 07:47:20.756 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45086 10 6452 1 2025-12-13 07:48:21.150 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36124 10 6452 1 2025-12-13 07:45:15.300 00:05:02.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 07:45:15.303 00:05:02.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 07:49:21.505 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:45328 12 10369 1 2025-12-13 07:50:21.946 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53314 10 6452 1 2025-12-13 07:51:17.288 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 07:51:17.197 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 07:51:17.419 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:51:17.366 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:51:17.206 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:51:22.352 00:00:11.069 TCP 1.101.0.1:3000 -> 23.104.0.1:37064 10 6452 1 2025-12-13 07:52:23.457 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53922 10 6452 1 2025-12-13 07:53:23.860 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:34558 10 6452 1 2025-12-13 07:54:24.236 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47932 10 6452 1 2025-12-13 07:51:15.302 00:05:02.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-13 07:51:15.304 00:05:02.388 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-13 07:55:24.642 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52582 10 6452 1 2025-12-13 07:56:17.630 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-13 07:56:17.794 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-13 07:56:17.800 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-13 07:56:17.647 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:56:17.547 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-13 07:56:25.052 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:56812 10 6452 1 2025-12-13 07:57:25.447 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48692 10 6452 1 2025-12-13 07:58:25.842 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:51912 10 6452 1 Summary: total flows: 140, total bytes: 424840, total packets: 1024, avg bps: 923, avg pps: 0, avg bpp: 414 Time window: 2025-12-13 06:57:15 - 2025-12-13 07:58:36 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0047s User: 0.0016s Wall: 0.0023s flows/second: 60925.8 Runtime: 0.0023s