Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-14 17:59:01.704 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33184 10 6452 1 2025-12-14 18:00:02.110 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:43450 12 10375 1 2025-12-14 18:01:02.592 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47458 10 6452 1 2025-12-14 17:57:16.086 00:05:02.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-14 17:57:16.083 00:05:02.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-14 18:01:58.814 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:01:58.599 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:01:58.712 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:01:58.576 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:01:58.731 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:02:03.001 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47936 10 6452 1 2025-12-14 18:03:03.408 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52730 10 6452 1 2025-12-14 18:04:03.812 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57316 10 6452 1 2025-12-14 18:05:04.220 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:53632 10 6452 1 2025-12-14 18:06:04.600 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33892 10 6452 1 2025-12-14 18:06:58.534 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:06:58.533 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:06:58.375 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:06:58.537 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:06:58.620 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:07:05.014 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51014 10 6452 1 2025-12-14 18:03:16.087 00:05:02.403 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-14 18:03:16.083 00:05:02.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-14 18:08:05.416 00:00:10.653 TCP 1.101.0.1:3000 -> 23.104.0.1:51516 10 6452 1 2025-12-14 18:09:06.113 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47624 10 6452 1 2025-12-14 18:10:06.520 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:55678 12 10375 1 2025-12-14 18:11:07.002 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48554 10 6452 1 2025-12-14 18:11:58.657 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:11:58.714 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:11:58.671 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:11:58.652 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:11:58.735 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:12:07.413 00:00:10.779 TCP 1.101.0.1:3000 -> 23.104.0.1:48822 10 6452 1 2025-12-14 18:13:08.230 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38586 10 6452 1 2025-12-14 18:09:16.086 00:05:02.404 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-14 18:09:16.084 00:05:02.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-14 18:14:08.636 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54024 10 6452 1 2025-12-14 18:15:09.058 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53160 10 6452 1 2025-12-14 18:16:09.428 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46756 10 6452 1 2025-12-14 18:16:58.848 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:16:58.766 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:16:58.873 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:16:58.589 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:16:58.434 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:17:09.830 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46302 10 6452 1 2025-12-14 18:18:10.232 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49674 10 6452 1 2025-12-14 18:15:16.086 00:05:02.410 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-14 18:15:16.088 00:05:02.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-14 18:19:10.631 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44310 10 6452 1 2025-12-14 18:20:11.043 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58296 10 6452 1 2025-12-14 18:21:11.443 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42408 10 6452 1 2025-12-14 18:21:58.887 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:21:58.822 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:21:58.865 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:21:59.137 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:21:59.220 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:22:11.808 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44812 10 6452 1 2025-12-14 18:23:12.214 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50134 10 6452 1 2025-12-14 18:24:12.617 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49680 10 6452 1 2025-12-14 18:21:16.087 00:05:02.410 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-14 18:21:16.090 00:05:02.406 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-14 18:25:13.031 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56298 10 6452 1 2025-12-14 18:26:13.445 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:59484 10 6452 1 2025-12-14 18:26:58.951 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:26:58.890 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:26:58.878 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:26:58.629 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:26:59.034 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:27:13.859 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57050 10 6452 1 2025-12-14 18:28:14.274 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46794 10 6452 1 2025-12-14 18:29:14.676 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40672 10 6452 1 2025-12-14 18:30:15.105 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60180 10 6452 1 2025-12-14 18:27:16.093 00:05:02.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-14 18:27:16.089 00:05:02.410 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-14 18:31:15.509 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60458 10 6452 1 2025-12-14 18:31:59.116 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:31:58.978 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:31:59.182 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:31:58.986 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:31:59.067 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:32:15.938 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33456 10 6452 1 2025-12-14 18:33:16.354 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47226 10 6452 1 2025-12-14 18:34:16.757 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52828 10 6452 1 2025-12-14 18:35:17.170 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50192 10 6452 1 2025-12-14 18:36:17.569 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57166 10 6452 1 2025-12-14 18:36:59.522 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:36:59.764 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:36:59.193 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:36:59.656 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:36:59.739 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:33:16.090 00:05:02.411 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-14 18:33:16.092 00:05:02.406 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-14 18:37:17.933 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:47072 10 6452 1 2025-12-14 18:38:18.366 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:45012 10 6452 1 2025-12-14 18:39:18.720 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 10 6452 1 2025-12-14 18:40:19.131 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33794 10 6452 1 2025-12-14 18:41:19.533 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45452 10 6452 1 2025-12-14 18:41:59.434 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:41:59.365 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:41:59.346 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:41:59.076 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:41:59.159 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:42:19.937 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:45556 10 6452 1 2025-12-14 18:39:16.091 00:05:02.413 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-14 18:39:16.092 00:05:02.408 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-14 18:43:20.357 00:00:11.661 TCP 1.101.0.1:3000 -> 23.104.0.1:35686 10 6452 1 2025-12-14 18:44:22.066 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47916 10 6452 1 2025-12-14 18:45:22.467 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46422 10 6452 1 2025-12-14 18:46:22.864 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48484 10 6452 1 2025-12-14 18:46:59.454 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:46:59.490 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:46:59.072 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:46:59.449 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:46:59.532 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:47:23.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37352 10 6452 1 2025-12-14 18:48:23.673 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42290 10 6452 1 2025-12-14 18:45:16.096 00:05:02.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-14 18:45:16.099 00:05:02.404 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-14 18:49:24.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40810 10 6452 1 2025-12-14 18:50:24.518 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43846 10 6452 1 2025-12-14 18:51:24.918 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48506 10 6452 1 2025-12-14 18:51:59.482 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:51:59.580 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:51:59.367 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:51:59.580 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:51:59.663 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:52:25.318 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48432 10 6452 1 2025-12-14 18:53:25.677 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37806 10 6452 1 2025-12-14 18:54:26.039 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:51012 12 10369 1 2025-12-14 18:51:16.096 00:05:02.410 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-14 18:51:16.100 00:05:02.404 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-14 18:55:26.519 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53850 10 6452 1 2025-12-14 18:56:26.920 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50672 10 6452 1 2025-12-14 18:56:59.806 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-14 18:56:59.595 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-14 18:56:59.664 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-14 18:56:59.312 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:56:59.723 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-14 18:57:27.330 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45086 10 6452 1 2025-12-14 18:58:27.735 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59654 10 6452 1 Summary: total flows: 140, total bytes: 428763, total packets: 1026, avg bps: 931, avg pps: 0, avg bpp: 417 Time window: 2025-12-14 17:57:16 - 2025-12-14 18:58:38 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0042s User: 0.0010s Wall: 0.0019s flows/second: 74470.8 Runtime: 0.0019s