Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-16 17:59:09.035 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57960 10 6452 1 2025-12-16 18:00:09.443 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40934 10 6452 1 2025-12-16 17:57:17.071 00:05:02.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-16 17:57:17.076 00:05:02.477 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-16 18:01:09.848 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:34424 10 6452 1 2025-12-16 18:02:10.235 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53920 10 6452 1 2025-12-16 18:02:56.376 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:02:56.224 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:02:56.301 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:02:56.057 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:02:56.294 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:03:10.596 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57142 10 6452 1 2025-12-16 18:04:10.996 00:00:10.875 TCP 1.101.0.1:3000 -> 23.104.0.1:35952 10 6452 1 2025-12-16 18:05:11.906 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47056 10 6452 1 2025-12-16 18:06:12.278 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58796 10 6452 1 2025-12-16 18:03:17.075 00:05:02.479 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-16 18:07:12.678 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48062 10 6452 1 2025-12-16 18:03:17.074 00:05:02.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-16 18:07:56.363 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:07:56.344 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:07:56.074 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:07:56.375 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:07:56.280 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:08:13.108 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59682 10 6452 1 2025-12-16 18:09:13.516 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59568 10 6452 1 2025-12-16 18:10:13.918 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46242 10 6452 1 2025-12-16 18:11:14.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39892 10 6452 1 2025-12-16 18:12:14.727 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40904 10 6452 1 2025-12-16 18:12:56.582 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:12:56.335 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:12:56.524 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:12:56.576 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:12:56.659 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:09:17.076 00:05:02.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-16 18:09:17.077 00:05:02.478 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-16 18:13:15.141 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41690 10 6452 1 2025-12-16 18:14:15.513 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57606 10 6452 1 2025-12-16 18:15:15.923 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55280 10 6452 1 2025-12-16 18:16:16.326 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:33018 10 6452 1 2025-12-16 18:17:16.710 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47354 10 6452 1 2025-12-16 18:17:56.632 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:17:56.551 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:17:56.288 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:17:56.288 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:17:56.550 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:18:17.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46234 10 6452 1 2025-12-16 18:15:17.079 00:05:02.481 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-16 18:15:17.076 00:05:02.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-16 18:19:17.516 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46054 10 6452 1 2025-12-16 18:20:17.879 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33420 10 6452 1 2025-12-16 18:21:18.288 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58536 11 6504 1 2025-12-16 18:22:18.700 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53756 10 6452 1 2025-12-16 18:22:57.036 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:22:56.672 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:22:56.687 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:22:56.484 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:22:56.954 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:23:19.113 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54610 10 6452 1 2025-12-16 18:24:19.482 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33188 10 6452 1 2025-12-16 18:21:17.078 00:05:02.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-16 18:21:17.081 00:05:02.481 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-16 18:25:19.893 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34934 10 6452 1 2025-12-16 18:26:20.309 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52276 10 6452 1 2025-12-16 18:27:20.709 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56018 10 6452 1 2025-12-16 18:27:56.700 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:27:56.703 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:27:56.724 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:27:56.826 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:27:56.908 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:28:21.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33794 10 6452 1 2025-12-16 18:29:21.510 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:45522 10 6452 1 2025-12-16 18:30:21.887 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:55718 14 10473 1 2025-12-16 18:27:17.079 00:05:02.487 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-16 18:27:17.083 00:05:02.482 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-16 18:31:22.370 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40420 10 6452 1 2025-12-16 18:32:22.727 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49910 10 6452 1 2025-12-16 18:32:56.665 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:32:56.889 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:32:56.667 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:32:56.869 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:32:56.951 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:33:23.145 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41580 10 6452 1 2025-12-16 18:34:23.510 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49948 10 6452 1 2025-12-16 18:35:23.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58124 10 6452 1 2025-12-16 18:36:24.321 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38262 10 6452 1 2025-12-16 18:33:17.084 00:05:02.483 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-16 18:33:17.080 00:05:02.487 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-16 18:37:24.684 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45026 10 6452 1 2025-12-16 18:37:56.902 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:37:56.746 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:37:56.964 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:37:56.764 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:37:56.820 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:38:25.109 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59406 10 6452 1 2025-12-16 18:39:25.513 00:00:11.696 TCP 1.101.0.1:3000 -> 23.104.0.1:42976 10 6452 1 2025-12-16 18:40:27.247 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51344 10 6452 1 2025-12-16 18:41:27.655 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57390 10 6452 1 2025-12-16 18:42:28.062 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41616 10 6452 1 2025-12-16 18:42:57.003 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:42:56.931 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:42:56.919 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:42:56.956 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:42:56.919 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:39:17.082 00:05:02.489 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-16 18:39:17.085 00:05:02.484 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-16 18:43:28.428 00:00:11.067 TCP 1.101.0.1:3000 -> 23.104.0.1:51876 10 6452 1 2025-12-16 18:44:29.534 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42940 10 6452 1 2025-12-16 18:45:29.902 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49902 10 6452 1 2025-12-16 18:46:30.312 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55530 10 6452 1 2025-12-16 18:47:30.718 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50534 10 6452 1 2025-12-16 18:47:57.133 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:47:57.237 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:47:57.425 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:47:57.251 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:47:57.317 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:48:31.133 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38666 10 6452 1 2025-12-16 18:45:17.094 00:05:02.477 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-16 18:45:17.090 00:05:02.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-16 18:49:31.502 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38972 10 6452 1 2025-12-16 18:50:31.919 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34780 10 6452 1 2025-12-16 18:51:32.328 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35962 10 6452 1 2025-12-16 18:52:32.726 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40032 10 6452 1 2025-12-16 18:52:57.333 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:52:57.443 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:52:57.316 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:52:57.312 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:52:57.251 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:53:33.132 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40404 10 6452 1 2025-12-16 18:54:33.548 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47350 10 6452 1 2025-12-16 18:51:17.092 00:05:02.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-16 18:51:17.093 00:05:02.478 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-16 18:55:33.913 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:46894 12 10375 1 2025-12-16 18:56:34.398 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:45724 10 6452 1 2025-12-16 18:57:34.777 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56232 10 6452 1 2025-12-16 18:57:57.515 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-16 18:57:57.521 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-16 18:57:57.368 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-16 18:57:57.381 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:57:57.433 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-16 18:58:35.184 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54330 10 6452 1 Summary: total flows: 140, total bytes: 424996, total packets: 1027, avg bps: 921, avg pps: 0, avg bpp: 413 Time window: 2025-12-16 17:57:17 - 2025-12-16 18:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0049s User: 0.0010s Wall: 0.0048s flows/second: 29386.6 Runtime: 0.0048s