Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-28 00:59:01.295 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35658 10 6452 1 2025-12-28 01:00:01.698 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51176 10 6452 1 2025-12-28 01:01:02.106 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54064 10 6452 1 2025-12-28 00:57:22.977 00:05:02.655 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 00:57:22.976 00:05:02.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 01:02:02.468 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37680 10 6452 1 2025-12-28 01:03:02.870 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43090 10 6452 1 2025-12-28 01:03:22.270 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:03:22.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:03:22.212 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:03:22.273 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:03:22.355 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:04:03.237 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45678 10 6452 1 2025-12-28 01:05:03.647 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34846 10 6452 1 2025-12-28 01:06:04.011 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58902 10 6452 1 2025-12-28 01:07:04.426 00:00:10.485 TCP 1.101.0.1:3000 -> 23.104.0.1:47644 10 6452 1 2025-12-28 01:03:22.975 00:05:02.657 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 01:03:22.973 00:05:02.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 01:08:04.963 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38254 10 6452 1 2025-12-28 01:08:22.138 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:08:22.411 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:08:22.303 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:08:22.365 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:08:22.447 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:09:05.368 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58954 10 6452 1 2025-12-28 01:10:05.777 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:47778 10 6452 1 2025-12-28 01:11:06.150 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45920 10 6452 1 2025-12-28 01:12:06.558 00:00:10.620 TCP 1.101.0.1:3000 -> 23.104.0.1:51618 10 6452 1 2025-12-28 01:13:07.215 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37160 10 6452 1 2025-12-28 01:13:22.520 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:13:22.442 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:13:22.538 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:13:22.520 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:13:22.602 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:09:22.977 00:05:02.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 01:09:22.976 00:05:02.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 01:14:07.619 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34130 10 6452 1 2025-12-28 01:15:07.981 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45186 10 6452 1 2025-12-28 01:16:08.395 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46834 10 6452 1 2025-12-28 01:17:08.797 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57656 10 6452 1 2025-12-28 01:18:09.200 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51772 10 6452 1 2025-12-28 01:18:22.522 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:18:22.585 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:18:22.441 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:18:22.584 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:18:22.668 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:19:09.600 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38660 10 6452 1 2025-12-28 01:15:22.979 00:05:02.661 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 01:15:22.982 00:05:02.656 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 01:20:10.007 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60288 10 6452 1 2025-12-28 01:21:10.409 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34596 10 6452 1 2025-12-28 01:22:10.822 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42448 10 6452 1 2025-12-28 01:23:22.788 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:23:22.772 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:23:11.229 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41092 10 6452 1 2025-12-28 01:23:22.876 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:23:22.561 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:23:22.871 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:24:11.635 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56670 10 6452 1 2025-12-28 01:25:12.004 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50144 10 6452 1 2025-12-28 01:21:22.983 00:05:02.656 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 01:21:22.980 00:05:02.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 01:26:12.373 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41082 10 6452 1 2025-12-28 01:27:12.776 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41522 10 6452 1 2025-12-28 01:28:22.828 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:28:22.744 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:28:22.745 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:28:22.833 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:28:22.744 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:28:13.187 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:56106 10 6452 1 2025-12-28 01:29:13.620 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54402 10 6452 1 2025-12-28 01:30:14.024 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58814 10 6452 1 2025-12-28 01:31:14.428 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37886 10 6452 1 2025-12-28 01:27:22.981 00:05:02.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 01:27:22.983 00:05:02.657 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 01:32:14.837 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:50276 10 6452 1 2025-12-28 01:33:22.997 00:00:00.039 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:33:22.960 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:33:22.729 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:33:22.865 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:33:23.080 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:33:15.218 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38652 10 6452 1 2025-12-28 01:34:15.623 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:44986 11 6504 1 2025-12-28 01:35:16.099 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52380 10 6452 1 2025-12-28 01:36:16.510 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54536 10 6452 1 2025-12-28 01:33:22.984 00:05:02.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 01:37:16.875 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52332 10 6452 1 2025-12-28 01:33:22.981 00:05:02.668 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 01:38:22.959 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:38:22.794 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:38:23.134 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:38:22.830 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:38:22.875 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:38:17.284 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48800 10 6452 1 2025-12-28 01:39:17.696 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34350 10 6452 1 2025-12-28 01:40:18.069 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40858 10 6452 1 2025-12-28 01:41:18.474 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34122 10 6452 1 2025-12-28 01:42:18.882 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:44006 10 6452 1 2025-12-28 01:43:23.052 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:43:23.058 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:43:22.908 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:43:23.052 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:43:19.271 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41418 10 6452 1 2025-12-28 01:39:22.985 00:05:02.665 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 01:43:23.133 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:39:22.982 00:05:02.671 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 01:44:19.678 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43748 10 6452 1 2025-12-28 01:45:20.109 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:44956 10 6452 1 2025-12-28 01:46:20.475 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48528 10 6452 1 2025-12-28 01:47:20.832 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:36640 12 10369 1 2025-12-28 01:48:24.254 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:48:24.237 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:48:23.898 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:48:24.252 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:48:24.336 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:48:21.309 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36292 10 6452 1 2025-12-28 01:45:22.989 00:05:02.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 01:45:22.988 00:05:02.667 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 01:49:21.707 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38978 10 6452 1 2025-12-28 01:50:22.107 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50568 10 6452 1 2025-12-28 01:51:22.474 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34038 10 6452 1 2025-12-28 01:52:22.878 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37860 10 6452 1 2025-12-28 01:53:23.803 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:53:23.944 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:53:24.103 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:53:24.095 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:53:24.184 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:53:23.283 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50102 10 6452 1 2025-12-28 01:54:23.643 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54418 10 6452 1 2025-12-28 01:51:22.991 00:05:02.664 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-28 01:51:22.988 00:05:02.669 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-28 01:55:24.107 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48468 10 6452 1 2025-12-28 01:56:24.524 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33238 10 6452 1 2025-12-28 01:57:24.890 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:33764 12 6556 1 2025-12-28 01:58:23.311 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-28 01:58:23.383 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-28 01:58:23.323 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:58:23.299 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-28 01:58:23.381 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-28 01:58:25.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48666 10 6452 1 Summary: total flows: 140, total bytes: 421073, total packets: 1025, avg bps: 917, avg pps: 0, avg bpp: 410 Time window: 2025-12-28 00:57:22 - 2025-12-28 01:58:35 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0046s User: 0.0023s Wall: 0.0024s flows/second: 57170.9 Runtime: 0.0025s