Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 05:59:20.553 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60050 10 6452 1 2025-12-03 06:00:20.958 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45030 10 6452 1 2025-12-03 06:01:26.345 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:01:26.253 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:01:26.265 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:01:26.255 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:01:26.340 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:01:21.365 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43302 10 6452 1 2025-12-03 05:58:10.061 00:05:02.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 05:58:10.065 00:05:02.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 06:02:21.768 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39994 10 6452 1 2025-12-03 06:03:22.174 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:49942 12 10369 1 2025-12-03 06:04:22.653 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57130 10 6452 1 2025-12-03 06:05:23.071 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37646 10 6452 1 2025-12-03 06:06:26.440 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:06:26.328 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:06:26.363 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:06:26.163 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:06:26.247 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:06:23.482 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49056 10 6452 1 2025-12-03 06:07:23.884 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 10 6452 1 2025-12-03 06:04:10.063 00:05:02.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 06:04:10.064 00:05:02.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 06:08:24.272 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:35432 12 10375 1 2025-12-03 06:09:24.711 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51510 10 6452 1 2025-12-03 06:10:25.103 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60942 10 6452 1 2025-12-03 06:11:26.442 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:11:26.479 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:11:26.278 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:11:26.329 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:11:26.413 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:11:25.501 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46462 10 6452 1 2025-12-03 06:12:25.908 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44792 12 6556 1 2025-12-03 06:13:26.320 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56190 10 6452 1 2025-12-03 06:10:10.067 00:05:02.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 06:10:10.065 00:05:02.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 06:14:26.685 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37478 10 6452 1 2025-12-03 06:15:27.112 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46774 10 6452 1 2025-12-03 06:16:26.510 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:16:26.581 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:16:26.632 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:16:26.552 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:16:26.592 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:16:27.517 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41322 10 6452 1 2025-12-03 06:17:27.920 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:54030 10 6452 1 2025-12-03 06:18:28.315 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36244 10 6452 1 2025-12-03 06:19:28.718 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57458 10 6452 1 2025-12-03 06:16:10.067 00:05:02.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 06:16:10.070 00:05:02.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 06:20:29.122 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54948 10 6452 1 2025-12-03 06:21:26.646 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:21:26.698 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:21:26.600 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:21:26.690 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:21:26.773 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:21:29.526 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49926 10 6452 1 2025-12-03 06:22:29.929 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:51858 10 6452 1 2025-12-03 06:23:30.354 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56002 10 6452 1 2025-12-03 06:24:30.775 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43190 10 6452 1 2025-12-03 06:25:31.187 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58116 10 6452 1 2025-12-03 06:22:10.070 00:05:02.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 06:22:10.072 00:05:02.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 06:26:26.704 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:26:26.696 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:26:26.761 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:26:26.459 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:26:26.542 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:26:31.551 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51614 10 6452 1 2025-12-03 06:27:31.954 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36266 10 6452 1 2025-12-03 06:28:32.318 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42346 10 6452 1 2025-12-03 06:29:32.718 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40422 10 6452 1 2025-12-03 06:30:33.128 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42346 10 6452 1 2025-12-03 06:31:27.279 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:31:27.068 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:31:26.944 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:31:27.131 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:31:27.196 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:31:33.533 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60098 10 6452 1 2025-12-03 06:28:10.073 00:05:02.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 06:28:10.073 00:05:02.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 06:32:33.897 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35806 10 6452 1 2025-12-03 06:33:34.311 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59548 10 6452 1 2025-12-03 06:34:34.721 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50962 10 6452 1 2025-12-03 06:35:35.135 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32992 10 6452 1 2025-12-03 06:36:27.228 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:36:26.981 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:36:26.718 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:36:27.146 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:36:26.985 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:36:35.538 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42762 10 6452 1 2025-12-03 06:37:35.949 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53320 10 6452 1 2025-12-03 06:34:10.072 00:05:02.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 06:34:10.075 00:05:02.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 06:38:36.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38418 10 6452 1 2025-12-03 06:39:36.767 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37976 10 6452 1 2025-12-03 06:40:37.188 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59210 10 6452 1 2025-12-03 06:41:27.065 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:41:27.065 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:41:26.877 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:41:26.967 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:41:27.049 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:41:37.587 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55670 10 6452 1 2025-12-03 06:42:38.003 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54980 10 6452 1 2025-12-03 06:43:38.417 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 10 6452 1 2025-12-03 06:40:10.075 00:05:02.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 06:40:10.078 00:05:02.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 06:44:38.820 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37712 10 6452 1 2025-12-03 06:45:39.230 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48814 10 6452 1 2025-12-03 06:46:27.151 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:46:27.147 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:46:27.136 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:46:27.198 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:46:27.291 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:46:39.633 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34656 10 6452 1 2025-12-03 06:47:40.041 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35192 10 6452 1 2025-12-03 06:48:40.442 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60320 10 6452 1 2025-12-03 06:49:40.852 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33034 10 6452 1 2025-12-03 06:46:10.077 00:05:02.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 06:46:10.075 00:05:02.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 06:50:41.269 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52220 10 6452 1 2025-12-03 06:51:27.398 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:51:27.528 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:51:27.311 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:51:27.398 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:51:27.481 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:51:41.672 00:00:12.484 TCP 1.101.0.1:3000 -> 23.104.0.1:35634 10 6452 1 2025-12-03 06:52:44.186 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53242 10 6452 1 2025-12-03 06:53:44.585 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47708 10 6452 1 2025-12-03 06:54:44.992 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49236 10 6452 1 2025-12-03 06:55:45.403 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50342 10 6452 1 2025-12-03 06:52:10.076 00:05:02.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 06:52:10.078 00:05:02.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 06:56:27.456 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 06:56:27.426 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 06:56:27.117 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 06:56:27.043 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:56:27.373 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 06:56:45.803 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47330 10 6452 1 2025-12-03 06:57:46.211 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56142 10 6452 1 Summary: total flows: 139, total bytes: 418492, total packets: 1016, avg bps: 933, avg pps: 0, avg bpp: 411 Time window: 2025-12-03 05:58:10 - 2025-12-03 06:57:56 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0052s User: 0.0017s Wall: 0.0020s flows/second: 70917.0 Runtime: 0.0020s