Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 06:58:46.578 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38690 10 6452 1 2025-12-03 06:59:46.944 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52712 10 6452 1 2025-12-03 07:00:47.362 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40444 10 6452 1 2025-12-03 07:01:27.441 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:01:27.381 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:01:27.435 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:01:27.472 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:01:27.517 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:01:47.760 00:00:14.935 TCP 1.101.0.1:3000 -> 23.104.0.1:41224 10 6452 1 2025-12-03 06:58:10.080 00:05:02.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 06:58:10.078 00:05:02.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:02:52.746 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45788 10 6452 1 2025-12-03 07:03:53.155 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37804 10 6452 1 2025-12-03 07:04:53.566 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55038 10 6452 1 2025-12-03 07:05:53.972 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52192 10 6452 1 2025-12-03 07:06:27.629 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:06:27.626 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:06:27.461 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:06:27.574 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:06:27.657 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:06:54.397 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54148 10 6452 1 2025-12-03 07:04:10.079 00:05:02.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:07:54.798 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35876 10 6452 1 2025-12-03 07:04:10.080 00:05:02.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:08:55.207 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44382 10 6452 1 2025-12-03 07:09:55.609 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48996 10 6452 1 2025-12-03 07:10:55.967 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36986 10 6452 1 2025-12-03 07:11:27.813 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:11:27.548 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:11:27.739 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:11:27.304 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:11:27.730 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:11:56.372 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38956 10 6452 1 2025-12-03 07:12:56.774 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:60008 12 10375 1 2025-12-03 07:13:57.258 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41110 10 6452 1 2025-12-03 07:10:10.082 00:05:02.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:10:10.079 00:05:02.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:14:57.622 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52378 10 6452 1 2025-12-03 07:15:58.025 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56882 10 6452 1 2025-12-03 07:16:27.806 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:16:27.717 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:16:27.714 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:16:27.732 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:16:27.890 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:16:58.430 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36846 10 6452 1 2025-12-03 07:17:58.803 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50110 10 6452 1 2025-12-03 07:18:59.211 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35422 10 6452 1 2025-12-03 07:19:59.621 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 10 6452 1 2025-12-03 07:16:10.080 00:05:02.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:16:10.084 00:05:02.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:21:00.038 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57002 10 6452 1 2025-12-03 07:21:27.905 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:21:27.851 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:21:27.738 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:21:27.739 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:21:27.820 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:22:00.440 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47888 10 6452 1 2025-12-03 07:23:00.841 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 12 6556 1 2025-12-03 07:24:01.267 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46522 10 6452 1 2025-12-03 07:25:01.680 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51866 10 6452 1 2025-12-03 07:22:10.081 00:05:02.158 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:26:02.050 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36682 10 6452 1 2025-12-03 07:22:10.083 00:05:02.153 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:26:28.165 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:26:28.105 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:26:28.176 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:26:28.104 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:26:28.186 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:27:02.469 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57224 10 6452 1 2025-12-03 07:28:02.873 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39020 10 6452 1 2025-12-03 07:29:03.281 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45888 10 6452 1 2025-12-03 07:30:03.639 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38904 10 6452 1 2025-12-03 07:31:04.059 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58322 10 6452 1 2025-12-03 07:31:27.855 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:31:28.072 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:31:28.114 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:31:28.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:31:28.197 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:28:10.082 00:05:02.158 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:28:10.085 00:05:02.153 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:32:04.463 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37188 10 6452 1 2025-12-03 07:33:04.871 00:00:11.129 TCP 1.101.0.1:3000 -> 23.104.0.1:49996 10 6452 1 2025-12-03 07:34:06.051 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60066 10 6452 1 2025-12-03 07:35:06.411 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47030 10 6452 1 2025-12-03 07:36:06.820 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34548 10 6452 1 2025-12-03 07:36:28.184 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:36:27.808 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:36:28.087 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:36:28.134 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:36:28.101 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:37:07.237 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38046 10 6452 1 2025-12-03 07:34:10.085 00:05:02.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:34:10.083 00:05:02.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:38:07.649 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 10 6452 1 2025-12-03 07:39:08.067 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55196 10 6452 1 2025-12-03 07:40:08.433 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39572 10 6452 1 2025-12-03 07:41:08.795 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46584 10 6452 1 2025-12-03 07:41:28.396 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:41:28.199 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:41:28.263 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:41:28.361 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:41:28.443 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:42:09.205 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52478 10 6452 1 2025-12-03 07:43:09.606 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:34764 10 6452 1 2025-12-03 07:40:10.087 00:05:02.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:40:10.085 00:05:02.161 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:44:10.002 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57588 10 6452 1 2025-12-03 07:45:10.360 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46450 10 6452 1 2025-12-03 07:46:10.732 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54038 10 6452 1 2025-12-03 07:46:28.327 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:46:28.384 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:46:28.316 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:46:28.335 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:46:28.418 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:47:11.143 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58114 10 6452 1 2025-12-03 07:48:11.550 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56992 10 6452 1 2025-12-03 07:49:11.962 00:00:11.150 TCP 1.101.0.1:3000 -> 23.104.0.1:39420 10 6452 1 2025-12-03 07:46:10.089 00:05:02.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:46:10.087 00:05:02.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:50:13.149 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43054 10 6452 1 2025-12-03 07:51:13.547 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54322 10 6452 1 2025-12-03 07:51:28.401 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:51:28.403 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:51:28.110 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:51:28.404 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:51:28.487 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:52:13.953 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58230 10 6452 1 2025-12-03 07:53:14.387 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:44972 12 10369 1 2025-12-03 07:54:14.870 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55168 10 6452 1 2025-12-03 07:55:15.238 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60276 10 6452 1 2025-12-03 07:52:10.088 00:05:02.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:52:10.090 00:05:02.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:56:28.548 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:56:28.539 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:56:28.627 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:56:15.640 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36176 10 6452 1 2025-12-03 07:56:28.533 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:56:28.615 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:57:16.070 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49488 10 6452 1 2025-12-03 07:58:16.430 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47810 10 6452 1 Summary: total flows: 140, total bytes: 424944, total packets: 1026, avg bps: 939, avg pps: 0, avg bpp: 414 Time window: 2025-12-03 06:58:10 - 2025-12-03 07:58:26 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0058s User: 0.0010s Wall: 0.0021s flows/second: 66795.9 Runtime: 0.0021s