Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 08:58:43.442 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33022 10 6452 1 2025-12-03 08:59:43.852 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49622 10 6452 1 2025-12-03 09:00:44.260 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44338 10 6452 1 2025-12-03 09:01:29.750 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:01:29.770 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:01:29.606 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:01:29.844 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:01:29.927 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:01:44.673 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46778 10 6452 1 2025-12-03 08:58:10.103 00:05:02.172 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 08:58:10.105 00:05:02.167 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 09:02:45.034 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36588 10 6452 1 2025-12-03 09:03:45.442 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38314 10 6452 1 2025-12-03 09:04:45.809 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50762 10 6452 1 2025-12-03 09:05:46.224 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60942 10 6452 1 2025-12-03 09:06:29.864 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:06:29.927 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:06:29.833 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:06:29.864 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:06:29.947 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:06:46.631 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34748 10 6452 1 2025-12-03 09:07:47.040 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47520 12 6556 1 2025-12-03 09:04:10.104 00:05:02.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 09:04:10.106 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 09:08:47.440 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47890 10 6452 1 2025-12-03 09:09:47.807 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42916 10 6452 1 2025-12-03 09:10:48.219 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52826 10 6452 1 2025-12-03 09:11:29.966 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:11:29.888 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:11:29.961 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:11:30.062 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:11:30.044 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:11:48.576 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33758 10 6452 1 2025-12-03 09:12:48.980 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58312 10 6452 1 2025-12-03 09:13:49.351 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48676 10 6452 1 2025-12-03 09:10:10.106 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 09:10:10.105 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 09:14:49.757 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:58544 10 6452 1 2025-12-03 09:15:50.132 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42354 10 6452 1 2025-12-03 09:16:30.011 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:16:30.146 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:16:30.166 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:16:30.267 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:16:30.349 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:16:50.536 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:45968 10 6452 1 2025-12-03 09:17:50.988 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44368 10 6452 1 2025-12-03 09:18:51.402 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:57618 10 6452 1 2025-12-03 09:19:51.780 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33126 10 6452 1 2025-12-03 09:16:10.110 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 09:16:10.106 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 09:20:52.191 00:00:10.800 TCP 1.101.0.1:3000 -> 23.104.0.1:50958 10 6452 1 2025-12-03 09:21:29.916 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:21:30.342 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:21:30.095 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:21:30.186 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:21:30.259 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:21:53.037 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49356 10 6452 1 2025-12-03 09:22:53.435 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:58902 10 6452 1 2025-12-03 09:23:53.881 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44790 10 6452 1 2025-12-03 09:24:54.238 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53010 10 6452 1 2025-12-03 09:25:54.651 00:00:10.493 TCP 1.101.0.1:3000 -> 23.104.0.1:52344 10 6452 1 2025-12-03 09:22:10.111 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 09:22:10.110 00:05:02.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 09:26:30.712 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:26:30.713 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:26:30.711 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:26:30.655 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:26:30.796 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:26:55.190 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44934 10 6452 1 2025-12-03 09:27:55.590 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60582 10 6452 1 2025-12-03 09:28:55.956 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42226 10 6452 1 2025-12-03 09:29:56.368 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36818 10 6452 1 2025-12-03 09:30:56.773 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60470 10 6452 1 2025-12-03 09:31:30.556 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:31:30.538 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:31:30.427 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:31:30.474 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:31:30.477 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:31:57.183 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54476 10 6452 1 2025-12-03 09:28:10.115 00:05:02.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 09:28:10.113 00:05:02.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 09:32:57.543 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47152 10 6452 1 2025-12-03 09:33:57.946 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:50926 10 6452 1 2025-12-03 09:34:58.319 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57664 10 6452 1 2025-12-03 09:35:58.721 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52670 10 6452 1 2025-12-03 09:36:30.687 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:36:30.606 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:36:30.554 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:36:30.606 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:36:30.648 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:36:59.129 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39292 10 6452 1 2025-12-03 09:37:59.494 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:42288 12 10375 1 2025-12-03 09:34:10.116 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 09:34:10.114 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 09:38:59.978 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:50764 10 6452 1 2025-12-03 09:40:00.343 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44640 10 6452 1 2025-12-03 09:41:00.746 00:00:10.864 TCP 1.101.0.1:3000 -> 23.104.0.1:38484 10 6452 1 2025-12-03 09:41:30.703 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:41:30.455 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:41:30.758 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:41:30.609 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:41:30.840 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:42:01.654 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:41516 10 6452 1 2025-12-03 09:43:02.106 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40922 10 6452 1 2025-12-03 09:44:02.503 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53330 10 6452 1 2025-12-03 09:40:10.119 00:05:02.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 09:40:10.116 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 09:45:02.907 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52650 10 6452 1 2025-12-03 09:46:03.320 00:00:11.252 TCP 1.101.0.1:3000 -> 23.104.0.1:58806 10 6452 1 2025-12-03 09:46:30.846 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:46:30.843 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:46:30.584 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:46:30.786 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:46:30.868 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:47:04.614 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49108 10 6452 1 2025-12-03 09:48:04.978 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59898 10 6452 1 2025-12-03 09:49:05.388 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51302 10 6452 1 2025-12-03 09:46:10.118 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 09:46:10.119 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 09:50:05.794 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41132 10 6452 1 2025-12-03 09:51:06.205 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49830 10 6452 1 2025-12-03 09:51:30.964 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:51:31.138 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:51:30.881 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:51:30.962 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:51:31.045 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:52:06.608 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46680 10 6452 1 2025-12-03 09:53:07.012 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:50706 11 6504 1 2025-12-03 09:54:07.475 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60314 10 6452 1 2025-12-03 09:55:07.881 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:39516 10 6452 1 2025-12-03 09:52:10.128 00:05:02.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 09:52:10.119 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 09:56:08.244 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46926 10 6452 1 2025-12-03 09:56:31.131 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 09:56:30.979 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 09:56:30.896 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 09:56:30.940 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:56:31.048 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 09:57:08.610 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57746 10 6452 1 2025-12-03 09:58:09.016 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51244 10 6452 1 Summary: total flows: 140, total bytes: 421079, total packets: 1025, avg bps: 933, avg pps: 0, avg bpp: 410 Time window: 2025-12-03 08:58:10 - 2025-12-03 09:58:19 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0047s User: 0.0012s Wall: 0.0013s flows/second: 108862.2 Runtime: 0.0013s