Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 16:59:11.357 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51286 10 6452 1 2025-12-03 17:00:11.761 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:41260 10 6452 1 2025-12-03 17:01:12.135 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49866 10 6452 1 2025-12-03 17:01:39.742 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:01:39.654 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:01:39.652 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:01:39.743 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:01:39.659 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 16:58:10.248 00:05:02.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 16:58:10.251 00:05:02.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:02:12.534 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50118 10 6452 1 2025-12-03 17:03:12.934 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:60172 12 10375 1 2025-12-03 17:04:13.427 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57798 10 6452 1 2025-12-03 17:05:13.841 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:52802 10 6452 1 2025-12-03 17:06:14.279 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39980 10 6452 1 2025-12-03 17:06:39.512 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:06:39.682 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:06:39.633 00:00:00.014 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:06:39.584 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:06:39.668 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:07:14.689 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44282 10 6452 1 2025-12-03 17:04:10.251 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:04:10.249 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:08:15.111 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34338 10 6452 1 2025-12-03 17:09:15.530 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47738 10 6452 1 2025-12-03 17:10:15.891 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42524 12 6556 1 2025-12-03 17:11:16.309 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33818 10 6452 1 2025-12-03 17:11:39.611 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:11:39.409 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:11:39.670 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:11:39.622 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:11:39.704 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:12:16.725 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54384 10 6452 1 2025-12-03 17:13:17.136 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49178 10 6452 1 2025-12-03 17:10:10.252 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:10:10.251 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:14:17.539 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40806 10 6452 1 2025-12-03 17:15:17.963 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53792 10 6452 1 2025-12-03 17:16:18.369 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34396 10 6452 1 2025-12-03 17:16:39.928 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:16:39.848 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:16:39.882 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:16:39.669 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:16:39.846 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:17:18.774 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54356 10 6452 1 2025-12-03 17:18:19.175 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50420 10 6452 1 2025-12-03 17:19:19.582 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34440 10 6452 1 2025-12-03 17:16:10.257 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:16:10.255 00:05:02.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:20:19.985 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33042 10 6452 1 2025-12-03 17:21:20.398 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33616 10 6452 1 2025-12-03 17:21:39.851 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:21:39.784 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:21:39.773 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:21:39.977 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:21:40.061 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:22:20.810 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49620 10 6452 1 2025-12-03 17:23:21.215 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-12-03 17:24:21.622 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52564 10 6452 1 2025-12-03 17:25:22.026 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53454 10 6452 1 2025-12-03 17:22:10.257 00:05:02.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:22:10.261 00:05:02.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:26:22.389 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48748 10 6452 1 2025-12-03 17:26:39.816 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:26:40.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:26:40.111 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:26:40.012 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:26:40.094 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:27:22.788 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34832 10 6452 1 2025-12-03 17:28:23.190 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41768 10 6452 1 2025-12-03 17:29:23.604 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34048 10 6452 1 2025-12-03 17:30:24.020 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53792 10 6452 1 2025-12-03 17:31:24.429 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35712 10 6452 1 2025-12-03 17:31:39.925 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:31:40.185 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:31:40.102 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:31:40.215 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:31:40.184 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:28:10.258 00:05:02.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:28:10.261 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:32:24.832 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45862 10 6452 1 2025-12-03 17:33:25.243 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35288 10 6452 1 2025-12-03 17:34:25.651 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60296 10 6452 1 2025-12-03 17:35:26.058 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53642 10 6452 1 2025-12-03 17:36:39.820 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:36:26.464 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57450 10 6452 1 2025-12-03 17:36:40.222 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:36:40.177 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:36:40.102 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:36:40.184 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:37:26.875 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57552 10 6452 1 2025-12-03 17:34:10.263 00:05:02.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:34:10.265 00:05:02.166 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:38:27.286 00:00:11.073 TCP 1.101.0.1:3000 -> 23.104.0.1:48412 12 10375 1 2025-12-03 17:39:28.403 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56148 10 6452 1 2025-12-03 17:40:28.801 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43464 10 6452 1 2025-12-03 17:41:29.210 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42424 10 6452 1 2025-12-03 17:41:40.780 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:41:40.790 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:41:40.782 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:41:40.626 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:41:40.865 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:42:29.610 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44906 10 6452 1 2025-12-03 17:43:30.013 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45200 10 6452 1 2025-12-03 17:40:10.263 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:40:10.267 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:44:30.419 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53132 10 6452 1 2025-12-03 17:45:30.829 00:00:10.968 TCP 1.101.0.1:3000 -> 23.104.0.1:35004 10 6452 1 2025-12-03 17:46:40.359 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:46:40.356 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:46:40.266 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:46:40.263 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:46:31.830 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52970 10 6452 1 2025-12-03 17:46:40.346 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:47:32.240 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60236 10 6452 1 2025-12-03 17:48:32.643 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56716 10 6452 1 2025-12-03 17:49:33.054 00:00:15.929 TCP 1.101.0.1:3000 -> 23.104.0.1:35012 10 6452 1 2025-12-03 17:46:10.266 00:05:02.167 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:46:10.263 00:05:02.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:50:39.023 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52644 10 6452 1 2025-12-03 17:51:40.304 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:51:40.317 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:51:40.496 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:51:40.521 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:51:40.221 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:51:39.390 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 10 6452 1 2025-12-03 17:52:39.794 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:33968 12 10375 1 2025-12-03 17:53:40.267 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38316 10 6452 1 2025-12-03 17:54:40.670 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52442 10 6452 1 2025-12-03 17:55:41.038 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53952 10 6452 1 2025-12-03 17:52:10.270 00:05:02.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:52:10.269 00:05:02.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:56:40.571 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:56:40.695 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:56:40.479 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:56:40.468 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:56:40.552 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:56:41.444 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49308 10 6452 1 2025-12-03 17:57:41.850 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:34008 10 6452 1 Summary: total flows: 139, total bytes: 422421, total packets: 1018, avg bps: 943, avg pps: 0, avg bpp: 414 Time window: 2025-12-03 16:58:10 - 2025-12-03 17:57:52 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0020s Wall: 0.0019s flows/second: 72504.4 Runtime: 0.0019s