Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 17:58:42.280 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46632 10 6452 1 2025-12-03 17:59:42.679 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51544 10 6452 1 2025-12-03 18:00:43.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38908 10 6452 1 2025-12-03 18:01:40.627 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:01:40.696 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:01:40.665 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:01:40.532 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:01:40.616 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:01:43.513 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:49156 10 6452 1 2025-12-03 17:58:10.272 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:58:10.270 00:05:02.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:02:43.937 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45412 10 6452 1 2025-12-03 18:03:44.355 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46550 10 6452 1 2025-12-03 18:04:44.762 00:00:10.647 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 2025-12-03 18:05:45.447 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36646 10 6452 1 2025-12-03 18:06:41.126 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:06:41.054 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:06:41.010 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:06:40.978 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:06:41.044 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:06:45.849 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60076 10 6452 1 2025-12-03 18:07:46.265 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52644 10 6452 1 2025-12-03 18:04:10.275 00:05:02.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:04:10.273 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:08:46.670 00:00:14.212 TCP 1.101.0.1:3000 -> 23.104.0.1:56312 10 6452 1 2025-12-03 18:09:50.928 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53250 10 6452 1 2025-12-03 18:10:51.341 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:49064 10 6452 1 2025-12-03 18:11:41.020 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:11:40.867 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:11:40.988 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:11:40.778 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:11:40.861 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:11:51.700 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43170 10 6452 1 2025-12-03 18:12:52.064 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:60326 12 10369 1 2025-12-03 18:13:52.541 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40382 10 6452 1 2025-12-03 18:10:10.275 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:10:10.278 00:05:02.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:14:52.942 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40184 10 6452 1 2025-12-03 18:15:53.358 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57810 10 6452 1 2025-12-03 18:16:40.940 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:16:40.764 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:16:40.769 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:16:40.885 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:16:40.857 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:16:53.721 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60520 10 6452 1 2025-12-03 18:17:54.136 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58390 10 6452 1 2025-12-03 18:18:54.497 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45142 10 6452 1 2025-12-03 18:19:54.903 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35080 10 6452 1 2025-12-03 18:16:10.276 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:16:10.279 00:05:02.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:20:55.327 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48228 10 6452 1 2025-12-03 18:21:41.550 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:21:41.534 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:21:41.590 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:21:40.840 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:21:41.467 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:21:55.683 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55574 10 6452 1 2025-12-03 18:22:56.115 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46504 10 6452 1 2025-12-03 18:23:56.521 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57936 11 6492 1 2025-12-03 18:24:56.931 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:60482 10 6452 1 2025-12-03 18:25:57.363 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43742 10 6452 1 2025-12-03 18:22:10.281 00:05:02.160 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:22:10.277 00:05:02.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:26:41.323 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:26:41.240 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:26:41.147 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:26:41.132 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:26:40.940 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:26:57.762 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35584 10 6452 1 2025-12-03 18:27:58.175 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50814 10 6452 1 2025-12-03 18:28:58.577 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56194 10 6452 1 2025-12-03 18:29:58.982 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52276 10 6452 1 2025-12-03 18:30:59.393 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55456 10 6452 1 2025-12-03 18:31:41.310 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:31:41.186 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:31:41.280 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:31:41.266 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:31:41.348 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:31:59.797 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46064 10 6452 1 2025-12-03 18:28:10.281 00:05:02.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:28:10.279 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:33:00.221 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-12-03 18:34:00.632 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51654 10 6452 1 2025-12-03 18:35:01.039 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49704 10 6452 1 2025-12-03 18:36:01.445 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34726 10 6452 1 2025-12-03 18:36:41.382 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:36:41.356 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:36:41.470 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:36:41.392 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:36:41.553 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:37:01.849 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:44360 10 6452 1 2025-12-03 18:38:02.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35404 10 6452 1 2025-12-03 18:34:10.283 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:34:10.280 00:05:02.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:39:02.678 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43594 10 6452 1 2025-12-03 18:40:03.114 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 10 6452 1 2025-12-03 18:41:03.518 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41478 10 6452 1 2025-12-03 18:41:41.663 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:41:41.578 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:41:41.730 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:41:41.792 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:41:41.580 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:42:03.930 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36742 10 6452 1 2025-12-03 18:43:04.354 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50100 10 6452 1 2025-12-03 18:40:10.282 00:05:02.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:40:10.283 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:44:04.756 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48362 10 6452 1 2025-12-03 18:45:05.169 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46176 10 6452 1 2025-12-03 18:46:05.569 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37782 10 6452 1 2025-12-03 18:46:41.727 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:46:41.341 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:46:41.452 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:46:41.645 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:46:41.526 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:47:05.970 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58914 10 6452 1 2025-12-03 18:48:06.376 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:42226 10 6452 1 2025-12-03 18:49:06.742 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38852 10 6452 1 2025-12-03 18:46:10.282 00:05:02.172 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:46:10.285 00:05:02.166 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:50:07.140 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46130 10 6452 1 2025-12-03 18:51:07.547 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34332 10 6452 1 2025-12-03 18:51:41.524 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:51:41.634 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:51:41.818 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:51:41.605 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:51:41.444 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:52:07.958 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34296 10 6452 1 2025-12-03 18:53:08.364 00:00:20.233 TCP 1.101.0.1:3000 -> 23.104.0.1:34596 10 6452 1 2025-12-03 18:54:18.638 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:51018 10 6452 1 2025-12-03 18:55:19.034 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48138 10 6452 1 2025-12-03 18:52:10.285 00:05:02.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:52:10.287 00:05:02.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:56:19.440 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34110 10 6452 1 2025-12-03 18:56:41.787 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:56:41.525 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:56:41.668 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:56:41.835 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:56:41.917 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:57:19.847 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42180 10 6452 1 2025-12-03 18:58:20.269 00:00:11.028 TCP 1.101.0.1:3000 -> 23.104.0.1:38912 10 6452 1 Summary: total flows: 140, total bytes: 420957, total packets: 1023, avg bps: 930, avg pps: 0, avg bpp: 411 Time window: 2025-12-03 17:58:10 - 2025-12-03 18:58:31 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0066s User: 0.0000s Wall: 0.0023s flows/second: 60605.1 Runtime: 0.0023s