Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 21:58:40.533 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37308 10 6452 1 2025-12-03 21:59:40.935 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:32822 10 6452 1 2025-12-03 22:00:41.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44206 10 6452 1 2025-12-03 22:01:45.711 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:01:45.661 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:01:45.527 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:01:45.516 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:01:45.598 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:01:41.755 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59112 10 6452 1 2025-12-03 21:58:10.350 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 21:58:10.348 00:05:02.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 22:02:42.116 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57292 10 6452 1 2025-12-03 22:03:42.522 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38656 10 6452 1 2025-12-03 22:04:42.929 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36286 10 6452 1 2025-12-03 22:05:43.335 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38178 10 6452 1 2025-12-03 22:06:45.629 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:06:45.303 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:06:45.629 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:06:45.728 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:06:45.711 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:06:43.735 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46314 10 6452 1 2025-12-03 22:07:44.152 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48954 10 6452 1 2025-12-03 22:04:10.349 00:05:02.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 22:04:10.353 00:05:02.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 22:08:44.574 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59684 10 6452 1 2025-12-03 22:09:44.977 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36690 10 6452 1 2025-12-03 22:10:45.342 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40452 10 6452 1 2025-12-03 22:11:45.918 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:11:45.598 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:11:45.594 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:11:45.630 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:11:45.836 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:11:45.748 00:00:10.712 TCP 1.101.0.1:3000 -> 23.104.0.1:33688 10 6452 1 2025-12-03 22:12:46.499 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48970 10 6452 1 2025-12-03 22:13:46.908 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58594 10 6452 1 2025-12-03 22:10:10.352 00:05:02.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 22:10:10.355 00:05:02.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 22:14:47.313 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49106 10 6452 1 2025-12-03 22:15:47.716 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58944 10 6452 1 2025-12-03 22:16:46.335 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:16:45.972 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:16:46.345 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:16:46.204 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:16:46.287 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:16:48.104 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:42668 10 6452 1 2025-12-03 22:17:48.501 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49676 10 6452 1 2025-12-03 22:18:48.909 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60828 12 6556 1 2025-12-03 22:19:49.315 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:40464 10 6452 1 2025-12-03 22:16:10.355 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 22:16:10.353 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 22:20:49.704 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:36462 10 6452 1 2025-12-03 22:21:46.219 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:21:46.133 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:21:46.182 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:21:45.930 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:21:46.136 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:21:50.130 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53722 10 6452 1 2025-12-03 22:22:50.490 00:00:10.516 TCP 1.101.0.1:3000 -> 23.104.0.1:46838 14 14292 1 2025-12-03 22:23:51.050 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47104 10 6452 1 2025-12-03 22:24:51.452 00:00:11.000 TCP 1.101.0.1:3000 -> 23.104.0.1:39122 10 6452 1 2025-12-03 22:25:52.492 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43216 10 6452 1 2025-12-03 22:22:10.353 00:05:02.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 22:22:10.356 00:05:02.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 22:26:46.077 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:26:46.144 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:26:45.988 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:26:46.071 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:26:45.995 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:26:52.899 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:60156 12 6556 1 2025-12-03 22:27:53.323 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33424 10 6452 1 2025-12-03 22:28:53.727 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40690 10 6452 1 2025-12-03 22:29:54.140 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59524 10 6452 1 2025-12-03 22:30:54.510 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34134 10 6452 1 2025-12-03 22:31:46.175 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:31:46.186 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:31:46.182 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:31:46.116 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:31:46.092 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:31:54.912 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:55196 10 6452 1 2025-12-03 22:28:10.359 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 22:28:10.361 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 22:32:55.332 00:00:12.247 TCP 1.101.0.1:3000 -> 23.104.0.1:35956 10 6452 1 2025-12-03 22:33:57.628 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43660 10 6452 1 2025-12-03 22:34:58.038 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49406 10 6452 1 2025-12-03 22:35:58.442 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37712 10 6452 1 2025-12-03 22:36:46.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:36:46.184 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:36:46.299 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:36:46.096 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:36:46.177 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:36:58.843 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:37160 10 6452 1 2025-12-03 22:37:59.266 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55768 10 6452 1 2025-12-03 22:34:10.361 00:05:02.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 22:34:10.359 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 22:38:59.628 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:34488 10 6452 1 2025-12-03 22:39:59.997 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34934 10 6452 1 2025-12-03 22:41:00.403 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57408 10 6452 1 2025-12-03 22:41:46.512 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:41:46.425 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:41:46.377 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:41:46.230 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:41:46.430 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:42:00.805 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45584 10 6452 1 2025-12-03 22:43:01.209 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43610 10 6452 1 2025-12-03 22:40:10.365 00:05:02.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 22:44:01.610 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38280 10 6452 1 2025-12-03 22:40:10.362 00:05:02.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 22:45:02.016 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35394 10 6452 1 2025-12-03 22:46:02.419 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56168 10 6452 1 2025-12-03 22:46:46.421 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:46:46.456 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:46:46.489 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:46:46.421 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:46:46.572 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:47:02.823 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35300 10 6452 1 2025-12-03 22:48:03.245 00:00:10.605 TCP 1.101.0.1:3000 -> 23.104.0.1:53938 10 6452 1 2025-12-03 22:49:03.897 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39884 10 6452 1 2025-12-03 22:50:04.319 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36832 11 6504 1 2025-12-03 22:46:10.366 00:05:02.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 22:46:10.363 00:05:02.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 22:51:04.736 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:57446 10 6452 1 2025-12-03 22:51:46.700 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:51:46.697 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:51:46.505 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:51:46.684 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:51:46.767 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:52:05.116 00:00:11.126 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 10 6452 1 2025-12-03 22:53:06.288 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46332 10 6452 1 2025-12-03 22:54:06.695 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34908 10 6452 1 2025-12-03 22:55:07.112 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50500 10 6452 1 2025-12-03 22:52:10.368 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 22:52:10.366 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 22:56:07.474 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51774 10 6452 1 2025-12-03 22:56:46.826 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:56:46.972 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 22:56:46.992 00:00:00.049 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 22:56:47.002 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:56:46.741 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 22:57:07.875 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:38316 12 6556 1 2025-12-03 22:58:08.314 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:60624 11 6504 1 Summary: total flows: 140, total bytes: 425256, total packets: 1032, avg bps: 942, avg pps: 0, avg bpp: 412 Time window: 2025-12-03 21:58:10 - 2025-12-03 22:58:18 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0035s User: 0.0027s Wall: 0.0020s flows/second: 69963.4 Runtime: 0.0020s