Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 22:59:08.774 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51324 10 6452 1 2025-12-03 23:00:09.142 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32998 11 6504 1 2025-12-03 23:01:09.554 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:49082 10 6452 1 2025-12-03 23:01:46.914 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:01:46.730 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:01:46.925 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:01:46.730 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:01:46.815 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 22:58:10.369 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 22:58:10.366 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:02:09.961 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43010 10 6452 1 2025-12-03 23:03:10.372 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36346 10 6452 1 2025-12-03 23:04:10.773 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43074 10 6452 1 2025-12-03 23:05:11.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48248 10 6452 1 2025-12-03 23:06:11.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52960 10 6452 1 2025-12-03 23:06:46.882 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:06:46.780 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:06:46.790 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:06:46.696 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:06:46.800 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:07:11.995 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43814 10 6452 1 2025-12-03 23:04:10.372 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:04:10.370 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:08:12.397 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59482 10 6452 1 2025-12-03 23:09:12.800 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:49082 10 6452 1 2025-12-03 23:10:13.175 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44084 10 6452 1 2025-12-03 23:11:13.590 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60280 10 6452 1 2025-12-03 23:11:46.979 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:11:47.273 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:11:47.000 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:11:47.274 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:11:47.357 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:12:13.949 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58458 10 6452 1 2025-12-03 23:13:14.351 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34084 10 6452 1 2025-12-03 23:10:10.375 00:05:02.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:10:10.374 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:14:14.761 00:00:10.967 TCP 1.101.0.1:3000 -> 23.104.0.1:42714 10 6452 1 2025-12-03 23:15:15.765 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40050 10 6452 1 2025-12-03 23:16:16.180 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58010 10 6452 1 2025-12-03 23:16:47.307 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:16:47.379 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:16:47.339 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:16:47.433 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:16:47.514 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:17:16.585 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60370 10 6452 1 2025-12-03 23:18:16.993 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57668 10 6452 1 2025-12-03 23:19:17.413 00:00:11.139 TCP 1.101.0.1:3000 -> 23.104.0.1:45426 10 6452 1 2025-12-03 23:16:10.376 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:16:10.374 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:20:18.602 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44488 10 6452 1 2025-12-03 23:21:19.010 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50840 10 6452 1 2025-12-03 23:21:47.144 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:21:47.201 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:21:47.233 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:21:47.234 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:21:47.317 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:22:19.414 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56766 10 6452 1 2025-12-03 23:23:19.818 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55282 10 6452 1 2025-12-03 23:24:20.235 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53054 10 6452 1 2025-12-03 23:25:20.642 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58114 10 6452 1 2025-12-03 23:22:10.377 00:05:02.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:22:10.375 00:05:02.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:26:21.060 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49040 10 6452 1 2025-12-03 23:26:47.249 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:26:47.253 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:26:47.158 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:26:47.088 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:26:47.167 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:27:21.464 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37996 10 6452 1 2025-12-03 23:28:21.866 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:46114 12 10369 1 2025-12-03 23:29:22.357 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57714 10 6452 1 2025-12-03 23:30:22.760 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:37410 10 6452 1 2025-12-03 23:31:23.143 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48468 10 6452 1 2025-12-03 23:31:47.544 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:31:47.344 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:31:47.462 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:31:47.387 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:31:47.461 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:28:10.375 00:05:02.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:28:10.378 00:05:02.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:32:23.550 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49212 10 6452 1 2025-12-03 23:33:23.956 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46736 10 6452 1 2025-12-03 23:34:24.326 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60916 10 6452 1 2025-12-03 23:35:24.733 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33880 10 6452 1 2025-12-03 23:36:25.139 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44336 10 6452 1 2025-12-03 23:36:47.550 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:36:47.601 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:36:47.596 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:36:47.146 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:36:47.466 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:37:25.551 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:59280 11 6504 1 2025-12-03 23:34:10.382 00:05:02.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:34:10.379 00:05:02.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:38:26.002 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40086 10 6452 1 2025-12-03 23:39:26.402 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60060 10 6452 1 2025-12-03 23:40:26.803 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33832 10 6452 1 2025-12-03 23:41:27.208 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34528 10 6452 1 2025-12-03 23:41:47.978 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:41:47.553 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:41:47.895 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:41:47.895 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:41:47.832 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:42:27.566 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54082 10 6452 1 2025-12-03 23:43:27.967 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43106 10 6452 1 2025-12-03 23:40:10.382 00:05:02.188 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:40:10.384 00:05:02.182 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:44:28.368 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54394 10 6452 1 2025-12-03 23:45:28.769 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43790 10 6452 1 2025-12-03 23:46:29.181 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:52284 10 6452 1 2025-12-03 23:46:47.800 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:46:47.722 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:46:47.652 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:46:47.512 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:46:47.716 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:47:29.564 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38540 10 6452 1 2025-12-03 23:48:29.972 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50922 10 6452 1 2025-12-03 23:49:30.381 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54268 10 6452 1 2025-12-03 23:46:10.385 00:05:02.186 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:46:10.384 00:05:02.191 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:50:30.741 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46240 10 6452 1 2025-12-03 23:51:31.171 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51760 10 6452 1 2025-12-03 23:51:47.700 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:51:47.620 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:51:47.773 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:51:47.668 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:51:47.618 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:52:31.544 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46380 10 6452 1 2025-12-03 23:53:31.912 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53782 10 6452 1 2025-12-03 23:54:32.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57208 10 6452 1 2025-12-03 23:55:32.724 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37202 10 6452 1 2025-12-03 23:52:10.384 00:05:02.193 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:52:10.386 00:05:02.187 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:56:33.133 00:00:10.855 TCP 1.101.0.1:3000 -> 23.104.0.1:38450 10 6452 1 2025-12-03 23:56:48.060 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:56:47.996 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:56:48.004 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:56:47.838 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:56:47.920 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:57:34.033 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46322 10 6452 1 2025-12-03 23:58:34.437 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47950 10 6452 1 Summary: total flows: 140, total bytes: 421021, total packets: 1024, avg bps: 926, avg pps: 0, avg bpp: 411 Time window: 2025-12-03 22:58:10 - 2025-12-03 23:58:44 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0048s User: 0.0019s Wall: 0.0018s flows/second: 75758.3 Runtime: 0.0019s