Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 22:59:05.589 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47204 10 6452 1 2025-12-04 23:00:05.992 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55262 10 6452 1 2025-12-04 23:01:06.401 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34442 10 6452 1 2025-12-04 22:58:10.898 00:05:02.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 22:58:10.901 00:05:02.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:02:15.624 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:02:15.581 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:02:15.246 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:02:06.805 00:00:10.913 TCP 1.101.0.1:3000 -> 23.104.0.1:58758 10 6452 1 2025-12-04 23:02:15.519 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:02:15.601 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:03:07.762 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54892 10 6452 1 2025-12-04 23:04:08.182 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55244 10 6452 1 2025-12-04 23:05:08.584 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44366 10 6452 1 2025-12-04 23:06:08.977 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:32906 10 6452 1 2025-12-04 23:07:15.780 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:07:09.349 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37808 10 6452 1 2025-12-04 23:07:15.710 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:07:15.403 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:07:15.648 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:07:15.741 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:04:10.899 00:05:02.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:04:10.902 00:05:02.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:08:09.712 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47874 10 6452 1 2025-12-04 23:09:10.116 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:32830 10 6452 1 2025-12-04 23:10:10.517 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42310 10 6452 1 2025-12-04 23:11:10.922 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45248 12 6556 1 2025-12-04 23:12:15.670 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:12:15.807 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:12:15.609 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:12:15.588 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:12:15.493 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:12:11.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 10 6452 1 2025-12-04 23:13:11.716 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56860 10 6452 1 2025-12-04 23:10:10.901 00:05:02.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:10:10.904 00:05:02.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:14:12.137 00:00:10.673 TCP 1.101.0.1:3000 -> 23.104.0.1:55880 10 6452 1 2025-12-04 23:15:12.849 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-12-04 23:16:13.284 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:42382 10 6452 1 2025-12-04 23:17:16.184 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:17:15.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:17:15.924 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:17:15.943 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:17:16.100 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:17:13.689 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56120 12 6556 1 2025-12-04 23:18:14.113 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50616 10 6452 1 2025-12-04 23:19:14.525 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58138 10 6452 1 2025-12-04 23:16:10.906 00:05:02.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:16:10.904 00:05:02.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:20:14.945 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:33306 10 6452 1 2025-12-04 23:21:15.384 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34620 10 6452 1 2025-12-04 23:22:16.153 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:22:15.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:22:15.957 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:22:16.087 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:22:16.071 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:22:15.789 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57164 10 6452 1 2025-12-04 23:23:16.189 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40452 10 6452 1 2025-12-04 23:24:16.594 00:00:10.750 TCP 1.101.0.1:3000 -> 23.104.0.1:49474 10 6452 1 2025-12-04 23:25:17.386 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52478 10 6452 1 2025-12-04 23:22:10.908 00:05:02.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:22:10.906 00:05:02.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:26:17.785 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44698 10 6452 1 2025-12-04 23:27:16.017 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:27:16.043 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:27:16.047 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:27:15.901 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:27:15.932 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:27:18.147 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51750 10 6452 1 2025-12-04 23:28:18.507 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35632 10 6452 1 2025-12-04 23:29:18.905 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33268 10 6452 1 2025-12-04 23:30:19.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36924 10 6452 1 2025-12-04 23:31:19.715 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 10 6452 1 2025-12-04 23:28:10.910 00:05:02.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:28:10.913 00:05:02.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:32:16.117 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:32:16.242 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:32:15.994 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:32:16.243 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:32:16.326 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:32:20.124 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37886 10 6452 1 2025-12-04 23:33:20.521 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51670 10 6452 1 2025-12-04 23:34:20.927 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56280 10 6452 1 2025-12-04 23:35:21.331 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58712 10 6452 1 2025-12-04 23:36:21.738 00:00:10.919 TCP 1.101.0.1:3000 -> 23.104.0.1:47572 10 6452 1 2025-12-04 23:37:16.513 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:37:16.240 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:37:16.319 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:37:16.432 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:37:16.313 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:37:22.713 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45142 10 6452 1 2025-12-04 23:34:10.912 00:05:02.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:34:10.915 00:05:02.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:38:23.121 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55012 10 6452 1 2025-12-04 23:39:23.526 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39728 10 6452 1 2025-12-04 23:40:23.927 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50140 10 6452 1 2025-12-04 23:41:24.351 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:51346 10 6452 1 2025-12-04 23:42:16.333 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:42:16.388 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:42:16.353 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:42:16.418 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:42:16.435 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:42:24.749 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59560 10 6452 1 2025-12-04 23:43:25.150 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48712 10 6452 1 2025-12-04 23:40:10.913 00:05:02.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:40:10.914 00:05:02.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:44:25.517 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53128 10 6452 1 2025-12-04 23:45:25.918 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50338 10 6452 1 2025-12-04 23:46:26.331 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41506 10 6452 1 2025-12-04 23:47:16.530 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:47:16.536 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:47:16.442 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:47:16.529 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:47:16.612 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:47:26.696 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58068 10 6452 1 2025-12-04 23:48:27.105 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:46994 10 6452 1 2025-12-04 23:49:27.496 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60774 10 6452 1 2025-12-04 23:46:10.914 00:05:02.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:46:10.917 00:05:02.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:50:27.900 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38564 10 6452 1 2025-12-04 23:51:28.321 00:00:10.908 TCP 1.101.0.1:3000 -> 23.104.0.1:34622 10 6452 1 2025-12-04 23:52:16.778 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:52:16.536 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:52:16.596 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:52:16.475 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:52:16.695 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:52:29.281 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 10 6452 1 2025-12-04 23:53:29.652 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45896 10 6452 1 2025-12-04 23:54:30.022 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46800 10 6452 1 2025-12-04 23:55:30.419 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34304 10 6452 1 2025-12-04 23:52:10.915 00:05:02.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:52:10.918 00:05:02.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:56:30.820 00:00:10.692 TCP 1.101.0.1:3000 -> 23.104.0.1:41532 10 6452 1 2025-12-04 23:57:16.786 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:57:16.629 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:57:16.856 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:57:16.730 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:57:16.703 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:57:31.554 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55064 10 6452 1 2025-12-04 23:58:31.954 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39806 10 6452 1 Summary: total flows: 140, total bytes: 417208, total packets: 1024, avg bps: 919, avg pps: 0, avg bpp: 407 Time window: 2025-12-04 22:58:10 - 2025-12-04 23:58:42 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0032s User: 0.0016s Wall: 0.0023s flows/second: 60951.1 Runtime: 0.0023s