Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-07 08:58:45.401 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:60162 14 10479 1 2025-12-07 08:59:45.886 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53022 10 6452 1 2025-12-07 09:00:46.303 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51172 10 6452 1 2025-12-07 09:01:46.663 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54954 10 6452 1 2025-12-07 08:58:12.145 00:05:02.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 08:58:12.142 00:05:02.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 09:02:47.090 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37032 10 6452 1 2025-12-07 09:03:25.524 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 09:03:25.333 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:03:25.438 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:03:25.236 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:03:25.441 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:03:47.490 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:56276 12 10375 1 2025-12-07 09:04:47.969 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58482 10 6452 1 2025-12-07 09:05:48.369 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48294 10 6452 1 2025-12-07 09:06:48.778 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:59790 10 6452 1 2025-12-07 09:07:49.187 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56496 10 6452 1 2025-12-07 09:04:12.147 00:05:02.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 09:04:12.146 00:05:02.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 09:08:25.683 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 09:08:25.562 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:08:25.555 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:08:25.519 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:08:25.602 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:08:49.591 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49306 10 6452 1 2025-12-07 09:09:50.001 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:46644 10 6452 1 2025-12-07 09:10:50.401 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41562 10 6452 1 2025-12-07 09:11:50.811 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51222 10 6452 1 2025-12-07 09:12:51.176 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37730 10 6452 1 2025-12-07 09:13:26.738 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 09:13:26.814 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:13:26.549 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:13:26.549 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:13:26.647 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:13:51.579 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:47198 10 6452 1 2025-12-07 09:10:12.148 00:05:02.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 09:10:12.151 00:05:02.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 09:14:51.978 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54776 10 6452 1 2025-12-07 09:15:52.385 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48816 10 6452 1 2025-12-07 09:16:52.800 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47618 10 6452 1 2025-12-07 09:17:53.207 00:00:10.654 TCP 1.101.0.1:3000 -> 23.104.0.1:47160 10 6452 1 2025-12-07 09:18:25.784 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:18:25.873 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:18:25.835 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:18:25.780 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:18:25.863 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 09:18:53.900 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:40426 12 10375 1 2025-12-07 09:19:54.335 00:00:10.605 TCP 1.101.0.1:3000 -> 23.104.0.1:33812 10 6452 1 2025-12-07 09:16:12.150 00:05:02.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 09:16:12.153 00:05:02.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 09:20:54.979 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34790 10 6452 1 2025-12-07 09:21:55.391 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46188 10 6452 1 2025-12-07 09:22:55.790 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:42988 12 6556 1 2025-12-07 09:23:25.771 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:23:25.773 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:23:25.639 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:23:25.670 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:23:25.752 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 09:23:56.256 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:56116 10 6452 1 2025-12-07 09:24:56.631 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47112 10 6452 1 2025-12-07 09:25:57.063 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59320 10 6452 1 2025-12-07 09:22:12.151 00:05:02.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 09:22:12.154 00:05:02.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 09:26:57.465 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49428 10 6452 1 2025-12-07 09:27:57.869 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54338 10 6452 1 2025-12-07 09:28:25.927 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 09:28:25.848 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:28:25.939 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:28:25.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:28:25.843 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:28:58.278 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58094 10 6452 1 2025-12-07 09:29:58.682 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50292 10 6452 1 2025-12-07 09:30:59.104 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35788 10 6452 1 2025-12-07 09:31:59.517 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41440 10 6452 1 2025-12-07 09:28:12.151 00:05:02.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 09:28:12.154 00:05:02.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 09:32:59.919 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:38958 10 6452 1 2025-12-07 09:33:26.329 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:33:26.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:33:25.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:33:26.326 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:33:26.409 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 09:34:00.278 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51748 10 6452 1 2025-12-07 09:35:00.673 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54822 10 6452 1 2025-12-07 09:36:01.097 00:00:10.672 TCP 1.101.0.1:3000 -> 23.104.0.1:50404 10 6452 1 2025-12-07 09:37:01.811 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:58690 10 6452 1 2025-12-07 09:38:02.182 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33990 10 6452 1 2025-12-07 09:34:12.156 00:05:02.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 09:34:12.153 00:05:02.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 09:38:25.984 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:38:25.902 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:38:26.141 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:38:25.761 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:38:25.845 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 09:39:02.593 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:41678 12 10375 1 2025-12-07 09:40:03.107 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46006 10 6452 1 2025-12-07 09:41:03.508 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54022 10 6452 1 2025-12-07 09:42:03.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37914 10 6452 1 2025-12-07 09:43:04.323 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37360 10 6452 1 2025-12-07 09:43:26.428 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 09:43:26.443 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:43:26.335 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:43:25.820 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:43:26.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:40:12.156 00:05:02.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 09:40:12.160 00:05:02.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 09:44:04.744 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40662 10 6452 1 2025-12-07 09:45:05.113 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34292 10 6452 1 2025-12-07 09:46:05.477 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44340 10 6452 1 2025-12-07 09:47:05.893 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:54638 10 6452 1 2025-12-07 09:48:06.320 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34022 10 6452 1 2025-12-07 09:48:26.515 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 09:48:26.253 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:48:26.432 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:48:26.214 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:48:26.434 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:49:06.733 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42452 10 6452 1 2025-12-07 09:46:12.159 00:05:02.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 09:46:12.160 00:05:02.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 09:50:07.140 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35746 10 6452 1 2025-12-07 09:51:07.505 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41498 10 6452 1 2025-12-07 09:52:07.906 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53724 10 6452 1 2025-12-07 09:53:08.329 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45144 10 6452 1 2025-12-07 09:53:26.548 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:53:26.516 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:53:26.147 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:53:26.429 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:53:26.511 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 09:54:08.731 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45538 10 6452 1 2025-12-07 09:55:09.115 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38490 10 6452 1 2025-12-07 09:52:12.161 00:05:02.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 09:56:09.520 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49834 10 6452 1 2025-12-07 09:52:12.163 00:05:02.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 09:57:09.916 00:00:11.228 TCP 1.101.0.1:3000 -> 23.104.0.1:44176 10 6452 1 2025-12-07 09:58:11.183 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:32850 10 6452 1 2025-12-07 09:58:26.813 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 09:58:26.814 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 09:58:26.539 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:58:26.753 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 09:58:26.836 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 140, total bytes: 432900, total packets: 1032, avg bps: 958, avg pps: 0, avg bpp: 419 Time window: 2025-12-07 08:58:12 - 2025-12-07 09:58:26 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0038s User: 0.0015s Wall: 0.0023s flows/second: 60793.3 Runtime: 0.0023s