Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 02:59:03.191 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49076 10 6452 1 2025-12-03 03:00:03.589 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48302 10 6452 1 2025-12-03 02:57:09.976 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 02:57:09.979 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 03:01:03.994 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54066 10 6452 1 2025-12-03 03:01:22.759 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:01:22.489 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:01:22.569 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:01:22.688 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:01:22.652 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:02:04.358 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59108 10 6452 1 2025-12-03 03:03:04.758 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:38266 10 6452 1 2025-12-03 03:04:05.179 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37138 10 6452 1 2025-12-03 03:05:05.544 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:58694 10 6452 1 2025-12-03 03:06:22.747 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:06:05.931 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:51444 10 6452 1 2025-12-03 03:06:22.829 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:06:22.595 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:06:22.665 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:06:22.727 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:03:09.981 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 03:03:09.980 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 03:07:06.368 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33434 10 6452 1 2025-12-03 03:08:06.775 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40404 12 6556 1 2025-12-03 03:09:07.181 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56084 10 6452 1 2025-12-03 03:10:07.589 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33968 10 6452 1 2025-12-03 03:11:07.997 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47532 10 6452 1 2025-12-03 03:11:23.016 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:11:22.886 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:11:22.701 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:11:22.933 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:11:22.970 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:12:08.406 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43302 10 6452 1 2025-12-03 03:09:09.983 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 03:09:09.980 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 03:13:08.812 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48410 10 6452 1 2025-12-03 03:14:09.221 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48256 10 6452 1 2025-12-03 03:15:09.619 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38360 10 6452 1 2025-12-03 03:16:10.028 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58026 10 6452 1 2025-12-03 03:16:23.519 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:16:22.826 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:16:23.366 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:16:23.449 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:16:23.449 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:17:10.436 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41340 10 6452 1 2025-12-03 03:18:10.798 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34150 10 6452 1 2025-12-03 03:15:09.983 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 03:15:09.981 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 03:19:11.213 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52396 10 6452 1 2025-12-03 03:20:11.612 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58258 10 6452 1 2025-12-03 03:21:23.026 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:21:12.017 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46360 10 6452 1 2025-12-03 03:21:23.079 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:21:22.896 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:21:22.944 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:21:22.841 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:22:12.375 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54268 10 6452 1 2025-12-03 03:23:12.782 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46352 10 6452 1 2025-12-03 03:24:13.188 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52658 10 6452 1 2025-12-03 03:21:09.981 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 03:21:09.985 00:05:02.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 03:25:13.555 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54210 10 6452 1 2025-12-03 03:26:13.961 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59594 10 6452 1 2025-12-03 03:26:22.951 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:26:22.982 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:26:23.250 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:26:23.198 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:26:23.333 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:27:14.365 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47030 10 6452 1 2025-12-03 03:28:14.734 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41670 10 6452 1 2025-12-03 03:29:15.151 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49046 10 6452 1 2025-12-03 03:30:15.555 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:37202 10 6452 1 2025-12-03 03:27:09.985 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 03:27:09.989 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 03:31:23.286 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:31:23.255 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:31:23.282 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:31:23.330 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:31:23.364 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:31:15.917 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:40456 10 6452 1 2025-12-03 03:32:16.345 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42268 10 6452 1 2025-12-03 03:33:16.759 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:44744 10 6452 1 2025-12-03 03:34:17.188 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57272 10 6452 1 2025-12-03 03:35:17.592 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:56606 10 6452 1 2025-12-03 03:36:23.826 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:36:23.741 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:36:23.564 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:36:23.744 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:36:23.662 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:36:18.027 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35028 10 6452 1 2025-12-03 03:33:09.989 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 03:33:09.987 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 03:37:18.433 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53184 10 6452 1 2025-12-03 03:38:18.795 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52238 10 6452 1 2025-12-03 03:39:19.212 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45854 10 6452 1 2025-12-03 03:40:19.578 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34588 10 6452 1 2025-12-03 03:41:23.627 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:41:23.466 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:41:23.448 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:41:23.544 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:41:23.541 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:41:19.985 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55702 10 6452 1 2025-12-03 03:42:20.396 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39804 10 6452 1 2025-12-03 03:39:09.990 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 03:39:09.988 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 03:43:20.803 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36080 10 6452 1 2025-12-03 03:44:21.217 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41110 10 6452 1 2025-12-03 03:45:21.582 00:00:10.479 TCP 1.101.0.1:3000 -> 23.104.0.1:51276 10 6452 1 2025-12-03 03:46:23.513 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:46:23.456 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:46:23.548 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:46:23.353 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:46:23.632 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:46:22.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49418 10 6452 1 2025-12-03 03:47:22.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46020 10 6452 1 2025-12-03 03:48:22.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46216 10 6452 1 2025-12-03 03:45:09.990 00:05:02.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 03:45:09.992 00:05:02.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 03:49:23.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54236 10 6452 1 2025-12-03 03:50:23.720 00:00:10.745 TCP 1.101.0.1:3000 -> 23.104.0.1:58132 10 6452 1 2025-12-03 03:51:23.973 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:51:23.947 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:51:23.863 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:51:23.869 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:51:23.947 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:51:24.508 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56396 10 6452 1 2025-12-03 03:52:24.914 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40592 10 6452 1 2025-12-03 03:53:25.351 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:34990 12 10375 1 2025-12-03 03:54:25.802 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58948 10 6452 1 2025-12-03 03:51:09.993 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 03:51:09.993 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 03:55:26.219 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52292 10 6452 1 2025-12-03 03:56:23.845 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 03:56:23.792 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:56:23.776 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 03:56:23.771 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 03:56:23.859 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 03:56:26.589 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59802 10 6452 1 2025-12-03 03:57:26.996 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49156 10 6452 1 2025-12-03 03:58:27.397 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46954 10 6452 1 Summary: total flows: 140, total bytes: 421027, total packets: 1024, avg bps: 913, avg pps: 0, avg bpp: 411 Time window: 2025-12-03 02:57:09 - 2025-12-03 03:58:37 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0024s User: 0.0024s Wall: 0.0021s flows/second: 67665.7 Runtime: 0.0021s