Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 11:59:05.422 00:00:10.732 TCP 1.101.0.1:3000 -> 23.104.0.1:37928 10 6452 1 2025-12-03 12:00:06.193 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42002 10 6452 1 2025-12-03 11:57:10.158 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 11:57:10.162 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 12:01:06.594 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54008 10 6452 1 2025-12-03 12:01:33.496 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:01:33.544 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:01:33.436 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:01:33.415 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:01:33.546 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:02:06.996 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48400 10 6452 1 2025-12-03 12:03:07.401 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60656 10 6452 1 2025-12-03 12:04:07.811 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41452 10 6452 1 2025-12-03 12:05:08.222 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50116 10 6452 1 2025-12-03 12:06:08.632 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44830 10 6452 1 2025-12-03 12:06:33.821 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:06:33.698 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:06:33.656 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:06:33.738 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:06:33.520 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:03:10.165 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 12:03:10.161 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 12:07:09.039 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51854 10 6452 1 2025-12-03 12:08:09.453 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49240 10 6452 1 2025-12-03 12:09:09.855 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:37532 10 6452 1 2025-12-03 12:10:10.235 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53910 10 6452 1 2025-12-03 12:11:10.657 00:00:10.560 TCP 1.101.0.1:3000 -> 23.104.0.1:48202 10 6452 1 2025-12-03 12:11:33.708 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:11:33.795 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:11:33.700 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:11:33.625 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:11:33.725 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:12:11.253 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32824 10 6452 1 2025-12-03 12:09:10.164 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 12:09:10.167 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 12:13:11.649 00:00:11.033 TCP 1.101.0.1:3000 -> 23.104.0.1:51798 10 6452 1 2025-12-03 12:14:12.722 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55806 10 6452 1 2025-12-03 12:15:13.138 00:00:11.546 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-12-03 12:16:14.724 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45678 10 6452 1 2025-12-03 12:16:33.816 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:16:33.774 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:16:33.889 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:16:33.894 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:16:33.971 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:17:15.111 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49322 10 6452 1 2025-12-03 12:18:15.522 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51168 12 6556 1 2025-12-03 12:15:10.167 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 12:15:10.166 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 12:19:15.923 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:51226 10 6452 1 2025-12-03 12:20:16.344 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56060 10 6452 1 2025-12-03 12:21:16.751 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44016 10 6452 1 2025-12-03 12:21:34.081 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:21:34.097 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:21:34.096 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:21:33.983 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:21:34.179 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:22:17.116 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:60904 10 6452 1 2025-12-03 12:23:17.507 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43410 10 6452 1 2025-12-03 12:24:17.919 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:54566 10 6452 1 2025-12-03 12:21:10.169 00:05:02.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 12:21:10.173 00:05:02.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 12:25:18.307 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42202 10 6452 1 2025-12-03 12:26:18.715 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36810 10 6452 1 2025-12-03 12:26:33.968 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:26:33.845 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:26:33.815 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:26:33.915 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:26:33.899 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:27:19.133 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42136 10 6452 1 2025-12-03 12:28:19.520 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37218 10 6452 1 2025-12-03 12:29:19.928 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:53132 10 6452 1 2025-12-03 12:30:20.310 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41736 10 6452 1 2025-12-03 12:27:10.173 00:05:02.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 12:27:10.176 00:05:02.166 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 12:31:34.239 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:31:33.946 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:31:33.977 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:31:34.157 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:31:34.054 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:31:20.723 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52018 10 6452 1 2025-12-03 12:32:21.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51170 10 6452 1 2025-12-03 12:33:21.543 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32916 10 6452 1 2025-12-03 12:34:21.943 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57266 10 6452 1 2025-12-03 12:35:22.355 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60672 10 6452 1 2025-12-03 12:36:34.324 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:36:34.176 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:36:34.042 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:36:34.231 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:36:34.176 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:36:22.767 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60440 10 6452 1 2025-12-03 12:33:10.177 00:05:02.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 12:33:10.179 00:05:02.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 12:37:23.181 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39868 10 6452 1 2025-12-03 12:38:23.585 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47244 10 6452 1 2025-12-03 12:39:23.993 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50294 10 6452 1 2025-12-03 12:40:24.405 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39220 10 6452 1 2025-12-03 12:41:24.767 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58246 10 6452 1 2025-12-03 12:41:34.314 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:41:34.169 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:41:34.430 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:41:34.387 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:41:34.512 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:42:25.131 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48824 10 6452 1 2025-12-03 12:39:10.180 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 12:39:10.182 00:05:02.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 12:43:25.493 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59274 10 6452 1 2025-12-03 12:44:25.892 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40028 10 6452 1 2025-12-03 12:45:26.312 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59878 10 6452 1 2025-12-03 12:46:34.457 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:46:34.291 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:46:34.324 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:46:34.375 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:46:34.078 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:46:26.718 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43422 10 6452 1 2025-12-03 12:47:27.129 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:35728 10 6452 1 2025-12-03 12:48:27.530 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60866 10 6452 1 2025-12-03 12:45:10.180 00:05:02.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 12:45:10.182 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 12:49:27.933 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:39594 10 6452 1 2025-12-03 12:50:28.325 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39032 10 6452 1 2025-12-03 12:51:34.519 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:51:34.317 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:51:34.384 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:51:34.463 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:51:34.467 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:51:28.737 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45692 10 6452 1 2025-12-03 12:52:29.150 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40752 10 6452 1 2025-12-03 12:53:29.560 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:60714 10 6452 1 2025-12-03 12:54:29.918 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54160 10 6452 1 2025-12-03 12:51:10.183 00:05:02.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 12:51:10.187 00:05:02.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 12:55:30.330 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45924 10 6452 1 2025-12-03 12:56:34.573 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 12:56:34.316 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:56:34.661 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 12:56:34.560 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 12:56:34.743 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 12:56:30.739 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59942 10 6452 1 2025-12-03 12:57:31.155 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53878 10 6452 1 2025-12-03 12:58:31.565 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59378 10 6452 1 Summary: total flows: 140, total bytes: 417104, total packets: 1022, avg bps: 903, avg pps: 0, avg bpp: 408 Time window: 2025-12-03 11:57:10 - 2025-12-03 12:58:41 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0044s User: 0.0009s Wall: 0.0037s flows/second: 37675.0 Runtime: 0.0037s