Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 16:59:11.355 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51286 10 6452 1 2025-12-03 17:00:11.761 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:41260 10 6452 1 2025-12-03 16:57:10.250 00:05:02.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 16:57:10.252 00:05:02.166 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:01:12.135 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49866 10 6452 1 2025-12-03 17:01:39.654 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:01:39.743 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:01:39.659 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:01:39.652 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:01:39.742 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:02:12.534 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50118 10 6452 1 2025-12-03 17:03:12.935 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:60172 12 10375 1 2025-12-03 17:04:13.428 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57798 10 6452 1 2025-12-03 17:05:13.843 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:52802 10 6452 1 2025-12-03 17:06:14.278 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39980 10 6452 1 2025-12-03 17:06:39.667 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:06:39.514 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:06:39.635 00:00:00.014 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:06:39.586 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:06:39.684 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:03:10.249 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:03:10.252 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:07:14.689 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44282 10 6452 1 2025-12-03 17:08:15.112 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34338 10 6452 1 2025-12-03 17:09:15.531 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47738 10 6452 1 2025-12-03 17:10:15.892 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42524 12 6556 1 2025-12-03 17:11:16.308 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33818 10 6452 1 2025-12-03 17:11:39.704 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:11:39.612 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:11:39.671 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:11:39.623 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:11:39.410 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:12:16.726 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54384 10 6452 1 2025-12-03 17:09:10.250 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:09:10.253 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:13:17.136 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49178 10 6452 1 2025-12-03 17:14:17.539 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40806 10 6452 1 2025-12-03 17:15:17.963 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53792 10 6452 1 2025-12-03 17:16:18.369 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34396 10 6452 1 2025-12-03 17:16:39.929 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:16:39.848 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:16:39.669 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:16:39.846 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:16:39.882 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:17:18.772 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54356 10 6452 1 2025-12-03 17:18:19.176 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50420 10 6452 1 2025-12-03 17:15:10.253 00:05:02.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:15:10.256 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:19:19.581 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34440 10 6452 1 2025-12-03 17:20:19.985 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33042 10 6452 1 2025-12-03 17:21:20.397 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33616 10 6452 1 2025-12-03 17:21:39.850 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:21:39.772 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:21:39.976 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:21:39.784 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:21:40.060 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:22:20.809 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49620 10 6452 1 2025-12-03 17:23:21.215 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-12-03 17:24:21.622 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52564 10 6452 1 2025-12-03 17:21:10.257 00:05:02.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:21:10.261 00:05:02.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:25:22.027 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53454 10 6452 1 2025-12-03 17:26:40.094 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:26:22.390 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48748 10 6452 1 2025-12-03 17:26:40.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:26:39.817 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:26:40.012 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:26:40.111 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:27:22.788 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34832 10 6452 1 2025-12-03 17:28:23.189 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41768 10 6452 1 2025-12-03 17:29:23.602 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34048 10 6452 1 2025-12-03 17:30:24.018 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53792 10 6452 1 2025-12-03 17:27:10.258 00:05:02.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:27:10.263 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:31:24.427 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35712 10 6452 1 2025-12-03 17:31:40.216 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:31:39.924 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:31:40.103 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:31:40.184 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:31:40.185 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:32:24.833 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45862 10 6452 1 2025-12-03 17:33:25.244 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35288 10 6452 1 2025-12-03 17:34:25.652 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60296 10 6452 1 2025-12-03 17:35:26.056 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53642 10 6452 1 2025-12-03 17:36:40.223 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:36:26.465 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57450 10 6452 1 2025-12-03 17:36:39.821 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:36:40.102 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:36:40.177 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:36:40.185 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:33:10.267 00:05:02.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:33:10.262 00:05:02.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:37:26.875 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57552 10 6452 1 2025-12-03 17:38:27.287 00:00:11.074 TCP 1.101.0.1:3000 -> 23.104.0.1:48412 12 10375 1 2025-12-03 17:39:28.402 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56148 10 6452 1 2025-12-03 17:40:28.801 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43464 10 6452 1 2025-12-03 17:41:40.865 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:41:40.626 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:41:40.791 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:41:40.782 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:41:40.780 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:41:29.209 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42424 10 6452 1 2025-12-03 17:42:29.611 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44906 10 6452 1 2025-12-03 17:39:10.263 00:05:02.172 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:39:10.266 00:05:02.167 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:43:30.012 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45200 10 6452 1 2025-12-03 17:44:30.421 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53132 10 6452 1 2025-12-03 17:45:30.830 00:00:10.968 TCP 1.101.0.1:3000 -> 23.104.0.1:35004 10 6452 1 2025-12-03 17:46:40.359 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:46:40.266 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:46:40.263 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:46:40.356 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:46:40.346 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:46:31.829 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52970 10 6452 1 2025-12-03 17:47:32.240 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60236 10 6452 1 2025-12-03 17:48:32.643 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56716 10 6452 1 2025-12-03 17:45:10.263 00:05:02.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:45:10.266 00:05:02.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:49:33.056 00:00:15.929 TCP 1.101.0.1:3000 -> 23.104.0.1:35012 10 6452 1 2025-12-03 17:50:39.023 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52644 10 6452 1 2025-12-03 17:51:40.305 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:51:40.318 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:51:40.522 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:51:40.222 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:51:40.497 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:51:39.388 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 10 6452 1 2025-12-03 17:52:39.793 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:33968 12 10375 1 2025-12-03 17:53:40.266 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38316 10 6452 1 2025-12-03 17:54:40.672 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52442 10 6452 1 2025-12-03 17:51:10.270 00:05:02.167 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 17:51:10.268 00:05:02.172 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:55:41.037 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53952 10 6452 1 2025-12-03 17:56:40.571 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 17:56:40.478 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:56:40.468 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 17:56:40.695 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 17:56:40.551 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 17:56:41.445 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49308 10 6452 1 2025-12-03 17:57:41.849 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:34008 10 6452 1 Summary: total flows: 139, total bytes: 422421, total packets: 1018, avg bps: 927, avg pps: 0, avg bpp: 414 Time window: 2025-12-03 16:57:10 - 2025-12-03 17:57:52 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0028s User: 0.0028s Wall: 0.0023s flows/second: 61746.3 Runtime: 0.0023s