Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 17:58:42.279 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46632 10 6452 1 2025-12-03 17:59:42.681 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51544 10 6452 1 2025-12-03 18:00:43.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38908 10 6452 1 2025-12-03 17:57:10.270 00:05:02.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 17:57:10.271 00:05:02.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:01:40.626 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:01:40.664 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:01:40.531 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:01:40.695 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:01:40.614 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:01:43.514 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:49156 10 6452 1 2025-12-03 18:02:43.937 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45412 10 6452 1 2025-12-03 18:03:44.353 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46550 10 6452 1 2025-12-03 18:04:44.762 00:00:10.648 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 2025-12-03 18:05:45.448 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36646 10 6452 1 2025-12-03 18:06:41.127 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:06:41.054 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:06:40.978 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:06:41.044 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:06:41.010 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:06:45.850 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60076 10 6452 1 2025-12-03 18:03:10.273 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:03:10.275 00:05:02.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:07:46.265 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52644 10 6452 1 2025-12-03 18:08:46.670 00:00:14.212 TCP 1.101.0.1:3000 -> 23.104.0.1:56312 10 6452 1 2025-12-03 18:09:50.929 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53250 10 6452 1 2025-12-03 18:10:51.341 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:49064 10 6452 1 2025-12-03 18:11:40.861 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:11:40.778 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:11:40.867 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:11:41.020 00:00:00.035 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:11:40.989 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:11:51.701 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43170 10 6452 1 2025-12-03 18:12:52.065 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:60326 12 10369 1 2025-12-03 18:09:10.273 00:05:02.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:09:10.277 00:05:02.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:13:52.540 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40382 10 6452 1 2025-12-03 18:14:52.941 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40184 10 6452 1 2025-12-03 18:15:53.359 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57810 10 6452 1 2025-12-03 18:16:40.942 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:16:40.765 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:16:40.886 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:16:40.858 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:16:40.770 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:16:53.720 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60520 10 6452 1 2025-12-03 18:17:54.135 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58390 10 6452 1 2025-12-03 18:18:54.496 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45142 10 6452 1 2025-12-03 18:15:10.279 00:05:02.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:15:10.276 00:05:02.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:19:54.904 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35080 10 6452 1 2025-12-03 18:20:55.328 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48228 10 6452 1 2025-12-03 18:21:40.841 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:21:41.550 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:21:41.535 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:21:41.467 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:21:41.590 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:21:55.683 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55574 10 6452 1 2025-12-03 18:22:56.115 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46504 10 6452 1 2025-12-03 18:23:56.521 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57936 11 6492 1 2025-12-03 18:24:56.932 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:60482 10 6452 1 2025-12-03 18:21:10.282 00:05:02.162 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:21:10.284 00:05:02.158 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:25:57.361 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43742 10 6452 1 2025-12-03 18:26:40.938 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:26:41.323 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:26:41.240 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:26:41.132 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:26:41.147 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:26:57.763 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35584 10 6452 1 2025-12-03 18:27:58.174 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50814 10 6452 1 2025-12-03 18:28:58.577 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56194 10 6452 1 2025-12-03 18:29:58.982 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52276 10 6452 1 2025-12-03 18:30:59.394 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55456 10 6452 1 2025-12-03 18:27:10.283 00:05:02.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:27:10.279 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:31:41.348 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:31:41.310 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:31:41.279 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:31:41.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:31:41.186 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:31:59.797 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46064 10 6452 1 2025-12-03 18:33:00.222 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-12-03 18:34:00.631 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51654 10 6452 1 2025-12-03 18:35:01.039 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49704 10 6452 1 2025-12-03 18:36:01.444 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34726 10 6452 1 2025-12-03 18:36:41.553 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:36:41.393 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:36:41.357 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:36:41.471 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:36:41.383 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:33:10.281 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:37:01.849 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:44360 10 6452 1 2025-12-03 18:33:10.284 00:05:02.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:38:02.274 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35404 10 6452 1 2025-12-03 18:39:02.679 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43594 10 6452 1 2025-12-03 18:40:03.115 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 10 6452 1 2025-12-03 18:41:03.519 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41478 10 6452 1 2025-12-03 18:41:41.662 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:41:41.580 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:41:41.794 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:41:41.582 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:41:41.732 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:42:03.929 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36742 10 6452 1 2025-12-03 18:43:04.355 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50100 10 6452 1 2025-12-03 18:39:10.283 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:39:10.280 00:05:02.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:44:04.756 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48362 10 6452 1 2025-12-03 18:45:05.168 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46176 10 6452 1 2025-12-03 18:46:05.570 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37782 10 6452 1 2025-12-03 18:46:41.728 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:46:41.453 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:46:41.645 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:46:41.341 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:46:41.526 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:47:05.971 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58914 10 6452 1 2025-12-03 18:48:06.375 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:42226 10 6452 1 2025-12-03 18:45:10.282 00:05:02.172 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:45:10.284 00:05:02.166 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:49:06.741 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38852 10 6452 1 2025-12-03 18:50:07.141 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46130 10 6452 1 2025-12-03 18:51:07.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34332 10 6452 1 2025-12-03 18:51:41.632 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:51:41.603 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:51:41.442 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:51:41.816 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:51:41.524 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:52:07.959 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34296 10 6452 1 2025-12-03 18:53:08.364 00:00:20.233 TCP 1.101.0.1:3000 -> 23.104.0.1:34596 10 6452 1 2025-12-03 18:54:18.638 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:51018 10 6452 1 2025-12-03 18:51:10.288 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 18:51:10.284 00:05:02.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 18:55:19.033 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48138 10 6452 1 2025-12-03 18:56:19.441 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34110 10 6452 1 2025-12-03 18:56:41.917 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 18:56:41.786 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 18:56:41.667 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:56:41.833 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 18:56:41.523 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 18:57:19.847 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:42180 10 6452 1 2025-12-03 18:58:20.269 00:00:11.028 TCP 1.101.0.1:3000 -> 23.104.0.1:38912 10 6452 1 Summary: total flows: 140, total bytes: 420957, total packets: 1023, avg bps: 914, avg pps: 0, avg bpp: 411 Time window: 2025-12-03 17:57:10 - 2025-12-03 18:58:31 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0049s User: 0.0010s Wall: 0.0021s flows/second: 65448.3 Runtime: 0.0022s