Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 19:58:48.111 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46716 10 6452 1 2025-12-03 19:59:48.515 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43470 10 6452 1 2025-12-03 20:00:48.885 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53972 10 6452 1 2025-12-03 19:57:10.312 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 19:57:10.311 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 20:01:42.946 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:01:42.965 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:01:42.893 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:01:42.863 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:01:43.093 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:01:49.296 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39578 10 6452 1 2025-12-03 20:02:49.665 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43170 10 6452 1 2025-12-03 20:03:50.105 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58058 10 6452 1 2025-12-03 20:04:50.506 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59474 10 6452 1 2025-12-03 20:05:50.910 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43376 10 6452 1 2025-12-03 20:06:43.213 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:06:42.801 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:06:43.295 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:06:43.095 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:06:43.378 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:06:51.327 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41316 10 6452 1 2025-12-03 20:03:10.311 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 20:03:10.314 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 20:07:51.700 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:51698 10 6452 1 2025-12-03 20:08:52.137 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37808 10 6452 1 2025-12-03 20:09:52.544 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:48802 10 6452 1 2025-12-03 20:10:52.963 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53598 10 6452 1 2025-12-03 20:11:43.458 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:11:43.522 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:11:43.070 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:11:43.377 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:11:43.526 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:11:53.380 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56886 10 6452 1 2025-12-03 20:12:53.782 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58442 10 6452 1 2025-12-03 20:09:10.317 00:05:02.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 20:09:10.315 00:05:02.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 20:13:54.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51966 10 6452 1 2025-12-03 20:14:54.590 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56906 10 6452 1 2025-12-03 20:15:55.003 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48940 10 6452 1 2025-12-03 20:16:43.475 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:16:43.465 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:16:43.184 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:16:43.391 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:16:43.147 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:16:55.414 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60894 10 6452 1 2025-12-03 20:17:55.798 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:42272 11 6504 1 2025-12-03 20:18:56.253 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54292 10 6452 1 2025-12-03 20:15:10.320 00:05:02.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 20:15:10.317 00:05:02.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 20:19:56.658 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:35394 10 6452 1 2025-12-03 20:20:57.090 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60284 10 6452 1 2025-12-03 20:21:43.672 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:21:43.587 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:21:43.352 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:21:43.588 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:21:43.493 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:21:57.493 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41950 10 6452 1 2025-12-03 20:22:57.929 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:54658 10 6452 1 2025-12-03 20:23:58.363 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52144 10 6452 1 2025-12-03 20:24:58.732 00:00:10.996 TCP 1.101.0.1:3000 -> 23.104.0.1:35806 10 6452 1 2025-12-03 20:21:10.318 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 20:21:10.321 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 20:25:59.764 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37942 10 6452 1 2025-12-03 20:26:43.785 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:26:43.705 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:26:43.642 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:26:43.703 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:26:43.636 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:27:00.179 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48062 10 6452 1 2025-12-03 20:28:00.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 10 6452 1 2025-12-03 20:29:00.992 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:35426 10 6452 1 2025-12-03 20:30:01.364 00:00:11.035 TCP 1.101.0.1:3000 -> 23.104.0.1:42374 10 6452 1 2025-12-03 20:31:02.430 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:41048 10 6452 1 2025-12-03 20:27:10.321 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 20:27:10.319 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 20:31:43.658 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:31:43.638 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:31:43.490 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:31:43.576 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:31:43.570 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:32:02.853 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:49534 10 6452 1 2025-12-03 20:33:03.282 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 10 6452 1 2025-12-03 20:34:03.646 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53324 10 6452 1 2025-12-03 20:35:04.060 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53194 10 6452 1 2025-12-03 20:36:04.458 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40424 10 6452 1 2025-12-03 20:36:43.937 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:36:43.800 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:36:43.665 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:36:43.855 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:36:43.802 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:33:10.324 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 20:37:04.860 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51204 10 6452 1 2025-12-03 20:33:10.321 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 20:38:05.277 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56240 10 6452 1 2025-12-03 20:39:05.680 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52714 10 6452 1 2025-12-03 20:40:06.107 00:00:10.912 TCP 1.101.0.1:3000 -> 23.104.0.1:55960 10 6452 1 2025-12-03 20:41:07.105 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49936 10 6452 1 2025-12-03 20:41:43.954 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:41:43.630 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:41:43.872 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:41:43.956 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:41:43.955 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:42:07.507 00:00:10.519 TCP 1.101.0.1:3000 -> 23.104.0.1:56990 10 6452 1 2025-12-03 20:39:10.323 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 20:39:10.325 00:05:02.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 20:43:08.062 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32894 10 6452 1 2025-12-03 20:44:08.484 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34468 10 6452 1 2025-12-03 20:45:08.902 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55366 10 6452 1 2025-12-03 20:46:09.333 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56316 10 6452 1 2025-12-03 20:46:43.946 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:46:43.891 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:46:43.719 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:46:43.864 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:46:43.864 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:47:09.740 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35682 10 6452 1 2025-12-03 20:48:10.148 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43244 10 6452 1 2025-12-03 20:45:10.330 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 20:45:10.328 00:05:02.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 20:49:10.558 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38188 10 6452 1 2025-12-03 20:50:10.968 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52104 10 6452 1 2025-12-03 20:51:11.377 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46026 10 6452 1 2025-12-03 20:51:44.205 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:51:44.117 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:51:43.694 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:51:44.118 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:51:44.118 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:52:11.744 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58292 10 6452 1 2025-12-03 20:53:12.153 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51004 10 6452 1 2025-12-03 20:54:12.513 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41390 10 6452 1 2025-12-03 20:51:10.328 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 20:51:10.331 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 20:55:12.884 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:42744 12 6556 1 2025-12-03 20:56:13.309 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60594 10 6452 1 2025-12-03 20:56:44.327 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 20:56:44.289 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 20:56:44.067 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:56:44.245 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 20:56:44.127 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 20:57:13.713 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48586 10 6452 1 2025-12-03 20:58:14.128 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46730 10 6452 1 Summary: total flows: 140, total bytes: 417156, total packets: 1023, avg bps: 908, avg pps: 0, avg bpp: 407 Time window: 2025-12-03 19:57:10 - 2025-12-03 20:58:24 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0050s User: 0.0020s Wall: 0.0019s flows/second: 75553.6 Runtime: 0.0019s