Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 09:59:16.134 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36034 10 6452 1 2025-12-04 10:00:16.538 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53582 10 6452 1 2025-12-04 09:57:10.614 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 09:57:10.617 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 10:01:16.938 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50520 10 6452 1 2025-12-04 10:01:59.953 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:01:59.803 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:01:59.957 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:01:59.869 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:01:59.861 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:02:17.355 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57154 10 6452 1 2025-12-04 10:03:17.760 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:51820 10 6452 1 2025-12-04 10:04:18.168 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33856 10 6452 1 2025-12-04 10:05:18.580 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58740 10 6452 1 2025-12-04 10:06:18.987 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46950 10 6452 1 2025-12-04 10:06:59.958 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:07:00.119 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:06:59.967 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:07:00.065 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:07:00.049 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:03:10.614 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 10:03:10.617 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 10:07:19.393 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57874 10 6452 1 2025-12-04 10:08:19.804 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35956 10 6452 1 2025-12-04 10:09:20.207 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:56190 10 6452 1 2025-12-04 10:10:20.625 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42672 10 6452 1 2025-12-04 10:11:21.031 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40572 10 6452 1 2025-12-04 10:12:00.448 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:12:00.409 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:12:00.517 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:12:00.356 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:12:00.599 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:12:21.438 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53904 10 6452 1 2025-12-04 10:09:10.618 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 10:09:10.616 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 10:13:21.807 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52928 10 6452 1 2025-12-04 10:14:22.217 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42816 10 6452 1 2025-12-04 10:15:22.619 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32808 10 6452 1 2025-12-04 10:16:23.024 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60480 10 6452 1 2025-12-04 10:17:00.195 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:16:59.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:17:00.263 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:16:59.991 00:00:00.051 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:17:00.345 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:17:23.396 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45056 10 6452 1 2025-12-04 10:18:23.797 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44880 10 6452 1 2025-12-04 10:15:10.618 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 10:15:10.616 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 10:19:24.199 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47002 10 6452 1 2025-12-04 10:20:24.599 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56350 10 6452 1 2025-12-04 10:21:25.008 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50830 10 6452 1 2025-12-04 10:22:00.212 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:22:00.057 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:22:00.359 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:22:00.119 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:22:00.442 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:22:25.408 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50266 10 6452 1 2025-12-04 10:23:25.811 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57862 10 6452 1 2025-12-04 10:24:26.210 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52102 10 6452 1 2025-12-04 10:21:10.618 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 10:21:10.621 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 10:25:26.617 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52538 10 6452 1 2025-12-04 10:26:27.025 00:00:10.900 TCP 1.101.0.1:3000 -> 23.104.0.1:34658 10 6452 1 2025-12-04 10:27:00.546 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:27:00.419 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:27:00.382 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:27:00.464 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:27:00.163 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:27:27.964 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47868 10 6452 1 2025-12-04 10:28:28.369 00:00:11.642 TCP 1.101.0.1:3000 -> 23.104.0.1:45244 10 6452 1 2025-12-04 10:29:30.064 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45980 10 6452 1 2025-12-04 10:30:30.468 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51894 10 6452 1 2025-12-04 10:27:10.620 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 10:27:10.622 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 10:31:30.868 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33000 10 6452 1 2025-12-04 10:32:00.811 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:32:00.499 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:32:00.801 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:32:00.728 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:32:00.777 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:32:31.272 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60142 10 6452 1 2025-12-04 10:33:31.672 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 10 6452 1 2025-12-04 10:34:32.109 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55640 10 6452 1 2025-12-04 10:35:32.470 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:46694 11 6504 1 2025-12-04 10:36:32.924 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:37746 10 6452 1 2025-12-04 10:37:00.653 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:37:00.493 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:37:00.701 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:37:00.515 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:37:00.571 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:33:10.621 00:05:02.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 10:33:10.618 00:05:02.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 10:37:33.377 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47930 12 6556 1 2025-12-04 10:38:33.782 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:37762 10 6452 1 2025-12-04 10:39:34.160 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53422 10 6452 1 2025-12-04 10:40:34.569 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:53828 10 6452 1 2025-12-04 10:41:34.965 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 10 6452 1 2025-12-04 10:42:00.662 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:42:00.577 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:42:00.617 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:42:00.579 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:42:00.674 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:42:35.378 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33080 10 6452 1 2025-12-04 10:39:10.620 00:05:02.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 10:39:10.622 00:05:02.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 10:43:35.787 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38960 10 6452 1 2025-12-04 10:44:36.210 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34654 10 6452 1 2025-12-04 10:45:36.628 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:57694 10 6452 1 2025-12-04 10:46:36.984 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:43096 10 6452 1 2025-12-04 10:47:00.874 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:47:00.712 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:47:00.717 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:47:00.790 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:47:00.793 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:47:37.355 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43642 10 6452 1 2025-12-04 10:48:37.760 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:47414 10 6452 1 2025-12-04 10:45:10.625 00:05:02.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 10:45:10.623 00:05:02.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 10:49:38.181 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47018 10 6452 1 2025-12-04 10:50:38.582 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40072 10 6452 1 2025-12-04 10:51:38.987 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59898 10 6452 1 2025-12-04 10:52:00.963 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:52:00.903 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:52:01.017 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:52:01.098 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:52:01.182 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:52:39.387 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56440 10 6452 1 2025-12-04 10:53:39.747 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56160 10 6452 1 2025-12-04 10:54:40.149 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38286 10 6452 1 2025-12-04 10:51:10.625 00:05:02.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 10:51:10.627 00:05:02.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 10:55:40.548 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:52730 11 6504 1 2025-12-04 10:56:41.005 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40014 10 6452 1 2025-12-04 10:57:01.286 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 10:57:01.259 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:57:01.386 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 10:57:01.280 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 10:57:01.470 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 10:57:41.408 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48640 10 6452 1 Summary: total flows: 139, total bytes: 410756, total packets: 1014, avg bps: 902, avg pps: 0, avg bpp: 405 Time window: 2025-12-04 09:57:10 - 2025-12-04 10:57:51 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0033s User: 0.0022s Wall: 0.0029s flows/second: 48194.4 Runtime: 0.0029s