Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 22:59:05.589 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47204 10 6452 1 2025-12-04 23:00:05.993 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55262 10 6452 1 2025-12-04 22:57:10.898 00:05:02.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 22:57:10.900 00:05:02.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:01:06.401 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34442 10 6452 1 2025-12-04 23:02:15.602 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:02:15.246 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:02:15.519 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:02:15.582 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:02:15.624 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:02:06.806 00:00:10.912 TCP 1.101.0.1:3000 -> 23.104.0.1:58758 10 6452 1 2025-12-04 23:03:07.762 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54892 10 6452 1 2025-12-04 23:04:08.182 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55244 10 6452 1 2025-12-04 23:05:08.583 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44366 10 6452 1 2025-12-04 23:06:08.979 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:32906 10 6452 1 2025-12-04 23:03:10.898 00:05:02.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:07:15.741 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:07:15.779 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:07:15.402 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:07:15.647 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:07:15.709 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:03:10.901 00:05:02.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:07:09.347 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37808 10 6452 1 2025-12-04 23:08:09.712 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47874 10 6452 1 2025-12-04 23:09:10.115 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:32830 10 6452 1 2025-12-04 23:10:10.516 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42310 10 6452 1 2025-12-04 23:11:10.920 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45248 12 6556 1 2025-12-04 23:12:15.492 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:12:15.608 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:12:15.587 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:12:15.806 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:12:15.669 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:12:11.316 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 10 6452 1 2025-12-04 23:09:10.903 00:05:02.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:09:10.902 00:05:02.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:13:11.716 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56860 10 6452 1 2025-12-04 23:14:12.139 00:00:10.672 TCP 1.101.0.1:3000 -> 23.104.0.1:55880 10 6452 1 2025-12-04 23:15:12.849 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-12-04 23:16:13.283 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:42382 10 6452 1 2025-12-04 23:17:15.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:17:15.943 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:17:15.924 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:17:16.101 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:17:16.184 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:17:13.690 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56120 12 6556 1 2025-12-04 23:18:14.114 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50616 10 6452 1 2025-12-04 23:15:10.906 00:05:02.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:15:10.903 00:05:02.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:19:14.526 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58138 10 6452 1 2025-12-04 23:20:14.943 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:33306 10 6452 1 2025-12-04 23:21:15.383 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34620 10 6452 1 2025-12-04 23:22:15.955 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:22:15.956 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:22:16.086 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:22:16.070 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:22:16.153 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:22:15.789 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57164 10 6452 1 2025-12-04 23:23:16.189 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40452 10 6452 1 2025-12-04 23:24:16.595 00:00:10.750 TCP 1.101.0.1:3000 -> 23.104.0.1:49474 10 6452 1 2025-12-04 23:21:10.905 00:05:02.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:21:10.906 00:05:02.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:25:17.387 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52478 10 6452 1 2025-12-04 23:26:17.786 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44698 10 6452 1 2025-12-04 23:27:15.933 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:27:15.902 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:27:16.017 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:27:16.044 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:27:16.047 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:27:18.147 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51750 10 6452 1 2025-12-04 23:28:18.506 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35632 10 6452 1 2025-12-04 23:29:18.906 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33268 10 6452 1 2025-12-04 23:30:19.312 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36924 10 6452 1 2025-12-04 23:27:10.910 00:05:02.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:27:10.913 00:05:02.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:31:19.715 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 10 6452 1 2025-12-04 23:32:16.326 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:32:16.118 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:32:15.994 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:32:16.244 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:32:16.243 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:32:20.123 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37886 10 6452 1 2025-12-04 23:33:20.522 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51670 10 6452 1 2025-12-04 23:34:20.925 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56280 10 6452 1 2025-12-04 23:35:21.331 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58712 10 6452 1 2025-12-04 23:36:21.736 00:00:10.920 TCP 1.101.0.1:3000 -> 23.104.0.1:47572 10 6452 1 2025-12-04 23:33:10.911 00:05:02.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:33:10.914 00:05:02.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:37:16.513 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:37:16.311 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:37:16.318 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:37:16.431 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:37:16.239 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:37:22.713 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45142 10 6452 1 2025-12-04 23:38:23.122 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55012 10 6452 1 2025-12-04 23:39:23.525 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39728 10 6452 1 2025-12-04 23:40:23.929 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50140 10 6452 1 2025-12-04 23:41:24.351 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:51346 10 6452 1 2025-12-04 23:42:16.418 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:42:16.387 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:42:16.352 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:42:16.333 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:42:16.435 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:42:24.750 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59560 10 6452 1 2025-12-04 23:39:10.913 00:05:02.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:39:10.915 00:05:02.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:43:25.151 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48712 10 6452 1 2025-12-04 23:44:25.517 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53128 10 6452 1 2025-12-04 23:45:25.918 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50338 10 6452 1 2025-12-04 23:46:26.332 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41506 10 6452 1 2025-12-04 23:47:16.611 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:47:16.531 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:47:16.443 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:47:16.530 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:47:16.537 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:47:26.695 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58068 10 6452 1 2025-12-04 23:48:27.107 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:46994 10 6452 1 2025-12-04 23:45:10.913 00:05:02.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:45:10.917 00:05:02.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:49:27.497 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60774 10 6452 1 2025-12-04 23:50:27.901 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38564 10 6452 1 2025-12-04 23:51:28.321 00:00:10.908 TCP 1.101.0.1:3000 -> 23.104.0.1:34622 10 6452 1 2025-12-04 23:52:16.777 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:52:16.537 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:52:16.476 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:52:16.696 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:52:16.597 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:52:29.281 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 10 6452 1 2025-12-04 23:53:29.652 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45896 10 6452 1 2025-12-04 23:54:30.021 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46800 10 6452 1 2025-12-04 23:51:10.914 00:05:02.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 23:51:10.917 00:05:02.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 23:55:30.418 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34304 10 6452 1 2025-12-04 23:56:30.820 00:00:10.692 TCP 1.101.0.1:3000 -> 23.104.0.1:41532 10 6452 1 2025-12-04 23:57:16.628 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 23:57:16.729 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:57:16.702 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 23:57:16.855 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 23:57:16.786 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 23:57:31.553 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55064 10 6452 1 2025-12-04 23:58:31.953 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39806 10 6452 1 Summary: total flows: 140, total bytes: 417208, total packets: 1024, avg bps: 904, avg pps: 0, avg bpp: 407 Time window: 2025-12-04 22:57:10 - 2025-12-04 23:58:42 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0049s User: 0.0000s Wall: 0.0013s flows/second: 109287.7 Runtime: 0.0013s