Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 21:59:16.694 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45562 10 6452 1 2025-12-05 22:00:17.111 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49754 10 6452 1 2025-12-05 21:57:11.408 00:05:02.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:57:11.406 00:05:02.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 22:01:17.478 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37812 10 6452 1 2025-12-05 22:02:17.907 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49492 12 6556 1 2025-12-05 22:02:43.364 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:02:43.368 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:02:43.239 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:02:43.281 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:02:43.218 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:03:18.320 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:53154 12 10375 1 2025-12-05 22:04:18.802 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33422 10 6452 1 2025-12-05 22:05:19.213 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35656 10 6452 1 2025-12-05 22:06:19.615 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54754 10 6452 1 2025-12-05 22:03:11.412 00:05:02.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 22:03:11.414 00:05:02.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 22:07:20.026 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57252 10 6452 1 2025-12-05 22:07:43.530 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:07:43.251 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:07:43.149 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:07:43.149 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:07:43.232 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:08:20.430 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59672 10 6452 1 2025-12-05 22:09:20.826 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60400 10 6452 1 2025-12-05 22:10:21.228 00:00:10.998 TCP 1.101.0.1:3000 -> 23.104.0.1:51694 10 6452 1 2025-12-05 22:11:22.264 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32976 10 6452 1 2025-12-05 22:12:22.667 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48018 10 6452 1 2025-12-05 22:12:43.577 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:12:43.538 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:12:43.367 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:12:43.496 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:12:43.437 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:09:11.412 00:05:02.214 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 22:09:11.415 00:05:02.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 22:13:23.028 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49872 10 6452 1 2025-12-05 22:14:23.427 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37384 10 6452 1 2025-12-05 22:15:23.828 00:00:10.638 TCP 1.101.0.1:3000 -> 23.104.0.1:33892 10 6452 1 2025-12-05 22:16:24.504 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49238 10 6452 1 2025-12-05 22:17:24.900 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39488 10 6452 1 2025-12-05 22:17:43.683 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:17:43.637 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:17:43.611 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:17:43.688 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:17:43.693 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:18:25.306 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58160 10 6452 1 2025-12-05 22:15:11.414 00:05:02.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 22:15:11.417 00:05:02.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 22:19:25.706 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38698 10 6452 1 2025-12-05 22:20:26.116 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47328 10 6452 1 2025-12-05 22:21:26.516 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36112 10 6452 1 2025-12-05 22:22:26.891 00:00:10.633 TCP 1.101.0.1:3000 -> 23.104.0.1:53116 10 6452 1 2025-12-05 22:22:43.475 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:22:43.783 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:22:43.578 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:22:43.582 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:22:43.663 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:23:27.561 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39156 10 6452 1 2025-12-05 22:24:27.961 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60888 10 6452 1 2025-12-05 22:21:11.418 00:05:02.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 22:21:11.413 00:05:02.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 22:25:28.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47528 10 6452 1 2025-12-05 22:26:28.764 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:55862 10 6452 1 2025-12-05 22:27:43.864 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:27:29.182 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48036 10 6452 1 2025-12-05 22:27:43.859 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:27:43.610 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:27:43.782 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:27:43.687 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:28:29.583 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42582 10 6452 1 2025-12-05 22:29:29.995 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33836 10 6452 1 2025-12-05 22:30:30.400 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50432 10 6452 1 2025-12-05 22:27:11.415 00:05:02.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 22:27:11.418 00:05:02.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 22:31:30.805 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33752 10 6452 1 2025-12-05 22:32:31.207 00:00:10.485 TCP 1.101.0.1:3000 -> 23.104.0.1:36388 10 6452 1 2025-12-05 22:32:43.724 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:32:43.901 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:32:43.740 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:32:43.960 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:32:43.823 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:33:31.732 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42944 10 6452 1 2025-12-05 22:34:32.153 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46918 10 6452 1 2025-12-05 22:35:32.553 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36330 10 6452 1 2025-12-05 22:36:32.957 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:39384 10 6452 1 2025-12-05 22:33:11.421 00:05:02.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 22:33:11.420 00:05:02.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 22:37:43.998 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:37:43.709 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:37:44.066 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:37:43.916 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:37:43.920 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:37:33.373 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:54624 10 6452 1 2025-12-05 22:38:33.736 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42816 10 6452 1 2025-12-05 22:39:34.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39278 10 6452 1 2025-12-05 22:40:34.551 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41446 10 6452 1 2025-12-05 22:41:34.958 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39854 10 6452 1 2025-12-05 22:42:44.134 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:42:44.201 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:42:35.362 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:34552 10 6452 1 2025-12-05 22:42:43.953 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:42:44.052 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:42:44.115 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:39:11.422 00:05:02.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 22:39:11.425 00:05:02.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 22:43:35.759 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:55462 10 6452 1 2025-12-05 22:44:36.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38912 10 6452 1 2025-12-05 22:45:36.581 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42328 10 6452 1 2025-12-05 22:46:36.981 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34298 10 6452 1 2025-12-05 22:47:44.198 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:47:44.009 00:00:00.042 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:47:44.140 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:47:44.116 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:47:44.228 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:47:37.387 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57134 10 6452 1 2025-12-05 22:48:37.797 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:43520 12 10375 1 2025-12-05 22:45:11.426 00:05:02.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 22:45:11.424 00:05:02.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 22:49:38.280 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60750 10 6452 1 2025-12-05 22:50:38.695 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56388 10 6452 1 2025-12-05 22:51:39.119 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45278 10 6452 1 2025-12-05 22:52:44.520 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:52:44.484 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:52:44.248 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:52:44.438 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:52:44.377 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:52:39.519 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42642 10 6452 1 2025-12-05 22:53:39.926 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:38594 10 6452 1 2025-12-05 22:54:40.354 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56468 10 6452 1 2025-12-05 22:51:11.426 00:05:02.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 22:51:11.428 00:05:02.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 22:55:40.755 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:60978 10 6452 1 2025-12-05 22:56:41.131 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33596 10 6452 1 2025-12-05 22:57:44.343 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 22:57:44.251 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 22:57:44.422 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:57:44.261 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 22:57:44.338 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 22:57:41.496 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50520 10 6452 1 Summary: total flows: 139, total bytes: 418498, total packets: 1016, avg bps: 919, avg pps: 0, avg bpp: 411 Time window: 2025-12-05 21:57:11 - 2025-12-05 22:57:51 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0034s User: 0.0026s Wall: 0.0023s flows/second: 61073.6 Runtime: 0.0023s