Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 02:58:44.763 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:49012 10 6452 1 2025-12-01 02:59:45.176 00:00:11.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52550 10 6452 1 2025-12-01 03:00:24.913 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:00:24.810 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:00:24.753 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:00:24.811 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:00:24.895 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:00:46.531 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51074 10 6452 1 2025-12-01 03:01:46.932 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:36448 10 6452 1 2025-12-01 02:58:08.914 00:05:02.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 02:58:08.917 00:05:02.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 03:02:47.366 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:35228 10 6452 1 2025-12-01 03:03:47.788 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55522 10 6452 1 2025-12-01 03:04:48.186 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43284 10 6452 1 2025-12-01 03:05:24.875 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:05:24.873 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:05:24.818 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:05:24.973 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:05:25.056 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:05:48.551 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58596 10 6452 1 2025-12-01 03:06:48.955 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33382 10 6452 1 2025-12-01 03:07:49.329 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50142 10 6452 1 2025-12-01 03:04:08.917 00:05:02.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 03:04:08.914 00:05:02.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 03:08:49.729 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41416 10 6452 1 2025-12-01 03:09:50.110 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:36228 10 6452 1 2025-12-01 03:10:24.940 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:10:25.053 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:10:25.213 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:10:25.153 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:10:25.236 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:10:50.510 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35176 10 6452 1 2025-12-01 03:11:50.911 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56102 10 6452 1 2025-12-01 03:12:51.320 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39694 10 6452 1 2025-12-01 03:13:51.723 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40922 10 6452 1 2025-12-01 03:10:08.918 00:05:02.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 03:10:08.916 00:05:02.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 03:14:52.139 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44994 10 6452 1 2025-12-01 03:15:25.190 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:15:25.421 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:15:24.980 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:15:25.261 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:15:25.344 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:15:52.586 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38596 10 6452 1 2025-12-01 03:16:52.954 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34638 10 6452 1 2025-12-01 03:17:53.362 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37622 10 6452 1 2025-12-01 03:18:53.765 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:57300 10 6452 1 2025-12-01 03:19:54.144 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48108 10 6452 1 2025-12-01 03:16:08.920 00:05:02.191 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 03:16:08.918 00:05:02.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 03:20:25.487 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:20:25.261 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:20:25.188 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:20:25.357 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:20:25.404 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:20:54.546 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48590 10 6452 1 2025-12-01 03:21:54.950 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46498 10 6452 1 2025-12-01 03:22:55.357 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41642 10 6452 1 2025-12-01 03:23:55.767 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46836 10 6452 1 2025-12-01 03:24:56.140 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44870 10 6452 1 2025-12-01 03:25:25.493 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:25:25.353 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:25:25.348 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:25:25.395 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:25:25.411 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:25:56.545 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39018 10 6452 1 2025-12-01 03:22:08.923 00:05:02.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 03:22:08.921 00:05:02.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 03:26:56.914 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43920 10 6452 1 2025-12-01 03:27:57.314 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59234 11 6492 1 2025-12-01 03:28:57.715 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:56110 10 6452 1 2025-12-01 03:29:58.100 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52658 10 6452 1 2025-12-01 03:30:25.523 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:30:25.559 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:30:25.464 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:30:25.440 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:30:25.340 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:30:58.501 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48026 10 6452 1 2025-12-01 03:31:58.904 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46822 12 6556 1 2025-12-01 03:28:08.926 00:05:02.186 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 03:28:08.925 00:05:02.191 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 03:32:59.313 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45896 10 6452 1 2025-12-01 03:33:59.719 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54734 10 6452 1 2025-12-01 03:35:00.108 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42656 10 6452 1 2025-12-01 03:35:25.688 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:35:25.456 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:35:25.558 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:35:25.551 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:35:25.771 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:36:00.469 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58242 10 6452 1 2025-12-01 03:37:00.876 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38522 10 6452 1 2025-12-01 03:34:08.928 00:05:02.186 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 03:38:01.276 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42278 10 6452 1 2025-12-01 03:34:08.926 00:05:02.191 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 03:39:01.684 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60790 10 6452 1 2025-12-01 03:40:02.115 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58672 10 6452 1 2025-12-01 03:40:25.630 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:40:25.730 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:40:25.727 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:40:25.660 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:40:25.547 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:41:02.520 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:45804 10 6452 1 2025-12-01 03:42:02.940 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:58346 10 6452 1 2025-12-01 03:43:03.318 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41930 10 6452 1 2025-12-01 03:40:08.927 00:05:02.192 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 03:40:08.930 00:05:02.186 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 03:44:03.721 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55990 10 6452 1 2025-12-01 03:45:04.127 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53182 10 6452 1 2025-12-01 03:45:25.928 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:45:25.925 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:45:25.928 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:45:25.560 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:45:25.845 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:46:04.528 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48496 10 6452 1 2025-12-01 03:47:04.934 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:50850 10 6452 1 2025-12-01 03:48:05.326 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54166 10 6452 1 2025-12-01 03:49:05.733 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34456 10 6452 1 2025-12-01 03:46:08.931 00:05:02.187 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 03:46:08.929 00:05:02.191 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 03:50:06.139 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43346 10 6452 1 2025-12-01 03:50:25.730 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:50:25.806 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:50:25.763 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:50:25.934 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:50:26.016 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:51:06.541 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52280 10 6452 1 2025-12-01 03:52:06.950 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:36860 12 10369 1 2025-12-01 03:53:07.446 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 10 6452 1 2025-12-01 03:54:07.849 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:39846 10 6452 1 2025-12-01 03:55:08.265 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40064 10 6452 1 2025-12-01 03:55:26.143 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 03:55:25.939 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 03:55:26.067 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 03:55:25.896 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:55:26.061 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 03:52:08.930 00:05:02.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 03:52:08.933 00:05:02.191 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 03:56:08.668 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53272 10 6452 1 2025-12-01 03:57:09.099 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:60740 12 10375 1 2025-12-01 03:58:09.573 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47100 10 6452 1 Summary: total flows: 140, total bytes: 424984, total packets: 1027, avg bps: 941, avg pps: 0, avg bpp: 413 Time window: 2025-12-01 02:58:08 - 2025-12-01 03:58:19 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0052s User: 0.0010s Wall: 0.0021s flows/second: 66826.3 Runtime: 0.0021s