Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 04:58:40.683 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57746 10 6452 1 2025-12-01 04:59:41.053 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49422 10 6452 1 2025-12-01 05:00:27.032 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:00:27.362 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:00:26.957 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:00:27.309 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:00:27.393 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:00:41.456 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51992 10 6452 1 2025-12-01 05:01:41.853 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49724 10 6452 1 2025-12-01 04:58:08.951 00:05:02.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 04:58:08.954 00:05:02.195 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 05:02:42.271 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60858 10 6452 1 2025-12-01 05:03:42.668 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35294 10 6452 1 2025-12-01 05:04:43.101 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52418 10 6452 1 2025-12-01 05:05:27.337 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:05:27.419 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:05:27.421 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:05:27.394 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:05:27.256 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:05:43.504 00:00:10.714 TCP 1.101.0.1:3000 -> 23.104.0.1:54062 10 6452 1 2025-12-01 05:06:44.258 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55576 10 6452 1 2025-12-01 05:07:44.667 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60562 10 6452 1 2025-12-01 05:04:08.959 00:05:02.191 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 05:04:08.956 00:05:02.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 05:08:45.100 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60458 10 6452 1 2025-12-01 05:09:45.508 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35362 10 6452 1 2025-12-01 05:10:27.666 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:10:27.538 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:10:27.640 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:10:27.481 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:10:27.584 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:10:45.909 00:00:10.528 TCP 1.101.0.1:3000 -> 23.104.0.1:46028 10 6452 1 2025-12-01 05:11:46.482 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45150 10 6452 1 2025-12-01 05:12:46.884 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:38368 10 6452 1 2025-12-01 05:13:47.316 00:00:10.679 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-12-01 05:10:08.958 00:05:02.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 05:10:08.959 00:05:02.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 05:14:48.032 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:60028 10 6452 1 2025-12-01 05:15:27.721 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:15:27.648 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:15:27.619 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:15:27.720 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:15:27.803 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:15:48.478 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39542 10 6452 1 2025-12-01 05:16:48.844 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:32952 10 6452 1 2025-12-01 05:17:49.274 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35222 10 6452 1 2025-12-01 05:18:49.637 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45328 10 6452 1 2025-12-01 05:19:50.037 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42090 10 6452 1 2025-12-01 05:16:08.962 00:05:02.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 05:16:08.959 00:05:02.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 05:20:27.866 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:20:27.937 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:20:27.794 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:20:28.102 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:20:28.186 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:20:50.442 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35946 10 6452 1 2025-12-01 05:21:50.847 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:55652 10 6452 1 2025-12-01 05:22:51.286 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47946 10 6452 1 2025-12-01 05:23:51.704 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58050 10 6452 1 2025-12-01 05:24:52.111 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:47274 10 6452 1 2025-12-01 05:25:27.906 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:25:28.009 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:25:27.823 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:25:27.838 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:25:27.823 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:25:52.517 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49498 10 6452 1 2025-12-01 05:22:08.964 00:05:02.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 05:22:08.962 00:05:02.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 05:26:52.918 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36060 10 6452 1 2025-12-01 05:27:53.323 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45590 10 6452 1 2025-12-01 05:28:53.725 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57496 10 6452 1 2025-12-01 05:29:54.143 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36948 10 6452 1 2025-12-01 05:30:27.730 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:30:27.820 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:30:27.972 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:30:27.888 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:30:27.970 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:30:54.556 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46332 10 6452 1 2025-12-01 05:31:54.963 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39306 10 6452 1 2025-12-01 05:28:08.964 00:05:02.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 05:28:08.965 00:05:02.196 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 05:32:55.366 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48506 10 6452 1 2025-12-01 05:33:55.769 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52484 10 6452 1 2025-12-01 05:34:56.178 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44750 10 6452 1 2025-12-01 05:35:28.065 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:35:27.904 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:35:27.980 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:35:27.660 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:35:27.982 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:35:56.576 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39810 10 6452 1 2025-12-01 05:36:56.979 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58924 10 6452 1 2025-12-01 05:37:57.381 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49570 10 6452 1 2025-12-01 05:34:08.964 00:05:02.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 05:34:08.968 00:05:02.198 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 05:38:57.783 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48482 10 6452 1 2025-12-01 05:39:58.192 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54482 10 6452 1 2025-12-01 05:40:28.170 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:40:28.183 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:40:28.081 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:40:27.841 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:40:28.088 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:40:58.596 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47538 10 6452 1 2025-12-01 05:41:58.998 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43736 10 6452 1 2025-12-01 05:42:59.403 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60504 10 6452 1 2025-12-01 05:40:08.965 00:05:02.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 05:40:08.967 00:05:02.198 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 05:43:59.807 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33350 10 6452 1 2025-12-01 05:45:00.213 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40162 10 6452 1 2025-12-01 05:45:28.390 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:45:28.120 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:45:28.307 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:45:28.184 00:00:00.048 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:45:28.307 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:46:00.607 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56760 10 6452 1 2025-12-01 05:47:00.972 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44736 10 6452 1 2025-12-01 05:48:01.388 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60286 10 6452 1 2025-12-01 05:49:01.789 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49258 10 6452 1 2025-12-01 05:46:08.965 00:05:02.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 05:50:02.165 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:36676 10 6452 1 2025-12-01 05:46:08.968 00:05:02.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 05:50:28.163 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:50:28.314 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:50:28.487 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:50:28.312 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:50:28.395 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:51:02.562 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41680 10 6452 1 2025-12-01 05:52:02.985 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41166 10 6452 1 2025-12-01 05:53:03.389 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34824 10 6452 1 2025-12-01 05:54:03.805 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44602 10 6452 1 2025-12-01 05:55:04.219 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38064 10 6452 1 2025-12-01 05:55:28.624 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 05:55:28.481 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 05:55:28.605 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 05:55:28.352 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:55:28.542 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 05:52:08.967 00:05:02.205 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 05:52:08.970 00:05:02.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 05:56:04.623 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34206 10 6452 1 2025-12-01 05:57:04.992 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 10 6452 1 2025-12-01 05:58:05.409 00:00:10.914 TCP 1.101.0.1:3000 -> 23.104.0.1:44154 10 6452 1 Summary: total flows: 140, total bytes: 417000, total packets: 1020, avg bps: 924, avg pps: 0, avg bpp: 408 Time window: 2025-12-01 04:58:08 - 2025-12-01 05:58:16 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0031s User: 0.0031s Wall: 0.0036s flows/second: 38934.0 Runtime: 0.0036s