Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 11:58:48.382 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46342 10 6452 1 2025-12-01 11:59:48.798 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44144 10 6452 1 2025-12-01 12:00:35.795 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:00:35.744 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:00:35.769 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:00:35.749 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:00:35.831 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:00:49.155 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41042 10 6452 1 2025-12-01 12:01:49.557 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40708 10 6452 1 2025-12-01 11:58:09.108 00:05:02.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 11:58:09.112 00:05:02.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 12:02:49.962 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37404 10 6452 1 2025-12-01 12:03:50.326 00:00:10.854 TCP 1.101.0.1:3000 -> 23.104.0.1:33742 10 6452 1 2025-12-01 12:04:51.214 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41300 10 6452 1 2025-12-01 12:05:35.877 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:05:35.904 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:05:35.693 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:05:36.109 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:05:36.192 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:05:51.621 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55430 10 6452 1 2025-12-01 12:06:52.026 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48994 10 6452 1 2025-12-01 12:07:52.434 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41750 10 6452 1 2025-12-01 12:04:09.112 00:05:02.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 12:04:09.109 00:05:02.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 12:08:52.833 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40924 10 6452 1 2025-12-01 12:09:53.249 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54290 10 6452 1 2025-12-01 12:10:35.854 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:10:35.670 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:10:35.984 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:10:35.985 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:10:36.066 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:10:53.606 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45004 10 6452 1 2025-12-01 12:11:54.015 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39322 10 6452 1 2025-12-01 12:12:54.378 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52406 10 6452 1 2025-12-01 12:10:09.112 00:05:02.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 12:13:54.780 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37322 10 6452 1 2025-12-01 12:10:09.116 00:05:02.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 12:14:55.187 00:00:10.549 TCP 1.101.0.1:3000 -> 23.104.0.1:52738 10 6452 1 2025-12-01 12:15:35.935 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:15:36.150 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:15:35.954 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:15:36.155 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:15:36.237 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:15:55.776 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37474 10 6452 1 2025-12-01 12:16:56.188 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58568 10 6452 1 2025-12-01 12:17:56.595 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59782 10 6452 1 2025-12-01 12:18:57.000 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58458 10 6452 1 2025-12-01 12:19:57.371 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58326 10 6452 1 2025-12-01 12:16:09.117 00:05:02.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 12:16:09.113 00:05:02.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 12:20:36.221 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:20:36.210 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:20:36.264 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:20:36.039 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:20:36.139 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:20:57.783 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:46870 10 6452 1 2025-12-01 12:21:58.181 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60984 10 6452 1 2025-12-01 12:22:58.584 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58594 10 6452 1 2025-12-01 12:23:58.995 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57608 10 6452 1 2025-12-01 12:24:59.403 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45718 10 6452 1 2025-12-01 12:25:36.741 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:25:36.659 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:25:36.671 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:25:36.604 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:25:36.683 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:22:09.118 00:05:02.177 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 12:25:59.806 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40438 10 6452 1 2025-12-01 12:22:09.117 00:05:02.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 12:27:00.211 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55800 10 6452 1 2025-12-01 12:28:00.648 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47706 10 6452 1 2025-12-01 12:29:01.061 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38644 10 6452 1 2025-12-01 12:30:01.465 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53222 10 6452 1 2025-12-01 12:30:36.446 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:30:36.749 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:30:36.607 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:30:36.611 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:30:36.695 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:31:01.830 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37868 10 6452 1 2025-12-01 12:28:09.119 00:05:02.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 12:32:02.233 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59836 10 6452 1 2025-12-01 12:28:09.117 00:05:02.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 12:33:02.630 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52690 10 6452 1 2025-12-01 12:34:03.039 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56868 10 6452 1 2025-12-01 12:35:03.443 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42202 10 6452 1 2025-12-01 12:35:36.575 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:35:36.494 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:35:36.571 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:35:36.310 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:35:36.129 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:36:03.805 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54478 10 6452 1 2025-12-01 12:37:04.213 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43922 10 6452 1 2025-12-01 12:34:09.123 00:05:02.177 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 12:38:04.616 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58132 10 6452 1 2025-12-01 12:34:09.121 00:05:02.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 12:39:05.022 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57972 10 6452 1 2025-12-01 12:40:05.425 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47450 10 6452 1 2025-12-01 12:40:36.585 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:40:36.677 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:40:36.642 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:40:36.318 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:40:36.502 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:41:05.791 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46972 10 6452 1 2025-12-01 12:42:06.195 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37512 10 6452 1 2025-12-01 12:43:06.599 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47506 10 6452 1 2025-12-01 12:40:09.125 00:05:02.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 12:40:09.123 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 12:44:07.002 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41544 10 6452 1 2025-12-01 12:45:07.411 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41040 10 6452 1 2025-12-01 12:45:37.014 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:45:36.934 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:45:36.912 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:45:36.647 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:45:36.932 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:46:07.776 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36316 10 6452 1 2025-12-01 12:47:08.184 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34998 10 6452 1 2025-12-01 12:48:08.580 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:37730 10 6452 1 2025-12-01 12:49:09.000 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51342 10 6452 1 2025-12-01 12:46:09.127 00:05:02.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 12:46:09.126 00:05:02.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 12:50:09.401 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44114 10 6452 1 2025-12-01 12:50:36.787 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:50:36.570 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:50:36.407 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:50:36.737 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:50:36.820 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:51:09.799 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53086 10 6452 1 2025-12-01 12:52:10.206 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57698 10 6452 1 2025-12-01 12:53:10.609 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58890 10 6452 1 2025-12-01 12:54:11.010 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:50388 10 6452 1 2025-12-01 12:55:11.397 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33190 10 6452 1 2025-12-01 12:55:36.973 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 12:55:36.884 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 12:55:36.982 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 12:55:36.805 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:55:36.891 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 12:52:09.129 00:05:02.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 12:52:09.131 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 12:56:11.810 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34932 10 6452 1 2025-12-01 12:57:12.223 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59472 10 6452 1 2025-12-01 12:58:12.638 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38786 10 6452 1 Summary: total flows: 140, total bytes: 417000, total packets: 1020, avg bps: 923, avg pps: 0, avg bpp: 408 Time window: 2025-12-01 11:58:09 - 2025-12-01 12:58:23 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0050s User: 0.0010s Wall: 0.0019s flows/second: 73722.9 Runtime: 0.0019s