Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 20:58:47.628 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40898 10 6452 1 2025-12-01 20:59:48.096 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52432 10 6452 1 2025-12-01 21:00:46.701 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:00:46.772 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:00:46.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:00:46.710 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:00:46.618 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:00:48.500 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37558 10 6452 1 2025-12-01 21:01:48.867 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54556 10 6452 1 2025-12-01 20:58:09.322 00:05:02.167 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 20:58:09.321 00:05:02.172 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:02:49.285 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57368 10 6452 1 2025-12-01 21:03:49.693 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51316 10 6452 1 2025-12-01 21:04:50.120 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42884 10 6452 1 2025-12-01 21:05:46.688 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:05:46.607 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:05:46.523 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:05:46.697 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:05:46.605 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:05:50.522 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51282 10 6452 1 2025-12-01 21:06:50.883 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58618 10 6452 1 2025-12-01 21:07:51.304 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39948 10 6452 1 2025-12-01 21:04:09.322 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:04:09.319 00:05:02.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:08:51.707 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39032 10 6452 1 2025-12-01 21:09:52.117 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37068 10 6452 1 2025-12-01 21:10:46.933 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:10:46.731 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:10:46.852 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:10:47.027 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:10:47.110 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:10:52.522 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54606 10 6452 1 2025-12-01 21:11:52.920 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:37906 10 6452 1 2025-12-01 21:12:53.357 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:55378 12 10375 1 2025-12-01 21:13:53.836 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:37082 10 6452 1 2025-12-01 21:10:09.319 00:05:02.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:10:09.321 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:14:54.264 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44654 10 6452 1 2025-12-01 21:15:46.815 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:15:46.741 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:15:46.772 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:15:46.731 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:15:46.736 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:15:54.672 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39426 10 6452 1 2025-12-01 21:16:55.031 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38394 10 6452 1 2025-12-01 21:17:55.391 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32852 10 6452 1 2025-12-01 21:18:55.807 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45448 10 6452 1 2025-12-01 21:19:56.215 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56292 10 6452 1 2025-12-01 21:16:09.322 00:05:02.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:16:09.324 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:20:47.141 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:20:46.877 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:20:47.048 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:20:46.834 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:20:47.059 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:20:56.618 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58808 10 6452 1 2025-12-01 21:21:56.978 00:00:11.501 TCP 1.101.0.1:3000 -> 23.104.0.1:52176 10 6452 1 2025-12-01 21:22:58.514 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51796 10 6452 1 2025-12-01 21:23:58.916 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34394 10 6452 1 2025-12-01 21:24:59.322 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41696 10 6452 1 2025-12-01 21:25:47.302 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:25:47.167 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:25:47.168 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:25:47.104 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:25:47.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:22:09.329 00:05:02.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:22:09.332 00:05:02.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:25:59.734 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48726 10 6452 1 2025-12-01 21:27:00.141 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43520 10 6452 1 2025-12-01 21:28:00.547 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 10 6452 1 2025-12-01 21:29:00.950 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:59540 10 6452 1 2025-12-01 21:30:01.331 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:45626 10 6452 1 2025-12-01 21:30:47.056 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:30:47.167 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:30:47.092 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:30:46.825 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:30:46.974 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:31:01.768 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36230 10 6452 1 2025-12-01 21:28:09.331 00:05:02.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:32:02.195 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55954 10 6452 1 2025-12-01 21:28:09.333 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:33:02.594 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45686 10 6452 1 2025-12-01 21:34:03.007 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50050 10 6452 1 2025-12-01 21:35:03.411 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56958 10 6452 1 2025-12-01 21:35:47.420 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:35:47.111 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:35:47.111 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:35:47.240 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:35:47.338 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:36:03.774 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59082 10 6452 1 2025-12-01 21:37:04.140 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56838 10 6452 1 2025-12-01 21:34:09.333 00:05:02.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:34:09.334 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:38:04.550 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43606 10 6452 1 2025-12-01 21:39:04.951 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36374 10 6452 1 2025-12-01 21:40:05.315 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56246 10 6452 1 2025-12-01 21:40:47.591 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:40:47.509 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:40:47.604 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:40:47.505 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:40:47.529 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:41:05.711 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:37302 10 6452 1 2025-12-01 21:42:06.110 00:00:10.994 TCP 1.101.0.1:3000 -> 23.104.0.1:47294 10 6452 1 2025-12-01 21:43:07.148 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57548 10 6452 1 2025-12-01 21:40:09.337 00:05:02.167 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:40:09.335 00:05:02.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:44:07.553 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39066 10 6452 1 2025-12-01 21:45:07.956 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59778 10 6452 1 2025-12-01 21:45:47.660 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:45:47.492 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:45:47.430 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:45:47.344 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:45:47.577 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:46:08.361 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42498 10 6452 1 2025-12-01 21:47:08.774 00:00:11.140 TCP 1.101.0.1:3000 -> 23.104.0.1:42960 10 6452 1 2025-12-01 21:48:09.955 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43584 10 6452 1 2025-12-01 21:49:10.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51572 10 6452 1 2025-12-01 21:46:09.338 00:05:02.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:46:09.335 00:05:02.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:50:10.764 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47000 10 6452 1 2025-12-01 21:50:47.675 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:50:47.644 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:50:47.684 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:50:47.623 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:50:47.591 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:51:11.179 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60836 10 6452 1 2025-12-01 21:52:11.548 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44012 10 6452 1 2025-12-01 21:53:11.943 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49816 10 6452 1 2025-12-01 21:54:12.363 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49706 10 6452 1 2025-12-01 21:55:12.770 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36782 10 6452 1 2025-12-01 21:55:47.727 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:55:47.535 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:55:47.784 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:55:47.781 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:55:47.868 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:52:09.338 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:52:09.342 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:56:13.137 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43862 10 6452 1 2025-12-01 21:57:13.553 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49448 10 6452 1 2025-12-01 21:58:13.953 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37854 10 6452 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 931, avg pps: 0, avg bpp: 411 Time window: 2025-12-01 20:58:09 - 2025-12-01 21:58:24 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0066s User: 0.0011s Wall: 0.0022s flows/second: 62782.3 Runtime: 0.0023s