Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 05:58:40.773 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57890 10 6452 1 2025-12-02 05:59:41.190 00:00:11.780 TCP 1.101.0.1:3000 -> 23.104.0.1:53098 10 6452 1 2025-12-02 06:00:43.011 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:53140 10 6452 1 2025-12-02 06:00:57.757 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:00:57.602 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:00:57.498 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:00:57.528 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:00:57.840 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:01:43.385 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45488 10 6452 1 2025-12-02 05:58:09.538 00:05:02.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 05:58:09.540 00:05:02.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:02:43.795 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:60164 10 6452 1 2025-12-02 06:03:44.153 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60070 10 6452 1 2025-12-02 06:04:44.550 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37384 10 6452 1 2025-12-02 06:05:57.588 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:05:57.582 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:05:57.674 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:05:57.480 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:05:44.912 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54042 10 6452 1 2025-12-02 06:05:57.563 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:06:45.316 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35218 10 6452 1 2025-12-02 06:07:45.719 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56736 10 6452 1 2025-12-02 06:04:09.541 00:05:02.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:04:09.539 00:05:02.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:08:46.142 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41784 10 6452 1 2025-12-02 06:09:46.545 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36270 10 6452 1 2025-12-02 06:10:57.714 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:10:57.723 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:10:57.432 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:10:46.947 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:60790 10 6452 1 2025-12-02 06:10:57.709 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:10:57.791 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:11:47.317 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34710 10 6452 1 2025-12-02 06:12:47.680 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55946 10 6452 1 2025-12-02 06:13:48.099 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36542 10 6452 1 2025-12-02 06:10:09.547 00:05:02.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:10:09.551 00:05:02.128 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:14:48.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51516 10 6452 1 2025-12-02 06:15:57.915 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:15:57.774 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:15:57.538 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:15:57.776 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:15:48.930 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:55588 10 6452 1 2025-12-02 06:15:57.859 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:16:49.367 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:35922 10 6452 1 2025-12-02 06:17:49.801 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39224 10 6452 1 2025-12-02 06:18:50.209 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41372 10 6452 1 2025-12-02 06:19:50.571 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53416 10 6452 1 2025-12-02 06:16:09.547 00:05:02.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:16:09.550 00:05:02.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:20:57.906 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:20:57.943 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:20:57.825 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:20:57.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:20:57.823 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:20:50.973 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50960 10 6452 1 2025-12-02 06:21:51.388 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39350 10 6452 1 2025-12-02 06:22:51.793 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33026 10 6452 1 2025-12-02 06:23:52.197 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48168 10 6452 1 2025-12-02 06:24:52.602 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37872 10 6452 1 2025-12-02 06:25:57.934 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:25:57.844 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:25:57.978 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:25:57.576 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:25:57.851 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:25:53.002 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:40476 10 6452 1 2025-12-02 06:22:09.550 00:05:02.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:22:09.548 00:05:02.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:26:53.362 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45164 10 6452 1 2025-12-02 06:27:53.726 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:50996 10 6452 1 2025-12-02 06:28:54.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37014 10 6452 1 2025-12-02 06:29:54.513 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42696 10 6452 1 2025-12-02 06:30:58.122 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:30:58.240 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:30:57.944 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:30:58.234 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:30:58.316 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:30:54.877 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57654 10 6452 1 2025-12-02 06:31:55.238 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51460 10 6452 1 2025-12-02 06:28:09.551 00:05:02.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:28:09.549 00:05:02.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:32:55.643 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37088 10 6452 1 2025-12-02 06:33:56.057 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40910 10 6452 1 2025-12-02 06:34:56.455 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33668 10 6452 1 2025-12-02 06:35:57.969 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:35:58.287 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:35:58.197 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:35:58.169 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:35:58.251 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:35:56.863 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40272 10 6452 1 2025-12-02 06:36:57.278 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46958 10 6452 1 2025-12-02 06:37:57.683 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44942 10 6452 1 2025-12-02 06:34:09.551 00:05:02.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:34:09.552 00:05:02.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:38:58.111 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56956 11 6504 1 2025-12-02 06:39:58.550 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54994 10 6452 1 2025-12-02 06:40:58.222 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:40:58.290 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:40:58.389 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:40:58.251 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:40:58.141 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:40:58.960 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57492 10 6452 1 2025-12-02 06:41:59.366 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49120 10 6452 1 2025-12-02 06:42:59.721 00:00:10.934 TCP 1.101.0.1:3000 -> 23.104.0.1:50536 12 10375 1 2025-12-02 06:40:09.555 00:05:02.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:44:00.694 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35798 10 6452 1 2025-12-02 06:40:09.551 00:05:02.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:45:01.109 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52574 10 6452 1 2025-12-02 06:45:58.226 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:45:58.402 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:45:58.424 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:45:58.459 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:45:58.541 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:46:01.508 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34730 10 6452 1 2025-12-02 06:47:01.917 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41968 10 6452 1 2025-12-02 06:48:02.321 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48172 10 6452 1 2025-12-02 06:49:02.731 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:58754 10 6452 1 2025-12-02 06:50:03.113 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47832 11 6504 1 2025-12-02 06:46:09.557 00:05:02.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:46:09.556 00:05:02.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:50:58.602 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:50:58.610 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:50:58.161 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:50:58.525 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:50:58.608 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:51:03.531 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:46072 10 6452 1 2025-12-02 06:52:03.976 00:00:13.880 TCP 1.101.0.1:3000 -> 23.104.0.1:54850 10 6452 1 2025-12-02 06:53:07.932 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:44700 10 6452 1 2025-12-02 06:54:08.361 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53964 10 6452 1 2025-12-02 06:55:08.761 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54612 10 6452 1 2025-12-02 06:55:58.620 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:55:58.321 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:55:58.362 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:55:58.618 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:55:58.700 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:52:09.557 00:05:02.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:52:09.560 00:05:02.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:56:09.168 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34842 10 6452 1 2025-12-02 06:57:09.569 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37964 10 6452 1 2025-12-02 06:58:09.930 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:60362 10 6452 1 Summary: total flows: 140, total bytes: 421027, total packets: 1024, avg bps: 932, avg pps: 0, avg bpp: 411 Time window: 2025-12-02 05:58:09 - 2025-12-02 06:58:20 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0032s User: 0.0032s Wall: 0.0019s flows/second: 72727.6 Runtime: 0.0020s