Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 06:59:02.943 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:47514 10 6452 1 2025-12-04 07:00:03.367 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35636 10 6452 1 2025-12-04 07:01:03.776 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56896 10 6452 1 2025-12-04 07:01:56.371 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:01:56.311 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:01:56.179 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:01:56.011 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:01:56.092 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 06:58:10.538 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 07:02:04.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54774 10 6452 1 2025-12-04 06:58:10.534 00:05:02.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 07:03:04.549 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35574 10 6452 1 2025-12-04 07:04:04.915 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45928 10 6452 1 2025-12-04 07:05:05.314 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42932 10 6452 1 2025-12-04 07:06:05.681 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55464 10 6452 1 2025-12-04 07:06:56.662 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 07:06:56.687 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:06:56.685 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:06:56.310 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:06:56.579 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:07:06.103 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40884 10 6452 1 2025-12-04 07:04:10.534 00:05:02.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 07:04:10.537 00:05:02.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 07:08:06.508 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40352 10 6452 1 2025-12-04 07:09:06.918 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47916 10 6452 1 2025-12-04 07:10:07.284 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40230 10 6452 1 2025-12-04 07:11:07.685 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41152 10 6452 1 2025-12-04 07:11:56.689 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:11:56.688 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:11:56.484 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:11:56.389 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:11:56.773 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 07:12:08.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57616 10 6452 1 2025-12-04 07:13:08.516 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46748 10 6452 1 2025-12-04 07:10:10.536 00:05:02.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 07:10:10.539 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 07:14:08.877 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45492 10 6452 1 2025-12-04 07:15:09.281 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44946 10 6452 1 2025-12-04 07:16:09.644 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33356 10 6452 1 2025-12-04 07:16:56.595 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 07:16:56.742 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:16:56.726 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:16:56.630 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:16:56.512 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:17:10.103 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56680 10 6452 1 2025-12-04 07:18:10.514 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 10 6452 1 2025-12-04 07:19:10.946 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42992 10 6452 1 2025-12-04 07:16:10.538 00:05:02.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 07:16:10.541 00:05:02.166 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 07:20:11.370 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33524 10 6452 1 2025-12-04 07:21:11.776 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57064 10 6452 1 2025-12-04 07:21:56.769 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:21:56.818 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:21:56.676 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:21:56.715 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:21:56.799 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 07:22:12.144 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42450 10 6452 1 2025-12-04 07:23:12.549 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58232 10 6452 1 2025-12-04 07:24:12.913 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47236 10 6452 1 2025-12-04 07:25:13.345 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53214 10 6452 1 2025-12-04 07:22:10.539 00:05:02.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 07:22:10.542 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 07:26:13.746 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56776 10 6452 1 2025-12-04 07:26:56.776 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:26:56.781 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:26:56.832 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:26:56.628 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:26:56.711 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 07:27:14.153 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33798 10 6452 1 2025-12-04 07:28:14.516 00:00:10.977 TCP 1.101.0.1:3000 -> 23.104.0.1:54636 10 6452 1 2025-12-04 07:29:15.531 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58088 10 6452 1 2025-12-04 07:30:15.929 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57164 10 6452 1 2025-12-04 07:31:16.350 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34356 10 6452 1 2025-12-04 07:31:56.909 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:31:56.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:31:56.753 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:31:56.946 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:31:57.029 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 07:28:10.542 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 07:28:10.540 00:05:02.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 07:32:16.719 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:47544 10 6452 1 2025-12-04 07:33:17.135 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35898 10 6452 1 2025-12-04 07:34:17.538 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58152 10 6452 1 2025-12-04 07:35:17.941 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57520 10 6452 1 2025-12-04 07:36:18.311 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39118 10 6452 1 2025-12-04 07:36:57.143 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 07:36:57.067 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:36:57.056 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:36:56.757 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:36:57.060 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:37:18.714 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40652 10 6452 1 2025-12-04 07:34:10.555 00:05:02.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 07:34:10.557 00:05:02.160 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 07:38:19.117 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55610 10 6452 1 2025-12-04 07:39:19.522 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35340 10 6452 1 2025-12-04 07:40:19.929 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:54882 10 6452 1 2025-12-04 07:41:20.355 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53708 10 6452 1 2025-12-04 07:41:57.267 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 07:41:57.044 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:41:57.132 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:41:56.850 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:41:57.184 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:42:20.766 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42456 10 6452 1 2025-12-04 07:43:21.177 00:00:10.932 TCP 1.101.0.1:3000 -> 23.104.0.1:50462 10 6452 1 2025-12-04 07:40:10.556 00:05:02.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 07:40:10.558 00:05:02.160 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 07:44:22.157 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57238 10 6452 1 2025-12-04 07:45:22.562 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36934 10 6452 1 2025-12-04 07:46:22.921 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51514 10 6452 1 2025-12-04 07:46:57.447 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:46:57.361 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:46:57.083 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:46:57.363 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:46:57.445 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 07:47:23.339 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41638 10 6452 1 2025-12-04 07:48:23.753 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49492 10 6452 1 2025-12-04 07:49:24.155 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58690 10 6452 1 2025-12-04 07:46:10.561 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 07:46:10.559 00:05:02.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 07:50:24.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41084 10 6452 1 2025-12-04 07:51:24.950 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51726 10 6452 1 2025-12-04 07:51:57.411 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:51:57.160 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:51:57.408 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:51:57.455 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:51:57.493 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 07:52:25.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49446 10 6452 1 2025-12-04 07:53:25.765 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44672 10 6452 1 2025-12-04 07:54:26.180 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37230 10 6452 1 2025-12-04 07:55:26.603 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49562 10 6452 1 2025-12-04 07:52:10.561 00:05:02.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 07:52:10.563 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 07:56:27.003 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51640 10 6452 1 2025-12-04 07:56:57.552 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 07:56:57.402 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 07:56:57.461 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 07:56:57.245 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:56:57.469 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 07:57:27.410 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50650 10 6452 1 2025-12-04 07:58:27.808 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56330 10 6452 1 Summary: total flows: 140, total bytes: 417000, total packets: 1020, avg bps: 919, avg pps: 0, avg bpp: 408 Time window: 2025-12-04 06:58:10 - 2025-12-04 07:58:38 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0042s User: 0.0021s Wall: 0.0020s flows/second: 71029.7 Runtime: 0.0020s