Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 20:58:51.848 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:48706 10 6452 1 2025-12-05 20:59:52.270 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47250 10 6452 1 2025-12-05 21:00:52.676 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44372 10 6452 1 2025-12-05 21:01:53.108 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53850 10 6452 1 2025-12-05 20:58:11.383 00:05:02.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 20:58:11.385 00:05:02.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:02:42.310 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:02:42.130 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:02:42.204 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:02:42.354 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:02:42.436 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:02:53.515 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:60714 10 6452 1 2025-12-05 21:03:53.868 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51516 10 6452 1 2025-12-05 21:04:54.275 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46848 10 6452 1 2025-12-05 21:05:54.677 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50126 10 6452 1 2025-12-05 21:06:55.105 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 10 6452 1 2025-12-05 21:07:42.192 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:07:41.993 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:07:42.167 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:07:41.996 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:07:42.080 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:07:55.510 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38920 10 6452 1 2025-12-05 21:04:11.384 00:05:02.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:04:11.387 00:05:02.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:08:55.911 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40310 10 6452 1 2025-12-05 21:09:56.313 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41970 10 6452 1 2025-12-05 21:10:56.723 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34032 10 6452 1 2025-12-05 21:11:57.132 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54496 10 6452 1 2025-12-05 21:12:42.491 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:12:42.408 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:12:42.142 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:12:42.141 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:12:42.410 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:12:57.530 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43850 10 6452 1 2025-12-05 21:13:57.899 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36216 12 6556 1 2025-12-05 21:10:11.389 00:05:02.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:10:11.387 00:05:02.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:14:58.306 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52340 10 6452 1 2025-12-05 21:15:58.669 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60670 10 6452 1 2025-12-05 21:16:59.035 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40592 10 6452 1 2025-12-05 21:17:42.325 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:17:42.375 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:17:42.382 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:17:42.066 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:17:42.241 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:17:59.442 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43096 10 6452 1 2025-12-05 21:18:59.848 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:54638 10 6452 1 2025-12-05 21:16:11.388 00:05:02.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:20:00.275 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49068 10 6452 1 2025-12-05 21:16:11.390 00:05:02.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:21:00.675 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33960 10 6452 1 2025-12-05 21:22:01.038 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43028 10 6452 1 2025-12-05 21:22:42.486 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:22:42.530 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:22:42.476 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:22:42.136 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:22:42.404 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:23:01.438 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36320 10 6452 1 2025-12-05 21:24:01.845 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53652 10 6452 1 2025-12-05 21:25:02.267 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58866 10 6452 1 2025-12-05 21:22:11.392 00:05:02.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:22:11.394 00:05:02.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:26:02.626 00:00:10.636 TCP 1.101.0.1:3000 -> 23.104.0.1:33688 10 6452 1 2025-12-05 21:27:03.305 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42172 10 6452 1 2025-12-05 21:27:42.724 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:27:42.634 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:27:42.642 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:27:42.486 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:27:42.641 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:28:03.708 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40484 10 6452 1 2025-12-05 21:29:04.115 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58606 10 6452 1 2025-12-05 21:30:04.478 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43974 10 6452 1 2025-12-05 21:31:04.886 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39586 10 6452 1 2025-12-05 21:28:11.398 00:05:02.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:28:11.400 00:05:02.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:32:05.294 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48194 10 6452 1 2025-12-05 21:32:42.813 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:32:42.882 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:32:42.602 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:32:42.821 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:32:42.905 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:33:05.700 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44956 10 6452 1 2025-12-05 21:34:06.106 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:59778 10 6452 1 2025-12-05 21:35:06.511 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59576 10 6452 1 2025-12-05 21:36:06.917 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:46980 10 6452 1 2025-12-05 21:37:07.336 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45836 10 6452 1 2025-12-05 21:37:42.867 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:37:42.764 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:37:42.588 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:37:42.928 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:37:43.012 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:34:11.401 00:05:02.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:34:11.399 00:05:02.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:38:07.737 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45120 10 6452 1 2025-12-05 21:39:08.150 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48624 10 6452 1 2025-12-05 21:40:08.541 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33832 10 6452 1 2025-12-05 21:41:08.947 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42710 10 6452 1 2025-12-05 21:42:09.355 00:00:10.841 TCP 1.101.0.1:3000 -> 23.104.0.1:59618 10 6452 1 2025-12-05 21:42:42.889 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:42:42.728 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:42:42.921 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:42:42.898 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:42:42.981 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:43:10.233 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34816 10 6452 1 2025-12-05 21:40:11.402 00:05:02.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:40:11.400 00:05:02.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:44:10.591 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58798 10 6452 1 2025-12-05 21:45:10.987 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35690 10 6452 1 2025-12-05 21:46:11.382 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35956 10 6452 1 2025-12-05 21:47:11.747 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48792 10 6452 1 2025-12-05 21:47:42.987 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:47:42.776 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:47:42.778 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:47:42.777 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:47:42.869 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:48:12.154 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45712 10 6452 1 2025-12-05 21:49:12.554 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52654 10 6452 1 2025-12-05 21:46:11.405 00:05:02.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:46:11.402 00:05:02.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:50:12.951 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56490 10 6452 1 2025-12-05 21:51:13.368 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:43502 11 6504 1 2025-12-05 21:52:13.823 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50884 10 6452 1 2025-12-05 21:52:43.292 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:52:42.860 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:52:43.137 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:52:42.987 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:52:43.209 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:53:14.224 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47242 10 6452 1 2025-12-05 21:54:14.581 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50316 10 6452 1 2025-12-05 21:55:14.941 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53726 10 6452 1 2025-12-05 21:52:11.405 00:05:02.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:52:11.405 00:05:02.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:56:15.353 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33694 10 6452 1 2025-12-05 21:57:15.759 00:00:10.486 TCP 1.101.0.1:3000 -> 23.104.0.1:32836 10 6452 1 2025-12-05 21:57:43.219 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:57:43.351 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:57:43.328 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:57:43.069 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:57:43.136 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:58:16.287 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46340 10 6452 1 Summary: total flows: 140, total bytes: 417156, total packets: 1023, avg bps: 923, avg pps: 0, avg bpp: 407 Time window: 2025-12-05 20:58:11 - 2025-12-05 21:58:26 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0040s User: 0.0020s Wall: 0.0024s flows/second: 57995.3 Runtime: 0.0024s