Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-06 20:59:13.734 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57026 10 6452 1 2025-12-06 21:00:14.145 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47152 10 6452 1 2025-12-06 21:01:14.545 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51440 10 6452 1 2025-12-06 20:58:11.869 00:05:02.316 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 20:58:11.865 00:05:02.321 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 21:02:14.941 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53214 10 6452 1 2025-12-06 21:03:11.065 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:03:10.925 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:03:10.978 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:03:10.808 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:03:10.984 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:03:15.358 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51808 10 6452 1 2025-12-06 21:04:15.760 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58808 10 6452 1 2025-12-06 21:05:16.120 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37004 10 6452 1 2025-12-06 21:06:16.523 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43868 10 6452 1 2025-12-06 21:07:16.930 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:55928 10 6452 1 2025-12-06 21:08:11.322 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:04:11.867 00:05:02.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 21:08:11.151 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:08:10.910 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:08:10.927 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:08:11.235 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:04:11.869 00:05:02.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 21:08:17.364 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45064 10 6452 1 2025-12-06 21:09:17.776 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33958 10 6452 1 2025-12-06 21:10:18.191 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42190 10 6452 1 2025-12-06 21:11:18.588 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34692 10 6452 1 2025-12-06 21:12:18.990 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52348 10 6452 1 2025-12-06 21:13:11.159 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:13:11.108 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:13:11.091 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:13:11.112 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:13:11.195 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:13:19.396 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:35060 10 6452 1 2025-12-06 21:10:11.868 00:05:02.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 21:10:11.870 00:05:02.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 21:14:19.782 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46352 10 6452 1 2025-12-06 21:15:20.186 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55402 10 6452 1 2025-12-06 21:16:20.595 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50904 10 6452 1 2025-12-06 21:17:21.020 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34986 10 6452 1 2025-12-06 21:18:11.365 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:18:11.277 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:18:11.217 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:18:11.093 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:18:11.278 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:18:21.426 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43710 10 6452 1 2025-12-06 21:19:21.827 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46250 10 6452 1 2025-12-06 21:16:11.870 00:05:02.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 21:16:11.871 00:05:02.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 21:20:22.230 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36254 10 6452 1 2025-12-06 21:21:22.589 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37112 10 6452 1 2025-12-06 21:22:22.967 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38504 10 6452 1 2025-12-06 21:23:11.339 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:23:11.395 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:23:11.378 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:23:11.173 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:23:11.256 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:23:23.373 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52352 10 6452 1 2025-12-06 21:24:23.798 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52512 10 6452 1 2025-12-06 21:25:24.204 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43266 10 6452 1 2025-12-06 21:22:11.873 00:05:02.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 21:22:11.870 00:05:02.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 21:26:24.564 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55750 10 6452 1 2025-12-06 21:27:24.965 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56678 10 6452 1 2025-12-06 21:28:11.673 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:28:11.419 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:28:11.597 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:28:11.650 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:28:11.590 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:28:25.370 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52082 10 6452 1 2025-12-06 21:29:25.774 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51492 10 6452 1 2025-12-06 21:30:26.183 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36796 10 6452 1 2025-12-06 21:31:26.546 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48532 10 6452 1 2025-12-06 21:28:11.871 00:05:02.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 21:28:11.874 00:05:02.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 21:32:26.956 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55652 10 6452 1 2025-12-06 21:33:11.576 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:33:11.404 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:33:11.563 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:33:11.485 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:33:11.494 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:33:27.361 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41818 10 6452 1 2025-12-06 21:34:27.761 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51180 10 6452 1 2025-12-06 21:35:28.171 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53178 10 6452 1 2025-12-06 21:36:28.577 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37754 10 6452 1 2025-12-06 21:37:28.977 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34382 10 6452 1 2025-12-06 21:38:11.833 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:38:11.480 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:38:11.742 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:38:11.756 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:38:11.751 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:34:11.877 00:05:02.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 21:34:11.875 00:05:02.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 21:38:29.381 00:00:10.518 TCP 1.101.0.1:3000 -> 23.104.0.1:44406 15 17866 1 2025-12-06 21:39:29.937 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54172 10 6452 1 2025-12-06 21:40:30.353 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50666 10 6452 1 2025-12-06 21:41:30.754 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:35720 10 6452 1 2025-12-06 21:42:31.149 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57928 10 6452 1 2025-12-06 21:43:11.858 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:43:11.828 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:43:11.834 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:43:11.643 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:43:11.776 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:43:31.550 00:00:11.183 TCP 1.101.0.1:3000 -> 23.104.0.1:35658 10 6452 1 2025-12-06 21:40:11.880 00:05:02.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 21:40:11.879 00:05:02.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 21:44:32.774 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38706 10 6452 1 2025-12-06 21:45:33.180 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:52002 10 6452 1 2025-12-06 21:46:33.541 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52232 10 6452 1 2025-12-06 21:47:33.970 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41874 10 6452 1 2025-12-06 21:48:11.899 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:48:11.763 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:48:11.624 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:48:11.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:48:11.817 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:48:34.376 00:00:16.425 TCP 1.101.0.1:3000 -> 23.104.0.1:60588 10 6452 1 2025-12-06 21:49:40.852 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:52956 10 6452 1 2025-12-06 21:46:11.877 00:05:02.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 21:46:11.881 00:05:02.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 21:50:41.275 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54222 10 6452 1 2025-12-06 21:51:41.674 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54008 12 6556 1 2025-12-06 21:52:42.102 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35394 10 6452 1 2025-12-06 21:53:12.089 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:53:12.111 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:53:12.012 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:53:11.906 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:53:12.009 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:53:42.500 00:00:11.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58320 10 6452 1 2025-12-06 21:54:43.861 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48042 10 6452 1 2025-12-06 21:55:44.272 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46174 10 6452 1 2025-12-06 21:52:11.879 00:05:02.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 21:52:11.881 00:05:02.336 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 21:56:44.681 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51072 10 6452 1 2025-12-06 21:57:45.108 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47660 10 6452 1 2025-12-06 21:58:11.936 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 21:58:12.012 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 21:58:11.936 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 21:58:11.978 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 21:58:11.854 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 422066, total packets: 1017, avg bps: 937, avg pps: 0, avg bpp: 415 Time window: 2025-12-06 20:58:11 - 2025-12-06 21:58:12 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0015s Wall: 0.0024s flows/second: 56945.5 Runtime: 0.0025s