Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 05:59:06.361 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35672 10 6452 1 2025-12-01 06:00:06.730 00:00:10.667 TCP 1.101.0.1:3000 -> 23.104.0.1:43354 10 6452 1 2025-12-01 06:00:28.340 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:00:28.440 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:00:28.550 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:00:28.503 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:00:28.633 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:01:07.438 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59414 10 6452 1 2025-12-01 05:58:08.968 00:05:02.205 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 05:58:08.971 00:05:02.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 06:02:07.848 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:51722 10 6452 1 2025-12-01 06:03:08.274 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48352 10 6452 1 2025-12-01 06:04:08.677 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53204 10 6452 1 2025-12-01 06:05:09.054 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53638 10 6452 1 2025-12-01 06:05:28.704 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:05:28.282 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:05:28.599 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:05:28.597 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:05:28.681 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:06:09.466 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43734 10 6452 1 2025-12-01 06:07:09.869 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59398 10 6452 1 2025-12-01 06:04:08.980 00:05:02.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 06:04:08.977 00:05:02.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 06:08:10.270 00:00:10.944 TCP 1.101.0.1:3000 -> 23.104.0.1:51956 10 6452 1 2025-12-01 06:09:11.255 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60434 10 6452 1 2025-12-01 06:10:11.661 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46628 10 6452 1 2025-12-01 06:10:29.009 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:10:28.632 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:10:28.689 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:10:28.924 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:10:28.924 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:11:12.098 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59278 10 6452 1 2025-12-01 06:12:12.513 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43926 10 6452 1 2025-12-01 06:13:12.924 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45506 10 6452 1 2025-12-01 06:10:08.980 00:05:02.196 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 06:10:08.978 00:05:02.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 06:14:13.342 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58926 10 6452 1 2025-12-01 06:15:28.895 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:15:13.809 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:50588 10 6452 1 2025-12-01 06:15:28.808 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:15:28.822 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:15:28.813 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:15:28.734 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:16:14.183 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45450 10 6452 1 2025-12-01 06:17:14.545 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59212 10 6452 1 2025-12-01 06:18:14.944 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40204 10 6452 1 2025-12-01 06:19:15.354 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55082 10 6452 1 2025-12-01 06:16:08.981 00:05:02.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 06:16:08.984 00:05:02.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 06:20:29.176 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:20:28.838 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:20:28.781 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:20:15.759 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58714 10 6452 1 2025-12-01 06:20:29.092 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:20:28.837 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:21:16.164 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46038 10 6452 1 2025-12-01 06:22:16.570 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:52880 12 10375 1 2025-12-01 06:23:17.051 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33712 10 6452 1 2025-12-01 06:24:17.453 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47368 10 6452 1 2025-12-01 06:25:29.109 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:25:28.861 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:25:17.860 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46428 10 6452 1 2025-12-01 06:25:28.891 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:25:28.901 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:25:28.975 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:22:08.985 00:05:02.194 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 06:22:08.983 00:05:02.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 06:26:18.279 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57072 10 6452 1 2025-12-01 06:27:18.685 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59598 10 6452 1 2025-12-01 06:28:19.118 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51870 10 6452 1 2025-12-01 06:29:19.526 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42384 10 6452 1 2025-12-01 06:30:29.009 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:30:28.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:30:29.005 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:30:29.007 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:30:19.931 00:00:10.695 TCP 1.101.0.1:3000 -> 23.104.0.1:56038 10 6452 1 2025-12-01 06:30:29.086 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:31:20.671 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47106 10 6452 1 2025-12-01 06:28:08.987 00:05:02.198 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 06:28:08.984 00:05:02.203 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 06:32:21.103 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39310 10 6452 1 2025-12-01 06:33:21.503 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60680 10 6452 1 2025-12-01 06:34:21.907 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35270 10 6452 1 2025-12-01 06:35:29.556 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:35:29.393 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:35:29.227 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:35:29.473 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:35:29.462 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:35:22.271 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39996 10 6452 1 2025-12-01 06:36:22.675 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49634 10 6452 1 2025-12-01 06:37:23.103 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58506 10 6452 1 2025-12-01 06:34:08.986 00:05:02.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 06:34:08.988 00:05:02.197 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 06:38:23.503 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58690 10 6452 1 2025-12-01 06:39:23.910 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58258 10 6452 1 2025-12-01 06:40:29.456 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:40:29.322 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:40:29.334 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:40:29.372 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:40:29.240 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:40:24.322 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39138 10 6452 1 2025-12-01 06:41:24.735 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40996 10 6452 1 2025-12-01 06:42:25.169 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37184 10 6452 1 2025-12-01 06:43:25.571 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35806 10 6452 1 2025-12-01 06:40:08.987 00:05:02.203 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 06:40:08.989 00:05:02.199 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 06:44:25.967 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:57326 10 6452 1 2025-12-01 06:45:29.535 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:45:29.513 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:45:29.358 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:45:29.454 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:45:29.313 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:45:26.345 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53350 10 6452 1 2025-12-01 06:46:26.702 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47302 10 6452 1 2025-12-01 06:47:27.113 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34806 10 6452 1 2025-12-01 06:48:27.527 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56064 10 6452 1 2025-12-01 06:49:27.926 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60558 10 6452 1 2025-12-01 06:46:08.992 00:05:02.198 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 06:46:08.990 00:05:02.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 06:50:29.698 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:50:29.466 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:50:29.494 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:50:29.617 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:50:29.540 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:50:28.350 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59980 10 6452 1 2025-12-01 06:51:28.753 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51602 10 6452 1 2025-12-01 06:52:29.122 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57372 10 6452 1 2025-12-01 06:53:29.483 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52920 10 6452 1 2025-12-01 06:54:29.884 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57500 10 6452 1 2025-12-01 06:55:29.641 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 06:55:29.820 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:55:29.543 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 06:55:29.922 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 06:55:29.626 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 06:55:30.289 00:00:10.710 TCP 1.101.0.1:3000 -> 23.104.0.1:55212 10 6452 1 2025-12-01 06:52:08.993 00:05:02.198 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 06:52:08.990 00:05:02.203 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 06:56:31.038 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52386 10 6452 1 2025-12-01 06:57:31.402 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:47628 12 10375 1 2025-12-01 06:58:31.840 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:49614 10 6452 1 Summary: total flows: 140, total bytes: 424846, total packets: 1024, avg bps: 935, avg pps: 0, avg bpp: 414 Time window: 2025-12-01 05:58:08 - 2025-12-01 06:58:42 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0035s User: 0.0018s Wall: 0.0022s flows/second: 64308.7 Runtime: 0.0022s