Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 20:58:47.628 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40898 10 6452 1 2025-12-01 20:59:48.097 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52432 10 6452 1 2025-12-01 21:00:46.702 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:00:46.772 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:00:46.710 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:00:46.619 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:00:46.703 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:00:48.500 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37558 10 6452 1 2025-12-01 21:01:48.866 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54556 10 6452 1 2025-12-01 20:57:11.489 00:05:57.830 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 20:57:11.486 00:05:57.835 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:02:49.285 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57368 10 6452 1 2025-12-01 21:03:49.693 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:51316 10 6452 1 2025-12-01 21:04:50.121 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42884 10 6452 1 2025-12-01 21:05:46.689 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:05:46.606 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:05:46.696 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:05:46.604 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:05:46.522 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:05:50.522 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51282 10 6452 1 2025-12-01 21:06:50.883 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58618 10 6452 1 2025-12-01 21:07:51.304 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39948 10 6452 1 2025-12-01 21:03:11.492 00:05:57.828 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:03:11.490 00:05:57.833 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:08:51.708 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39032 10 6452 1 2025-12-01 21:09:52.116 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37068 10 6452 1 2025-12-01 21:10:47.110 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:10:46.934 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:10:46.853 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:10:47.028 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:10:46.732 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:10:52.522 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54606 10 6452 1 2025-12-01 21:11:52.920 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:37906 10 6452 1 2025-12-01 21:12:53.358 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:55378 12 10375 1 2025-12-01 21:09:11.493 00:05:57.829 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:13:53.836 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:37082 10 6452 1 2025-12-01 21:09:11.491 00:05:57.834 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:14:54.266 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44654 10 6452 1 2025-12-01 21:15:46.731 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:15:46.741 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:15:46.736 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:15:46.772 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:15:46.815 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:15:54.671 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39426 10 6452 1 2025-12-01 21:16:55.032 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:38394 10 6452 1 2025-12-01 21:17:55.392 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32852 10 6452 1 2025-12-01 21:18:55.807 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45448 10 6452 1 2025-12-01 21:15:11.495 00:05:57.832 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:19:56.215 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56292 10 6452 1 2025-12-01 21:15:11.492 00:05:57.837 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:20:46.876 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:20:46.833 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:20:47.059 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:20:47.048 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:20:47.141 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:20:56.619 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58808 10 6452 1 2025-12-01 21:21:56.978 00:00:11.501 TCP 1.101.0.1:3000 -> 23.104.0.1:52176 10 6452 1 2025-12-01 21:22:58.515 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51796 10 6452 1 2025-12-01 21:23:58.917 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34394 10 6452 1 2025-12-01 21:24:59.322 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41696 10 6452 1 2025-12-01 21:25:47.302 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:25:47.168 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:25:47.105 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:25:47.219 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:25:47.169 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:25:59.734 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48726 10 6452 1 2025-12-01 21:21:11.493 00:05:57.840 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:21:11.496 00:05:57.834 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:27:00.140 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43520 10 6452 1 2025-12-01 21:28:00.547 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 10 6452 1 2025-12-01 21:29:00.950 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:59540 10 6452 1 2025-12-01 21:30:01.332 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:45626 10 6452 1 2025-12-01 21:30:47.168 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:30:46.825 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:30:46.974 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:30:47.092 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:30:47.057 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:31:01.769 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36230 10 6452 1 2025-12-01 21:27:11.499 00:05:57.833 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:27:11.496 00:05:57.838 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:32:02.194 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55954 10 6452 1 2025-12-01 21:33:02.594 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45686 10 6452 1 2025-12-01 21:34:03.006 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50050 10 6452 1 2025-12-01 21:35:03.411 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56958 10 6452 1 2025-12-01 21:35:47.338 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:35:47.110 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:35:47.111 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:35:47.239 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:35:47.420 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:36:03.774 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59082 10 6452 1 2025-12-01 21:37:04.140 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56838 10 6452 1 2025-12-01 21:33:11.500 00:05:57.834 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:33:11.498 00:05:57.839 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:38:04.551 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43606 10 6452 1 2025-12-01 21:39:04.951 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36374 10 6452 1 2025-12-01 21:40:05.316 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56246 10 6452 1 2025-12-01 21:40:47.603 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:40:47.529 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:40:47.509 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:40:47.505 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:40:47.590 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:41:05.711 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:37302 10 6452 1 2025-12-01 21:42:06.110 00:00:10.994 TCP 1.101.0.1:3000 -> 23.104.0.1:47294 10 6452 1 2025-12-01 21:43:07.149 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57548 10 6452 1 2025-12-01 21:39:11.501 00:05:57.834 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:39:11.498 00:05:57.839 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:44:07.552 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39066 10 6452 1 2025-12-01 21:45:07.957 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59778 10 6452 1 2025-12-01 21:45:47.492 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:45:47.343 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:45:47.576 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:45:47.429 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:45:47.659 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:46:08.361 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42498 10 6452 1 2025-12-01 21:47:08.774 00:00:11.140 TCP 1.101.0.1:3000 -> 23.104.0.1:42960 10 6452 1 2025-12-01 21:48:09.955 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43584 10 6452 1 2025-12-01 21:49:10.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51572 10 6452 1 2025-12-01 21:45:11.507 00:05:57.832 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:45:11.504 00:05:57.837 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:50:10.765 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47000 10 6452 1 2025-12-01 21:50:47.674 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:50:47.645 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:50:47.624 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:50:47.592 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:50:47.685 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:51:11.178 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60836 10 6452 1 2025-12-01 21:52:11.549 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44012 10 6452 1 2025-12-01 21:53:11.943 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49816 10 6452 1 2025-12-01 21:54:12.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49706 10 6452 1 2025-12-01 21:55:12.769 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36782 10 6452 1 2025-12-01 21:55:47.780 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 21:55:47.535 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:55:47.783 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 21:55:47.726 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 21:55:47.866 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 21:51:11.510 00:05:57.834 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:51:11.507 00:05:57.839 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 21:56:13.137 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43862 10 6452 1 2025-12-01 21:57:13.553 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49448 10 6452 1 2025-12-01 21:58:13.954 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37854 10 6452 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 916, avg pps: 0, avg bpp: 411 Time window: 2025-12-01 20:57:11 - 2025-12-01 21:58:24 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0034s User: 0.0017s Wall: 0.0024s flows/second: 59548.0 Runtime: 0.0024s