Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 22:58:42.958 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47412 10 6452 1 2025-12-01 22:59:43.363 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52034 10 6452 1 2025-12-01 23:00:49.527 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:00:49.045 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:00:48.874 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:00:49.444 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:00:49.241 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:00:43.768 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53084 10 6452 1 2025-12-01 23:01:44.180 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60734 10 6452 1 2025-12-01 22:57:11.526 00:05:57.842 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 22:57:11.525 00:05:57.847 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 23:02:44.547 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45204 10 6452 1 2025-12-01 23:03:44.947 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47316 10 6452 1 2025-12-01 23:04:45.351 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39212 10 6452 1 2025-12-01 23:05:48.986 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:05:48.986 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:05:48.932 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:05:48.903 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:05:49.101 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:05:45.756 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45714 10 6452 1 2025-12-01 23:06:46.175 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45746 10 6452 1 2025-12-01 23:07:46.581 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44836 10 6452 1 2025-12-01 23:03:11.528 00:05:57.841 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 23:03:11.525 00:05:57.847 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 23:08:46.984 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34518 10 6452 1 2025-12-01 23:09:47.400 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45378 10 6452 1 2025-12-01 23:10:49.195 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:10:49.155 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:10:49.293 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:10:49.188 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:10:49.375 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:10:47.801 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59244 10 6452 1 2025-12-01 23:11:48.206 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47054 10 6452 1 2025-12-01 23:12:48.606 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57522 10 6452 1 2025-12-01 23:13:49.012 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33116 10 6452 1 2025-12-01 23:09:11.529 00:05:57.841 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 23:09:11.526 00:05:57.846 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 23:14:49.417 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55308 10 6452 1 2025-12-01 23:15:49.358 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:15:49.264 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:15:49.241 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:15:49.237 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:15:49.324 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:15:49.834 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:54554 10 6452 1 2025-12-01 23:16:50.224 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35386 10 6452 1 2025-12-01 23:17:50.627 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 10 6452 1 2025-12-01 23:18:51.029 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36322 10 6452 1 2025-12-01 23:19:51.436 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 10 6452 1 2025-12-01 23:15:11.526 00:05:57.849 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 23:15:11.530 00:05:57.843 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 23:20:49.405 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:20:49.087 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:20:49.303 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:20:49.322 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:20:49.385 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:20:51.868 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55702 10 6452 1 2025-12-01 23:21:52.278 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46532 10 6452 1 2025-12-01 23:22:52.681 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44316 10 6452 1 2025-12-01 23:23:53.112 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35780 10 6452 1 2025-12-01 23:24:53.516 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37104 10 6452 1 2025-12-01 23:25:49.545 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:25:49.378 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:25:49.493 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:25:49.592 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:25:49.576 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:25:53.920 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:43692 10 6452 1 2025-12-01 23:21:11.529 00:05:57.845 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 23:21:11.526 00:05:57.851 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 23:26:54.289 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55948 10 6452 1 2025-12-01 23:27:54.694 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49886 10 6452 1 2025-12-01 23:28:55.114 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32884 10 6452 1 2025-12-01 23:29:55.515 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:58474 10 6452 1 2025-12-01 23:30:49.507 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:30:49.666 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:30:49.258 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:30:49.424 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:30:49.704 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:30:55.883 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60040 12 6556 1 2025-12-01 23:27:11.530 00:05:57.847 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 23:31:56.301 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34928 10 6452 1 2025-12-01 23:27:11.528 00:05:57.852 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 23:32:56.664 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:36744 12 10369 1 2025-12-01 23:33:57.148 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53294 10 6452 1 2025-12-01 23:34:57.525 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-12-01 23:35:49.783 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:35:49.747 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:35:49.732 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:35:49.736 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:35:49.816 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:35:57.923 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:58768 10 6452 1 2025-12-01 23:36:58.349 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58544 10 6452 1 2025-12-01 23:37:58.754 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46366 10 6452 1 2025-12-01 23:33:11.528 00:05:57.855 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 23:33:11.531 00:05:57.849 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 23:38:59.118 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60648 10 6452 1 2025-12-01 23:39:59.522 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41096 10 6452 1 2025-12-01 23:40:50.061 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:40:49.970 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:40:49.920 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:40:49.978 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:40:49.856 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:40:59.927 00:01:10.786 TCP 1.101.0.1:3000 -> 23.104.0.1:56478 20 12904 1 2025-12-01 23:43:00.757 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:56490 10 6452 1 2025-12-01 23:39:11.533 00:05:57.851 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 23:39:11.530 00:05:57.856 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 23:44:01.191 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49140 10 6452 1 2025-12-01 23:45:01.596 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38330 10 6452 1 2025-12-01 23:45:50.062 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:45:49.945 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:45:49.837 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:45:49.979 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:45:49.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:46:01.999 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45274 10 6452 1 2025-12-01 23:47:02.404 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:39982 10 6452 1 2025-12-01 23:48:02.807 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40634 10 6452 1 2025-12-01 23:49:03.223 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:38004 10 6452 1 2025-12-01 23:45:11.534 00:05:57.850 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 23:45:11.532 00:05:57.855 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 23:50:03.610 00:00:13.900 TCP 1.101.0.1:3000 -> 23.104.0.1:36226 10 6452 1 2025-12-01 23:50:49.988 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:50:49.781 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:50:50.118 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:50:49.825 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:50:50.200 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:51:07.633 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40044 10 6452 1 2025-12-01 23:52:08.038 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54266 10 6452 1 2025-12-01 23:53:08.447 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56880 10 6452 1 2025-12-01 23:54:08.855 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56398 10 6452 1 2025-12-01 23:55:09.271 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56302 10 6452 1 2025-12-01 23:55:50.521 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 23:55:50.377 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 23:55:50.342 00:00:00.015 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:55:50.438 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 23:55:50.379 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 23:51:11.536 00:05:57.850 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 23:51:11.533 00:05:57.856 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 23:56:09.686 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38614 10 6452 1 2025-12-01 23:57:10.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56544 10 6452 1 2025-12-01 23:58:10.518 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38306 10 6452 1 Summary: total flows: 139, total bytes: 421021, total packets: 1024, avg bps: 917, avg pps: 0, avg bpp: 411 Time window: 2025-12-01 22:57:11 - 2025-12-01 23:58:20 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0028s User: 0.0019s Wall: 0.0020s flows/second: 69888.3 Runtime: 0.0020s