Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 20:58:51.849 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:48706 10 6452 1 2025-12-05 20:59:52.271 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47250 10 6452 1 2025-12-05 21:00:52.674 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44372 10 6452 1 2025-12-05 20:57:11.383 00:05:02.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 20:57:11.385 00:05:02.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:01:53.108 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53850 10 6452 1 2025-12-05 21:02:42.310 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:02:42.205 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:02:42.354 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:02:42.130 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:02:42.436 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:02:53.513 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:60714 10 6452 1 2025-12-05 21:03:53.868 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51516 10 6452 1 2025-12-05 21:04:54.276 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46848 10 6452 1 2025-12-05 21:05:54.678 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50126 10 6452 1 2025-12-05 21:06:55.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 10 6452 1 2025-12-05 21:03:11.385 00:05:02.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:03:11.387 00:05:02.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:07:42.079 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:07:42.192 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:07:42.167 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:07:41.996 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:07:41.993 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:07:55.510 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38920 10 6452 1 2025-12-05 21:08:55.911 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40310 10 6452 1 2025-12-05 21:09:56.313 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41970 10 6452 1 2025-12-05 21:10:56.723 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34032 10 6452 1 2025-12-05 21:11:57.132 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54496 10 6452 1 2025-12-05 21:12:42.407 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:12:42.140 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:12:42.409 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:12:42.142 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:12:42.491 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:12:57.531 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43850 10 6452 1 2025-12-05 21:09:11.389 00:05:02.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:09:11.386 00:05:02.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:13:57.898 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36216 12 6556 1 2025-12-05 21:14:58.305 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52340 10 6452 1 2025-12-05 21:15:58.668 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60670 10 6452 1 2025-12-05 21:16:59.035 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40592 10 6452 1 2025-12-05 21:17:42.326 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:17:42.376 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:17:42.067 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:17:42.242 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:17:42.383 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:17:59.441 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43096 10 6452 1 2025-12-05 21:18:59.849 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:54638 10 6452 1 2025-12-05 21:15:11.388 00:05:02.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:15:11.390 00:05:02.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:20:00.275 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49068 10 6452 1 2025-12-05 21:21:00.674 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33960 10 6452 1 2025-12-05 21:22:01.037 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43028 10 6452 1 2025-12-05 21:22:42.487 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:22:42.531 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:22:42.136 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:22:42.405 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:22:42.476 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:23:01.437 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36320 10 6452 1 2025-12-05 21:24:01.845 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53652 10 6452 1 2025-12-05 21:25:02.268 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58866 10 6452 1 2025-12-05 21:21:11.392 00:05:02.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:21:11.390 00:05:02.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:26:02.624 00:00:10.636 TCP 1.101.0.1:3000 -> 23.104.0.1:33688 10 6452 1 2025-12-05 21:27:03.304 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42172 10 6452 1 2025-12-05 21:27:42.633 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:27:42.485 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:27:42.641 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:27:42.642 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:27:42.724 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:28:03.708 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40484 10 6452 1 2025-12-05 21:29:04.115 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58606 10 6452 1 2025-12-05 21:30:04.476 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43974 10 6452 1 2025-12-05 21:27:11.398 00:05:02.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:31:04.885 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39586 10 6452 1 2025-12-05 21:27:11.400 00:05:02.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:32:05.294 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48194 10 6452 1 2025-12-05 21:32:42.903 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:32:42.815 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:32:42.604 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:32:42.823 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:32:42.884 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:33:05.700 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44956 10 6452 1 2025-12-05 21:34:06.105 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:59778 10 6452 1 2025-12-05 21:35:06.510 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59576 10 6452 1 2025-12-05 21:36:06.918 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:46980 10 6452 1 2025-12-05 21:33:11.399 00:05:02.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:33:11.401 00:05:02.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:37:07.336 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45836 10 6452 1 2025-12-05 21:37:42.867 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:37:42.589 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:37:42.929 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:37:42.764 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:37:43.012 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:38:07.737 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45120 10 6452 1 2025-12-05 21:39:08.151 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48624 10 6452 1 2025-12-05 21:40:08.541 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33832 10 6452 1 2025-12-05 21:41:08.946 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42710 10 6452 1 2025-12-05 21:42:09.356 00:00:10.842 TCP 1.101.0.1:3000 -> 23.104.0.1:59618 10 6452 1 2025-12-05 21:42:42.897 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:42:42.727 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:42:42.888 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:42:42.920 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:42:42.980 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:39:11.399 00:05:02.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:39:11.402 00:05:02.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:43:10.233 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34816 10 6452 1 2025-12-05 21:44:10.591 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58798 10 6452 1 2025-12-05 21:45:10.988 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35690 10 6452 1 2025-12-05 21:46:11.382 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35956 10 6452 1 2025-12-05 21:47:11.747 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48792 10 6452 1 2025-12-05 21:47:42.987 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:47:42.778 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:47:42.777 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:47:42.776 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:47:42.869 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:48:12.155 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45712 10 6452 1 2025-12-05 21:45:11.402 00:05:02.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:45:11.405 00:05:02.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:49:12.555 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52654 10 6452 1 2025-12-05 21:50:12.952 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56490 10 6452 1 2025-12-05 21:51:13.368 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:43502 11 6504 1 2025-12-05 21:52:13.822 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50884 10 6452 1 2025-12-05 21:52:42.860 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:52:42.987 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:52:43.209 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:52:43.137 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:52:43.291 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:53:14.223 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47242 10 6452 1 2025-12-05 21:54:14.580 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50316 10 6452 1 2025-12-05 21:51:11.405 00:05:02.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 21:51:11.403 00:05:02.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 21:55:14.941 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53726 10 6452 1 2025-12-05 21:56:15.354 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33694 10 6452 1 2025-12-05 21:57:15.758 00:00:10.487 TCP 1.101.0.1:3000 -> 23.104.0.1:32836 10 6452 1 2025-12-05 21:57:43.352 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 21:57:43.070 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:57:43.136 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 21:57:43.328 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 21:57:43.218 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 21:58:16.285 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46340 10 6452 1 Summary: total flows: 140, total bytes: 417156, total packets: 1023, avg bps: 908, avg pps: 0, avg bpp: 407 Time window: 2025-12-05 20:57:11 - 2025-12-05 21:58:26 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0048s User: 0.0008s Wall: 0.0024s flows/second: 59523.8 Runtime: 0.0024s