Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 22:58:41.854 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:43438 12 10369 1 2025-12-05 22:59:42.352 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45138 10 6452 1 2025-12-05 23:00:42.766 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34250 10 6452 1 2025-12-05 22:57:11.431 00:05:02.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 22:57:11.430 00:05:02.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 23:01:43.178 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38674 10 6452 1 2025-12-05 23:02:44.478 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:02:44.377 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:02:44.342 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:02:44.395 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:02:44.611 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:02:43.580 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41978 10 6452 1 2025-12-05 23:03:43.985 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52708 10 6452 1 2025-12-05 23:04:44.345 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35378 10 6452 1 2025-12-05 23:05:44.756 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:44172 10 6452 1 2025-12-05 23:06:45.184 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57570 10 6452 1 2025-12-05 23:03:11.434 00:05:02.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 23:03:11.430 00:05:02.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 23:07:44.624 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:07:44.537 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:07:44.499 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:07:44.572 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:07:44.580 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:07:45.588 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:48128 10 6452 1 2025-12-05 23:08:45.971 00:00:10.526 TCP 1.101.0.1:3000 -> 23.104.0.1:56466 10 6452 1 2025-12-05 23:09:46.538 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54746 10 6452 1 2025-12-05 23:10:46.933 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:56498 10 6452 1 2025-12-05 23:11:47.362 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50708 10 6452 1 2025-12-05 23:12:44.702 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:12:44.697 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:12:44.652 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:12:44.619 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:12:44.701 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:12:47.776 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57588 10 6452 1 2025-12-05 23:09:11.432 00:05:02.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 23:09:11.430 00:05:02.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 23:13:48.190 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54270 10 6452 1 2025-12-05 23:14:48.553 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35136 10 6452 1 2025-12-05 23:15:48.948 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38664 10 6452 1 2025-12-05 23:16:49.389 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32890 10 6452 1 2025-12-05 23:17:45.171 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:17:44.982 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:17:45.009 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:17:45.089 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:17:44.983 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:17:49.800 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50684 10 6452 1 2025-12-05 23:18:50.204 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46714 10 6452 1 2025-12-05 23:15:11.440 00:05:02.214 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 23:15:11.441 00:05:02.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 23:19:50.607 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47318 10 6452 1 2025-12-05 23:20:51.009 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42366 10 6452 1 2025-12-05 23:21:51.413 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52512 11 6492 1 2025-12-05 23:22:45.078 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:22:44.787 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:22:44.551 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:22:44.996 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:22:44.878 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:22:51.817 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:55894 10 6452 1 2025-12-05 23:23:52.195 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42316 10 6452 1 2025-12-05 23:24:52.598 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33774 10 6452 1 2025-12-05 23:21:11.440 00:05:02.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 23:21:11.443 00:05:02.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 23:25:52.997 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40400 10 6452 1 2025-12-05 23:26:53.369 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60306 10 6452 1 2025-12-05 23:27:45.028 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:27:44.945 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:27:44.787 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:27:44.946 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:27:44.942 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:27:53.738 00:00:11.133 TCP 1.101.0.1:3000 -> 23.104.0.1:41704 10 6452 1 2025-12-05 23:28:54.907 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48330 10 6452 1 2025-12-05 23:29:55.308 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60448 10 6452 1 2025-12-05 23:30:55.707 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57034 10 6452 1 2025-12-05 23:27:11.443 00:05:02.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 23:27:11.442 00:05:02.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 23:31:56.125 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44802 10 6452 1 2025-12-05 23:32:45.301 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:32:45.105 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:32:45.182 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:32:45.218 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:32:44.967 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:32:56.486 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57348 10 6452 1 2025-12-05 23:33:56.884 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:44786 12 6556 1 2025-12-05 23:34:57.313 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58154 10 6452 1 2025-12-05 23:35:57.718 00:00:14.233 TCP 1.101.0.1:3000 -> 23.104.0.1:44406 10 6452 1 2025-12-05 23:37:02.011 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54992 10 6452 1 2025-12-05 23:33:11.447 00:05:02.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 23:33:11.444 00:05:02.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 23:37:45.242 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:37:45.162 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:37:45.110 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:37:45.161 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:37:45.073 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:38:02.411 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35598 10 6452 1 2025-12-05 23:39:02.813 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49094 10 6452 1 2025-12-05 23:40:03.214 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45482 10 6452 1 2025-12-05 23:41:03.615 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37940 10 6452 1 2025-12-05 23:42:04.017 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:51630 10 6452 1 2025-12-05 23:42:45.871 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:42:45.711 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:42:45.367 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:42:45.790 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:42:45.801 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:39:11.448 00:05:02.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 23:43:04.511 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45178 10 6452 1 2025-12-05 23:39:11.446 00:05:02.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 23:44:04.917 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38990 10 6452 1 2025-12-05 23:45:05.318 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54298 10 6452 1 2025-12-05 23:46:05.720 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44468 10 6452 1 2025-12-05 23:47:06.130 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43752 10 6452 1 2025-12-05 23:47:45.491 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:47:45.339 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:47:45.039 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:47:45.407 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:47:45.411 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:48:06.538 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58164 10 6452 1 2025-12-05 23:45:11.446 00:05:02.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 23:45:11.449 00:05:02.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 23:49:06.942 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:57322 10 6452 1 2025-12-05 23:50:07.368 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53502 10 6452 1 2025-12-05 23:51:07.772 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52888 10 6452 1 2025-12-05 23:52:08.189 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49634 10 6452 1 2025-12-05 23:52:45.558 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:52:45.484 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:52:45.503 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:52:45.475 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:52:45.394 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:53:08.601 00:00:11.131 TCP 1.101.0.1:3000 -> 23.104.0.1:47624 10 6452 1 2025-12-05 23:54:09.771 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37644 10 6452 1 2025-12-05 23:51:11.448 00:05:02.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 23:51:11.451 00:05:02.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-05 23:55:10.138 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:44230 10 6452 1 2025-12-05 23:56:10.523 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35562 10 6452 1 2025-12-05 23:57:10.925 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57412 10 6452 1 2025-12-05 23:57:45.770 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-05 23:57:45.454 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-05 23:57:45.651 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:57:45.688 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-05 23:57:45.889 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-05 23:58:11.340 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50206 10 6452 1 Summary: total flows: 140, total bytes: 421061, total packets: 1025, avg bps: 917, avg pps: 0, avg bpp: 410 Time window: 2025-12-05 22:57:11 - 2025-12-05 23:58:21 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0025s User: 0.0025s Wall: 0.0044s flows/second: 32014.1 Runtime: 0.0044s