Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 10:59:03.928 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33770 10 6452 1 2025-12-02 11:00:04.354 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55736 10 6452 1 2025-12-02 11:01:03.968 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:01:03.831 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:01:03.972 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:01:03.739 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:01:03.823 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:01:04.760 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:36234 11 6504 1 2025-12-02 10:58:09.673 00:05:02.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 10:58:09.676 00:05:02.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:02:05.248 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49972 10 6452 1 2025-12-02 11:03:05.663 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47498 10 6452 1 2025-12-02 11:04:06.104 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43260 10 6452 1 2025-12-02 11:05:06.508 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43886 10 6452 1 2025-12-02 11:06:03.535 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:06:03.456 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:06:03.460 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:06:03.415 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:06:03.452 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:06:06.877 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54606 10 6452 1 2025-12-02 11:07:07.278 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-12-02 11:04:09.680 00:05:02.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:04:09.677 00:05:02.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:08:07.688 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60616 10 6452 1 2025-12-02 11:09:08.073 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56776 10 6452 1 2025-12-02 11:10:08.488 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33810 10 6452 1 2025-12-02 11:11:03.609 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:11:03.605 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:11:03.601 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:11:03.479 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:11:03.526 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:11:08.907 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36668 10 6452 1 2025-12-02 11:12:09.308 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53118 10 6452 1 2025-12-02 11:13:09.706 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51406 10 6452 1 2025-12-02 11:10:09.679 00:05:02.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:10:09.682 00:05:02.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:14:10.115 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33538 10 6452 1 2025-12-02 11:15:10.521 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52316 10 6452 1 2025-12-02 11:16:03.694 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:16:03.841 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:16:03.613 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:16:03.620 00:00:00.013 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:16:03.613 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:16:10.925 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:43696 10 6452 1 2025-12-02 11:17:11.352 00:00:10.700 TCP 1.101.0.1:3000 -> 23.104.0.1:44478 10 6452 1 2025-12-02 11:18:12.105 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46960 10 6452 1 2025-12-02 11:19:12.517 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50996 10 6452 1 2025-12-02 11:16:09.688 00:05:02.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:16:09.686 00:05:02.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:20:12.921 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:58656 10 6452 1 2025-12-02 11:21:04.400 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:21:04.460 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:21:04.385 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:21:04.434 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:21:04.317 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:21:13.343 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56556 10 6452 1 2025-12-02 11:22:13.746 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49962 10 6452 1 2025-12-02 11:23:14.149 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55900 10 6452 1 2025-12-02 11:24:14.511 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52256 10 6452 1 2025-12-02 11:25:14.903 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60362 10 6452 1 2025-12-02 11:26:03.676 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:26:03.905 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:26:03.798 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:26:03.730 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:26:03.594 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:22:09.686 00:05:02.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:22:09.688 00:05:02.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:26:15.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47272 10 6452 1 2025-12-02 11:27:15.718 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56374 10 6452 1 2025-12-02 11:28:16.112 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34844 10 6452 1 2025-12-02 11:29:16.518 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51148 10 6452 1 2025-12-02 11:30:16.924 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37796 10 6452 1 2025-12-02 11:31:03.936 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:31:03.852 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:31:04.122 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:31:03.882 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:31:03.853 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:31:17.299 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50602 10 6452 1 2025-12-02 11:28:09.689 00:05:02.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:28:09.692 00:05:02.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:32:17.727 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42472 10 6452 1 2025-12-02 11:33:18.140 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37714 10 6452 1 2025-12-02 11:34:18.506 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:38746 10 6452 1 2025-12-02 11:35:18.924 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49840 13 6608 1 2025-12-02 11:36:03.987 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:36:03.990 00:00:00.052 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:36:03.989 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:36:04.000 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:36:04.082 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:36:19.323 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55676 10 6452 1 2025-12-02 11:37:19.726 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46086 10 6452 1 2025-12-02 11:34:09.692 00:05:02.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:34:09.689 00:05:02.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:38:20.139 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58420 10 6452 1 2025-12-02 11:39:20.540 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50120 10 6452 1 2025-12-02 11:40:20.941 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36006 10 6452 1 2025-12-02 11:41:03.872 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:41:04.178 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:41:03.925 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:41:03.963 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:41:04.046 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:41:21.366 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32936 10 6452 1 2025-12-02 11:42:21.769 00:00:11.080 TCP 1.101.0.1:3000 -> 23.104.0.1:50086 11 6492 1 2025-12-02 11:43:22.884 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:44530 10 6452 1 2025-12-02 11:40:09.692 00:05:02.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:40:09.690 00:05:02.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:44:23.307 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34616 10 6452 1 2025-12-02 11:45:23.716 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35132 10 6452 1 2025-12-02 11:46:04.434 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:46:04.626 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:46:04.488 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:46:04.444 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:46:04.526 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:46:24.124 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39562 10 6452 1 2025-12-02 11:47:24.527 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37226 10 6452 1 2025-12-02 11:48:24.893 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37290 10 6452 1 2025-12-02 11:49:25.297 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-12-02 11:46:09.692 00:05:02.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:46:09.695 00:05:02.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:50:25.656 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40094 10 6452 1 2025-12-02 11:51:04.508 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:51:04.423 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:51:04.465 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:51:04.211 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:51:04.427 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:51:26.066 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50462 10 6452 1 2025-12-02 11:52:26.466 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48370 12 6556 1 2025-12-02 11:53:26.875 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54466 10 6452 1 2025-12-02 11:54:27.234 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:37294 11 6504 1 2025-12-02 11:55:27.688 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51020 10 6452 1 2025-12-02 11:56:04.606 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:56:04.581 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:56:04.506 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:56:04.355 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:56:04.523 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:52:09.697 00:05:02.114 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:52:09.700 00:05:02.109 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:56:28.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34270 10 6452 1 2025-12-02 11:57:28.513 00:00:10.432 TCP 1.101.0.1:3000 -> 23.104.0.1:40362 12 10375 1 2025-12-02 11:58:28.991 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55402 10 6452 1 Summary: total flows: 140, total bytes: 421327, total packets: 1030, avg bps: 928, avg pps: 0, avg bpp: 409 Time window: 2025-12-02 10:58:09 - 2025-12-02 11:58:39 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0038s User: 0.0010s Wall: 0.0012s flows/second: 113097.6 Runtime: 0.0013s