Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 12:58:54.409 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46950 10 6452 1 2025-12-02 12:59:54.808 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56826 10 6452 1 2025-12-02 13:01:05.786 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:01:05.588 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:01:06.000 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:01:05.777 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:00:55.209 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57418 10 6452 1 2025-12-02 13:01:05.861 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:01:55.614 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58608 10 6452 1 2025-12-02 12:58:09.720 00:05:02.105 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 12:58:09.718 00:05:02.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:02:55.976 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60430 10 6452 1 2025-12-02 13:03:56.379 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46946 10 6452 1 2025-12-02 13:04:56.791 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40804 10 6452 1 2025-12-02 13:06:06.010 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:06:05.777 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:06:05.837 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:06:05.775 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:05:57.197 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35854 10 6452 1 2025-12-02 13:06:05.926 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:06:57.605 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44760 10 6452 1 2025-12-02 13:04:09.719 00:05:02.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:07:57.965 00:00:10.452 TCP 1.101.0.1:3000 -> 23.104.0.1:50012 12 10375 1 2025-12-02 13:04:09.722 00:05:02.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:08:58.456 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38702 10 6452 1 2025-12-02 13:09:58.863 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47848 10 6452 1 2025-12-02 13:11:05.990 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:11:06.154 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:11:06.059 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:10:59.279 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53532 10 6452 1 2025-12-02 13:11:05.982 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:11:06.064 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:11:59.680 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55630 12 6556 1 2025-12-02 13:13:00.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45146 10 6452 1 2025-12-02 13:10:09.724 00:05:02.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:14:00.516 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33714 10 6452 1 2025-12-02 13:10:09.721 00:05:02.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:15:00.878 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40648 10 6452 1 2025-12-02 13:16:05.984 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:16:05.990 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:16:05.991 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:16:06.063 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:16:05.901 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:16:01.284 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:33998 11 6504 1 2025-12-02 13:17:01.740 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35084 10 6452 1 2025-12-02 13:18:02.142 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34814 10 6452 1 2025-12-02 13:19:02.549 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42372 10 6452 1 2025-12-02 13:16:09.726 00:05:02.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:16:09.728 00:05:02.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:20:02.958 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:51294 10 6452 1 2025-12-02 13:21:06.427 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:21:06.104 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:21:06.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:21:05.937 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:21:06.345 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:21:03.381 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56252 10 6452 1 2025-12-02 13:22:03.784 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:57014 10 6452 1 2025-12-02 13:23:04.149 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39884 10 6452 1 2025-12-02 13:24:04.557 00:00:12.830 TCP 1.101.0.1:3000 -> 23.104.0.1:53412 10 6452 1 2025-12-02 13:25:07.442 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34424 10 6452 1 2025-12-02 13:26:06.345 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:26:06.336 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:26:06.203 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:26:06.394 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:26:06.476 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:22:09.726 00:05:02.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:22:09.729 00:05:02.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:26:07.845 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:43680 10 6452 1 2025-12-02 13:27:08.286 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:55390 10 6452 1 2025-12-02 13:28:08.686 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38076 10 6452 1 2025-12-02 13:29:09.112 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47026 10 6452 1 2025-12-02 13:30:09.485 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 10 6452 1 2025-12-02 13:31:06.513 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:31:06.254 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:31:06.466 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:31:06.300 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:31:06.431 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:31:09.922 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:57974 11 6504 1 2025-12-02 13:28:09.727 00:05:02.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:28:09.730 00:05:02.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:32:10.373 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:40226 10 6452 1 2025-12-02 13:33:10.732 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:33998 12 10375 1 2025-12-02 13:34:11.224 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56612 10 6452 1 2025-12-02 13:35:11.635 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35276 10 6452 1 2025-12-02 13:36:06.613 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:36:06.658 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:36:06.359 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:36:06.376 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:36:06.531 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:36:12.040 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40872 10 6452 1 2025-12-02 13:37:12.395 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52470 10 6452 1 2025-12-02 13:34:09.732 00:05:02.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:34:09.730 00:05:02.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:38:12.796 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:41090 10 6452 1 2025-12-02 13:39:13.182 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53530 10 6452 1 2025-12-02 13:40:13.586 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43544 10 6452 1 2025-12-02 13:41:06.740 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:41:06.468 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:41:06.513 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:41:06.736 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:41:06.818 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:41:13.952 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60834 10 6452 1 2025-12-02 13:42:14.366 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46722 10 6452 1 2025-12-02 13:43:14.770 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54702 10 6452 1 2025-12-02 13:40:09.734 00:05:02.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:40:09.738 00:05:02.103 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:44:15.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42292 10 6452 1 2025-12-02 13:45:15.598 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36910 10 6452 1 2025-12-02 13:46:07.074 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:46:06.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:46:06.812 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:46:06.894 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:46:06.992 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:46:16.005 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:59396 10 6452 1 2025-12-02 13:47:16.360 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45062 10 6452 1 2025-12-02 13:48:16.764 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:34294 10 6452 1 2025-12-02 13:49:17.189 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49758 10 6452 1 2025-12-02 13:46:09.740 00:05:02.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:46:09.737 00:05:02.107 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:50:17.560 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43562 10 6452 1 2025-12-02 13:51:06.848 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:51:06.915 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:51:06.712 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:51:06.848 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:51:06.931 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:51:17.933 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35788 10 6452 1 2025-12-02 13:52:18.342 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53488 10 6452 1 2025-12-02 13:53:18.794 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60204 10 6452 1 2025-12-02 13:54:19.195 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44298 10 6452 1 2025-12-02 13:55:19.608 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50506 10 6452 1 2025-12-02 13:56:06.592 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:56:06.680 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:56:06.540 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:56:06.923 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:56:07.007 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:52:09.738 00:05:02.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:52:09.741 00:05:02.102 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:56:20.011 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56416 10 6452 1 2025-12-02 13:57:20.423 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36068 10 6452 1 2025-12-02 13:58:20.830 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:40538 12 10369 1 Summary: total flows: 140, total bytes: 428971, total packets: 1030, avg bps: 947, avg pps: 0, avg bpp: 416 Time window: 2025-12-02 12:58:09 - 2025-12-02 13:58:31 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0034s User: 0.0023s Wall: 0.0021s flows/second: 66290.6 Runtime: 0.0021s