Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 16:59:08.136 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40686 10 6452 1 2025-12-01 17:00:08.550 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33408 10 6452 1 2025-12-01 17:00:41.940 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:00:41.680 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:00:41.624 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:00:41.856 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:00:41.468 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:01:08.959 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60356 10 6452 1 2025-12-01 16:57:11.391 00:05:57.834 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 16:57:11.389 00:05:57.839 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 17:02:09.364 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59146 10 6452 1 2025-12-01 17:03:09.765 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:33624 12 10375 1 2025-12-01 17:04:10.207 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40244 10 6452 1 2025-12-01 17:05:10.614 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46584 10 6452 1 2025-12-01 17:05:41.832 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:05:41.748 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:05:41.665 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:05:41.749 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:05:41.996 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:06:11.022 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50512 10 6452 1 2025-12-01 17:07:11.436 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34640 10 6452 1 2025-12-01 17:03:11.395 00:05:57.830 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 17:03:11.392 00:05:57.835 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 17:08:11.849 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34144 10 6452 1 2025-12-01 17:09:12.274 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40396 10 6452 1 2025-12-01 17:10:12.678 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:39690 10 6452 1 2025-12-01 17:10:42.129 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:10:41.884 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:10:41.976 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:10:42.056 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:10:42.059 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:11:13.036 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33244 10 6452 1 2025-12-01 17:12:13.404 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57208 10 6452 1 2025-12-01 17:13:13.813 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38864 10 6452 1 2025-12-01 17:09:11.395 00:05:57.831 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 17:09:11.394 00:05:57.835 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 17:14:14.215 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55944 10 6452 1 2025-12-01 17:15:14.619 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37076 10 6452 1 2025-12-01 17:15:42.049 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:15:41.935 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:15:41.956 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:15:42.105 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:15:42.039 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:16:15.030 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56174 10 6452 1 2025-12-01 17:17:15.425 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35530 10 6452 1 2025-12-01 17:18:15.823 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:57694 10 6452 1 2025-12-01 17:19:16.262 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59392 10 6452 1 2025-12-01 17:15:11.401 00:05:57.828 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 17:15:11.398 00:05:57.833 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 17:20:16.665 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59222 10 6452 1 2025-12-01 17:20:42.322 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:20:42.120 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:20:41.960 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:20:42.238 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:20:42.249 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:21:17.101 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43600 10 6452 1 2025-12-01 17:22:17.517 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51842 10 6452 1 2025-12-01 17:23:17.930 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:33216 13 6608 1 2025-12-01 17:24:18.364 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59492 10 6452 1 2025-12-01 17:25:18.728 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50020 10 6452 1 2025-12-01 17:25:42.206 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:25:42.187 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:25:42.291 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:25:42.292 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:25:42.375 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:21:11.402 00:05:57.830 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 17:21:11.401 00:05:57.835 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 17:26:19.142 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59280 10 6452 1 2025-12-01 17:27:19.512 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54866 10 6452 1 2025-12-01 17:28:19.919 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59912 10 6452 1 2025-12-01 17:29:20.315 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52864 10 6452 1 2025-12-01 17:30:20.720 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59664 10 6452 1 2025-12-01 17:30:42.450 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:30:42.365 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:30:42.256 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:30:42.367 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:30:42.369 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:31:21.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37542 10 6452 1 2025-12-01 17:27:11.404 00:05:57.832 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 17:27:11.402 00:05:57.837 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 17:32:21.525 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52116 10 6452 1 2025-12-01 17:33:21.923 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:45874 10 6452 1 2025-12-01 17:34:22.355 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60560 10 6452 1 2025-12-01 17:35:22.765 00:00:11.235 TCP 1.101.0.1:3000 -> 23.104.0.1:41030 10 6452 1 2025-12-01 17:35:42.583 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:35:42.070 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:35:42.473 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:35:42.311 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:35:42.555 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:36:24.038 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58998 10 6452 1 2025-12-01 17:37:24.437 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:46318 12 10369 1 2025-12-01 17:33:11.403 00:05:57.836 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 17:33:11.406 00:05:57.831 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 17:38:24.876 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39720 10 6452 1 2025-12-01 17:39:25.291 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59192 10 6452 1 2025-12-01 17:40:25.692 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45276 10 6452 1 2025-12-01 17:40:42.833 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:40:42.750 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:40:42.700 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:40:42.525 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:40:42.453 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:41:26.110 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52292 10 6452 1 2025-12-01 17:42:26.510 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35142 10 6452 1 2025-12-01 17:43:26.874 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33902 10 6452 1 2025-12-01 17:39:11.405 00:05:57.851 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 17:39:11.408 00:05:57.845 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 17:44:27.292 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36668 10 6452 1 2025-12-01 17:45:27.713 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45018 10 6452 1 2025-12-01 17:45:42.748 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:45:42.771 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:45:42.682 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:45:42.664 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:45:42.721 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:46:28.098 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33460 10 6452 1 2025-12-01 17:47:28.519 00:00:10.514 TCP 1.101.0.1:3000 -> 23.104.0.1:43408 14 14292 1 2025-12-01 17:48:29.105 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47634 10 6452 1 2025-12-01 17:49:29.535 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:42376 10 6452 1 2025-12-01 17:45:11.408 00:05:57.849 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 17:45:11.406 00:05:57.854 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 17:50:29.911 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60510 10 6452 1 2025-12-01 17:50:42.803 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:50:42.895 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:50:42.888 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:50:43.035 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:50:42.971 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:51:30.311 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48608 10 6452 1 2025-12-01 17:52:30.717 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57224 10 6452 1 2025-12-01 17:53:31.121 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55268 10 6452 1 2025-12-01 17:54:31.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53810 10 6452 1 2025-12-01 17:55:42.732 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 17:55:42.766 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 17:55:31.921 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50716 10 6452 1 2025-12-01 17:55:43.110 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 17:55:42.835 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:55:42.650 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 17:51:11.411 00:05:57.850 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 17:51:11.409 00:05:57.856 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 17:56:32.326 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40878 10 6452 1 2025-12-01 17:57:32.737 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50062 10 6452 1 2025-12-01 17:58:33.141 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51788 10 6452 1 Summary: total flows: 140, total bytes: 432836, total packets: 1031, avg bps: 937, avg pps: 0, avg bpp: 419 Time window: 2025-12-01 16:57:11 - 2025-12-01 17:58:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0031s User: 0.0020s Wall: 0.0018s flows/second: 75758.3 Runtime: 0.0019s