Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 17:59:33.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55688 10 6452 1 2025-12-01 18:00:43.227 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:00:43.101 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:00:42.888 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:00:43.144 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:00:42.949 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:00:33.950 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36464 10 6452 1 2025-12-01 18:01:34.318 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39128 10 6452 1 2025-12-01 17:57:11.413 00:05:57.849 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 17:57:11.411 00:05:57.854 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 18:02:34.723 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34150 10 6452 1 2025-12-01 18:03:35.130 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59924 10 6452 1 2025-12-01 18:04:35.532 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36712 10 6452 1 2025-12-01 18:05:43.044 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:05:42.964 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:05:42.935 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:05:42.961 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:05:42.876 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:05:35.939 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:34958 10 6452 1 2025-12-01 18:06:36.362 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35530 10 6452 1 2025-12-01 18:07:36.732 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:40832 12 10375 1 2025-12-01 18:03:11.414 00:05:57.849 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 18:03:11.411 00:05:57.854 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 18:08:37.222 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52264 10 6452 1 2025-12-01 18:09:37.585 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38806 10 6452 1 2025-12-01 18:10:43.231 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:10:43.130 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:10:43.330 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:10:43.259 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:10:43.414 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:10:37.991 00:00:10.958 TCP 1.101.0.1:3000 -> 23.104.0.1:35580 10 6452 1 2025-12-01 18:11:38.990 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44948 10 6452 1 2025-12-01 18:12:39.359 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45340 10 6452 1 2025-12-01 18:13:39.762 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39756 10 6452 1 2025-12-01 18:09:11.422 00:05:57.843 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 18:09:11.419 00:05:57.848 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 18:14:40.177 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47222 10 6452 1 2025-12-01 18:15:43.252 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:15:43.192 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:15:43.375 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:15:43.318 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:15:43.458 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:15:40.540 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43986 10 6452 1 2025-12-01 18:16:40.963 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40370 10 6452 1 2025-12-01 18:17:41.370 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50230 10 6452 1 2025-12-01 18:18:41.773 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45944 10 6452 1 2025-12-01 18:19:42.142 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44212 10 6452 1 2025-12-01 18:15:11.426 00:05:57.841 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 18:15:11.422 00:05:57.846 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 18:20:43.613 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:20:43.477 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:20:43.182 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:20:43.531 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:20:43.473 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:20:42.551 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57538 10 6452 1 2025-12-01 18:21:42.958 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55030 10 6452 1 2025-12-01 18:22:43.359 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55336 10 6452 1 2025-12-01 18:23:43.760 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43498 10 6452 1 2025-12-01 18:24:44.196 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42316 10 6452 1 2025-12-01 18:25:43.345 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:25:43.468 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:25:43.519 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:25:43.530 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:25:43.602 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:25:44.598 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33620 10 6452 1 2025-12-01 18:21:11.428 00:05:57.838 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 18:21:11.427 00:05:57.843 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 18:26:45.002 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53596 10 6452 1 2025-12-01 18:27:45.405 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49168 10 6452 1 2025-12-01 18:28:45.808 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38058 10 6452 1 2025-12-01 18:29:46.216 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43848 10 6452 1 2025-12-01 18:30:43.621 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:30:43.459 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:30:43.641 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:30:43.539 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:30:43.467 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:30:46.616 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52286 10 6452 1 2025-12-01 18:31:46.980 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46172 10 6452 1 2025-12-01 18:27:11.433 00:05:57.838 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 18:27:11.431 00:05:57.843 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 18:32:47.393 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51930 10 6452 1 2025-12-01 18:33:47.794 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:47174 10 6452 1 2025-12-01 18:34:48.174 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40814 10 6452 1 2025-12-01 18:35:43.976 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:35:43.956 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:35:43.835 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:35:43.893 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:35:43.925 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:35:48.578 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:40238 10 6452 1 2025-12-01 18:36:48.941 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35122 10 6452 1 2025-12-01 18:37:49.363 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38918 10 6452 1 2025-12-01 18:33:11.436 00:05:57.838 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 18:33:11.434 00:05:57.842 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 18:38:49.762 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:44730 10 6452 1 2025-12-01 18:39:50.138 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:35602 10 6452 1 2025-12-01 18:40:43.743 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:40:43.509 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:40:43.672 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:40:43.739 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:40:43.755 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:40:50.514 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46434 10 6452 1 2025-12-01 18:41:50.876 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43904 10 6452 1 2025-12-01 18:42:51.285 00:00:10.809 TCP 1.101.0.1:3000 -> 23.104.0.1:56170 10 6452 1 2025-12-01 18:43:52.136 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35046 10 6452 1 2025-12-01 18:39:11.436 00:05:57.841 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 18:39:11.438 00:05:57.837 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 18:44:52.539 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42328 10 6452 1 2025-12-01 18:45:44.000 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:45:44.007 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:45:43.825 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:45:43.917 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:45:43.861 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:45:52.948 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56446 10 6452 1 2025-12-01 18:46:53.372 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44462 10 6452 1 2025-12-01 18:47:53.779 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:59022 10 6452 1 2025-12-01 18:48:54.217 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43790 10 6452 1 2025-12-01 18:49:54.626 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51634 10 6452 1 2025-12-01 18:45:11.441 00:05:57.835 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 18:45:11.436 00:05:57.841 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 18:50:43.956 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:50:43.767 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:50:43.802 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:50:43.873 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:50:43.932 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:50:55.034 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60882 10 6452 1 2025-12-01 18:51:55.452 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44946 10 6452 1 2025-12-01 18:52:55.850 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:38986 10 6452 1 2025-12-01 18:53:56.279 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58668 10 6452 1 2025-12-01 18:54:56.680 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48956 10 6452 1 2025-12-01 18:55:43.926 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 18:55:44.109 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:55:44.204 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 18:55:44.006 00:00:00.052 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 18:55:44.287 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 18:51:11.442 00:05:57.835 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 18:55:57.121 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59104 10 6452 1 2025-12-01 18:51:11.439 00:05:57.841 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 18:56:57.528 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46162 10 6452 1 2025-12-01 18:57:57.928 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:45228 10 6452 1 Summary: total flows: 139, total bytes: 414471, total packets: 1012, avg bps: 906, avg pps: 0, avg bpp: 409 Time window: 2025-12-01 17:57:11 - 2025-12-01 18:58:08 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0037s User: 0.0019s Wall: 0.0026s flows/second: 54067.4 Runtime: 0.0026s