Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 21:59:14.353 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36208 10 6452 1 2025-12-01 22:00:14.717 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:40132 10 6452 1 2025-12-01 22:00:47.905 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:00:47.824 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:00:47.802 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:00:47.699 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:00:47.449 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:01:15.144 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37396 10 6452 1 2025-12-01 21:57:11.516 00:05:57.831 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 21:57:11.514 00:05:57.836 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 22:02:15.547 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6452 1 2025-12-01 22:03:15.955 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60376 10 6452 1 2025-12-01 22:04:16.367 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48746 10 6452 1 2025-12-01 22:05:16.773 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57100 10 6452 1 2025-12-01 22:05:48.025 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:05:47.939 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:05:47.831 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:05:47.942 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:05:47.990 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:06:17.178 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40188 10 6452 1 2025-12-01 22:07:17.578 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48478 10 6452 1 2025-12-01 22:03:11.514 00:05:57.838 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 22:03:11.517 00:05:57.832 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 22:08:17.992 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34792 10 6452 1 2025-12-01 22:09:18.399 00:00:13.788 TCP 1.101.0.1:3000 -> 23.104.0.1:37710 10 6452 1 2025-12-01 22:10:22.230 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59480 10 6452 1 2025-12-01 22:10:48.141 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:10:47.850 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:10:48.184 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:10:48.107 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:10:48.267 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:11:22.591 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50986 10 6452 1 2025-12-01 22:12:22.988 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41224 10 6452 1 2025-12-01 22:13:23.404 00:00:11.069 TCP 1.101.0.1:3000 -> 23.104.0.1:36258 10 6452 1 2025-12-01 22:09:11.520 00:05:57.833 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 22:09:11.518 00:05:57.837 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 22:14:24.513 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38156 10 6452 1 2025-12-01 22:15:24.921 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42902 10 6452 1 2025-12-01 22:15:48.355 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:15:48.325 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:15:48.097 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:15:48.274 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:15:48.276 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:16:25.334 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44896 10 6452 1 2025-12-01 22:17:25.736 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59650 10 6452 1 2025-12-01 22:18:26.147 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55612 10 6452 1 2025-12-01 22:19:26.551 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38640 10 6452 1 2025-12-01 22:15:11.521 00:05:57.834 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 22:15:11.519 00:05:57.839 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 22:20:26.961 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47350 10 6452 1 2025-12-01 22:20:48.164 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:20:48.167 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:20:47.788 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:20:48.081 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:20:47.865 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:21:27.365 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54794 10 6452 1 2025-12-01 22:22:27.777 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55410 10 6452 1 2025-12-01 22:23:28.206 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41888 10 6452 1 2025-12-01 22:24:28.609 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37804 10 6452 1 2025-12-01 22:25:29.014 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41134 10 6452 1 2025-12-01 22:25:48.303 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:25:48.335 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:25:48.405 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:25:48.221 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:25:48.290 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:21:11.520 00:05:57.839 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 22:21:11.522 00:05:57.834 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 22:26:29.420 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50498 11 6492 1 2025-12-01 22:27:29.830 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44116 10 6452 1 2025-12-01 22:28:30.231 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47590 10 6452 1 2025-12-01 22:29:30.637 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45590 10 6452 1 2025-12-01 22:30:31.042 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39058 10 6452 1 2025-12-01 22:30:48.520 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:30:48.362 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:30:48.359 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:30:48.471 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:30:48.442 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:31:31.405 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48908 10 6452 1 2025-12-01 22:27:11.523 00:05:57.838 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 22:27:11.526 00:05:57.833 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 22:32:31.773 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51182 10 6452 1 2025-12-01 22:33:32.186 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47000 10 6452 1 2025-12-01 22:34:32.586 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34028 10 6452 1 2025-12-01 22:35:32.989 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51738 10 6452 1 2025-12-01 22:35:48.606 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:35:48.497 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:35:48.546 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:35:48.647 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:35:48.628 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:36:33.392 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54968 10 6452 1 2025-12-01 22:37:33.762 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:57996 10 6452 1 2025-12-01 22:33:11.523 00:05:57.840 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 22:33:11.525 00:05:57.835 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 22:38:34.187 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36620 10 6452 1 2025-12-01 22:39:34.592 00:00:10.884 TCP 1.101.0.1:3000 -> 23.104.0.1:44834 10 6452 1 2025-12-01 22:40:35.516 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58936 10 6452 1 2025-12-01 22:40:48.602 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:40:48.567 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:40:48.628 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:40:48.535 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:40:48.711 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:41:35.926 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:43846 10 6452 1 2025-12-01 22:42:36.354 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51134 10 6452 1 2025-12-01 22:43:36.715 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58814 10 6452 1 2025-12-01 22:39:11.526 00:05:57.835 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 22:39:11.523 00:05:57.840 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 22:44:37.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56916 10 6452 1 2025-12-01 22:45:48.865 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:45:48.689 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:45:48.602 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:45:48.394 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:45:37.518 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44998 10 6452 1 2025-12-01 22:45:48.782 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:46:37.920 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39588 10 6452 1 2025-12-01 22:47:38.326 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:51290 11 6504 1 2025-12-01 22:48:38.788 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47948 10 6452 1 2025-12-01 22:49:39.192 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56062 10 6452 1 2025-12-01 22:45:11.525 00:05:57.838 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 22:45:11.523 00:05:57.844 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 22:50:48.894 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:50:39.558 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60790 10 6452 1 2025-12-01 22:50:48.887 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:50:48.643 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:50:48.810 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:50:48.794 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:51:39.958 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43050 10 6452 1 2025-12-01 22:52:40.371 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51274 10 6452 1 2025-12-01 22:53:40.780 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56210 10 6452 1 2025-12-01 22:54:41.187 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41050 10 6452 1 2025-12-01 22:55:48.791 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 22:55:48.880 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:55:48.797 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 22:55:48.716 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 22:55:48.879 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 22:55:41.597 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:40802 10 6452 1 2025-12-01 22:51:11.525 00:05:57.842 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 22:51:11.523 00:05:57.847 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 22:56:42.065 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56850 10 6452 1 2025-12-01 22:57:42.471 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:59392 12 10375 1 Summary: total flows: 139, total bytes: 414563, total packets: 1014, avg bps: 910, avg pps: 0, avg bpp: 408 Time window: 2025-12-01 21:57:11 - 2025-12-01 22:57:52 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0025s User: 0.0016s Wall: 0.0012s flows/second: 112636.8 Runtime: 0.0012s