Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 06:59:10.359 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33982 10 6452 1 2025-12-02 07:00:10.724 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45840 10 6452 1 2025-12-02 07:00:58.718 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:00:58.649 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:00:58.549 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:00:58.549 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:00:58.631 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:01:11.104 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33244 10 6452 1 2025-12-02 06:57:11.694 00:05:57.866 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:57:11.691 00:05:57.871 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:02:11.467 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33740 10 6452 1 2025-12-02 07:03:11.865 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58066 10 6452 1 2025-12-02 07:04:12.233 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53708 10 6452 1 2025-12-02 07:05:12.599 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34738 10 6452 1 2025-12-02 07:05:58.828 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:05:58.587 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:05:58.724 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:05:58.779 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:05:58.808 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:06:13.005 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34802 10 6452 1 2025-12-02 07:07:13.415 00:00:11.045 TCP 1.101.0.1:3000 -> 23.104.0.1:41958 10 6452 1 2025-12-02 07:03:11.695 00:05:57.866 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:03:11.692 00:05:57.872 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:08:14.505 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:35366 12 10375 1 2025-12-02 07:09:14.985 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42536 10 6452 1 2025-12-02 07:10:15.398 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46324 10 6452 1 2025-12-02 07:10:58.888 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:10:58.753 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:10:58.597 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:10:58.753 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:10:58.836 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:11:15.802 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46334 10 6452 1 2025-12-02 07:12:16.215 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43316 10 6452 1 2025-12-02 07:13:16.573 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58474 10 6452 1 2025-12-02 07:09:11.696 00:05:57.868 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:09:11.693 00:05:57.873 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:14:16.980 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36156 10 6452 1 2025-12-02 07:15:17.387 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52788 10 6452 1 2025-12-02 07:15:58.938 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:15:58.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:15:58.564 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:15:58.856 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:15:58.922 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:16:17.749 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45550 10 6452 1 2025-12-02 07:17:18.149 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40700 10 6452 1 2025-12-02 07:18:18.569 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54268 10 6452 1 2025-12-02 07:19:18.974 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52284 10 6452 1 2025-12-02 07:15:11.693 00:05:57.874 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:15:11.695 00:05:57.869 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:20:19.381 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37932 10 6452 1 2025-12-02 07:20:59.025 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:20:58.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:20:58.825 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:20:58.942 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:20:58.940 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:21:19.806 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60302 10 6452 1 2025-12-02 07:22:20.252 00:00:11.289 TCP 1.101.0.1:3000 -> 23.104.0.1:56108 10 6452 1 2025-12-02 07:23:21.597 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40670 10 6452 1 2025-12-02 07:24:22.000 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47972 10 6452 1 2025-12-02 07:25:22.406 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58870 10 6452 1 2025-12-02 07:25:59.589 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:25:59.477 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:25:59.716 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:25:59.665 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:25:59.799 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:21:11.698 00:05:57.868 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:21:11.696 00:05:57.873 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:26:22.823 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-12-02 07:27:23.190 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:37926 12 10369 1 2025-12-02 07:28:23.673 00:00:11.192 TCP 1.101.0.1:3000 -> 23.104.0.1:55674 10 6452 1 2025-12-02 07:29:24.907 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38224 10 6452 1 2025-12-02 07:30:25.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39420 10 6452 1 2025-12-02 07:30:59.201 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:30:59.139 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:30:59.119 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:30:59.324 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:30:59.239 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:31:25.724 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40894 10 6452 1 2025-12-02 07:27:11.700 00:05:57.868 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:27:11.697 00:05:57.873 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:32:26.135 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57738 10 6452 1 2025-12-02 07:33:26.497 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40074 10 6452 1 2025-12-02 07:34:26.901 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48022 12 6556 1 2025-12-02 07:35:27.313 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56514 10 6452 1 2025-12-02 07:35:59.446 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:35:59.409 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:35:59.188 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:35:59.364 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:35:59.307 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:36:27.723 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:33274 10 6452 1 2025-12-02 07:37:28.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38760 10 6452 1 2025-12-02 07:33:11.701 00:05:57.870 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:33:11.699 00:05:57.874 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:38:28.541 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53152 10 6452 1 2025-12-02 07:39:28.940 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:52702 10 6452 1 2025-12-02 07:40:29.361 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49364 10 6452 1 2025-12-02 07:40:59.468 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:40:59.388 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:40:59.341 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:40:59.385 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:40:59.211 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:41:29.757 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:52202 10 6452 1 2025-12-02 07:42:30.191 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43708 10 6452 1 2025-12-02 07:43:30.597 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46680 10 6452 1 2025-12-02 07:39:11.701 00:05:57.874 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:39:11.705 00:05:57.868 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:44:31.006 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 2025-12-02 07:45:31.405 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51972 10 6452 1 2025-12-02 07:45:59.651 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:45:59.495 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:45:59.681 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:45:59.568 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:45:59.561 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:46:31.776 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35728 10 6452 1 2025-12-02 07:47:32.188 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37410 10 6452 1 2025-12-02 07:48:32.586 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54848 10 6452 1 2025-12-02 07:49:32.983 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36594 10 6452 1 2025-12-02 07:45:11.706 00:05:57.868 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:45:11.703 00:05:57.873 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:50:33.385 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40584 10 6452 1 2025-12-02 07:50:59.639 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:50:59.555 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:50:59.244 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:50:59.559 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:50:59.409 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:51:33.792 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45834 10 6452 1 2025-12-02 07:52:34.155 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44122 10 6452 1 2025-12-02 07:53:34.568 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6452 1 2025-12-02 07:54:34.971 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38240 10 6452 1 2025-12-02 07:55:35.370 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50202 10 6452 1 2025-12-02 07:55:59.890 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:55:59.796 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:55:59.591 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:55:59.836 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:55:59.674 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:51:11.706 00:05:57.871 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:51:11.708 00:05:57.866 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:56:35.770 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48170 10 6452 1 2025-12-02 07:57:36.184 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48072 10 6452 1 2025-12-02 07:58:36.586 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51114 10 6452 1 Summary: total flows: 140, total bytes: 424944, total packets: 1026, avg bps: 919, avg pps: 0, avg bpp: 414 Time window: 2025-12-02 06:57:11 - 2025-12-02 07:58:46 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0020s User: 0.0030s Wall: 0.0017s flows/second: 84030.1 Runtime: 0.0017s