Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 10:59:03.929 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:33770 10 6452 1 2025-12-02 11:00:04.355 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55736 10 6452 1 2025-12-02 11:01:03.823 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:01:03.968 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:01:03.973 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:01:03.740 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:01:03.832 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:01:04.758 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:36234 11 6504 1 2025-12-02 10:57:11.782 00:05:57.893 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 10:57:11.780 00:05:57.898 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:02:05.248 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49972 10 6452 1 2025-12-02 11:03:05.663 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47498 10 6452 1 2025-12-02 11:04:06.104 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43260 10 6452 1 2025-12-02 11:05:06.508 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43886 10 6452 1 2025-12-02 11:06:03.535 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:06:03.457 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:06:03.416 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:06:03.453 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:06:03.461 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:06:06.877 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54606 10 6452 1 2025-12-02 11:07:07.279 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-12-02 11:03:11.785 00:05:57.895 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:03:11.782 00:05:57.900 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:08:07.688 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60616 10 6452 1 2025-12-02 11:09:08.073 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56776 10 6452 1 2025-12-02 11:10:08.488 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33810 10 6452 1 2025-12-02 11:11:03.609 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:11:03.605 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:11:03.479 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:11:03.526 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:11:03.600 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:11:08.907 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36668 10 6452 1 2025-12-02 11:12:09.310 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53118 10 6452 1 2025-12-02 11:13:09.707 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51406 10 6452 1 2025-12-02 11:09:11.788 00:05:57.900 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:09:11.790 00:05:57.895 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:14:10.116 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33538 10 6452 1 2025-12-02 11:15:10.520 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52316 10 6452 1 2025-12-02 11:16:03.695 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:16:03.839 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:16:03.618 00:00:00.013 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:16:03.611 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:16:03.611 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:16:10.925 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:43696 10 6452 1 2025-12-02 11:17:11.352 00:00:10.699 TCP 1.101.0.1:3000 -> 23.104.0.1:44478 10 6452 1 2025-12-02 11:18:12.105 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46960 10 6452 1 2025-12-02 11:19:12.517 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50996 10 6452 1 2025-12-02 11:15:11.791 00:05:57.895 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:15:11.787 00:05:57.900 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:20:12.921 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:58656 10 6452 1 2025-12-02 11:21:04.399 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:21:04.460 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:21:04.434 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:21:04.317 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:21:04.386 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:21:13.343 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56556 10 6452 1 2025-12-02 11:22:13.748 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49962 10 6452 1 2025-12-02 11:23:14.150 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55900 10 6452 1 2025-12-02 11:24:14.511 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52256 10 6452 1 2025-12-02 11:25:14.905 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60362 10 6452 1 2025-12-02 11:26:03.676 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:21:11.797 00:05:57.890 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:26:03.905 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:26:03.729 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:26:03.593 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:26:03.798 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:21:11.794 00:05:57.896 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:26:15.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47272 10 6452 1 2025-12-02 11:27:15.719 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56374 10 6452 1 2025-12-02 11:28:16.113 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34844 10 6452 1 2025-12-02 11:29:16.518 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51148 10 6452 1 2025-12-02 11:30:16.924 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37796 10 6452 1 2025-12-02 11:31:03.853 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:31:03.882 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:31:03.854 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:31:04.123 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:31:03.936 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:31:17.299 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50602 10 6452 1 2025-12-02 11:27:11.799 00:05:57.890 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:27:11.797 00:05:57.896 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:32:17.727 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42472 10 6452 1 2025-12-02 11:33:18.140 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37714 10 6452 1 2025-12-02 11:34:18.506 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:38746 10 6452 1 2025-12-02 11:35:18.924 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49840 13 6608 1 2025-12-02 11:36:03.987 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:36:03.990 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:36:04.001 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:36:03.990 00:00:00.053 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:36:04.083 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:36:19.323 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55676 10 6452 1 2025-12-02 11:37:19.726 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46086 10 6452 1 2025-12-02 11:33:11.797 00:05:57.895 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:33:11.801 00:05:57.889 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:38:20.138 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58420 10 6452 1 2025-12-02 11:39:20.541 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50120 10 6452 1 2025-12-02 11:40:20.942 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36006 10 6452 1 2025-12-02 11:41:04.045 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:41:03.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:41:03.925 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:41:03.963 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:41:04.178 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:41:21.366 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32936 10 6452 1 2025-12-02 11:42:21.768 00:00:11.079 TCP 1.101.0.1:3000 -> 23.104.0.1:50086 11 6492 1 2025-12-02 11:43:22.884 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:44530 10 6452 1 2025-12-02 11:39:11.800 00:05:57.895 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:39:11.801 00:05:57.890 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:44:23.307 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34616 10 6452 1 2025-12-02 11:45:23.717 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35132 10 6452 1 2025-12-02 11:46:04.433 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:46:04.488 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:46:04.443 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:46:04.625 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:46:04.526 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:46:24.126 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39562 10 6452 1 2025-12-02 11:47:24.525 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37226 10 6452 1 2025-12-02 11:48:24.892 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37290 10 6452 1 2025-12-02 11:49:25.297 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-12-02 11:45:11.803 00:05:57.893 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:45:11.800 00:05:57.899 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:50:25.657 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40094 10 6452 1 2025-12-02 11:51:04.422 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:51:04.209 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:51:04.426 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:51:04.464 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:51:04.509 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:51:26.065 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50462 10 6452 1 2025-12-02 11:52:26.467 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48370 12 6556 1 2025-12-02 11:53:26.875 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54466 10 6452 1 2025-12-02 11:54:27.234 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:37294 11 6504 1 2025-12-02 11:55:27.688 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51020 10 6452 1 2025-12-02 11:56:04.580 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 11:56:04.355 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:56:04.523 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 11:56:04.505 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 11:56:04.605 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 11:51:11.809 00:05:57.889 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 11:51:11.807 00:05:57.893 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 11:56:28.109 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34270 10 6452 1 2025-12-02 11:57:28.514 00:00:10.432 TCP 1.101.0.1:3000 -> 23.104.0.1:40362 12 10375 1 2025-12-02 11:58:28.991 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55402 10 6452 1 Summary: total flows: 140, total bytes: 421327, total packets: 1030, avg bps: 914, avg pps: 0, avg bpp: 409 Time window: 2025-12-02 10:57:11 - 2025-12-02 11:58:39 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0021s User: 0.0043s Wall: 0.0022s flows/second: 63694.8 Runtime: 0.0022s