Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 12:58:54.410 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46950 10 6452 1 2025-12-02 12:59:54.808 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56826 10 6452 1 2025-12-02 13:01:05.860 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:01:05.787 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:01:05.777 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:01:05.588 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:00:55.210 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57418 10 6452 1 2025-12-02 13:01:05.999 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:01:55.613 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58608 10 6452 1 2025-12-02 12:57:11.822 00:05:57.898 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 12:57:11.826 00:05:57.893 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:02:55.976 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60430 10 6452 1 2025-12-02 13:03:56.379 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46946 10 6452 1 2025-12-02 13:04:56.791 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40804 10 6452 1 2025-12-02 13:06:06.010 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:06:05.778 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:06:05.776 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:06:05.927 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:06:05.837 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:05:57.198 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35854 10 6452 1 2025-12-02 13:06:57.605 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44760 10 6452 1 2025-12-02 13:03:11.827 00:05:57.892 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:03:11.825 00:05:57.898 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:07:57.965 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:50012 12 10375 1 2025-12-02 13:08:58.454 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38702 10 6452 1 2025-12-02 13:09:58.864 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47848 10 6452 1 2025-12-02 13:11:06.064 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:11:05.990 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:11:06.059 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:10:59.279 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53532 10 6452 1 2025-12-02 13:11:05.982 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:11:06.153 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:11:59.680 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55630 12 6556 1 2025-12-02 13:13:00.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45146 10 6452 1 2025-12-02 13:09:11.831 00:05:57.893 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:09:11.830 00:05:57.899 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:14:00.516 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33714 10 6452 1 2025-12-02 13:15:00.878 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40648 10 6452 1 2025-12-02 13:16:05.901 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:16:05.983 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:16:05.989 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:16:06.063 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:16:05.991 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:16:01.285 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:33998 11 6504 1 2025-12-02 13:17:01.741 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35084 10 6452 1 2025-12-02 13:18:02.141 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34814 10 6452 1 2025-12-02 13:19:02.550 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42372 10 6452 1 2025-12-02 13:15:11.834 00:05:57.892 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:15:11.831 00:05:57.897 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:20:02.958 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:51294 10 6452 1 2025-12-02 13:21:05.938 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:21:06.427 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:21:06.105 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:21:06.346 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:21:06.278 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:21:03.382 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56252 10 6452 1 2025-12-02 13:22:03.784 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:57014 10 6452 1 2025-12-02 13:23:04.149 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39884 10 6452 1 2025-12-02 13:24:04.559 00:00:12.830 TCP 1.101.0.1:3000 -> 23.104.0.1:53412 10 6452 1 2025-12-02 13:25:07.442 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34424 10 6452 1 2025-12-02 13:26:06.345 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:26:06.203 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:26:06.394 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:26:06.336 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:21:11.832 00:05:57.897 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:21:11.834 00:05:57.892 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:26:06.476 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:26:07.844 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:43680 10 6452 1 2025-12-02 13:27:08.284 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:55390 10 6452 1 2025-12-02 13:28:08.685 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38076 10 6452 1 2025-12-02 13:29:09.112 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47026 10 6452 1 2025-12-02 13:30:09.485 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 10 6452 1 2025-12-02 13:31:06.514 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:31:06.256 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:31:06.301 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:31:06.432 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:31:06.467 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:31:09.922 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:57974 11 6504 1 2025-12-02 13:27:11.840 00:05:57.890 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:27:11.836 00:05:57.896 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:32:10.373 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:40226 10 6452 1 2025-12-02 13:33:10.731 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:33998 12 10375 1 2025-12-02 13:34:11.224 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56612 10 6452 1 2025-12-02 13:35:11.635 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35276 10 6452 1 2025-12-02 13:36:06.658 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:36:06.375 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:36:06.530 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:36:06.359 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:36:06.613 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:36:12.041 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40872 10 6452 1 2025-12-02 13:37:12.397 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52470 10 6452 1 2025-12-02 13:33:11.840 00:05:57.891 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:33:11.839 00:05:57.896 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:38:12.795 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:41090 10 6452 1 2025-12-02 13:39:13.183 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53530 10 6452 1 2025-12-02 13:40:13.587 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43544 10 6452 1 2025-12-02 13:41:06.740 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:41:06.512 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:41:06.736 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:41:06.468 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:41:06.819 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:41:13.953 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60834 10 6452 1 2025-12-02 13:42:14.366 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46722 10 6452 1 2025-12-02 13:43:14.770 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54702 10 6452 1 2025-12-02 13:39:11.839 00:05:57.901 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:39:11.842 00:05:57.895 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:44:15.188 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42292 10 6452 1 2025-12-02 13:45:15.597 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36910 10 6452 1 2025-12-02 13:46:06.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:46:06.894 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:46:06.991 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:46:06.812 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:46:07.074 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:46:16.005 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:59396 10 6452 1 2025-12-02 13:47:16.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45062 10 6452 1 2025-12-02 13:48:16.763 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:34294 10 6452 1 2025-12-02 13:49:17.189 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49758 10 6452 1 2025-12-02 13:45:11.843 00:05:57.895 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:45:11.841 00:05:57.900 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:50:17.559 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43562 10 6452 1 2025-12-02 13:51:06.849 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:51:06.713 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:51:06.849 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:51:06.916 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:51:06.931 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:51:17.933 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35788 10 6452 1 2025-12-02 13:52:18.342 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53488 10 6452 1 2025-12-02 13:53:18.794 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60204 10 6452 1 2025-12-02 13:54:19.196 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44298 10 6452 1 2025-12-02 13:55:19.608 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50506 10 6452 1 2025-12-02 13:56:06.592 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 13:56:06.540 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:56:06.923 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 13:56:06.680 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 13:51:11.841 00:05:57.900 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 13:51:11.844 00:05:57.895 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 13:56:07.007 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 13:56:20.011 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56416 10 6452 1 2025-12-02 13:57:20.423 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36068 10 6452 1 2025-12-02 13:58:20.829 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:40538 12 10369 1 Summary: total flows: 140, total bytes: 428971, total packets: 1030, avg bps: 932, avg pps: 0, avg bpp: 416 Time window: 2025-12-02 12:57:11 - 2025-12-02 13:58:31 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0050s User: 0.0010s Wall: 0.0015s flows/second: 94405.6 Runtime: 0.0015s