Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 14:58:46.329 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38594 10 6452 1 2025-12-02 14:59:46.727 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52552 10 6452 1 2025-12-02 15:00:47.151 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57776 10 6452 1 2025-12-02 15:01:08.856 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:01:08.701 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:01:08.634 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:01:08.774 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:01:08.934 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:01:47.527 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:41018 11 6504 1 2025-12-02 14:57:11.867 00:05:57.894 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 14:57:11.869 00:05:57.890 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 15:02:47.989 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42588 10 6452 1 2025-12-02 15:03:48.354 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38736 10 6452 1 2025-12-02 15:04:48.754 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:34692 10 6452 1 2025-12-02 15:05:49.178 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51852 10 6452 1 2025-12-02 15:06:08.715 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:06:08.362 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:06:08.560 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:06:08.632 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:06:08.481 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:06:49.545 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:34866 10 6452 1 2025-12-02 15:07:49.941 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:57716 10 6452 1 2025-12-02 15:03:11.871 00:05:57.890 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 15:03:11.869 00:05:57.895 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 15:08:50.314 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59732 10 6452 1 2025-12-02 15:09:50.717 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48958 10 6452 1 2025-12-02 15:10:51.119 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56356 10 6452 1 2025-12-02 15:11:08.612 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:11:08.439 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:11:08.359 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:11:08.530 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:11:08.272 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:11:51.521 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41236 10 6452 1 2025-12-02 15:12:51.881 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:43758 12 6556 1 2025-12-02 15:13:52.345 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58222 10 6452 1 2025-12-02 15:09:11.875 00:05:57.886 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 15:09:11.872 00:05:57.892 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 15:14:52.749 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40620 10 6452 1 2025-12-02 15:16:08.810 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:15:53.149 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57934 10 6452 1 2025-12-02 15:16:08.614 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:16:08.647 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:16:08.729 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:16:08.529 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:16:53.554 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41850 10 6452 1 2025-12-02 15:17:53.963 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52032 10 6452 1 2025-12-02 15:18:54.366 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43980 10 6452 1 2025-12-02 15:15:11.880 00:05:57.884 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 15:19:54.768 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53876 10 6452 1 2025-12-02 15:15:11.877 00:05:57.888 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 15:20:55.186 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57368 10 6452 1 2025-12-02 15:21:08.533 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:21:08.566 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:21:08.738 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:21:08.612 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:21:08.821 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:21:55.592 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49400 10 6452 1 2025-12-02 15:22:55.998 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46364 10 6452 1 2025-12-02 15:23:56.397 00:00:16.051 TCP 1.101.0.1:3000 -> 23.104.0.1:60262 10 6452 1 2025-12-02 15:25:02.485 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56350 10 6452 1 2025-12-02 15:21:11.881 00:05:57.886 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 15:26:08.908 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:26:08.761 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:26:08.779 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:26:08.826 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:26:08.827 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:21:11.879 00:05:57.891 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 15:26:02.888 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:58224 10 6452 1 2025-12-02 15:27:03.314 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49674 10 6452 1 2025-12-02 15:28:03.668 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54342 10 6452 1 2025-12-02 15:29:04.099 00:00:11.154 TCP 1.101.0.1:3000 -> 23.104.0.1:54400 10 6452 1 2025-12-02 15:30:05.291 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57284 10 6452 1 2025-12-02 15:31:08.794 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:31:08.760 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:31:08.897 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:31:08.802 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:31:08.979 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:31:05.694 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:45724 10 6452 1 2025-12-02 15:27:11.884 00:05:57.885 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 15:27:11.881 00:05:57.889 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 15:32:06.095 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37540 10 6452 1 2025-12-02 15:33:06.495 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:58608 10 6452 1 2025-12-02 15:34:06.869 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39912 10 6452 1 2025-12-02 15:35:07.278 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47962 10 6452 1 2025-12-02 15:36:09.029 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:36:08.995 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:36:08.968 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:36:08.945 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:36:08.766 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:36:07.681 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48778 10 6452 1 2025-12-02 15:37:08.112 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:32842 10 6452 1 2025-12-02 15:33:11.883 00:05:57.891 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 15:33:11.885 00:05:57.887 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 15:38:08.521 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53356 10 6452 1 2025-12-02 15:39:08.881 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48210 10 6452 1 2025-12-02 15:40:09.293 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35072 10 6452 1 2025-12-02 15:41:09.052 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:41:08.858 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:41:08.939 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:41:08.970 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:41:08.755 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:41:09.701 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50180 10 6452 1 2025-12-02 15:42:10.112 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35904 10 6452 1 2025-12-02 15:43:10.527 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43992 10 6452 1 2025-12-02 15:39:11.891 00:05:57.882 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 15:39:11.889 00:05:57.888 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 15:44:10.941 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33858 10 6452 1 2025-12-02 15:45:11.355 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43886 10 6452 1 2025-12-02 15:46:09.134 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:46:08.984 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:46:08.885 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:46:09.084 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:46:08.974 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:46:11.764 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45304 10 6452 1 2025-12-02 15:47:12.184 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40226 10 6452 1 2025-12-02 15:48:12.551 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49480 10 6452 1 2025-12-02 15:49:12.952 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35468 10 6452 1 2025-12-02 15:45:11.892 00:05:57.883 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 15:45:11.890 00:05:57.887 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 15:50:13.361 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58208 10 6452 1 2025-12-02 15:51:09.513 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:51:09.269 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:51:09.294 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:51:09.431 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:51:09.433 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:51:13.769 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48206 10 6452 1 2025-12-02 15:52:14.186 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56294 10 6452 1 2025-12-02 15:53:14.587 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49468 10 6452 1 2025-12-02 15:54:14.986 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59302 10 6452 1 2025-12-02 15:55:15.396 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34142 10 6452 1 2025-12-02 15:56:09.274 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:56:09.279 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 15:51:11.902 00:05:57.877 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 15:56:09.278 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 15:56:09.241 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 15:51:11.906 00:05:57.871 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 15:56:09.358 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 15:56:15.802 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:44588 10 6452 1 2025-12-02 15:57:16.177 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54334 10 6452 1 2025-12-02 15:58:16.586 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:37432 12 10375 1 Summary: total flows: 140, total bytes: 421079, total packets: 1025, avg bps: 916, avg pps: 0, avg bpp: 410 Time window: 2025-12-02 14:57:11 - 2025-12-02 15:58:27 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0112s User: 0.0031s Wall: 0.0112s flows/second: 12553.8 Runtime: 0.0112s