Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 16:58:42.572 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44788 10 6452 1 2025-12-02 16:59:42.976 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54658 10 6452 1 2025-12-02 17:00:43.380 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35988 10 6452 1 2025-12-02 17:01:10.576 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:01:10.398 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:01:10.703 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:01:10.493 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:01:10.495 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:01:43.808 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45484 10 6452 1 2025-12-02 16:57:11.927 00:05:57.864 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 16:57:11.925 00:05:57.870 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 17:02:44.212 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55470 10 6452 1 2025-12-02 17:03:44.628 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57120 10 6452 1 2025-12-02 17:04:45.030 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33260 10 6452 1 2025-12-02 17:05:45.429 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:60376 10 6452 1 2025-12-02 17:06:10.930 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:06:10.781 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:06:10.362 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:06:10.848 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:06:10.507 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:06:45.795 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53784 12 6556 1 2025-12-02 17:07:46.225 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45508 10 6452 1 2025-12-02 17:03:11.928 00:05:57.866 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 17:03:11.926 00:05:57.871 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 17:08:46.621 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57096 10 6452 1 2025-12-02 17:09:46.983 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39960 10 6452 1 2025-12-02 17:10:47.389 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48380 10 6452 1 2025-12-02 17:11:10.641 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:11:10.671 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:11:10.744 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:11:10.816 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:11:10.827 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:11:47.790 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57916 10 6452 1 2025-12-02 17:12:48.198 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40634 10 6452 1 2025-12-02 17:13:48.610 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51952 10 6452 1 2025-12-02 17:09:11.931 00:05:57.867 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 17:09:11.933 00:05:57.863 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 17:14:49.019 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37738 10 6452 1 2025-12-02 17:15:49.421 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44602 10 6452 1 2025-12-02 17:16:11.660 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:16:11.239 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:16:11.536 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:16:11.456 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:16:11.618 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:16:49.834 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:41888 10 6452 1 2025-12-02 17:17:50.267 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40032 10 6452 1 2025-12-02 17:18:50.674 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46388 10 6452 1 2025-12-02 17:19:51.098 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36288 10 6452 1 2025-12-02 17:15:11.932 00:05:57.867 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 17:15:11.934 00:05:57.862 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 17:20:51.497 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51570 10 6452 1 2025-12-02 17:21:11.417 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:21:11.149 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:21:11.420 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:21:11.205 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:21:11.502 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:21:51.906 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52674 10 6452 1 2025-12-02 17:22:52.309 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42178 10 6452 1 2025-12-02 17:23:52.715 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:54482 10 6452 1 2025-12-02 17:24:53.141 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51690 10 6452 1 2025-12-02 17:25:53.508 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38396 10 6452 1 2025-12-02 17:26:10.930 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:21:11.940 00:05:57.860 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 17:21:11.943 00:05:57.854 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 17:26:10.977 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:26:11.098 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:26:11.166 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:26:11.183 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:26:53.913 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34312 10 6452 1 2025-12-02 17:27:54.341 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:44426 12 10369 1 2025-12-02 17:28:54.817 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54974 10 6452 1 2025-12-02 17:29:55.224 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37272 10 6452 1 2025-12-02 17:30:55.631 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35196 10 6452 1 2025-12-02 17:31:11.345 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:31:11.201 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:31:11.284 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:31:11.263 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:31:11.215 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:27:11.944 00:05:57.857 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 17:31:56.031 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35622 10 6452 1 2025-12-02 17:27:11.940 00:05:57.862 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 17:32:56.437 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40876 10 6452 1 2025-12-02 17:33:56.853 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49138 10 6452 1 2025-12-02 17:34:57.276 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34904 10 6452 1 2025-12-02 17:35:57.678 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46222 10 6452 1 2025-12-02 17:36:11.479 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:36:11.225 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:36:11.488 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:36:11.317 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:36:11.570 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:36:58.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35466 10 6452 1 2025-12-02 17:33:11.946 00:05:57.857 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 17:37:58.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59836 10 6452 1 2025-12-02 17:33:11.944 00:05:57.861 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 17:38:58.917 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:52046 10 6452 1 2025-12-02 17:39:59.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34944 10 6452 1 2025-12-02 17:40:59.686 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44062 12 6556 1 2025-12-02 17:41:11.600 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:41:11.202 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:41:11.499 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:41:11.311 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:41:11.583 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:42:00.108 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52494 10 6452 1 2025-12-02 17:43:00.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39880 10 6452 1 2025-12-02 17:39:11.947 00:05:57.856 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 17:39:11.945 00:05:57.860 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 17:44:00.920 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:35118 10 6452 1 2025-12-02 17:45:01.320 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35300 10 6452 1 2025-12-02 17:46:11.628 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:46:11.425 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:46:11.571 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:46:11.494 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:46:01.725 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:49152 10 6452 1 2025-12-02 17:46:11.653 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:47:02.148 00:00:11.889 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 10 6452 1 2025-12-02 17:48:04.104 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38434 10 6452 1 2025-12-02 17:49:04.503 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60554 10 6452 1 2025-12-02 17:45:11.950 00:05:57.855 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 17:45:11.949 00:05:57.860 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 17:50:04.864 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37362 10 6452 1 2025-12-02 17:51:11.613 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:51:11.595 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:51:11.239 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:51:11.530 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:51:11.588 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:51:05.275 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44024 10 6452 1 2025-12-02 17:52:05.673 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47520 10 6452 1 2025-12-02 17:53:06.104 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57454 10 6452 1 2025-12-02 17:54:06.511 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36656 10 6452 1 2025-12-02 17:55:06.906 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37524 10 6452 1 2025-12-02 17:51:11.952 00:05:57.854 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 17:51:11.949 00:05:57.859 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 17:56:11.724 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 17:56:11.749 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:56:11.706 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 17:56:11.839 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 17:56:11.790 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 17:56:07.320 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57152 10 6452 1 2025-12-02 17:57:07.725 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:35162 10 6452 1 2025-12-02 17:58:08.142 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59326 10 6452 1 Summary: total flows: 140, total bytes: 421125, total packets: 1026, avg bps: 918, avg pps: 0, avg bpp: 410 Time window: 2025-12-02 16:57:11 - 2025-12-02 17:58:18 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0033s User: 0.0022s Wall: 0.0016s flows/second: 89800.1 Runtime: 0.0016s