Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 02:59:25.772 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52702 10 6452 1 2025-12-02 03:00:26.190 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:57040 10 6452 1 2025-12-02 03:00:53.814 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:00:53.717 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:00:53.617 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:00:53.720 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:00:53.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:01:26.563 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43126 10 6452 1 2025-12-02 02:58:09.444 00:05:02.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 02:58:09.446 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:02:26.937 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:54226 10 6452 1 2025-12-02 03:03:27.319 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58314 10 6452 1 2025-12-02 03:04:27.720 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59406 10 6452 1 2025-12-02 03:05:28.112 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42192 10 6452 1 2025-12-02 03:05:54.057 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:05:53.849 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:05:53.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:05:53.763 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:05:53.975 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:06:28.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60704 10 6452 1 2025-12-02 03:07:28.922 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:57786 10 6452 1 2025-12-02 03:04:09.449 00:05:02.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:04:09.448 00:05:02.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:08:29.349 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45764 10 6452 1 2025-12-02 03:09:29.751 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40500 10 6452 1 2025-12-02 03:10:30.156 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46672 10 6452 1 2025-12-02 03:10:54.132 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:10:54.277 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:10:54.087 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:10:54.145 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:10:54.227 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:11:30.558 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57766 10 6452 1 2025-12-02 03:12:30.959 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37570 10 6452 1 2025-12-02 03:13:31.362 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50756 10 6452 1 2025-12-02 03:10:09.453 00:05:02.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:10:09.451 00:05:02.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:14:31.723 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53488 10 6452 1 2025-12-02 03:15:32.145 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59048 10 6452 1 2025-12-02 03:15:54.580 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:15:54.120 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:15:54.123 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:15:53.831 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:15:54.498 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:16:32.546 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55358 10 6452 1 2025-12-02 03:17:32.908 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:60434 10 6452 1 2025-12-02 03:18:33.331 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50548 10 6452 1 2025-12-02 03:19:33.752 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:45728 10 6452 1 2025-12-02 03:16:09.452 00:05:02.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:16:09.454 00:05:02.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:20:34.136 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42336 10 6452 1 2025-12-02 03:20:54.020 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:20:53.881 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:20:54.052 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:20:54.142 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:20:54.225 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:21:34.505 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35420 10 6452 1 2025-12-02 03:22:34.908 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45916 10 6452 1 2025-12-02 03:23:35.312 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38480 10 6452 1 2025-12-02 03:24:35.713 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48274 10 6452 1 2025-12-02 03:25:36.123 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40958 10 6452 1 2025-12-02 03:25:54.288 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:25:54.394 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:25:54.174 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:25:54.302 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:25:54.384 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:22:09.455 00:05:02.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:22:09.458 00:05:02.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:26:36.536 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57796 10 6452 1 2025-12-02 03:27:36.940 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60766 10 6452 1 2025-12-02 03:28:37.360 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41146 10 6452 1 2025-12-02 03:29:37.720 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 10 6452 1 2025-12-02 03:30:38.131 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:46688 10 6452 1 2025-12-02 03:30:54.518 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:30:54.439 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:30:54.447 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:30:54.630 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:30:54.436 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:31:38.504 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58780 10 6452 1 2025-12-02 03:28:09.459 00:05:02.158 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:28:09.458 00:05:02.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:32:38.904 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54248 10 6452 1 2025-12-02 03:33:39.316 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44258 10 6452 1 2025-12-02 03:34:39.725 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:32872 10 6452 1 2025-12-02 03:35:54.764 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:35:54.444 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:35:54.477 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:35:54.448 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:35:40.139 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39668 10 6452 1 2025-12-02 03:35:54.533 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:36:40.495 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57782 10 6452 1 2025-12-02 03:37:40.862 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:53088 12 10375 1 2025-12-02 03:34:09.464 00:05:02.158 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:34:09.466 00:05:02.153 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:38:41.312 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38018 11 6492 1 2025-12-02 03:39:41.711 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57192 10 6452 1 2025-12-02 03:40:54.466 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:40:54.549 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:40:54.580 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:40:54.668 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:40:42.113 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-12-02 03:40:54.751 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:41:42.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40972 10 6452 1 2025-12-02 03:42:42.921 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 10 6452 1 2025-12-02 03:43:43.325 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45136 10 6452 1 2025-12-02 03:40:09.466 00:05:02.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:40:09.464 00:05:02.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:44:43.692 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41902 10 6452 1 2025-12-02 03:45:54.512 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:45:54.413 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:45:54.588 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:45:44.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46860 10 6452 1 2025-12-02 03:45:54.516 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:45:54.599 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:46:44.512 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38312 10 6452 1 2025-12-02 03:47:44.884 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60128 10 6452 1 2025-12-02 03:48:45.305 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:49592 11 6504 1 2025-12-02 03:49:45.761 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54052 10 6452 1 2025-12-02 03:46:09.468 00:05:02.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:46:09.466 00:05:02.158 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:50:54.833 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:50:54.836 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:50:54.791 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:50:54.786 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:50:54.869 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:50:46.178 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33504 10 6452 1 2025-12-02 03:51:46.548 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52796 10 6452 1 2025-12-02 03:52:46.974 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:53632 12 10375 1 2025-12-02 03:53:47.465 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35070 10 6452 1 2025-12-02 03:54:47.871 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47910 10 6452 1 2025-12-02 03:55:54.933 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:55:54.919 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:55:54.736 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:55:54.934 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:55:48.296 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46760 10 6452 1 2025-12-02 03:55:55.017 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:52:09.496 00:05:02.127 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:52:09.493 00:05:02.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:56:48.654 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52376 10 6452 1 2025-12-02 03:57:49.071 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 10 6452 1 Summary: total flows: 139, total bytes: 418486, total packets: 1016, avg bps: 932, avg pps: 0, avg bpp: 411 Time window: 2025-12-02 02:58:09 - 2025-12-02 03:57:59 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0053s User: 0.0013s Wall: 0.0020s flows/second: 69571.4 Runtime: 0.0020s