Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 03:58:49.483 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37806 10 6452 1 2025-12-02 03:59:49.892 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 10 6452 1 2025-12-02 04:00:54.744 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:00:55.109 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:00:55.172 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:00:55.179 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:00:55.262 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:00:50.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58126 10 6452 1 2025-12-02 04:01:50.717 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41768 10 6452 1 2025-12-02 03:58:09.498 00:05:02.125 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:58:09.494 00:05:02.131 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:02:51.134 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47954 10 6452 1 2025-12-02 04:03:51.537 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:41494 11 6504 1 2025-12-02 04:04:51.997 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52676 10 6452 1 2025-12-02 04:05:54.962 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:05:54.704 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:05:55.161 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:05:55.191 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:05:55.079 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:05:52.397 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43914 10 6452 1 2025-12-02 04:06:52.798 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58456 10 6452 1 2025-12-02 04:07:53.207 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:36874 12 10375 1 2025-12-02 04:04:09.495 00:05:02.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:04:09.498 00:05:02.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:08:53.694 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40166 10 6452 1 2025-12-02 04:09:54.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55864 10 6452 1 2025-12-02 04:10:55.519 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:10:55.526 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:10:55.261 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:10:55.437 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:10:55.521 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:10:54.515 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51748 10 6452 1 2025-12-02 04:11:54.914 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:39858 10 6452 1 2025-12-02 04:12:55.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47062 10 6452 1 2025-12-02 04:13:55.765 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37926 10 6452 1 2025-12-02 04:10:09.498 00:05:02.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:10:09.500 00:05:02.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:14:56.191 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48194 10 6452 1 2025-12-02 04:15:55.472 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:15:55.139 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:15:55.242 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:15:55.056 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:15:55.389 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:15:56.594 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51974 10 6452 1 2025-12-02 04:16:57.006 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37558 10 6452 1 2025-12-02 04:17:57.414 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51134 10 6452 1 2025-12-02 04:18:57.816 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52828 10 6452 1 2025-12-02 04:19:58.221 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:35842 12 6556 1 2025-12-02 04:16:09.499 00:05:02.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:16:09.501 00:05:02.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:20:55.578 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:20:55.505 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:20:55.487 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:20:55.628 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:20:55.496 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:20:58.628 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55898 10 6452 1 2025-12-02 04:21:59.028 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55276 10 6452 1 2025-12-02 04:22:59.434 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34416 10 6452 1 2025-12-02 04:23:59.839 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:51030 10 6452 1 2025-12-02 04:25:00.270 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47090 10 6452 1 2025-12-02 04:25:55.717 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:25:55.565 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:25:55.589 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:25:55.636 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:25:55.640 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:26:00.676 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56832 10 6452 1 2025-12-02 04:22:09.504 00:05:02.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:22:09.501 00:05:02.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:27:01.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43734 10 6452 1 2025-12-02 04:28:01.511 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46592 10 6452 1 2025-12-02 04:29:01.914 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59394 10 6452 1 2025-12-02 04:30:02.321 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32806 10 6452 1 2025-12-02 04:30:55.453 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:30:55.633 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:30:55.555 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:30:55.267 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:30:55.370 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:31:02.725 00:00:10.823 TCP 1.101.0.1:3000 -> 23.104.0.1:38640 11 6504 1 2025-12-02 04:28:09.506 00:05:02.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:32:03.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53720 10 6452 1 2025-12-02 04:28:09.503 00:05:02.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:33:03.994 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50254 10 6452 1 2025-12-02 04:34:04.359 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51564 10 6452 1 2025-12-02 04:35:04.765 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:54430 10 6452 1 2025-12-02 04:35:55.792 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:35:55.819 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:35:55.825 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:35:55.734 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:35:55.711 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:36:05.148 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43328 10 6452 1 2025-12-02 04:37:05.552 00:00:10.905 TCP 1.101.0.1:3000 -> 23.104.0.1:52992 10 6452 1 2025-12-02 04:34:09.504 00:05:02.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:34:09.507 00:05:02.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:38:06.495 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33226 10 6452 1 2025-12-02 04:39:06.906 00:00:10.527 TCP 1.101.0.1:3000 -> 23.104.0.1:46118 10 6452 1 2025-12-02 04:40:07.475 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58828 10 6452 1 2025-12-02 04:40:55.850 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:40:55.718 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:40:55.588 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:40:55.850 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:40:55.933 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:41:07.838 00:00:10.751 TCP 1.101.0.1:3000 -> 23.104.0.1:58532 10 6452 1 2025-12-02 04:42:08.658 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58760 10 6452 1 2025-12-02 04:43:09.095 00:00:10.463 TCP 1.101.0.1:3000 -> 23.104.0.1:35102 10 6452 1 2025-12-02 04:40:09.513 00:05:02.131 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:40:09.515 00:05:02.125 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:44:09.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34150 10 6452 1 2025-12-02 04:45:10.006 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40294 10 6452 1 2025-12-02 04:45:55.919 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:45:55.969 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:45:55.850 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:45:55.633 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:45:55.716 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:46:10.421 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49920 10 6452 1 2025-12-02 04:47:10.823 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33618 10 6452 1 2025-12-02 04:48:11.245 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36530 10 6452 1 2025-12-02 04:49:11.607 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53790 10 6452 1 2025-12-02 04:46:09.513 00:05:02.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:46:09.516 00:05:02.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:50:12.012 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:55820 10 6452 1 2025-12-02 04:50:56.081 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:50:55.920 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:50:55.892 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:50:55.985 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:50:56.068 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:51:12.406 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57060 10 6452 1 2025-12-02 04:52:12.820 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56028 10 6452 1 2025-12-02 04:53:13.222 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57478 10 6452 1 2025-12-02 04:54:13.623 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35898 10 6452 1 2025-12-02 04:55:14.040 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39752 10 6452 1 2025-12-02 04:55:55.997 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:55:55.917 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:55:56.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:55:56.097 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:55:55.913 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:52:09.516 00:05:02.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:52:09.519 00:05:02.127 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:56:14.445 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48044 10 6452 1 2025-12-02 04:57:14.849 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:55726 10 6452 1 2025-12-02 04:58:15.279 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46300 10 6452 1 Summary: total flows: 140, total bytes: 421131, total packets: 1026, avg bps: 931, avg pps: 0, avg bpp: 410 Time window: 2025-12-02 03:58:09 - 2025-12-02 04:58:25 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0035s User: 0.0012s Wall: 0.0020s flows/second: 68726.9 Runtime: 0.0021s