Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-06 00:59:37.523 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43008 10 6452 1 2025-12-06 01:00:37.924 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57944 10 6452 1 2025-12-06 01:01:38.336 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57324 10 6452 1 2025-12-06 00:58:11.473 00:05:02.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 00:58:11.470 00:05:02.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 01:02:47.093 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:02:47.011 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:02:46.837 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:02:38.701 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56202 10 6452 1 2025-12-06 01:02:47.009 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:02:46.850 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:03:39.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33932 10 6452 1 2025-12-06 01:04:39.513 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52260 10 6452 1 2025-12-06 01:05:39.918 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:36194 10 6452 1 2025-12-06 01:06:40.292 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40344 10 6452 1 2025-12-06 01:07:47.132 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:07:47.198 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:07:47.129 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:07:47.172 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:07:47.049 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:07:40.693 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:53010 11 6504 1 2025-12-06 01:04:11.474 00:05:02.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 01:04:11.471 00:05:02.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 01:08:41.148 00:00:18.678 TCP 1.101.0.1:3000 -> 23.104.0.1:40422 10 6452 1 2025-12-06 01:09:49.873 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52726 10 6452 1 2025-12-06 01:10:50.276 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55602 10 6452 1 2025-12-06 01:11:50.634 00:00:10.781 TCP 1.101.0.1:3000 -> 23.104.0.1:35174 10 6452 1 2025-12-06 01:12:46.963 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:12:47.055 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:12:47.210 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:12:46.987 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:12:47.047 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:12:51.457 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54202 10 6452 1 2025-12-06 01:13:51.827 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50770 10 6452 1 2025-12-06 01:10:11.475 00:05:02.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 01:10:11.472 00:05:02.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 01:14:52.187 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:51322 11 6504 1 2025-12-06 01:15:52.645 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49082 10 6452 1 2025-12-06 01:16:53.055 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52818 12 6556 1 2025-12-06 01:17:47.349 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:17:47.065 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:17:47.332 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:17:47.078 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:17:47.266 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:17:53.452 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52180 10 6452 1 2025-12-06 01:18:53.826 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-12-06 01:19:54.230 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34518 10 6452 1 2025-12-06 01:16:11.476 00:05:02.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 01:16:11.474 00:05:02.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 01:20:54.633 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59092 10 6452 1 2025-12-06 01:21:54.992 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34980 10 6452 1 2025-12-06 01:22:47.267 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:22:47.336 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:22:47.296 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:22:47.339 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:22:47.422 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:22:55.399 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54990 10 6452 1 2025-12-06 01:23:55.802 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44432 10 6452 1 2025-12-06 01:24:56.206 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39652 10 6452 1 2025-12-06 01:25:56.565 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41554 10 6452 1 2025-12-06 01:22:11.481 00:05:02.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 01:22:11.478 00:05:02.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 01:26:56.972 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47194 10 6452 1 2025-12-06 01:27:47.725 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:27:47.639 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:27:47.694 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:27:47.198 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:27:47.642 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:27:57.343 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35368 10 6452 1 2025-12-06 01:28:57.748 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44024 10 6452 1 2025-12-06 01:29:58.152 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59334 10 6452 1 2025-12-06 01:30:58.556 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34752 10 6452 1 2025-12-06 01:31:58.950 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45264 10 6452 1 2025-12-06 01:28:11.482 00:05:02.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 01:28:11.480 00:05:02.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 01:32:47.615 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:32:47.580 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:32:47.536 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:32:47.306 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:32:47.535 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:32:59.322 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60668 10 6452 1 2025-12-06 01:33:59.724 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59418 10 6452 1 2025-12-06 01:35:00.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50026 10 6452 1 2025-12-06 01:36:00.541 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52964 10 6452 1 2025-12-06 01:37:00.912 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39176 10 6452 1 2025-12-06 01:37:47.734 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:37:47.368 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:37:47.751 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:37:47.291 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:37:47.651 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:34:11.488 00:05:02.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 01:38:01.325 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36656 10 6452 1 2025-12-06 01:34:11.484 00:05:02.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 01:39:01.731 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58962 10 6452 1 2025-12-06 01:40:02.143 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48834 10 6452 1 2025-12-06 01:41:02.551 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41052 10 6452 1 2025-12-06 01:42:02.913 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:38548 11 6504 1 2025-12-06 01:42:47.858 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:42:47.686 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:42:47.783 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:42:47.437 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:42:47.776 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:43:03.377 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57896 10 6452 1 2025-12-06 01:40:11.489 00:05:02.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 01:44:03.783 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41218 10 6452 1 2025-12-06 01:40:11.487 00:05:02.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 01:45:04.189 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:33460 10 6452 1 2025-12-06 01:46:04.584 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52618 10 6452 1 2025-12-06 01:47:04.944 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55676 12 6556 1 2025-12-06 01:47:48.071 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:47:47.832 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:47:47.633 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:47:48.115 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:47:48.199 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:48:05.361 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37524 10 6452 1 2025-12-06 01:49:05.768 00:00:10.704 TCP 1.101.0.1:3000 -> 23.104.0.1:53332 10 6452 1 2025-12-06 01:46:11.487 00:05:02.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 01:46:11.490 00:05:02.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 01:50:06.507 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60950 10 6452 1 2025-12-06 01:51:06.913 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37228 10 6452 1 2025-12-06 01:52:07.313 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56500 10 6452 1 2025-12-06 01:52:47.916 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:52:47.955 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:52:47.878 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:52:47.800 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:52:47.882 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:53:07.677 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43334 10 6452 1 2025-12-06 01:54:08.102 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45292 10 6452 1 2025-12-06 01:55:08.508 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45986 10 6452 1 2025-12-06 01:52:11.491 00:05:02.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 01:52:11.489 00:05:02.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 01:56:08.916 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44274 10 6452 1 2025-12-06 01:57:09.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46322 10 6452 1 2025-12-06 01:57:48.005 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 01:57:48.103 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 01:57:47.973 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:57:47.934 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 01:57:48.018 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 01:58:09.723 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39810 10 6452 1 Summary: total flows: 139, total bytes: 410912, total packets: 1017, avg bps: 910, avg pps: 0, avg bpp: 404 Time window: 2025-12-06 00:58:11 - 2025-12-06 01:58:20 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0052s User: 0.0010s Wall: 0.0023s flows/second: 59303.0 Runtime: 0.0024s