Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 00:59:35.808 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:39264 10 6452 1 2025-12-02 01:00:36.188 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42848 10 6452 1 2025-12-02 01:00:51.363 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:00:51.278 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:00:51.146 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:00:51.280 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:00:51.284 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:01:36.588 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45270 10 6452 1 2025-12-02 00:57:11.557 00:05:57.860 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 00:57:11.560 00:05:57.855 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 01:02:36.995 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53080 10 6452 1 2025-12-02 01:03:37.412 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42172 10 6452 1 2025-12-02 01:04:37.833 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:59970 10 6452 1 2025-12-02 01:05:51.898 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:05:38.225 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54974 10 6452 1 2025-12-02 01:05:51.694 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:05:51.733 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:05:51.816 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:05:51.815 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:06:38.626 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33874 10 6452 1 2025-12-02 01:07:38.989 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49742 10 6452 1 2025-12-02 01:03:11.571 00:05:57.850 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 01:03:11.575 00:05:57.844 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 01:08:39.391 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52888 10 6452 1 2025-12-02 01:09:39.756 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:34322 10 6452 1 2025-12-02 01:10:51.612 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:10:40.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37190 12 6556 1 2025-12-02 01:10:51.662 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:10:51.331 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:10:51.530 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:10:51.533 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:11:40.588 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57424 10 6452 1 2025-12-02 01:12:41.007 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38718 10 6452 1 2025-12-02 01:13:41.409 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49000 10 6452 1 2025-12-02 01:09:11.573 00:05:57.850 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 01:09:11.576 00:05:57.844 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 01:14:41.771 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41294 10 6452 1 2025-12-02 01:15:51.687 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:15:51.607 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:15:42.178 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46460 10 6452 1 2025-12-02 01:15:51.539 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:15:51.604 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:15:51.516 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:16:42.581 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32916 10 6452 1 2025-12-02 01:17:42.991 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35462 10 6452 1 2025-12-02 01:18:43.414 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51612 10 6452 1 2025-12-02 01:19:43.832 00:00:10.860 TCP 1.101.0.1:3000 -> 23.104.0.1:39502 10 6452 1 2025-12-02 01:15:11.576 00:05:57.844 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 01:15:11.573 00:05:57.849 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 01:20:51.861 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:20:51.826 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:20:51.657 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:20:44.734 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54944 10 6452 1 2025-12-02 01:20:51.778 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:20:51.868 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:21:45.142 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59160 10 6452 1 2025-12-02 01:22:45.557 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:46528 12 10369 1 2025-12-02 01:23:46.068 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33470 10 6452 1 2025-12-02 01:24:46.487 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:48806 10 6452 1 2025-12-02 01:25:51.835 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:25:51.827 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:25:51.699 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:25:51.834 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:25:51.781 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:25:46.846 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:38620 10 6452 1 2025-12-02 01:21:11.576 00:05:57.851 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 01:21:11.578 00:05:57.846 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 01:26:47.270 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34586 10 6452 1 2025-12-02 01:27:47.673 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58306 10 6452 1 2025-12-02 01:28:48.034 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53068 10 6452 1 2025-12-02 01:29:48.445 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47156 10 6452 1 2025-12-02 01:30:51.971 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:30:52.062 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:30:51.935 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:30:51.889 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:30:52.067 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:30:48.813 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58750 10 6452 1 2025-12-02 01:31:49.220 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49576 10 6452 1 2025-12-02 01:27:11.578 00:05:57.846 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 01:27:11.576 00:05:57.851 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 01:32:49.625 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 10 6452 1 2025-12-02 01:33:49.991 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35158 10 6452 1 2025-12-02 01:34:50.395 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36790 10 6452 1 2025-12-02 01:35:52.195 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:35:52.115 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:35:51.958 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:35:52.113 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:35:52.110 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:35:50.801 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50338 10 6452 1 2025-12-02 01:36:51.206 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53746 10 6452 1 2025-12-02 01:37:51.609 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55328 10 6452 1 2025-12-02 01:33:11.581 00:05:57.846 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 01:33:11.578 00:05:57.852 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 01:38:52.017 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52416 10 6452 1 2025-12-02 01:39:52.419 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54644 10 6452 1 2025-12-02 01:40:52.979 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:40:52.625 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:40:52.820 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:40:52.895 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:40:52.625 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:40:52.813 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:51634 10 6452 1 2025-12-02 01:41:53.192 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47388 10 6452 1 2025-12-02 01:42:53.596 00:00:10.705 TCP 1.101.0.1:3000 -> 23.104.0.1:40640 10 6452 1 2025-12-02 01:43:54.341 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35666 10 6452 1 2025-12-02 01:39:11.583 00:05:57.843 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 01:39:11.580 00:05:57.848 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 01:44:54.742 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47668 10 6452 1 2025-12-02 01:45:52.471 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:45:52.257 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:45:52.261 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:45:52.388 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:45:52.383 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:45:55.149 00:00:11.118 TCP 1.101.0.1:3000 -> 23.104.0.1:39330 12 6556 1 2025-12-02 01:46:56.306 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58172 10 6452 1 2025-12-02 01:47:56.708 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48064 11 6492 1 2025-12-02 01:48:57.115 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49368 10 6452 1 2025-12-02 01:49:57.529 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43586 10 6452 1 2025-12-02 01:45:11.590 00:05:57.840 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 01:45:11.593 00:05:57.835 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 01:50:52.523 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:50:52.038 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:50:52.468 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:50:52.467 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:50:52.553 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:50:57.930 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:46334 10 6452 1 2025-12-02 01:51:58.354 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42180 10 6452 1 2025-12-02 01:52:58.759 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37076 10 6452 1 2025-12-02 01:53:59.133 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34544 10 6452 1 2025-12-02 01:54:59.553 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58160 10 6452 1 2025-12-02 01:55:52.391 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 01:55:52.553 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 01:55:52.373 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:55:52.308 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 01:55:52.435 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 01:51:11.594 00:05:57.835 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 01:55:59.960 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40292 10 6452 1 2025-12-02 01:51:11.591 00:05:57.839 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 01:57:00.372 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50914 10 6452 1 2025-12-02 01:58:00.731 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49534 10 6452 1 Summary: total flows: 139, total bytes: 414713, total packets: 1017, avg bps: 906, avg pps: 0, avg bpp: 407 Time window: 2025-12-02 00:57:11 - 2025-12-02 01:58:11 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0053s User: 0.0000s Wall: 0.0014s flows/second: 96333.2 Runtime: 0.0015s