Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 02:59:25.771 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52702 10 6452 1 2025-12-02 03:00:26.189 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:57040 10 6452 1 2025-12-02 03:00:53.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:00:53.813 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:00:53.617 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:00:53.720 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:00:53.716 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:01:26.562 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43126 10 6452 1 2025-12-02 02:57:11.610 00:05:57.839 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 02:57:11.612 00:05:57.835 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:02:26.937 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:54226 10 6452 1 2025-12-02 03:03:27.319 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58314 10 6452 1 2025-12-02 03:04:27.721 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59406 10 6452 1 2025-12-02 03:05:28.113 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42192 10 6452 1 2025-12-02 03:05:54.057 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:05:53.849 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:05:53.763 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:05:53.975 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:05:53.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:06:28.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60704 10 6452 1 2025-12-02 03:07:28.923 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:57786 10 6452 1 2025-12-02 03:03:11.613 00:05:57.838 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:03:11.610 00:05:57.843 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:08:29.350 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45764 10 6452 1 2025-12-02 03:09:29.752 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40500 10 6452 1 2025-12-02 03:10:30.156 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46672 10 6452 1 2025-12-02 03:10:54.130 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:10:54.085 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:10:54.143 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:10:54.275 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:10:54.226 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:11:30.559 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57766 10 6452 1 2025-12-02 03:12:30.960 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37570 10 6452 1 2025-12-02 03:13:31.361 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50756 10 6452 1 2025-12-02 03:09:11.614 00:05:57.840 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:09:11.616 00:05:57.835 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:14:31.723 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53488 10 6452 1 2025-12-02 03:15:32.144 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59048 10 6452 1 2025-12-02 03:15:54.581 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:15:54.120 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:15:53.831 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:15:54.498 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:15:54.123 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:16:32.545 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55358 10 6452 1 2025-12-02 03:17:32.907 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:60434 10 6452 1 2025-12-02 03:18:33.332 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50548 10 6452 1 2025-12-02 03:19:33.751 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:45728 10 6452 1 2025-12-02 03:15:11.617 00:05:57.836 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:15:11.615 00:05:57.841 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:20:34.138 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42336 10 6452 1 2025-12-02 03:20:54.225 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:20:54.021 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:20:54.053 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:20:54.143 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:20:53.882 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:21:34.506 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35420 10 6452 1 2025-12-02 03:22:34.908 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45916 10 6452 1 2025-12-02 03:23:35.312 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38480 10 6452 1 2025-12-02 03:24:35.713 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48274 10 6452 1 2025-12-02 03:25:36.122 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40958 10 6452 1 2025-12-02 03:25:54.287 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:25:54.174 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:25:54.301 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:25:54.393 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:25:54.385 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:21:11.618 00:05:57.839 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:21:11.616 00:05:57.845 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:26:36.536 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57796 10 6452 1 2025-12-02 03:27:36.941 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60766 10 6452 1 2025-12-02 03:28:37.359 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41146 10 6452 1 2025-12-02 03:29:37.720 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 10 6452 1 2025-12-02 03:30:38.131 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:46688 10 6452 1 2025-12-02 03:30:54.519 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:30:54.435 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:30:54.447 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:30:54.438 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:30:54.629 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:31:38.504 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58780 10 6452 1 2025-12-02 03:27:11.615 00:05:57.851 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:27:11.619 00:05:57.845 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:32:38.904 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54248 10 6452 1 2025-12-02 03:33:39.317 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44258 10 6452 1 2025-12-02 03:34:39.724 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:32872 10 6452 1 2025-12-02 03:35:40.139 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39668 10 6452 1 2025-12-02 03:35:54.764 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:35:54.477 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:35:54.448 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:35:54.443 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:35:54.533 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:36:40.496 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57782 10 6452 1 2025-12-02 03:37:40.861 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:53088 12 10375 1 2025-12-02 03:33:11.618 00:05:57.848 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:33:11.620 00:05:57.844 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:38:41.314 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38018 11 6492 1 2025-12-02 03:39:41.711 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57192 10 6452 1 2025-12-02 03:40:42.113 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-12-02 03:40:54.466 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:40:54.580 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:40:54.669 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:40:54.550 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:40:54.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:41:42.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40972 10 6452 1 2025-12-02 03:42:42.922 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 10 6452 1 2025-12-02 03:43:43.324 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45136 10 6452 1 2025-12-02 03:39:11.620 00:05:57.846 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:39:11.618 00:05:57.851 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:44:43.693 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41902 10 6452 1 2025-12-02 03:45:54.599 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:45:54.511 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:45:54.587 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:45:44.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46860 10 6452 1 2025-12-02 03:45:54.515 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:45:54.412 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:46:44.512 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38312 10 6452 1 2025-12-02 03:47:44.885 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60128 10 6452 1 2025-12-02 03:48:45.304 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:49592 11 6504 1 2025-12-02 03:49:45.762 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54052 10 6452 1 2025-12-02 03:45:11.623 00:05:57.870 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:45:11.621 00:05:57.875 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:50:54.869 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:50:54.833 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:50:54.792 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:50:54.786 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:50:54.837 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:50:46.180 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33504 10 6452 1 2025-12-02 03:51:46.549 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52796 10 6452 1 2025-12-02 03:52:46.975 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:53632 12 10375 1 2025-12-02 03:53:47.467 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35070 10 6452 1 2025-12-02 03:54:47.870 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47910 10 6452 1 2025-12-02 03:55:55.018 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 03:55:54.934 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 03:55:54.737 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:55:54.934 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 03:55:54.919 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 03:55:48.297 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46760 10 6452 1 2025-12-02 03:51:11.623 00:05:57.870 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 03:51:11.621 00:05:57.876 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 03:56:48.655 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52376 10 6452 1 2025-12-02 03:57:49.071 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 10 6452 1 Summary: total flows: 139, total bytes: 418486, total packets: 1016, avg bps: 917, avg pps: 0, avg bpp: 411 Time window: 2025-12-02 02:57:11 - 2025-12-02 03:57:59 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0029s Wall: 0.0035s flows/second: 39188.6 Runtime: 0.0036s