Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 04:59:15.681 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45500 10 6452 1 2025-12-02 05:00:16.105 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34308 10 6452 1 2025-12-02 05:00:56.484 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:00:55.928 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:00:56.208 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:00:56.402 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:00:56.213 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:01:16.512 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37462 10 6452 1 2025-12-02 04:57:11.645 00:05:57.878 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:57:11.648 00:05:57.873 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 05:02:16.879 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58626 10 6452 1 2025-12-02 05:03:17.284 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57568 10 6452 1 2025-12-02 05:04:17.685 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44460 10 6452 1 2025-12-02 05:05:18.110 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33250 10 6452 1 2025-12-02 05:05:56.206 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:05:56.211 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:05:56.074 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:05:56.122 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:05:56.316 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:06:18.475 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39448 10 6452 1 2025-12-02 05:07:18.879 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48808 10 6452 1 2025-12-02 05:03:11.650 00:05:57.875 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 05:03:11.647 00:05:57.880 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 05:08:19.278 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:55146 12 10375 1 2025-12-02 05:09:19.763 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:34644 10 6452 1 2025-12-02 05:10:20.136 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40806 10 6452 1 2025-12-02 05:10:56.337 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:10:56.466 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:10:56.256 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:10:56.450 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:10:56.340 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:11:20.547 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51442 10 6452 1 2025-12-02 05:12:20.954 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56422 10 6452 1 2025-12-02 05:09:11.651 00:05:57.875 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 05:09:11.649 00:05:57.880 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 05:13:21.360 00:01:10.783 TCP 1.101.0.1:3000 -> 23.104.0.1:47792 20 12904 1 2025-12-02 05:15:22.184 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:53778 10 6452 1 2025-12-02 05:15:56.517 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:15:56.593 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:15:56.441 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:15:56.585 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:15:56.524 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:16:22.562 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36050 10 6452 1 2025-12-02 05:17:22.964 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:42652 10 6452 1 2025-12-02 05:18:23.394 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32850 10 6452 1 2025-12-02 05:19:23.807 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43924 10 6452 1 2025-12-02 05:15:11.655 00:05:57.871 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 05:15:11.653 00:05:57.876 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 05:20:24.221 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56758 10 6452 1 2025-12-02 05:20:56.884 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:20:56.854 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:20:56.652 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:20:56.801 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:20:56.719 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:21:24.623 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60120 10 6452 1 2025-12-02 05:22:25.032 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:50976 12 10375 1 2025-12-02 05:23:25.519 00:00:10.784 TCP 1.101.0.1:3000 -> 23.104.0.1:47884 10 6452 1 2025-12-02 05:24:26.342 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48048 10 6452 1 2025-12-02 05:25:26.700 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43712 10 6452 1 2025-12-02 05:25:56.818 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:25:56.792 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:25:56.701 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:25:56.736 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:25:56.733 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:21:11.658 00:05:57.871 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 05:21:11.654 00:05:57.876 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 05:26:27.101 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57332 10 6452 1 2025-12-02 05:27:27.506 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57956 10 6452 1 2025-12-02 05:28:27.912 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47222 12 6556 1 2025-12-02 05:29:28.313 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52216 10 6452 1 2025-12-02 05:30:28.716 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57404 10 6452 1 2025-12-02 05:30:56.978 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:30:56.840 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:30:56.872 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:30:56.895 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:30:56.888 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:31:29.106 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37032 10 6452 1 2025-12-02 05:27:11.662 00:05:57.866 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 05:27:11.661 00:05:57.872 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 05:32:29.470 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52836 10 6452 1 2025-12-02 05:33:29.879 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45622 10 6452 1 2025-12-02 05:34:30.285 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37070 10 6452 1 2025-12-02 05:35:30.688 00:00:11.268 TCP 1.101.0.1:3000 -> 23.104.0.1:39074 10 6452 1 2025-12-02 05:35:56.964 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:35:56.804 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:35:56.682 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:35:56.882 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:35:56.929 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:36:31.994 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45220 10 6452 1 2025-12-02 05:37:32.355 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40064 10 6452 1 2025-12-02 05:33:11.660 00:05:57.878 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 05:33:11.662 00:05:57.873 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 05:38:32.756 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34584 10 6452 1 2025-12-02 05:39:33.165 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43214 10 6452 1 2025-12-02 05:40:33.572 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33942 10 6452 1 2025-12-02 05:40:57.230 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:40:56.963 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:40:57.126 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:40:57.086 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:40:57.209 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:41:33.972 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44844 10 6452 1 2025-12-02 05:42:34.335 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59060 10 6452 1 2025-12-02 05:43:34.739 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37760 10 6452 1 2025-12-02 05:39:11.665 00:05:57.871 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 05:39:11.663 00:05:57.876 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 05:44:35.139 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45564 10 6452 1 2025-12-02 05:45:35.548 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53344 10 6452 1 2025-12-02 05:45:57.062 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:45:57.099 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:45:57.104 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:45:56.980 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:45:56.978 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:46:35.915 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54804 10 6452 1 2025-12-02 05:47:36.282 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2025-12-02 05:48:36.693 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46668 10 6452 1 2025-12-02 05:49:37.115 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-12-02 05:45:11.665 00:05:57.875 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 05:45:11.668 00:05:57.869 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 05:50:37.497 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54088 10 6452 1 2025-12-02 05:50:57.096 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:50:57.120 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:50:57.243 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:50:57.176 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:50:57.326 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:51:37.892 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37642 12 6556 1 2025-12-02 05:52:38.309 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:34242 12 10375 1 2025-12-02 05:53:38.786 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37208 10 6452 1 2025-12-02 05:54:39.195 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49238 10 6452 1 2025-12-02 05:55:39.596 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60366 10 6452 1 2025-12-02 05:55:57.497 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 05:55:57.267 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 05:55:57.254 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:55:57.415 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 05:55:57.266 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 05:51:11.668 00:05:57.870 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 05:51:11.668 00:05:57.874 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 05:56:40.014 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54828 10 6452 1 2025-12-02 05:57:40.378 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47464 10 6452 1 Summary: total flows: 138, total bytes: 422525, total packets: 1020, avg bps: 928, avg pps: 0, avg bpp: 414 Time window: 2025-12-02 04:57:11 - 2025-12-02 05:57:50 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0029s User: 0.0010s Wall: 0.0019s flows/second: 71502.7 Runtime: 0.0019s