Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 05:58:40.774 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57890 10 6452 1 2025-12-02 05:59:41.189 00:00:11.781 TCP 1.101.0.1:3000 -> 23.104.0.1:53098 10 6452 1 2025-12-02 06:00:43.010 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:53140 10 6452 1 2025-12-02 06:00:57.839 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:00:57.602 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:00:57.528 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:00:57.757 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:00:57.498 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:01:43.386 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45488 10 6452 1 2025-12-02 05:57:11.670 00:05:57.872 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 05:57:11.674 00:05:57.867 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:02:43.794 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:60164 10 6452 1 2025-12-02 06:03:44.152 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60070 10 6452 1 2025-12-02 06:04:44.550 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37384 10 6452 1 2025-12-02 06:05:57.564 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:05:44.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54042 10 6452 1 2025-12-02 06:05:57.589 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:05:57.675 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:05:57.481 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:05:57.583 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:06:45.316 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35218 10 6452 1 2025-12-02 06:07:45.719 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56736 10 6452 1 2025-12-02 06:03:11.677 00:05:57.865 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:03:11.675 00:05:57.870 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:08:46.142 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41784 10 6452 1 2025-12-02 06:09:46.545 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36270 10 6452 1 2025-12-02 06:10:46.948 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:60790 10 6452 1 2025-12-02 06:10:57.714 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:10:57.432 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:10:57.709 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:10:57.724 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:10:57.791 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:11:47.317 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34710 10 6452 1 2025-12-02 06:12:47.680 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55946 10 6452 1 2025-12-02 06:13:48.099 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36542 10 6452 1 2025-12-02 06:09:11.674 00:05:57.875 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:09:11.677 00:05:57.870 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:14:48.520 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51516 10 6452 1 2025-12-02 06:15:57.915 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:15:57.537 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:15:48.929 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:55588 10 6452 1 2025-12-02 06:15:57.776 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:15:57.773 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:15:57.859 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:16:49.366 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:35922 10 6452 1 2025-12-02 06:17:49.801 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39224 10 6452 1 2025-12-02 06:18:50.210 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41372 10 6452 1 2025-12-02 06:19:50.570 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53416 10 6452 1 2025-12-02 06:15:11.680 00:05:57.867 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:15:11.679 00:05:57.871 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:20:57.908 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:20:57.943 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:20:57.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:20:57.824 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:20:57.825 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:20:50.973 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50960 10 6452 1 2025-12-02 06:21:51.389 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39350 10 6452 1 2025-12-02 06:22:51.793 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33026 10 6452 1 2025-12-02 06:23:52.196 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48168 10 6452 1 2025-12-02 06:24:52.601 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37872 10 6452 1 2025-12-02 06:25:57.844 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:25:57.577 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:25:57.851 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:25:57.978 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:25:57.934 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:25:53.002 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:40476 10 6452 1 2025-12-02 06:21:11.682 00:05:57.869 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:21:11.684 00:05:57.864 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:26:53.361 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45164 10 6452 1 2025-12-02 06:27:53.727 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:50996 10 6452 1 2025-12-02 06:28:54.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37014 10 6452 1 2025-12-02 06:29:54.513 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42696 10 6452 1 2025-12-02 06:30:58.123 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:30:57.945 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:30:58.235 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:30:58.241 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:30:58.316 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:30:54.878 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57654 10 6452 1 2025-12-02 06:31:55.239 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51460 10 6452 1 2025-12-02 06:27:11.682 00:05:57.870 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:27:11.686 00:05:57.865 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:32:55.642 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37088 10 6452 1 2025-12-02 06:33:56.057 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40910 10 6452 1 2025-12-02 06:34:56.455 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33668 10 6452 1 2025-12-02 06:35:57.968 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:35:58.197 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:35:58.168 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:35:58.287 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:35:58.252 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:35:56.861 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40272 10 6452 1 2025-12-02 06:36:57.278 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46958 10 6452 1 2025-12-02 06:33:11.686 00:05:57.865 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:37:57.684 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44942 10 6452 1 2025-12-02 06:33:11.686 00:05:57.870 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:38:58.111 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:56956 11 6504 1 2025-12-02 06:39:58.550 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54994 10 6452 1 2025-12-02 06:40:58.223 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:40:58.288 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:40:58.250 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:40:58.140 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:40:58.388 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:40:58.960 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57492 10 6452 1 2025-12-02 06:41:59.366 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49120 10 6452 1 2025-12-02 06:42:59.721 00:00:10.934 TCP 1.101.0.1:3000 -> 23.104.0.1:50536 12 10375 1 2025-12-02 06:39:11.688 00:05:57.867 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:39:11.685 00:05:57.872 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:44:00.693 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35798 10 6452 1 2025-12-02 06:45:01.110 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52574 10 6452 1 2025-12-02 06:45:58.541 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:45:58.227 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:45:58.424 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:45:58.460 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:45:58.403 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:46:01.509 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34730 10 6452 1 2025-12-02 06:47:01.915 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41968 10 6452 1 2025-12-02 06:48:02.321 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48172 10 6452 1 2025-12-02 06:49:02.729 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:58754 10 6452 1 2025-12-02 06:45:11.695 00:05:57.862 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:45:11.687 00:05:57.873 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:50:03.113 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47832 11 6504 1 2025-12-02 06:50:58.607 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:50:58.603 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:50:58.162 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:50:58.526 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:50:58.611 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:51:03.532 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:46072 10 6452 1 2025-12-02 06:52:03.976 00:00:13.880 TCP 1.101.0.1:3000 -> 23.104.0.1:54850 10 6452 1 2025-12-02 06:53:07.931 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:44700 10 6452 1 2025-12-02 06:54:08.361 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53964 10 6452 1 2025-12-02 06:55:08.760 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54612 10 6452 1 2025-12-02 06:55:58.621 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 06:55:58.362 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:55:58.618 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 06:55:58.322 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 06:55:58.700 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 06:51:11.693 00:05:57.865 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 06:51:11.691 00:05:57.871 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:56:09.168 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34842 10 6452 1 2025-12-02 06:57:09.569 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37964 10 6452 1 2025-12-02 06:58:09.930 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60362 10 6452 1 Summary: total flows: 140, total bytes: 421027, total packets: 1024, avg bps: 918, avg pps: 0, avg bpp: 411 Time window: 2025-12-02 05:57:11 - 2025-12-02 06:58:20 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0028s User: 0.0028s Wall: 0.0028s flows/second: 49628.3 Runtime: 0.0028s