Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 01:59:23.540 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56662 10 6452 1 2025-12-04 02:00:23.949 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58140 10 6452 1 2025-12-04 01:57:10.451 00:05:02.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 01:57:10.450 00:05:02.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 02:01:24.376 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:58680 10 6452 1 2025-12-04 02:01:50.115 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:01:50.401 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:01:50.210 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:01:50.033 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:01:50.265 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:02:24.870 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37604 10 6452 1 2025-12-04 02:03:25.278 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45016 10 6452 1 2025-12-04 02:04:25.690 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42370 10 6452 1 2025-12-04 02:05:26.107 00:00:14.104 TCP 1.101.0.1:3000 -> 23.104.0.1:49512 10 6452 1 2025-12-04 02:06:30.263 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51748 10 6452 1 2025-12-04 02:06:50.568 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:06:50.183 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:06:50.398 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:06:50.400 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:06:50.480 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:03:10.449 00:05:02.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 02:03:10.453 00:05:02.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 02:07:30.671 00:00:15.944 TCP 1.101.0.1:3000 -> 23.104.0.1:51044 11 6504 1 2025-12-04 02:08:36.672 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:53820 13 10415 1 2025-12-04 02:09:37.142 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50162 10 6452 1 2025-12-04 02:10:37.548 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53124 10 6452 1 2025-12-04 02:11:50.656 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:11:37.909 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37646 10 6452 1 2025-12-04 02:11:50.526 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:11:50.200 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:11:50.574 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:11:50.575 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:12:38.314 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49130 10 6452 1 2025-12-04 02:09:10.453 00:05:02.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 02:09:10.456 00:05:02.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 02:13:38.716 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35814 10 6452 1 2025-12-04 02:14:39.128 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48750 10 6452 1 2025-12-04 02:15:39.528 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48392 10 6452 1 2025-12-04 02:16:50.933 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:16:50.914 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:16:50.864 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:16:50.852 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:16:39.937 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:35664 10 6452 1 2025-12-04 02:16:50.910 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:17:40.351 00:00:12.892 TCP 1.101.0.1:3000 -> 23.104.0.1:52444 10 6452 1 2025-12-04 02:18:43.284 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:52690 12 10375 1 2025-12-04 02:15:10.456 00:05:02.161 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 02:15:10.459 00:05:02.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 02:19:43.716 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47620 10 6452 1 2025-12-04 02:20:44.133 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39168 10 6452 1 2025-12-04 02:21:50.881 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:21:50.569 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:21:50.794 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:21:50.715 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:21:50.866 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:21:44.495 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52868 10 6452 1 2025-12-04 02:22:44.906 00:00:13.047 TCP 1.101.0.1:3000 -> 23.104.0.1:42680 10 6452 1 2025-12-04 02:23:47.989 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47064 10 6452 1 2025-12-04 02:24:48.399 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:42484 10 6452 1 2025-12-04 02:21:10.457 00:05:02.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 02:21:10.460 00:05:02.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 02:25:48.771 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38566 10 6452 1 2025-12-04 02:26:50.746 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:26:50.863 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:26:50.762 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:26:50.889 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:26:50.844 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:26:49.186 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43162 10 6452 1 2025-12-04 02:27:49.552 00:00:18.841 TCP 1.101.0.1:3000 -> 23.104.0.1:60330 12 10369 1 2025-12-04 02:28:58.440 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60684 10 6452 1 2025-12-04 02:29:58.846 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54318 10 6452 1 2025-12-04 02:30:59.266 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47984 10 6452 1 2025-12-04 02:27:10.458 00:05:02.162 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 02:27:10.461 00:05:02.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 02:31:50.843 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:31:50.932 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:31:50.972 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:31:50.976 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:31:51.054 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:31:59.671 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:35664 11 6504 1 2025-12-04 02:33:00.134 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53668 10 6452 1 2025-12-04 02:34:00.534 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33858 10 6452 1 2025-12-04 02:35:00.931 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39024 10 6452 1 2025-12-04 02:36:01.357 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42058 10 6452 1 2025-12-04 02:36:50.884 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:36:50.972 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:36:51.054 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:36:51.170 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:36:51.087 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:33:10.458 00:05:02.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 02:37:01.766 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35008 10 6452 1 2025-12-04 02:33:10.461 00:05:02.160 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 02:38:02.181 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36994 10 6452 1 2025-12-04 02:39:02.583 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55318 10 6452 1 2025-12-04 02:40:02.982 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53660 10 6452 1 2025-12-04 02:41:03.347 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53692 10 6452 1 2025-12-04 02:41:51.269 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:41:51.281 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:41:51.048 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:41:51.186 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:41:51.113 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:42:03.751 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52020 10 6452 1 2025-12-04 02:43:04.155 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:50104 12 10375 1 2025-12-04 02:39:10.462 00:05:02.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 02:39:10.458 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 02:44:04.633 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56238 10 6452 1 2025-12-04 02:45:05.000 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35724 10 6452 1 2025-12-04 02:46:05.406 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53330 10 6452 1 2025-12-04 02:46:51.418 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:46:51.333 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:46:51.094 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:46:51.335 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:46:51.322 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:47:05.815 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52344 10 6452 1 2025-12-04 02:48:06.217 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36228 10 6452 1 2025-12-04 02:45:10.464 00:05:02.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 02:45:10.462 00:05:02.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 02:49:06.615 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42204 10 6452 1 2025-12-04 02:50:07.023 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41304 10 6452 1 2025-12-04 02:51:07.388 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37054 10 6452 1 2025-12-04 02:51:51.393 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:51:51.263 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:51:51.318 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:51:51.317 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:51:51.400 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:52:07.789 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54696 10 6452 1 2025-12-04 02:53:08.198 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46566 10 6452 1 2025-12-04 02:54:08.607 00:00:10.809 TCP 1.101.0.1:3000 -> 23.104.0.1:51806 10 6452 1 2025-12-04 02:51:10.463 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 02:51:10.466 00:05:02.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 02:55:09.455 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48072 10 6452 1 2025-12-04 02:56:09.858 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:36172 10 6452 1 2025-12-04 02:56:51.572 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 02:56:51.246 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:56:51.319 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 02:56:51.572 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 02:56:51.402 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 02:57:10.230 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33442 10 6452 1 2025-12-04 02:58:10.590 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:43178 12 10375 1 Summary: total flows: 139, total bytes: 430301, total packets: 1023, avg bps: 937, avg pps: 0, avg bpp: 420 Time window: 2025-12-04 01:57:10 - 2025-12-04 02:58:21 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0061s User: 0.0000s Wall: 0.0016s flows/second: 85384.9 Runtime: 0.0016s