Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 23:58:41.483 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43602 10 6452 1 2025-12-02 23:59:41.888 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:43034 10 6452 1 2025-12-03 00:00:42.262 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 10 6452 1 2025-12-03 00:01:19.075 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:01:19.274 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:01:19.269 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:01:18.965 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:01:18.994 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:01:42.667 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57406 10 6452 1 2025-12-02 23:58:09.907 00:05:02.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 23:58:09.906 00:05:02.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:02:43.094 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54100 10 6452 1 2025-12-03 00:03:43.493 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54136 10 6452 1 2025-12-03 00:04:43.902 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:42000 10 6452 1 2025-12-03 00:05:44.323 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49264 10 6452 1 2025-12-03 00:06:19.110 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:06:19.174 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:06:18.903 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:06:19.104 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:06:19.186 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:06:44.723 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46050 10 6452 1 2025-12-03 00:07:45.129 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46484 10 6452 1 2025-12-03 00:04:09.909 00:05:02.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:04:09.906 00:05:02.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:08:45.535 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50384 10 6452 1 2025-12-03 00:09:45.938 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:44456 10 6452 1 2025-12-03 00:10:46.307 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56534 10 6452 1 2025-12-03 00:11:19.377 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:11:19.081 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:11:19.177 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:11:19.164 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:11:19.247 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:11:46.708 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-12-03 00:12:47.100 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:58376 12 10375 1 2025-12-03 00:13:47.579 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:60818 10 6452 1 2025-12-03 00:10:09.910 00:05:02.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:10:09.907 00:05:02.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:14:48.022 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42566 10 6452 1 2025-12-03 00:15:48.382 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:41434 10 6452 1 2025-12-03 00:16:19.679 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:16:19.591 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:16:19.297 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:16:19.248 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:16:19.595 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:16:48.758 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:40954 10 6452 1 2025-12-03 00:17:49.143 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49656 10 6452 1 2025-12-03 00:18:49.550 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44244 10 6452 1 2025-12-03 00:19:49.958 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54960 10 6452 1 2025-12-03 00:16:09.912 00:05:02.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:16:09.909 00:05:02.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:20:50.386 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60058 10 6452 1 2025-12-03 00:21:19.746 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:21:19.664 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:21:19.447 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:21:19.664 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:21:19.511 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:21:50.799 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:42176 10 6452 1 2025-12-03 00:22:51.175 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55718 10 6452 1 2025-12-03 00:23:51.551 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36754 10 6452 1 2025-12-03 00:24:51.952 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45338 10 6452 1 2025-12-03 00:25:52.357 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37178 10 6452 1 2025-12-03 00:22:09.912 00:05:02.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:26:19.610 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:26:19.412 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:26:19.472 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:26:19.533 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:22:09.912 00:05:02.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:26:19.618 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:26:52.768 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41970 10 6452 1 2025-12-03 00:27:53.184 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34494 10 6452 1 2025-12-03 00:28:53.590 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:51818 10 6452 1 2025-12-03 00:29:53.946 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57124 10 6452 1 2025-12-03 00:30:54.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35118 10 6452 1 2025-12-03 00:31:19.813 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:31:19.539 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:31:19.426 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:31:19.597 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:31:19.730 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:31:54.747 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40790 10 6452 1 2025-12-03 00:28:09.913 00:05:02.191 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:28:09.911 00:05:02.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:32:55.113 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47414 10 6452 1 2025-12-03 00:33:55.519 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36544 10 6452 1 2025-12-03 00:34:55.926 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:38512 10 6452 1 2025-12-03 00:35:56.355 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59286 10 6452 1 2025-12-03 00:36:19.950 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:36:19.870 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:36:19.638 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:36:19.867 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:36:19.985 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:36:56.722 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58212 10 6452 1 2025-12-03 00:37:57.143 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36708 10 6452 1 2025-12-03 00:34:09.915 00:05:02.193 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:34:09.917 00:05:02.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:38:57.546 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44150 10 6452 1 2025-12-03 00:39:57.956 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52016 10 6452 1 2025-12-03 00:40:58.362 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47020 10 6452 1 2025-12-03 00:41:19.818 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:41:19.811 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:41:19.777 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:41:19.897 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:41:19.979 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:41:58.770 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40008 10 6452 1 2025-12-03 00:42:59.187 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53608 10 6452 1 2025-12-03 00:43:59.607 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55932 10 6452 1 2025-12-03 00:40:09.919 00:05:02.187 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:40:09.917 00:05:02.192 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:45:00.011 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45016 10 6452 1 2025-12-03 00:46:00.415 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48850 10 6452 1 2025-12-03 00:46:19.960 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:46:19.856 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:46:19.879 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:46:19.658 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:46:19.877 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:47:00.821 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39464 10 6452 1 2025-12-03 00:48:01.221 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45130 10 6452 1 2025-12-03 00:49:01.628 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56248 10 6452 1 2025-12-03 00:46:09.918 00:05:02.192 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:46:09.921 00:05:02.187 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:50:02.057 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44252 10 6452 1 2025-12-03 00:51:02.463 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43520 10 6452 1 2025-12-03 00:51:19.861 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:51:20.161 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:51:20.021 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:51:20.047 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:51:20.129 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:52:02.861 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45964 10 6452 1 2025-12-03 00:53:03.278 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57986 10 6452 1 2025-12-03 00:54:03.697 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41728 10 6452 1 2025-12-03 00:55:04.118 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48252 10 6452 1 2025-12-03 00:52:09.928 00:05:02.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:52:09.932 00:05:02.182 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:56:04.531 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50318 10 6452 1 2025-12-03 00:56:19.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:56:20.201 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:56:20.185 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:56:20.277 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:56:20.120 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:57:04.933 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:38258 10 6452 1 2025-12-03 00:58:05.362 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50956 10 6452 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 933, avg pps: 0, avg bpp: 411 Time window: 2025-12-02 23:58:09 - 2025-12-03 00:58:15 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0020s Wall: 0.0020s flows/second: 69131.5 Runtime: 0.0020s