Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 23:59:11.757 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:44692 10 6452 1 2025-12-06 00:00:12.176 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34804 10 6452 1 2025-12-06 00:01:12.584 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36944 10 6452 1 2025-12-05 23:58:11.451 00:05:02.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-05 23:58:11.453 00:05:02.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 00:02:12.985 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59924 10 6452 1 2025-12-06 00:02:45.626 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:02:45.703 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:02:45.461 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:02:45.628 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:02:45.712 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:03:13.394 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:52922 12 10375 1 2025-12-06 00:04:13.874 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33130 10 6452 1 2025-12-06 00:05:14.285 00:01:10.729 TCP 1.101.0.1:3000 -> 23.104.0.1:53744 20 12904 1 2025-12-06 00:07:15.052 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60512 10 6452 1 2025-12-06 00:07:45.750 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:07:45.649 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:07:45.746 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:07:45.749 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:07:45.836 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:04:11.455 00:05:02.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 00:04:11.454 00:05:02.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 00:08:15.461 00:00:10.807 TCP 1.101.0.1:3000 -> 23.104.0.1:51368 10 6452 1 2025-12-06 00:09:16.305 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:54474 10 6452 1 2025-12-06 00:10:16.722 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48740 10 6452 1 2025-12-06 00:11:17.138 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:40858 10 6452 1 2025-12-06 00:12:17.511 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42052 10 6452 1 2025-12-06 00:12:45.778 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:12:45.909 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:12:45.904 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:12:45.624 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:12:45.696 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:13:17.918 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50588 10 6452 1 2025-12-06 00:10:11.458 00:05:02.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 00:10:11.456 00:05:02.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 00:14:18.319 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 10 6452 1 2025-12-06 00:15:18.727 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47656 11 6492 1 2025-12-06 00:16:19.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48916 10 6452 1 2025-12-06 00:17:19.540 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47918 10 6452 1 2025-12-06 00:17:45.838 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:17:45.993 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:17:46.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:17:45.998 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:17:46.082 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:18:19.899 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46588 10 6452 1 2025-12-06 00:19:20.307 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58532 10 6452 1 2025-12-06 00:16:11.460 00:05:02.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 00:16:11.457 00:05:02.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 00:20:20.712 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 10 6452 1 2025-12-06 00:21:21.102 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52336 10 6452 1 2025-12-06 00:22:21.510 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:45254 12 6556 1 2025-12-06 00:22:46.422 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:22:46.372 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:22:46.281 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:22:46.145 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:22:46.339 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:23:21.909 00:00:11.155 TCP 1.101.0.1:3000 -> 23.104.0.1:49596 10 6452 1 2025-12-06 00:24:23.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49606 10 6452 1 2025-12-06 00:25:23.513 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53062 10 6452 1 2025-12-06 00:22:11.463 00:05:02.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 00:22:11.461 00:05:02.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 00:26:23.933 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:37384 10 6452 1 2025-12-06 00:27:24.322 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55436 10 6452 1 2025-12-06 00:27:46.221 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:27:46.083 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:27:46.181 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:27:46.213 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:27:46.297 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:28:24.729 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:50418 10 6452 1 2025-12-06 00:29:25.155 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35698 10 6452 1 2025-12-06 00:30:25.567 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34630 10 6452 1 2025-12-06 00:31:25.989 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49220 12 6556 1 2025-12-06 00:28:11.462 00:05:02.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 00:28:11.464 00:05:02.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 00:32:26.405 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42388 10 6452 1 2025-12-06 00:32:46.456 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:32:46.039 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:32:46.336 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:32:46.373 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:32:46.244 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:33:26.768 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36904 10 6452 1 2025-12-06 00:34:27.191 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36636 10 6452 1 2025-12-06 00:35:27.557 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46148 10 6452 1 2025-12-06 00:36:27.958 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44014 10 6452 1 2025-12-06 00:37:28.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41782 10 6452 1 2025-12-06 00:37:46.584 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:37:46.199 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:37:46.179 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:37:46.488 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:37:46.439 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:34:11.466 00:05:02.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 00:34:11.463 00:05:02.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 00:38:28.765 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:38214 10 6452 1 2025-12-06 00:39:29.188 00:00:10.706 TCP 1.101.0.1:3000 -> 23.104.0.1:43676 10 6452 1 2025-12-06 00:40:29.932 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:43842 10 6452 1 2025-12-06 00:41:30.324 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42526 10 6452 1 2025-12-06 00:42:30.684 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:42984 10 6452 1 2025-12-06 00:42:46.582 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:42:46.503 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:42:46.692 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:42:46.655 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:42:46.496 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:43:31.063 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44710 10 6452 1 2025-12-06 00:40:11.465 00:05:02.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 00:40:11.468 00:05:02.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 00:44:31.465 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58220 10 6452 1 2025-12-06 00:45:31.874 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46636 10 6452 1 2025-12-06 00:46:32.280 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39854 10 6452 1 2025-12-06 00:47:32.680 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53752 10 6452 1 2025-12-06 00:47:46.721 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:47:46.630 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:47:46.387 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:47:46.726 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:47:46.809 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:48:33.053 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52480 10 6452 1 2025-12-06 00:49:33.456 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53242 10 6452 1 2025-12-06 00:46:11.467 00:05:02.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 00:46:11.470 00:05:02.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 00:50:33.861 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54994 10 6452 1 2025-12-06 00:51:34.272 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39676 10 6452 1 2025-12-06 00:52:46.578 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:52:46.747 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:52:46.579 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:52:46.612 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:52:34.676 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37244 10 6452 1 2025-12-06 00:52:46.496 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:53:35.106 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55424 10 6452 1 2025-12-06 00:54:35.506 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43814 10 6452 1 2025-12-06 00:55:35.907 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45114 10 6452 1 2025-12-06 00:52:11.469 00:05:02.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-06 00:52:11.471 00:05:02.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 00:56:36.322 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55864 10 6452 1 2025-12-06 00:57:46.909 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-06 00:57:46.896 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-06 00:57:46.865 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-06 00:57:46.838 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:57:36.678 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42794 10 6452 1 2025-12-06 00:57:46.826 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-06 00:58:37.107 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43372 10 6452 1 Summary: total flows: 139, total bytes: 421171, total packets: 1027, avg bps: 926, avg pps: 0, avg bpp: 410 Time window: 2025-12-05 23:58:11 - 2025-12-06 00:58:47 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0040s User: 0.0010s Wall: 0.0020s flows/second: 70848.0 Runtime: 0.0020s