Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-06 23:58:46.826 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40840 10 6452 1 2025-12-06 23:59:47.231 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38400 10 6452 1 2025-12-07 00:00:47.635 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35282 10 6452 1 2025-12-07 00:01:48.000 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38692 10 6452 1 2025-12-06 23:58:11.935 00:05:02.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-06 23:58:11.933 00:05:02.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 00:02:48.362 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50930 10 6452 1 2025-12-07 00:03:14.927 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:03:14.815 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:03:14.574 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:03:14.747 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:03:14.830 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:03:48.764 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:49946 12 10375 1 2025-12-07 00:04:49.210 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39280 10 6452 1 2025-12-07 00:05:49.616 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49910 10 6452 1 2025-12-07 00:06:50.017 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37098 10 6452 1 2025-12-07 00:07:50.417 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51460 10 6452 1 2025-12-07 00:08:14.696 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:08:14.700 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:08:14.520 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:08:14.701 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:04:11.938 00:05:02.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 00:08:14.785 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:04:11.937 00:05:02.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 00:08:50.822 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39678 10 6452 1 2025-12-07 00:09:51.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47682 10 6452 1 2025-12-07 00:10:51.593 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56836 10 6452 1 2025-12-07 00:11:51.995 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51342 10 6452 1 2025-12-07 00:12:52.394 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53530 10 6452 1 2025-12-07 00:13:14.934 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:13:14.753 00:00:00.064 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:13:14.852 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:13:15.274 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:13:15.261 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:13:52.760 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50598 10 6452 1 2025-12-07 00:10:11.940 00:05:02.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 00:10:11.938 00:05:02.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 00:14:53.180 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47240 10 6452 1 2025-12-07 00:15:53.547 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48772 10 6452 1 2025-12-07 00:16:53.949 00:00:10.557 TCP 1.101.0.1:3000 -> 23.104.0.1:43794 10 6452 1 2025-12-07 00:17:54.545 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55562 10 6452 1 2025-12-07 00:18:14.795 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:18:14.713 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:18:14.740 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:18:14.704 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:18:14.786 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:18:54.950 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:34572 10 6452 1 2025-12-07 00:19:55.399 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47866 10 6452 1 2025-12-07 00:16:11.941 00:05:02.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 00:16:11.943 00:05:02.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 00:20:55.802 00:00:10.700 TCP 1.101.0.1:3000 -> 23.104.0.1:49020 10 6452 1 2025-12-07 00:21:56.539 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52258 10 6452 1 2025-12-07 00:22:56.949 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51456 10 6452 1 2025-12-07 00:23:14.951 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:23:14.935 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:23:14.936 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:23:15.020 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:23:15.067 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:23:57.365 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40468 10 6452 1 2025-12-07 00:24:57.775 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:38300 10 6452 1 2025-12-07 00:25:58.148 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54064 10 6452 1 2025-12-07 00:22:11.944 00:05:02.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 00:22:11.942 00:05:02.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 00:26:58.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38722 10 6452 1 2025-12-07 00:27:58.918 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52478 10 6452 1 2025-12-07 00:28:14.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:28:15.188 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:28:14.997 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:28:15.135 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:28:15.106 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:28:59.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36932 10 6452 1 2025-12-07 00:29:59.733 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43492 10 6452 1 2025-12-07 00:31:00.146 00:00:17.284 TCP 1.101.0.1:3000 -> 23.104.0.1:39498 10 6452 1 2025-12-07 00:28:11.944 00:05:02.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 00:28:11.943 00:05:02.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 00:32:07.472 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45186 10 6452 1 2025-12-07 00:33:14.960 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:33:15.221 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:33:15.314 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:33:07.874 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55182 10 6452 1 2025-12-07 00:33:15.225 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:33:15.308 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:34:08.278 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:56724 10 6452 1 2025-12-07 00:35:08.636 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:33732 10 6452 1 2025-12-07 00:36:08.994 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35148 10 6452 1 2025-12-07 00:37:09.360 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33766 10 6452 1 2025-12-07 00:34:11.946 00:05:02.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 00:38:15.447 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:34:11.943 00:05:02.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 00:38:15.301 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:38:15.171 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:38:15.298 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:38:15.365 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:38:09.772 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35302 10 6452 1 2025-12-07 00:39:10.184 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58180 10 6452 1 2025-12-07 00:40:10.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36914 10 6452 1 2025-12-07 00:41:10.986 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34158 10 6452 1 2025-12-07 00:42:11.393 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57444 10 6452 1 2025-12-07 00:43:15.373 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:43:15.369 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:43:15.296 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:43:15.144 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:43:15.291 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:43:11.799 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51280 10 6452 1 2025-12-07 00:40:11.945 00:05:02.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 00:40:11.949 00:05:02.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 00:44:12.214 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55208 10 6452 1 2025-12-07 00:45:12.621 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:39478 10 6452 1 2025-12-07 00:46:12.980 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55932 10 6452 1 2025-12-07 00:47:13.346 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44622 10 6452 1 2025-12-07 00:48:15.517 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:48:15.516 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:48:15.587 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:48:15.466 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:48:15.549 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:48:13.752 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43920 10 6452 1 2025-12-07 00:49:14.156 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57890 10 6452 1 2025-12-07 00:46:11.948 00:05:02.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 00:46:11.946 00:05:02.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 00:50:14.518 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58516 10 6452 1 2025-12-07 00:51:14.881 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57732 10 6452 1 2025-12-07 00:52:15.286 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45700 10 6452 1 2025-12-07 00:53:15.624 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:53:15.659 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:53:15.435 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:53:15.655 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:53:15.739 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:53:15.697 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56780 10 6452 1 2025-12-07 00:54:16.114 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41328 10 6452 1 2025-12-07 00:55:16.516 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48404 10 6452 1 2025-12-07 00:52:11.950 00:05:02.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 00:52:11.947 00:05:02.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 00:56:16.928 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 10 6452 1 2025-12-07 00:57:17.371 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:38114 10 6452 1 2025-12-07 00:58:15.907 00:00:00.017 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 00:58:15.781 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 00:58:15.781 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 00:58:15.737 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:58:15.825 00:00:00.017 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 00:58:17.725 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35446 10 6452 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 931, avg pps: 0, avg bpp: 411 Time window: 2025-12-06 23:58:11 - 2025-12-07 00:58:28 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0050s User: 0.0000s Wall: 0.0022s flows/second: 62554.9 Runtime: 0.0023s