Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-07 23:58:42.309 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42266 10 6452 1 2025-12-07 23:59:42.715 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:53238 10 6452 1 2025-12-08 00:00:43.151 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34848 10 6452 1 2025-12-08 00:01:43.554 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46912 10 6452 1 2025-12-07 23:58:12.435 00:05:02.375 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 23:58:12.438 00:05:02.370 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 00:02:43.955 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44814 10 6452 1 2025-12-08 00:03:43.769 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 00:03:43.735 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:03:43.812 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:03:43.349 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:03:43.686 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:03:44.366 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52838 10 6452 1 2025-12-08 00:04:44.738 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34708 10 6452 1 2025-12-08 00:05:45.111 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47790 10 6452 1 2025-12-08 00:06:45.479 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56426 10 6452 1 2025-12-08 00:07:45.837 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41448 10 6452 1 2025-12-08 00:04:12.440 00:05:02.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 00:04:12.442 00:05:02.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 00:08:43.553 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:08:43.557 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:08:43.431 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:08:43.387 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:08:43.469 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 00:08:46.253 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:34570 12 10375 1 2025-12-08 00:09:46.692 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59848 10 6452 1 2025-12-08 00:10:47.107 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50710 10 6452 1 2025-12-08 00:11:47.473 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36312 10 6452 1 2025-12-08 00:12:47.880 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53582 10 6452 1 2025-12-08 00:13:43.587 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 00:13:43.706 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:13:43.753 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:13:43.611 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:13:43.505 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:13:48.279 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34786 10 6452 1 2025-12-08 00:10:12.443 00:05:02.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 00:10:12.440 00:05:02.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 00:14:48.674 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45096 10 6452 1 2025-12-08 00:15:49.098 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50684 10 6452 1 2025-12-08 00:16:49.505 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34868 10 6452 1 2025-12-08 00:17:49.915 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49582 10 6452 1 2025-12-08 00:18:43.999 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:18:43.909 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:18:43.838 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:18:44.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:18:44.359 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 00:18:50.279 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42858 10 6452 1 2025-12-08 00:19:50.689 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35132 10 6452 1 2025-12-08 00:16:12.442 00:05:02.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 00:16:12.445 00:05:02.366 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 00:20:51.107 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35824 10 6452 1 2025-12-08 00:21:51.523 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48294 10 6452 1 2025-12-08 00:22:51.928 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:40602 10 6452 1 2025-12-08 00:23:43.996 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 00:23:43.929 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:23:43.827 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:23:43.609 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:23:43.913 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:23:52.348 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45642 10 6452 1 2025-12-08 00:24:52.754 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60564 10 6452 1 2025-12-08 00:25:53.164 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47302 10 6452 1 2025-12-08 00:22:12.445 00:05:02.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 00:22:12.447 00:05:02.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 00:26:53.576 00:00:10.855 TCP 1.101.0.1:3000 -> 23.104.0.1:48768 10 6452 1 2025-12-08 00:27:54.468 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40214 10 6452 1 2025-12-08 00:28:44.011 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 00:28:43.933 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:28:43.841 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:28:44.039 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:28:43.928 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:28:54.878 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54126 10 6452 1 2025-12-08 00:29:55.283 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38978 10 6452 1 2025-12-08 00:30:55.695 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59108 10 6452 1 2025-12-08 00:28:12.449 00:05:02.369 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 00:31:56.058 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53964 10 6452 1 2025-12-08 00:28:12.452 00:05:02.364 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 00:32:56.466 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43162 10 6452 1 2025-12-08 00:33:44.056 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 00:33:44.062 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:33:43.963 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:33:43.772 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:33:43.972 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:33:56.884 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50012 10 6452 1 2025-12-08 00:34:57.293 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49702 10 6452 1 2025-12-08 00:35:57.653 00:00:10.931 TCP 1.101.0.1:3000 -> 23.104.0.1:35060 10 6452 1 2025-12-08 00:36:58.624 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35732 10 6452 1 2025-12-08 00:37:58.995 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58656 10 6452 1 2025-12-08 00:34:12.455 00:05:02.364 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 00:34:12.453 00:05:02.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 00:38:44.293 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:38:44.183 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:38:44.321 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:38:44.213 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:38:44.376 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 00:38:59.357 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35448 10 6452 1 2025-12-08 00:39:59.762 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51446 10 6452 1 2025-12-08 00:41:00.117 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58324 10 6452 1 2025-12-08 00:42:00.527 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34098 10 6452 1 2025-12-08 00:43:00.929 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35122 10 6452 1 2025-12-08 00:43:44.602 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:43:44.499 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:43:44.444 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:43:44.274 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:43:44.358 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 00:40:12.456 00:05:02.364 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 00:44:01.350 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42918 10 6452 1 2025-12-08 00:40:12.454 00:05:02.370 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 00:45:01.763 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:39070 10 6452 1 2025-12-08 00:46:02.135 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41622 10 6452 1 2025-12-08 00:47:02.534 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36400 10 6452 1 2025-12-08 00:48:02.937 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:34688 10 6452 1 2025-12-08 00:48:44.411 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:48:44.412 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:48:44.288 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:48:44.557 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:48:44.641 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 00:49:03.318 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:36492 10 6452 1 2025-12-08 00:50:03.721 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34344 10 6452 1 2025-12-08 00:46:12.458 00:05:02.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 00:46:12.455 00:05:02.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 00:51:04.124 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52460 10 6452 1 2025-12-08 00:52:04.526 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60610 10 6452 1 2025-12-08 00:53:04.921 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:46812 10 6452 1 2025-12-08 00:53:44.544 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 00:53:44.466 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:53:44.393 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:53:44.478 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:53:44.462 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:54:05.297 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:46278 11 6504 1 2025-12-08 00:55:05.763 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58252 10 6452 1 2025-12-08 00:52:12.457 00:05:02.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 00:52:12.460 00:05:02.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 00:56:06.182 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54738 10 6452 1 2025-12-08 00:57:06.580 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52156 10 6452 1 2025-12-08 00:58:06.982 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46236 10 6452 1 2025-12-08 00:58:44.655 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 00:58:44.746 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 00:58:44.791 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:58:44.702 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 00:58:44.786 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 140, total bytes: 420975, total packets: 1023, avg bps: 927, avg pps: 0, avg bpp: 411 Time window: 2025-12-07 23:58:12 - 2025-12-08 00:58:44 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0029s Wall: 0.0021s flows/second: 66598.9 Runtime: 0.0021s