Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-16 23:58:53.096 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47212 10 6452 1 2025-12-16 23:59:53.504 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58252 10 6452 1 2025-12-17 00:00:53.871 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45392 10 6452 1 2025-12-16 23:57:17.175 00:05:02.535 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-16 23:57:17.178 00:05:02.529 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-17 00:01:54.284 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51838 10 6452 1 2025-12-17 00:03:03.629 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:03:03.474 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:03:03.201 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:03:03.535 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:03:03.712 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:02:54.691 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58742 10 6452 1 2025-12-17 00:03:55.121 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56432 10 6452 1 2025-12-17 00:04:55.523 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:58838 12 10369 1 2025-12-17 00:05:56.019 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60570 10 6452 1 2025-12-17 00:06:56.417 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48682 10 6452 1 2025-12-17 00:03:17.175 00:05:02.536 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-17 00:03:17.179 00:05:02.530 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-17 00:08:04.160 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:08:04.078 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:08:04.076 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:08:04.139 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:08:04.078 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:07:56.830 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57468 10 6452 1 2025-12-17 00:08:57.232 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38836 10 6452 1 2025-12-17 00:09:57.640 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46816 10 6452 1 2025-12-17 00:10:58.000 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55742 10 6452 1 2025-12-17 00:11:58.405 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42388 10 6452 1 2025-12-17 00:13:03.697 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:13:03.908 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:13:03.583 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:13:03.797 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:13:03.880 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:12:58.806 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38056 10 6452 1 2025-12-17 00:09:17.180 00:05:02.532 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-17 00:09:17.181 00:05:02.528 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-17 00:13:59.171 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45634 10 6452 1 2025-12-17 00:14:59.577 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42750 10 6452 1 2025-12-17 00:15:59.982 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35978 10 6452 1 2025-12-17 00:17:00.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56722 10 6452 1 2025-12-17 00:18:03.893 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:18:03.814 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:18:03.696 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:18:03.724 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:18:03.810 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:18:00.755 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33760 10 6452 1 2025-12-17 00:19:01.171 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60882 10 6452 1 2025-12-17 00:15:17.198 00:05:02.514 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-17 00:15:17.196 00:05:02.519 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-17 00:20:01.574 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60124 10 6452 1 2025-12-17 00:21:01.978 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49762 10 6452 1 2025-12-17 00:22:02.386 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 10 6452 1 2025-12-17 00:23:04.064 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:23:03.903 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:23:03.946 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:23:03.833 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:23:03.916 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:23:02.789 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51252 10 6452 1 2025-12-17 00:24:03.190 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-12-17 00:25:03.593 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48006 10 6452 1 2025-12-17 00:21:17.198 00:05:02.524 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-17 00:21:17.199 00:05:02.518 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-17 00:26:03.993 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60698 10 6452 1 2025-12-17 00:27:04.395 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40502 10 6452 1 2025-12-17 00:28:03.987 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:28:04.138 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:28:03.827 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:28:04.095 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:28:04.177 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:28:04.794 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56046 10 6452 1 2025-12-17 00:29:05.203 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40348 10 6452 1 2025-12-17 00:30:05.573 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:39630 13 13955 1 2025-12-17 00:27:17.199 00:05:02.519 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-17 00:31:06.057 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56896 10 6452 1 2025-12-17 00:27:17.197 00:05:02.524 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-17 00:32:06.465 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49588 10 6452 1 2025-12-17 00:33:04.053 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:33:04.048 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:33:04.063 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:33:04.139 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:33:04.136 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:33:06.821 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57832 10 6452 1 2025-12-17 00:34:07.191 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44700 10 6452 1 2025-12-17 00:35:07.594 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35016 10 6452 1 2025-12-17 00:36:07.967 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51752 10 6452 1 2025-12-17 00:33:17.198 00:05:02.527 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-17 00:37:08.378 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44192 10 6452 1 2025-12-17 00:33:17.200 00:05:02.522 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-17 00:38:03.975 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:38:04.229 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:38:04.163 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:38:04.163 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:38:04.312 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:38:08.784 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48548 10 6452 1 2025-12-17 00:39:09.200 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38172 10 6452 1 2025-12-17 00:40:09.608 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47152 10 6452 1 2025-12-17 00:41:10.015 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:35892 10 6452 1 2025-12-17 00:42:10.414 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48634 10 6452 1 2025-12-17 00:43:04.313 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:43:04.231 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:43:04.042 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:43:04.279 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:43:04.360 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:43:10.820 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33902 10 6452 1 2025-12-17 00:39:17.204 00:05:02.523 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-17 00:39:17.201 00:05:02.529 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-17 00:44:11.238 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40788 10 6452 1 2025-12-17 00:45:11.646 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50320 10 6452 1 2025-12-17 00:46:12.059 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50012 10 6452 1 2025-12-17 00:47:12.468 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52656 10 6452 1 2025-12-17 00:48:04.285 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:48:04.357 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:48:04.303 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:48:04.401 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:48:04.483 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:48:12.869 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59970 10 6452 1 2025-12-17 00:45:17.202 00:05:02.528 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-17 00:45:17.205 00:05:02.523 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-17 00:49:13.277 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39950 10 6452 1 2025-12-17 00:50:13.639 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60694 10 6452 1 2025-12-17 00:51:14.001 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38558 10 6452 1 2025-12-17 00:52:14.399 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57936 10 6452 1 2025-12-17 00:53:04.573 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:53:04.638 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:53:04.492 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:53:04.438 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:53:04.491 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:53:14.800 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50090 10 6452 1 2025-12-17 00:54:15.211 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37164 10 6452 1 2025-12-17 00:51:17.203 00:05:02.530 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-17 00:51:17.206 00:05:02.524 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-17 00:55:15.616 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35780 10 6452 1 2025-12-17 00:56:16.020 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53894 10 6452 1 2025-12-17 00:57:16.423 00:00:11.780 TCP 1.101.0.1:3000 -> 23.104.0.1:33748 10 6452 1 2025-12-17 00:58:04.928 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-17 00:58:04.865 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-17 00:58:04.848 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-17 00:58:04.903 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:58:04.846 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-17 00:58:18.243 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60702 10 6452 1 Summary: total flows: 140, total bytes: 428420, total packets: 1025, avg bps: 933, avg pps: 0, avg bpp: 417 Time window: 2025-12-16 23:57:17 - 2025-12-17 00:58:28 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0023s User: 0.0023s Wall: 0.0019s flows/second: 72093.6 Runtime: 0.0020s