Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 23:59:10.882 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60386 10 6452 1 2025-12-02 00:00:11.286 00:00:10.750 TCP 1.101.0.1:3000 -> 23.104.0.1:37718 10 6452 1 2025-12-02 00:00:49.973 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:00:50.146 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:00:49.976 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:00:50.237 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:00:50.065 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:01:12.102 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52826 10 6452 1 2025-12-01 23:57:11.539 00:05:57.849 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 23:57:11.536 00:05:57.854 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 00:02:12.502 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49930 10 6452 1 2025-12-02 00:03:12.898 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44270 10 6452 1 2025-12-02 00:04:13.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57888 10 6452 1 2025-12-02 00:05:13.723 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36846 10 6452 1 2025-12-02 00:05:50.357 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:05:50.282 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:05:50.337 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:05:50.276 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:05:50.292 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:06:14.133 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37496 10 6452 1 2025-12-02 00:07:14.546 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60518 10 6452 1 2025-12-02 00:03:11.538 00:05:57.853 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 00:03:11.540 00:05:57.848 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 00:08:14.948 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39604 10 6452 1 2025-12-02 00:09:15.359 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57192 10 6452 1 2025-12-02 00:10:15.721 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59898 10 6452 1 2025-12-02 00:10:50.734 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:10:50.678 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:10:50.408 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:10:50.396 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:10:50.491 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:11:16.139 00:00:10.810 TCP 1.101.0.1:3000 -> 23.104.0.1:53018 10 6452 1 2025-12-02 00:12:16.990 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52002 10 6452 1 2025-12-02 00:13:17.366 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35556 10 6452 1 2025-12-02 00:09:11.542 00:05:57.847 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 00:09:11.540 00:05:57.851 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 00:14:17.769 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40710 10 6452 1 2025-12-02 00:15:18.172 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-12-02 00:15:50.619 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:15:50.414 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:15:50.442 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:15:50.536 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:15:50.527 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:16:18.576 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59200 10 6452 1 2025-12-02 00:17:18.978 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 10 6452 1 2025-12-02 00:18:19.386 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50690 10 6452 1 2025-12-02 00:19:19.800 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57698 10 6452 1 2025-12-02 00:15:11.543 00:05:57.851 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 00:15:11.545 00:05:57.846 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 00:20:20.200 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49740 10 6452 1 2025-12-02 00:20:50.611 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:20:50.357 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:20:50.452 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:20:50.529 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:20:50.688 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:21:20.606 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33110 10 6452 1 2025-12-02 00:22:20.972 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:55860 10 6452 1 2025-12-02 00:23:21.342 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45654 10 6452 1 2025-12-02 00:24:21.723 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35442 10 6452 1 2025-12-02 00:25:22.139 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39928 10 6452 1 2025-12-02 00:25:50.658 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:25:50.804 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:25:50.461 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:25:50.574 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:25:50.666 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:21:11.550 00:05:57.843 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 00:21:11.548 00:05:57.848 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 00:26:22.542 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49786 10 6452 1 2025-12-02 00:27:22.956 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51996 10 6452 1 2025-12-02 00:28:23.369 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45288 10 6452 1 2025-12-02 00:29:23.766 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52912 10 6452 1 2025-12-02 00:30:24.177 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50962 10 6452 1 2025-12-02 00:30:50.934 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:30:50.716 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:30:50.771 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:30:50.845 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:30:50.854 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:31:24.541 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52386 10 6452 1 2025-12-02 00:27:11.551 00:05:57.847 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 00:27:11.552 00:05:57.843 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 00:32:24.944 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50632 10 6452 1 2025-12-02 00:33:25.356 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43450 10 6452 1 2025-12-02 00:34:25.764 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52940 10 6452 1 2025-12-02 00:35:26.181 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42454 10 6452 1 2025-12-02 00:35:50.705 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:35:50.629 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:35:50.949 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:35:50.858 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:35:51.033 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:36:26.544 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35528 10 6452 1 2025-12-02 00:37:26.957 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56000 10 6452 1 2025-12-02 00:33:11.555 00:05:57.843 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 00:33:11.553 00:05:57.848 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 00:38:27.325 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36422 10 6452 1 2025-12-02 00:39:27.752 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37268 10 6452 1 2025-12-02 00:40:28.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44138 10 6452 1 2025-12-02 00:40:50.971 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:40:50.898 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:40:50.954 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:40:50.955 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:40:51.038 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:41:28.511 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40620 10 6452 1 2025-12-02 00:42:28.917 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57936 10 6452 1 2025-12-02 00:43:29.323 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40156 10 6452 1 2025-12-02 00:39:11.552 00:05:57.853 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 00:39:11.556 00:05:57.848 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 00:44:29.727 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50624 10 6452 1 2025-12-02 00:45:30.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58060 10 6452 1 2025-12-02 00:45:51.058 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:45:50.916 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:45:50.975 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:45:51.126 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:45:51.079 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:46:30.510 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50370 10 6452 1 2025-12-02 00:47:30.912 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59732 10 6452 1 2025-12-02 00:48:31.327 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36138 10 6452 1 2025-12-02 00:49:31.738 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47036 10 6452 1 2025-12-02 00:45:11.558 00:05:57.850 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 00:45:11.556 00:05:57.854 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 00:50:32.140 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49336 10 6452 1 2025-12-02 00:50:50.905 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:50:50.988 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:50:51.206 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:50:51.122 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:50:51.272 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:51:32.505 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39978 10 6452 1 2025-12-02 00:52:32.926 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53722 10 6452 1 2025-12-02 00:53:33.350 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51808 10 6452 1 2025-12-02 00:54:33.769 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36140 10 6452 1 2025-12-02 00:55:34.184 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59242 10 6452 1 2025-12-02 00:55:51.388 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 00:55:51.412 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 00:55:51.338 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:55:51.306 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 00:55:51.511 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 00:51:11.559 00:05:57.853 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 00:51:11.556 00:05:57.859 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 00:56:34.589 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36212 10 6452 1 2025-12-02 00:57:34.995 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34532 10 6452 1 2025-12-02 00:58:35.400 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56076 10 6452 1 Summary: total flows: 140, total bytes: 417000, total packets: 1020, avg bps: 903, avg pps: 0, avg bpp: 408 Time window: 2025-12-01 23:57:11 - 2025-12-02 00:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0034s User: 0.0017s Wall: 0.0027s flows/second: 52024.7 Runtime: 0.0027s