Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 23:58:41.484 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43602 10 6452 1 2025-12-02 23:59:41.889 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:43034 10 6452 1 2025-12-03 00:00:42.262 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 10 6452 1 2025-12-02 23:57:09.903 00:05:02.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:01:19.076 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 23:57:09.908 00:05:02.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:01:19.274 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:01:18.965 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:01:18.994 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:01:19.269 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:01:42.668 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57406 10 6452 1 2025-12-03 00:02:43.094 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54100 10 6452 1 2025-12-03 00:03:43.494 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54136 10 6452 1 2025-12-03 00:04:43.903 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:42000 10 6452 1 2025-12-03 00:05:44.323 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49264 10 6452 1 2025-12-03 00:06:19.110 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:06:18.903 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:06:19.103 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:06:19.173 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:06:19.186 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:06:44.722 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46050 10 6452 1 2025-12-03 00:03:09.906 00:05:02.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:03:09.910 00:05:02.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:07:45.128 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46484 10 6452 1 2025-12-03 00:08:45.536 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50384 10 6452 1 2025-12-03 00:09:45.938 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:44456 10 6452 1 2025-12-03 00:10:46.307 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56534 10 6452 1 2025-12-03 00:11:19.246 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:11:19.376 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:11:19.176 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:11:19.164 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:11:19.081 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:11:46.708 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-12-03 00:12:47.100 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:58376 12 10375 1 2025-12-03 00:09:09.908 00:05:02.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:09:09.910 00:05:02.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:13:47.579 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:60818 10 6452 1 2025-12-03 00:14:48.022 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42566 10 6452 1 2025-12-03 00:15:48.382 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:41434 10 6452 1 2025-12-03 00:16:19.591 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:16:19.249 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:16:19.596 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:16:19.297 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:16:19.678 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:16:48.758 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:40954 10 6452 1 2025-12-03 00:17:49.144 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49656 10 6452 1 2025-12-03 00:18:49.551 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44244 10 6452 1 2025-12-03 00:15:09.909 00:05:02.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:15:09.912 00:05:02.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:19:49.958 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54960 10 6452 1 2025-12-03 00:20:50.387 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60058 10 6452 1 2025-12-03 00:21:19.746 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:21:19.446 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:21:19.511 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:21:19.663 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:21:19.664 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:21:50.798 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:42176 10 6452 1 2025-12-03 00:22:51.176 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55718 10 6452 1 2025-12-03 00:23:51.550 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36754 10 6452 1 2025-12-03 00:24:51.952 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45338 10 6452 1 2025-12-03 00:21:09.910 00:05:02.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:21:09.912 00:05:02.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:25:52.357 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37178 10 6452 1 2025-12-03 00:26:19.616 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:26:19.611 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:26:19.473 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:26:19.534 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:26:19.413 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:26:52.767 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41970 10 6452 1 2025-12-03 00:27:53.183 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34494 10 6452 1 2025-12-03 00:28:53.589 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:51818 10 6452 1 2025-12-03 00:29:53.947 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57124 10 6452 1 2025-12-03 00:30:54.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35118 10 6452 1 2025-12-03 00:27:09.914 00:05:02.191 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:27:09.912 00:05:02.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:31:19.813 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:31:19.539 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:31:19.598 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:31:19.730 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:31:19.427 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:31:54.748 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40790 10 6452 1 2025-12-03 00:32:55.113 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47414 10 6452 1 2025-12-03 00:33:55.521 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36544 10 6452 1 2025-12-03 00:34:55.927 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:38512 10 6452 1 2025-12-03 00:35:56.353 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59286 10 6452 1 2025-12-03 00:36:19.950 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:36:19.870 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:36:19.637 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:36:19.867 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:36:19.985 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:36:56.722 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58212 10 6452 1 2025-12-03 00:33:09.919 00:05:02.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:33:09.915 00:05:02.193 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:37:57.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36708 10 6452 1 2025-12-03 00:38:57.546 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44150 10 6452 1 2025-12-03 00:39:57.956 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52016 10 6452 1 2025-12-03 00:40:58.364 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47020 10 6452 1 2025-12-03 00:41:19.978 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:41:19.818 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:41:19.777 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:41:19.898 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:41:19.811 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:41:58.771 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40008 10 6452 1 2025-12-03 00:42:59.187 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53608 10 6452 1 2025-12-03 00:39:09.917 00:05:02.191 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:39:09.921 00:05:02.186 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:43:59.606 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55932 10 6452 1 2025-12-03 00:45:00.013 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45016 10 6452 1 2025-12-03 00:46:00.416 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48850 10 6452 1 2025-12-03 00:46:19.856 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:46:19.658 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:46:19.877 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:46:19.880 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:46:19.959 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:47:00.820 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39464 10 6452 1 2025-12-03 00:48:01.222 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45130 10 6452 1 2025-12-03 00:45:09.918 00:05:02.192 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:49:01.629 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56248 10 6452 1 2025-12-03 00:45:09.921 00:05:02.186 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:50:02.058 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44252 10 6452 1 2025-12-03 00:51:02.463 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43520 10 6452 1 2025-12-03 00:51:20.162 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:51:19.862 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:51:20.047 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:51:20.021 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:51:20.129 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:52:02.860 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45964 10 6452 1 2025-12-03 00:53:03.278 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57986 10 6452 1 2025-12-03 00:54:03.697 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41728 10 6452 1 2025-12-03 00:55:04.118 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48252 10 6452 1 2025-12-03 00:51:09.930 00:05:02.182 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 00:51:09.928 00:05:02.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 00:56:04.530 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50318 10 6452 1 2025-12-03 00:56:20.185 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 00:56:19.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:56:20.119 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 00:56:20.276 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 00:56:20.202 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 00:57:04.934 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:38258 10 6452 1 2025-12-03 00:58:05.362 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50956 10 6452 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 918, avg pps: 0, avg bpp: 411 Time window: 2025-12-02 23:57:09 - 2025-12-03 00:58:15 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0026s User: 0.0026s Wall: 0.0019s flows/second: 73648.9 Runtime: 0.0019s