Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 13:58:41.730 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41748 10 6452 1 2025-12-01 13:59:42.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37766 10 6452 1 2025-12-01 14:00:38.218 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:00:37.988 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:00:38.256 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:00:37.947 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:00:38.135 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:00:42.548 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55254 10 6452 1 2025-12-01 14:01:42.961 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57968 10 6452 1 2025-12-01 13:58:09.152 00:05:02.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 13:58:09.154 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 14:02:43.361 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33586 10 6452 1 2025-12-01 14:03:43.724 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39014 10 6452 1 2025-12-01 14:04:44.141 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49278 10 6452 1 2025-12-01 14:05:38.256 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:05:38.319 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:05:38.257 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:05:38.260 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:05:38.173 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:05:44.557 00:00:10.774 TCP 1.101.0.1:3000 -> 23.104.0.1:54172 10 6452 1 2025-12-01 14:06:45.375 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60132 10 6452 1 2025-12-01 14:07:45.782 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55842 10 6452 1 2025-12-01 14:04:09.156 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 14:04:09.154 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 14:08:46.198 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43094 10 6452 1 2025-12-01 14:09:46.607 00:00:11.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43474 10 6452 1 2025-12-01 14:10:38.510 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:10:38.243 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:10:38.430 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:10:38.256 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:10:38.428 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:10:48.018 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44130 10 6452 1 2025-12-01 14:11:48.423 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47114 10 6452 1 2025-12-01 14:12:48.825 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59410 10 6452 1 2025-12-01 14:13:49.226 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51722 10 6452 1 2025-12-01 14:10:09.158 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 14:10:09.155 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 14:14:49.586 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53790 12 6556 1 2025-12-01 14:15:38.369 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:15:38.522 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:15:38.396 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:15:38.452 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:15:38.536 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:15:49.992 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54554 10 6452 1 2025-12-01 14:16:50.373 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56654 10 6452 1 2025-12-01 14:17:50.780 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52922 10 6452 1 2025-12-01 14:18:51.187 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58138 10 6452 1 2025-12-01 14:19:51.604 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55006 10 6452 1 2025-12-01 14:16:09.157 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 14:16:09.160 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 14:20:38.651 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:20:38.441 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:20:38.345 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:20:38.469 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:20:38.568 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:20:52.024 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57874 10 6452 1 2025-12-01 14:21:52.429 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54696 10 6452 1 2025-12-01 14:22:52.840 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:51780 11 6504 1 2025-12-01 14:23:53.284 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42264 10 6452 1 2025-12-01 14:24:53.686 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53154 10 6452 1 2025-12-01 14:25:38.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:25:38.659 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:25:38.501 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:25:38.655 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:25:38.738 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:25:54.107 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45720 10 6452 1 2025-12-01 14:22:09.162 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 14:22:09.159 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 14:26:54.505 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60258 10 6452 1 2025-12-01 14:27:54.869 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45750 10 6452 1 2025-12-01 14:28:55.233 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44832 10 6452 1 2025-12-01 14:29:55.653 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45600 10 6452 1 2025-12-01 14:30:38.974 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:30:38.836 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:30:38.895 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:30:38.680 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:30:38.893 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:30:56.019 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57498 10 6452 1 2025-12-01 14:31:56.427 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50404 10 6452 1 2025-12-01 14:28:09.164 00:05:02.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 14:28:09.166 00:05:02.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 14:32:56.830 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34944 10 6452 1 2025-12-01 14:33:57.226 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42170 10 6452 1 2025-12-01 14:34:57.630 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46072 10 6452 1 2025-12-01 14:35:39.002 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:35:38.917 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:35:38.919 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:35:38.791 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:35:38.917 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:35:58.032 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54004 10 6452 1 2025-12-01 14:36:58.438 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39610 10 6452 1 2025-12-01 14:37:58.838 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:56508 10 6452 1 2025-12-01 14:34:09.166 00:05:02.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 14:34:09.169 00:05:02.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 14:38:59.289 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53152 10 6452 1 2025-12-01 14:39:59.689 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60570 10 6452 1 2025-12-01 14:40:38.868 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:40:38.917 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:40:39.011 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:40:38.880 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:40:38.950 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:41:00.108 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37858 10 6452 1 2025-12-01 14:42:00.510 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44996 10 6452 1 2025-12-01 14:43:00.917 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56724 10 6452 1 2025-12-01 14:44:01.317 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34186 10 6452 1 2025-12-01 14:40:09.170 00:05:02.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 14:40:09.167 00:05:02.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 14:45:01.722 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50036 10 6452 1 2025-12-01 14:45:39.125 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:45:39.107 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:45:38.717 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:45:39.322 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:45:39.403 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:46:02.139 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51142 10 6452 1 2025-12-01 14:47:02.542 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53874 10 6452 1 2025-12-01 14:48:02.953 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:40124 10 6452 1 2025-12-01 14:49:03.324 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38888 10 6452 1 2025-12-01 14:46:09.171 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 14:50:03.728 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52190 10 6452 1 2025-12-01 14:46:09.169 00:05:02.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 14:50:39.338 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:50:39.062 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:50:39.249 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:50:39.058 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:50:39.256 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:51:04.139 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37694 10 6452 1 2025-12-01 14:52:04.546 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41194 10 6452 1 2025-12-01 14:53:04.911 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33332 10 6452 1 2025-12-01 14:54:05.271 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46804 10 6452 1 2025-12-01 14:55:05.673 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58230 10 6452 1 2025-12-01 14:55:39.323 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 14:55:39.477 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 14:55:39.409 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:55:39.467 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 14:55:39.550 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 14:52:09.179 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 14:52:09.182 00:05:02.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 14:56:06.112 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45750 10 6452 1 2025-12-01 14:57:06.477 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37288 10 6452 1 2025-12-01 14:58:06.875 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49262 10 6452 1 Summary: total flows: 140, total bytes: 417156, total packets: 1023, avg bps: 924, avg pps: 0, avg bpp: 407 Time window: 2025-12-01 13:58:09 - 2025-12-01 14:58:17 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0036s User: 0.0027s Wall: 0.0020s flows/second: 70247.9 Runtime: 0.0020s