Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 06:59:10.359 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33982 10 6452 1 2025-12-02 07:00:10.724 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45840 10 6452 1 2025-12-02 07:00:58.631 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:00:58.717 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:00:58.548 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:00:58.648 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:00:58.548 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:01:11.104 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33244 10 6452 1 2025-12-02 06:58:09.560 00:05:02.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 06:58:09.558 00:05:02.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:02:11.468 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33740 10 6452 1 2025-12-02 07:03:11.864 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58066 10 6452 1 2025-12-02 07:04:12.232 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53708 10 6452 1 2025-12-02 07:05:12.599 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34738 10 6452 1 2025-12-02 07:05:58.808 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:05:58.828 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:05:58.779 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:05:58.587 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:05:58.724 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:06:13.007 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34802 10 6452 1 2025-12-02 07:07:13.415 00:00:11.045 TCP 1.101.0.1:3000 -> 23.104.0.1:41958 10 6452 1 2025-12-02 07:04:09.562 00:05:02.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:04:09.561 00:05:02.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:08:14.506 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:35366 12 10375 1 2025-12-02 07:09:14.985 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42536 10 6452 1 2025-12-02 07:10:15.398 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46324 10 6452 1 2025-12-02 07:10:58.752 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:10:58.887 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:10:58.596 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:10:58.752 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:10:58.835 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:11:15.803 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46334 10 6452 1 2025-12-02 07:12:16.215 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43316 10 6452 1 2025-12-02 07:13:16.573 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58474 10 6452 1 2025-12-02 07:10:09.562 00:05:02.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:10:09.564 00:05:02.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:14:16.979 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36156 10 6452 1 2025-12-02 07:15:17.388 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52788 10 6452 1 2025-12-02 07:15:58.920 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:15:58.922 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:15:58.564 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:15:58.856 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:15:58.939 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:16:17.749 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45550 10 6452 1 2025-12-02 07:17:18.149 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40700 10 6452 1 2025-12-02 07:18:18.568 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54268 10 6452 1 2025-12-02 07:19:18.973 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52284 10 6452 1 2025-12-02 07:16:09.567 00:05:02.128 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:16:09.565 00:05:02.133 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:20:19.381 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37932 10 6452 1 2025-12-02 07:20:58.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:20:58.940 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:20:58.825 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:20:58.942 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:20:59.025 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:21:19.805 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60302 10 6452 1 2025-12-02 07:22:20.252 00:00:11.289 TCP 1.101.0.1:3000 -> 23.104.0.1:56108 10 6452 1 2025-12-02 07:23:21.596 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40670 10 6452 1 2025-12-02 07:24:22.001 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47972 10 6452 1 2025-12-02 07:25:22.407 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58870 10 6452 1 2025-12-02 07:25:59.799 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:25:59.589 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:25:59.665 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:25:59.477 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:25:59.717 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:22:09.568 00:05:02.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:22:09.566 00:05:02.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:26:22.822 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-12-02 07:27:23.191 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:37926 12 10369 1 2025-12-02 07:28:23.671 00:00:11.192 TCP 1.101.0.1:3000 -> 23.104.0.1:55674 10 6452 1 2025-12-02 07:29:24.908 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38224 10 6452 1 2025-12-02 07:30:25.316 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39420 10 6452 1 2025-12-02 07:30:59.239 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:30:59.324 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:30:59.139 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:30:59.119 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:30:59.201 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:31:25.723 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40894 10 6452 1 2025-12-02 07:28:09.567 00:05:02.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:28:09.570 00:05:02.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:32:26.136 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57738 10 6452 1 2025-12-02 07:33:26.498 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40074 10 6452 1 2025-12-02 07:34:26.901 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48022 12 6556 1 2025-12-02 07:35:27.314 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56514 10 6452 1 2025-12-02 07:35:59.408 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:35:59.306 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:35:59.187 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:35:59.364 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:35:59.447 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:36:27.724 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:33274 10 6452 1 2025-12-02 07:37:28.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38760 10 6452 1 2025-12-02 07:34:09.568 00:05:02.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:34:09.570 00:05:02.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:38:28.540 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53152 10 6452 1 2025-12-02 07:39:28.939 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:52702 10 6452 1 2025-12-02 07:40:29.360 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:49364 10 6452 1 2025-12-02 07:40:59.389 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:40:59.212 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:40:59.342 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:40:59.386 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:40:59.469 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:41:29.756 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:52202 10 6452 1 2025-12-02 07:42:30.191 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43708 10 6452 1 2025-12-02 07:43:30.597 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46680 10 6452 1 2025-12-02 07:40:09.571 00:05:02.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:40:09.574 00:05:02.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:44:31.005 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 2025-12-02 07:45:31.405 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51972 10 6452 1 2025-12-02 07:45:59.650 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:45:59.494 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:45:59.561 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:45:59.681 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:45:59.568 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:46:31.775 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35728 10 6452 1 2025-12-02 07:47:32.187 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37410 10 6452 1 2025-12-02 07:48:32.585 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54848 10 6452 1 2025-12-02 07:49:32.983 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36594 10 6452 1 2025-12-02 07:46:09.574 00:05:02.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:46:09.576 00:05:02.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:50:33.385 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40584 10 6452 1 2025-12-02 07:50:59.639 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:50:59.552 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:50:59.407 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:50:59.242 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:50:59.556 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:51:33.791 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45834 10 6452 1 2025-12-02 07:52:34.154 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44122 10 6452 1 2025-12-02 07:53:34.568 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6452 1 2025-12-02 07:54:34.970 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38240 10 6452 1 2025-12-02 07:55:35.371 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50202 10 6452 1 2025-12-02 07:55:59.674 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 07:55:59.891 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 07:55:59.837 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 07:55:59.798 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:55:59.592 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 07:52:09.576 00:05:02.135 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 07:52:09.575 00:05:02.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 07:56:35.771 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48170 10 6452 1 2025-12-02 07:57:36.183 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48072 10 6452 1 2025-12-02 07:58:36.586 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51114 10 6452 1 Summary: total flows: 140, total bytes: 424944, total packets: 1026, avg bps: 934, avg pps: 0, avg bpp: 414 Time window: 2025-12-02 06:58:09 - 2025-12-02 07:58:46 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0056s User: 0.0016s Wall: 0.0030s flows/second: 47123.2 Runtime: 0.0030s