Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-07 17:59:00.591 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57216 10 6452 1 2025-12-07 18:00:00.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59468 10 6452 1 2025-12-07 18:01:01.401 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51422 10 6452 1 2025-12-07 18:02:01.802 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:55522 10 6452 1 2025-12-07 17:58:12.304 00:05:02.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 17:58:12.302 00:05:02.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 18:03:02.183 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55780 10 6452 1 2025-12-07 18:03:36.271 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:03:36.353 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:03:36.100 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:03:36.189 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:03:35.950 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:04:02.582 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60682 10 6452 1 2025-12-07 18:05:02.991 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48614 10 6452 1 2025-12-07 18:06:03.362 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49224 10 6452 1 2025-12-07 18:07:03.727 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53480 10 6452 1 2025-12-07 18:04:12.305 00:05:02.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 18:08:04.135 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47792 10 6452 1 2025-12-07 18:04:12.302 00:05:02.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 18:08:36.411 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:08:36.353 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:08:36.190 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:08:36.368 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:08:36.494 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:09:04.539 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46192 10 6452 1 2025-12-07 18:10:04.945 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54062 10 6452 1 2025-12-07 18:11:05.365 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44626 10 6452 1 2025-12-07 18:12:05.776 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41940 10 6452 1 2025-12-07 18:13:06.183 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38264 10 6452 1 2025-12-07 18:13:36.431 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:13:36.448 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:13:36.511 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:13:36.388 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:13:36.349 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:10:12.317 00:05:02.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 18:14:06.578 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53702 10 6452 1 2025-12-07 18:10:12.315 00:05:02.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 18:15:06.982 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36310 10 6452 1 2025-12-07 18:16:07.389 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39750 10 6452 1 2025-12-07 18:17:07.756 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39498 10 6452 1 2025-12-07 18:18:08.171 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48904 10 6452 1 2025-12-07 18:18:36.642 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:18:36.565 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:18:36.566 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:18:36.219 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:18:36.558 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:19:08.540 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48678 10 6452 1 2025-12-07 18:16:12.319 00:05:02.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 18:16:12.317 00:05:02.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 18:20:08.944 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44712 10 6452 1 2025-12-07 18:21:09.356 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54448 10 6452 1 2025-12-07 18:22:09.754 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34464 10 6452 1 2025-12-07 18:23:10.149 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45092 10 6452 1 2025-12-07 18:23:36.709 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:23:36.513 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:23:36.732 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:23:36.570 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:23:36.627 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:24:10.550 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42540 10 6452 1 2025-12-07 18:25:10.910 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54032 10 6452 1 2025-12-07 18:22:12.317 00:05:02.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 18:22:12.320 00:05:02.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 18:26:11.314 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48732 10 6452 1 2025-12-07 18:27:11.724 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:59612 10 6452 1 2025-12-07 18:28:12.194 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50440 10 6452 1 2025-12-07 18:28:36.665 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:28:36.771 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:28:36.829 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:28:36.498 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:28:36.583 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:29:12.596 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-12-07 18:30:13.003 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55270 10 6452 1 2025-12-07 18:31:13.405 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49892 10 6452 1 2025-12-07 18:28:12.322 00:05:02.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 18:28:12.319 00:05:02.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 18:32:13.808 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43950 10 6452 1 2025-12-07 18:33:14.218 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53212 10 6452 1 2025-12-07 18:33:36.892 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:33:36.742 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:33:36.858 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:33:36.820 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:33:36.903 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:34:14.621 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50178 10 6452 1 2025-12-07 18:35:14.981 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49434 10 6452 1 2025-12-07 18:36:15.386 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54092 10 6452 1 2025-12-07 18:37:15.783 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55882 10 6452 1 2025-12-07 18:34:12.320 00:05:02.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 18:34:12.323 00:05:02.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 18:38:16.188 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55240 10 6452 1 2025-12-07 18:38:37.273 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:38:37.141 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:38:37.059 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:38:37.185 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:38:37.192 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:39:16.597 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58012 10 6452 1 2025-12-07 18:40:17.002 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52734 10 6452 1 2025-12-07 18:41:17.363 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51736 10 6452 1 2025-12-07 18:42:17.764 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57014 10 6452 1 2025-12-07 18:43:18.177 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45558 10 6452 1 2025-12-07 18:43:36.969 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:43:37.101 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:43:37.139 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:43:36.904 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:43:36.887 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:40:12.327 00:05:02.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 18:40:12.331 00:05:02.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 18:44:18.580 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:38218 12 10375 1 2025-12-07 18:45:19.068 00:00:10.531 TCP 1.101.0.1:3000 -> 23.104.0.1:51556 10 6452 1 2025-12-07 18:46:19.638 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40418 10 6452 1 2025-12-07 18:47:20.058 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45276 10 6452 1 2025-12-07 18:48:20.464 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33772 10 6452 1 2025-12-07 18:48:37.134 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:48:37.268 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:48:37.077 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:48:37.214 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:48:37.298 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:49:20.874 00:00:10.604 TCP 1.101.0.1:3000 -> 23.104.0.1:39050 10 6452 1 2025-12-07 18:46:12.330 00:05:02.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 18:46:12.327 00:05:02.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 18:50:21.526 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47738 10 6452 1 2025-12-07 18:51:21.949 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58162 10 6452 1 2025-12-07 18:52:22.355 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55542 10 6452 1 2025-12-07 18:53:22.762 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53030 10 6452 1 2025-12-07 18:53:37.254 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:53:37.241 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:53:37.232 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:53:37.104 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:53:37.171 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:54:23.175 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52188 10 6452 1 2025-12-07 18:55:23.582 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33504 10 6452 1 2025-12-07 18:52:12.332 00:05:02.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-07 18:52:12.330 00:05:02.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-07 18:56:23.979 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56742 10 6452 1 2025-12-07 18:57:24.384 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41566 10 6452 1 2025-12-07 18:58:37.347 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-07 18:58:37.265 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-07 18:58:37.242 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-07 18:58:24.792 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40944 10 6452 1 2025-12-07 18:58:37.246 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-07 18:58:37.282 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 928, avg pps: 0, avg bpp: 411 Time window: 2025-12-07 17:58:12 - 2025-12-07 18:58:37 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0046s User: 0.0023s Wall: 0.0027s flows/second: 52024.7 Runtime: 0.0027s