Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-08 00:59:07.345 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39184 10 6452 1 2025-12-08 01:00:07.753 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:51320 10 6452 1 2025-12-08 01:01:08.181 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55446 10 6452 1 2025-12-08 00:58:12.459 00:05:02.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 00:58:12.461 00:05:02.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 01:02:08.587 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6452 1 2025-12-08 01:03:08.992 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45932 10 6452 1 2025-12-08 01:03:44.908 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 01:03:44.892 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:03:44.843 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:03:44.487 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:03:44.826 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:04:09.411 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59296 10 6452 1 2025-12-08 01:05:09.817 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51114 10 6452 1 2025-12-08 01:06:10.239 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48462 10 6452 1 2025-12-08 01:07:10.647 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44404 10 6452 1 2025-12-08 01:04:12.467 00:05:02.365 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 01:04:12.464 00:05:02.370 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 01:08:11.057 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55838 10 6452 1 2025-12-08 01:08:44.823 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:08:44.750 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:08:44.844 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:08:44.960 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:08:45.042 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 01:09:11.459 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52942 10 6452 1 2025-12-08 01:10:11.862 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36170 10 6452 1 2025-12-08 01:11:12.230 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53844 10 6452 1 2025-12-08 01:12:12.593 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51676 10 6452 1 2025-12-08 01:13:12.994 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36992 10 6452 1 2025-12-08 01:13:44.852 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:13:44.850 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:13:44.787 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:13:44.894 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:13:44.976 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 01:10:12.464 00:05:02.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 01:10:12.466 00:05:02.366 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 01:14:13.399 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52866 10 6452 1 2025-12-08 01:15:13.804 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:42840 10 6452 1 2025-12-08 01:16:14.185 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46112 10 6452 1 2025-12-08 01:17:14.548 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39858 10 6452 1 2025-12-08 01:18:14.949 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46526 10 6452 1 2025-12-08 01:18:44.818 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:18:44.915 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:18:44.908 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:18:44.908 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:18:44.993 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 01:19:15.358 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47072 10 6452 1 2025-12-08 01:16:12.465 00:05:02.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 01:16:12.467 00:05:02.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 01:20:15.763 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48680 10 6452 1 2025-12-08 01:21:16.193 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33142 10 6452 1 2025-12-08 01:22:16.593 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45798 10 6452 1 2025-12-08 01:23:16.994 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38238 10 6452 1 2025-12-08 01:23:44.959 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:23:44.898 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:23:45.056 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:23:45.058 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:23:45.141 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 01:24:17.407 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56710 10 6452 1 2025-12-08 01:25:17.818 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43958 10 6452 1 2025-12-08 01:22:12.475 00:05:02.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 01:22:12.472 00:05:02.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 01:26:18.189 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53266 10 6452 1 2025-12-08 01:27:18.589 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55184 10 6452 1 2025-12-08 01:28:18.990 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59210 10 6452 1 2025-12-08 01:28:44.953 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:28:45.036 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 01:28:45.176 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:28:45.267 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:28:44.985 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:29:19.404 00:00:10.519 TCP 1.101.0.1:3000 -> 23.104.0.1:58354 14 14298 1 2025-12-08 01:30:19.989 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:37568 10 6452 1 2025-12-08 01:31:20.380 00:00:10.809 TCP 1.101.0.1:3000 -> 23.104.0.1:55794 10 6452 1 2025-12-08 01:28:12.477 00:05:02.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 01:28:12.481 00:05:02.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 01:32:21.228 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46732 10 6452 1 2025-12-08 01:33:21.637 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41692 10 6452 1 2025-12-08 01:33:45.233 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 01:33:45.150 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:33:45.241 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:33:45.237 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:33:45.151 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:34:22.040 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:39812 12 10369 1 2025-12-08 01:35:22.471 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-12-08 01:36:22.869 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58056 10 6452 1 2025-12-08 01:37:23.274 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:33162 10 6452 1 2025-12-08 01:34:12.477 00:05:02.365 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 01:34:12.481 00:05:02.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 01:38:23.704 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46480 10 6452 1 2025-12-08 01:38:45.350 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:38:45.427 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:38:45.411 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:38:45.429 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:38:45.512 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 01:39:24.096 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45752 10 6452 1 2025-12-08 01:40:24.500 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42108 10 6452 1 2025-12-08 01:41:24.915 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:51420 10 6452 1 2025-12-08 01:42:25.283 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:37004 10 6452 1 2025-12-08 01:43:25.649 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47594 10 6452 1 2025-12-08 01:43:45.507 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:43:45.373 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:43:45.221 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:43:45.512 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:43:45.595 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 01:40:12.479 00:05:02.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 01:40:12.482 00:05:02.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 01:44:26.055 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:57716 12 10375 1 2025-12-08 01:45:26.532 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48586 10 6452 1 2025-12-08 01:46:26.936 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:40210 10 6452 1 2025-12-08 01:47:27.308 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57838 10 6452 1 2025-12-08 01:48:27.708 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49934 10 6452 1 2025-12-08 01:48:45.662 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 01:48:45.584 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:48:45.644 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:48:45.385 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:48:45.578 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:49:28.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47362 10 6452 1 2025-12-08 01:46:12.483 00:05:02.365 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 01:46:12.485 00:05:02.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 01:50:28.512 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47300 10 6452 1 2025-12-08 01:51:28.924 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38082 10 6452 1 2025-12-08 01:52:29.334 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57838 10 6452 1 2025-12-08 01:53:29.735 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56210 10 6452 1 2025-12-08 01:53:45.772 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:53:45.816 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:53:45.532 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:53:45.602 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:53:45.684 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 01:54:30.150 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39222 10 6452 1 2025-12-08 01:55:30.554 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40280 10 6452 1 2025-12-08 01:52:12.486 00:05:02.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 01:52:12.487 00:05:02.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 01:56:30.914 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39894 10 6452 1 2025-12-08 01:57:31.282 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52726 10 6452 1 2025-12-08 01:58:31.688 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37832 10 6452 1 2025-12-08 01:58:45.705 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 01:58:45.978 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 01:58:45.706 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:58:45.718 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 01:58:45.801 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 140, total bytes: 432686, total packets: 1028, avg bps: 952, avg pps: 0, avg bpp: 420 Time window: 2025-12-08 00:58:12 - 2025-12-08 01:58:46 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0038s User: 0.0013s Wall: 0.0022s flows/second: 62809.1 Runtime: 0.0022s