Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-08 04:59:09.428 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50210 10 6452 1 2025-12-08 05:00:09.842 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:59074 10 6452 1 2025-12-08 05:01:10.275 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39242 11 6492 1 2025-12-08 04:58:12.540 00:05:02.416 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 04:58:12.543 00:05:02.412 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 05:02:10.677 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39012 10 6452 1 2025-12-08 05:03:11.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51294 10 6452 1 2025-12-08 05:03:49.500 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:03:50.085 00:00:00.049 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 05:03:50.223 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 05:03:50.270 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 05:03:50.004 00:00:00.048 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:04:11.514 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38986 10 6452 1 2025-12-08 05:05:11.882 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46478 10 6452 1 2025-12-08 05:06:12.290 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32852 10 6452 1 2025-12-08 05:07:12.696 00:00:11.291 TCP 1.101.0.1:3000 -> 23.104.0.1:55096 12 6556 1 2025-12-08 05:04:12.544 00:05:02.413 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 05:04:12.541 00:05:02.418 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 05:08:14.035 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45788 10 6452 1 2025-12-08 05:08:49.750 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 05:08:49.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 05:08:49.738 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 05:08:49.763 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:08:49.658 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:09:14.435 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53970 10 6452 1 2025-12-08 05:10:14.842 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36034 10 6452 1 2025-12-08 05:11:15.268 00:00:11.297 TCP 1.101.0.1:3000 -> 23.104.0.1:44350 10 6452 1 2025-12-08 05:12:16.602 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56546 10 6452 1 2025-12-08 05:13:17.011 00:00:10.702 TCP 1.101.0.1:3000 -> 23.104.0.1:45580 10 6452 1 2025-12-08 05:13:49.714 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 05:13:49.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 05:13:49.648 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:13:49.770 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:13:49.854 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 05:10:12.545 00:05:02.413 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 05:10:12.543 00:05:02.418 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 05:14:17.749 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36458 10 6452 1 2025-12-08 05:15:18.149 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49488 10 6452 1 2025-12-08 05:16:18.507 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44766 10 6452 1 2025-12-08 05:17:18.907 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60514 10 6452 1 2025-12-08 05:18:19.316 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:49806 10 6452 1 2025-12-08 05:18:49.875 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:18:49.959 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:18:50.101 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 05:18:49.968 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 05:18:50.043 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 05:19:19.756 00:00:10.473 TCP 1.101.0.1:3000 -> 23.104.0.1:60774 12 10375 1 2025-12-08 05:16:12.567 00:05:02.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 05:16:12.565 00:05:02.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 05:20:20.259 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47116 10 6452 1 2025-12-08 05:21:20.672 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59118 10 6452 1 2025-12-08 05:22:21.099 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38114 10 6452 1 2025-12-08 05:23:21.461 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41410 10 6452 1 2025-12-08 05:23:49.721 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 05:23:49.721 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 05:23:49.949 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:23:49.978 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:23:50.061 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 05:24:21.869 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57246 10 6452 1 2025-12-08 05:25:22.275 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37408 10 6452 1 2025-12-08 05:22:12.555 00:05:02.414 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 05:22:12.557 00:05:02.408 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 05:26:22.683 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47200 10 6452 1 2025-12-08 05:27:23.109 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47226 10 6452 1 2025-12-08 05:28:23.472 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38468 10 6452 1 2025-12-08 05:28:49.877 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 05:28:49.875 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 05:28:49.837 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:28:50.086 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:28:50.168 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 05:29:23.839 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:50350 10 6452 1 2025-12-08 05:30:24.274 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36582 10 6452 1 2025-12-08 05:31:24.682 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51166 10 6452 1 2025-12-08 05:28:12.556 00:05:02.415 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 05:28:12.559 00:05:02.410 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 05:32:25.112 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57512 10 6452 1 2025-12-08 05:33:25.522 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44916 10 6452 1 2025-12-08 05:33:49.939 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:33:50.061 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 05:33:49.983 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 05:33:50.096 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 05:33:49.979 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:34:25.887 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45576 12 6556 1 2025-12-08 05:35:26.311 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47362 10 6452 1 2025-12-08 05:36:26.714 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45594 10 6452 1 2025-12-08 05:37:27.103 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55002 10 6452 1 2025-12-08 05:34:12.559 00:05:02.412 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 05:34:12.557 00:05:02.416 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 05:38:27.502 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55950 10 6452 1 2025-12-08 05:38:50.287 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 05:38:50.365 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 05:38:50.207 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 05:38:50.158 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:38:50.205 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:39:27.911 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35774 10 6452 1 2025-12-08 05:40:28.272 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48648 10 6452 1 2025-12-08 05:41:28.675 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58550 10 6452 1 2025-12-08 05:42:29.106 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43108 10 6452 1 2025-12-08 05:43:29.508 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37210 10 6452 1 2025-12-08 05:43:50.390 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 05:43:50.299 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 05:43:50.388 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:43:50.292 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:43:50.375 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 05:40:12.558 00:05:02.417 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 05:40:12.561 00:05:02.411 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 05:44:29.918 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47956 10 6452 1 2025-12-08 05:45:30.325 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58236 10 6452 1 2025-12-08 05:46:30.731 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54934 10 6452 1 2025-12-08 05:47:31.139 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46696 10 6452 1 2025-12-08 05:48:31.558 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45968 10 6452 1 2025-12-08 05:48:50.369 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 05:48:50.421 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 05:48:50.149 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:48:50.369 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:48:50.451 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 05:49:31.960 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44656 10 6452 1 2025-12-08 05:46:12.562 00:05:02.411 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 05:46:12.559 00:05:02.416 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 05:50:32.368 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45936 10 6452 1 2025-12-08 05:51:32.771 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52150 10 6452 1 2025-12-08 05:52:33.187 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35190 10 6452 1 2025-12-08 05:53:33.556 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53502 10 6452 1 2025-12-08 05:53:50.488 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 05:53:50.485 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 05:53:50.498 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:53:50.405 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 05:53:50.665 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 05:54:33.920 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50678 10 6452 1 2025-12-08 05:55:34.323 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-12-08 05:52:12.560 00:05:02.418 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 05:52:12.564 00:05:02.413 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 05:56:34.720 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56338 10 6452 1 2025-12-08 05:57:35.136 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40728 10 6452 1 2025-12-08 05:58:35.545 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49126 10 6452 1 Summary: total flows: 135, total bytes: 419911, total packets: 1012, avg bps: 924, avg pps: 0, avg bpp: 414 Time window: 2025-12-08 04:58:12 - 2025-12-08 05:58:45 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0041s User: 0.0021s Wall: 0.0022s flows/second: 61781.9 Runtime: 0.0022s