Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 18:58:58.353 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47780 10 6452 1 2025-12-01 18:59:58.757 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:51852 10 6452 1 2025-12-01 19:00:44.407 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:00:44.274 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:00:44.276 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:00:44.325 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:00:44.321 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:00:59.143 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38426 10 6452 1 2025-12-01 19:01:59.554 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37956 10 6452 1 2025-12-01 18:57:11.445 00:05:57.837 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 18:57:11.447 00:05:57.832 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 19:02:59.959 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59438 10 6452 1 2025-12-01 19:04:00.362 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41786 10 6452 1 2025-12-01 19:05:00.762 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60866 10 6452 1 2025-12-01 19:05:44.388 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:05:44.211 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:05:44.316 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:05:44.305 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:05:44.311 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:06:01.176 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56740 10 6452 1 2025-12-01 19:07:01.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53674 10 6452 1 2025-12-01 19:03:11.448 00:05:57.832 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 19:03:11.445 00:05:57.838 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 19:08:01.984 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36068 10 6452 1 2025-12-01 19:09:02.393 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57716 10 6452 1 2025-12-01 19:10:02.756 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33184 10 6452 1 2025-12-01 19:10:44.381 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:10:44.379 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:10:44.222 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:10:44.300 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:10:44.369 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:11:03.143 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51992 10 6452 1 2025-12-01 19:12:03.547 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38330 10 6452 1 2025-12-01 19:13:03.965 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40684 10 6452 1 2025-12-01 19:09:11.452 00:05:57.833 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 19:09:11.447 00:05:57.838 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 19:14:04.361 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48112 10 6452 1 2025-12-01 19:15:04.766 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47190 10 6452 1 2025-12-01 19:15:44.608 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:15:44.483 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:15:44.165 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:15:44.527 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:15:44.478 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:16:05.180 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52578 10 6452 1 2025-12-01 19:17:05.546 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35000 10 6452 1 2025-12-01 19:18:05.954 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44262 10 6452 1 2025-12-01 19:19:06.367 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51780 10 6452 1 2025-12-01 19:15:11.453 00:05:57.832 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 19:15:11.452 00:05:57.836 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 19:20:06.770 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60148 10 6452 1 2025-12-01 19:20:44.594 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:20:44.559 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:20:44.508 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:20:44.515 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:20:44.591 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:21:07.187 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50250 10 6452 1 2025-12-01 19:22:07.592 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36268 10 6452 1 2025-12-01 19:23:07.988 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56182 10 6452 1 2025-12-01 19:24:08.394 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39172 10 6452 1 2025-12-01 19:25:08.792 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33286 10 6452 1 2025-12-01 19:25:44.913 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:25:44.644 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:25:44.570 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:25:44.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:25:44.712 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:21:11.453 00:05:57.836 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 19:21:11.456 00:05:57.830 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 19:26:09.190 00:00:10.953 TCP 1.101.0.1:3000 -> 23.104.0.1:58926 10 6452 1 2025-12-01 19:27:10.177 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42248 10 6452 1 2025-12-01 19:28:10.580 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45858 10 6452 1 2025-12-01 19:29:10.995 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52452 10 6452 1 2025-12-01 19:30:11.394 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36360 10 6452 1 2025-12-01 19:30:45.007 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:30:44.962 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:30:44.610 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:30:44.924 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:30:44.802 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:31:11.796 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:59078 10 6452 1 2025-12-01 19:27:11.455 00:05:57.834 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 19:27:11.458 00:05:57.829 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 19:32:12.153 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:43402 10 6452 1 2025-12-01 19:33:12.511 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46792 10 6452 1 2025-12-01 19:34:12.933 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:51758 10 6452 1 2025-12-01 19:35:13.315 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60618 10 6452 1 2025-12-01 19:35:44.911 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:35:44.859 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:35:45.054 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:35:44.975 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:35:45.137 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:36:13.714 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33954 10 6452 1 2025-12-01 19:37:14.116 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46892 10 6452 1 2025-12-01 19:33:11.457 00:05:57.834 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 19:33:11.459 00:05:57.829 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 19:38:14.516 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51194 10 6452 1 2025-12-01 19:39:14.927 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:49596 10 6452 1 2025-12-01 19:40:15.351 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45582 10 6452 1 2025-12-01 19:40:45.019 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:40:45.070 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:40:44.931 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:40:44.937 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:40:44.858 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:41:15.768 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55446 10 6452 1 2025-12-01 19:42:16.145 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52242 10 6452 1 2025-12-01 19:43:16.552 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45948 12 6556 1 2025-12-01 19:39:11.460 00:05:57.828 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 19:39:11.458 00:05:57.833 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 19:44:16.954 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49168 10 6452 1 2025-12-01 19:45:17.322 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35746 10 6452 1 2025-12-01 19:45:45.496 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:45:45.410 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:45:45.139 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:45:45.414 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:45:45.177 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:46:17.698 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34576 10 6452 1 2025-12-01 19:47:18.112 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59026 10 6452 1 2025-12-01 19:48:18.517 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58342 10 6452 1 2025-12-01 19:49:18.924 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:54560 13 6608 1 2025-12-01 19:45:11.467 00:05:57.823 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 19:45:11.465 00:05:57.828 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 19:50:19.382 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52024 10 6452 1 2025-12-01 19:50:45.349 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:50:45.323 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:50:45.188 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:50:45.267 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:50:45.224 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:51:19.782 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52850 10 6452 1 2025-12-01 19:52:20.188 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33440 10 6452 1 2025-12-01 19:53:20.597 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34288 10 6452 1 2025-12-01 19:54:20.996 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47502 10 6452 1 2025-12-01 19:55:21.398 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38374 10 6452 1 2025-12-01 19:55:45.359 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-01 19:55:44.889 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:55:45.313 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-01 19:55:45.474 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-01 19:55:45.395 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-01 19:51:11.467 00:05:57.824 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-01 19:51:11.464 00:05:57.829 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-01 19:56:21.801 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50098 10 6452 1 2025-12-01 19:57:22.212 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39304 10 6452 1 2025-12-01 19:58:22.620 00:00:10.980 TCP 1.101.0.1:3000 -> 23.104.0.1:55682 10 6452 1 Summary: total flows: 140, total bytes: 417260, total packets: 1025, avg bps: 906, avg pps: 0, avg bpp: 407 Time window: 2025-12-01 18:57:11 - 2025-12-01 19:58:33 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0048s User: 0.0016s Wall: 0.0020s flows/second: 68662.6 Runtime: 0.0021s