Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 03:58:49.483 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37806 10 6452 1 2025-12-02 03:59:49.893 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 10 6452 1 2025-12-02 04:00:55.262 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:00:55.109 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:00:54.744 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:00:55.180 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:00:55.173 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:00:50.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58126 10 6452 1 2025-12-02 03:57:11.625 00:05:57.870 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:01:50.718 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41768 10 6452 1 2025-12-02 03:57:11.623 00:05:57.875 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:02:51.133 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47954 10 6452 1 2025-12-02 04:03:51.537 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:41494 11 6504 1 2025-12-02 04:04:51.996 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52676 10 6452 1 2025-12-02 04:05:55.161 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:05:55.190 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:05:54.704 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:05:55.078 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:05:54.962 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:05:52.397 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43914 10 6452 1 2025-12-02 04:06:52.798 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58456 10 6452 1 2025-12-02 04:03:11.626 00:05:57.872 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:07:53.208 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:36874 12 10375 1 2025-12-02 04:03:11.624 00:05:57.877 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:08:53.693 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40166 10 6452 1 2025-12-02 04:09:54.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55864 10 6452 1 2025-12-02 04:10:55.519 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:10:55.522 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:10:55.262 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:10:55.437 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:10:55.526 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:10:54.514 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51748 10 6452 1 2025-12-02 04:11:54.914 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39858 10 6452 1 2025-12-02 04:12:55.354 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47062 10 6452 1 2025-12-02 04:13:55.766 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:37926 10 6452 1 2025-12-02 04:09:11.628 00:05:57.873 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:09:11.631 00:05:57.867 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:14:56.190 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48194 10 6452 1 2025-12-02 04:15:55.139 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:15:55.056 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:15:55.389 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:15:55.242 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:15:55.472 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:15:56.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51974 10 6452 1 2025-12-02 04:16:57.007 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37558 10 6452 1 2025-12-02 04:17:57.413 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51134 10 6452 1 2025-12-02 04:18:57.816 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52828 10 6452 1 2025-12-02 04:19:58.222 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:35842 12 6556 1 2025-12-02 04:15:11.632 00:05:57.872 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:15:11.634 00:05:57.867 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:20:55.579 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:20:55.505 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:20:55.628 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:20:55.496 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:20:55.487 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:20:58.629 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55898 10 6452 1 2025-12-02 04:21:59.029 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55276 10 6452 1 2025-12-02 04:22:59.436 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34416 10 6452 1 2025-12-02 04:23:59.838 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:51030 10 6452 1 2025-12-02 04:25:00.271 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47090 10 6452 1 2025-12-02 04:25:55.718 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:25:55.640 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:25:55.588 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:25:55.635 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:25:55.564 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:21:11.632 00:05:57.874 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:21:11.635 00:05:57.869 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:26:00.676 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56832 10 6452 1 2025-12-02 04:27:01.109 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43734 10 6452 1 2025-12-02 04:28:01.510 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46592 10 6452 1 2025-12-02 04:29:01.913 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59394 10 6452 1 2025-12-02 04:30:02.321 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32806 10 6452 1 2025-12-02 04:30:55.453 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:30:55.633 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:30:55.267 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:30:55.370 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:30:55.555 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:31:02.726 00:00:10.822 TCP 1.101.0.1:3000 -> 23.104.0.1:38640 11 6504 1 2025-12-02 04:27:11.638 00:05:57.867 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:27:11.635 00:05:57.873 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:32:03.587 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53720 10 6452 1 2025-12-02 04:33:03.993 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50254 10 6452 1 2025-12-02 04:34:04.360 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51564 10 6452 1 2025-12-02 04:35:04.764 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:54430 10 6452 1 2025-12-02 04:35:55.818 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:35:55.734 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:35:55.710 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:35:55.824 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:35:55.794 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:36:05.147 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43328 10 6452 1 2025-12-02 04:37:05.552 00:00:10.905 TCP 1.101.0.1:3000 -> 23.104.0.1:52992 10 6452 1 2025-12-02 04:33:11.638 00:05:57.876 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:33:11.639 00:05:57.871 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:38:06.495 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33226 10 6452 1 2025-12-02 04:39:06.906 00:00:10.527 TCP 1.101.0.1:3000 -> 23.104.0.1:46118 10 6452 1 2025-12-02 04:40:07.475 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58828 10 6452 1 2025-12-02 04:40:55.933 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:40:55.850 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:40:55.588 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:40:55.850 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:40:55.718 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:41:07.840 00:00:10.752 TCP 1.101.0.1:3000 -> 23.104.0.1:58532 10 6452 1 2025-12-02 04:42:08.658 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58760 10 6452 1 2025-12-02 04:43:09.094 00:00:10.463 TCP 1.101.0.1:3000 -> 23.104.0.1:35102 10 6452 1 2025-12-02 04:39:11.638 00:05:57.877 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:39:11.641 00:05:57.872 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:44:09.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34150 10 6452 1 2025-12-02 04:45:10.005 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40294 10 6452 1 2025-12-02 04:45:55.717 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:45:55.919 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:45:55.850 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:45:55.634 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:45:55.970 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:46:10.421 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49920 10 6452 1 2025-12-02 04:47:10.824 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33618 10 6452 1 2025-12-02 04:48:11.244 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36530 10 6452 1 2025-12-02 04:49:11.608 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53790 10 6452 1 2025-12-02 04:45:11.641 00:05:57.878 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:45:11.644 00:05:57.873 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:50:12.012 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:55820 10 6452 1 2025-12-02 04:50:55.893 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:50:55.921 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:50:56.080 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:50:55.984 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:50:56.068 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:51:12.406 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57060 10 6452 1 2025-12-02 04:52:12.820 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56028 10 6452 1 2025-12-02 04:53:13.221 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57478 10 6452 1 2025-12-02 04:54:13.623 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35898 10 6452 1 2025-12-02 04:55:14.042 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39752 10 6452 1 2025-12-02 04:55:55.919 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-02 04:55:55.915 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:55:56.098 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-02 04:55:56.217 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-02 04:55:55.996 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-02 04:51:11.648 00:05:57.871 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-02 04:51:11.645 00:05:57.877 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-02 04:56:14.443 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48044 10 6452 1 2025-12-02 04:57:14.848 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:55726 10 6452 1 2025-12-02 04:58:15.279 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46300 10 6452 1 Summary: total flows: 140, total bytes: 421131, total packets: 1026, avg bps: 916, avg pps: 0, avg bpp: 410 Time window: 2025-12-02 03:57:11 - 2025-12-02 04:58:25 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0034s User: 0.0017s Wall: 0.0020s flows/second: 70918.2 Runtime: 0.0020s