Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 01:59:38.535 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:59700 10 6452 1 2025-12-03 02:00:38.918 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33152 10 6452 1 2025-12-03 01:57:09.959 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 01:57:09.957 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 02:01:21.445 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:01:21.340 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:01:21.497 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:01:21.495 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:01:21.580 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:01:39.321 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52814 10 6452 1 2025-12-03 02:02:39.722 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43930 10 6452 1 2025-12-03 02:03:40.108 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37702 10 6452 1 2025-12-03 02:04:40.507 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57692 10 6452 1 2025-12-03 02:05:40.919 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34794 10 6452 1 2025-12-03 02:06:21.633 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:06:21.454 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:06:21.629 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:06:21.423 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:06:21.711 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:06:41.324 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34958 10 6452 1 2025-12-03 02:03:09.962 00:05:02.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 02:03:09.959 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 02:07:41.729 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59308 10 6452 1 2025-12-03 02:08:42.150 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49072 10 6452 1 2025-12-03 02:09:42.559 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59978 10 6452 1 2025-12-03 02:10:42.962 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37564 10 6452 1 2025-12-03 02:11:21.893 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:11:21.807 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:11:21.307 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:11:21.810 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:11:21.807 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:11:43.363 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:34532 10 6452 1 2025-12-03 02:12:43.782 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60576 10 6452 1 2025-12-03 02:09:09.959 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 02:09:09.961 00:05:02.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 02:13:44.204 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44742 10 6452 1 2025-12-03 02:14:44.603 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51036 10 6452 1 2025-12-03 02:15:45.006 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50332 10 6452 1 2025-12-03 02:16:21.660 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:16:21.789 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:16:21.658 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:16:21.739 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:16:21.740 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:16:45.373 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42726 10 6452 1 2025-12-03 02:17:45.779 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33864 10 6452 1 2025-12-03 02:18:46.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59288 10 6452 1 2025-12-03 02:15:09.966 00:05:02.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 02:15:09.962 00:05:02.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 02:19:46.549 00:00:10.745 TCP 1.101.0.1:3000 -> 23.104.0.1:42320 10 6452 1 2025-12-03 02:20:47.331 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46376 10 6452 1 2025-12-03 02:21:21.880 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:21:21.783 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:21:21.470 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:21:21.797 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:21:21.721 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:21:47.734 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56700 10 6452 1 2025-12-03 02:22:48.141 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59510 10 6452 1 2025-12-03 02:23:48.548 00:00:10.626 TCP 1.101.0.1:3000 -> 23.104.0.1:49860 10 6452 1 2025-12-03 02:24:49.208 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55226 10 6452 1 2025-12-03 02:21:09.964 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 02:21:09.966 00:05:02.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 02:25:49.613 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58938 10 6452 1 2025-12-03 02:26:21.898 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:26:21.744 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:26:21.727 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:26:21.718 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:26:21.811 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:26:50.020 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51436 10 6452 1 2025-12-03 02:27:50.384 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39758 10 6452 1 2025-12-03 02:28:50.785 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52984 10 6452 1 2025-12-03 02:29:51.187 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53396 10 6452 1 2025-12-03 02:30:51.583 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57714 10 6452 1 2025-12-03 02:27:09.968 00:05:02.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 02:27:09.964 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 02:31:22.626 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:31:22.693 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:31:22.402 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:31:22.545 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:31:22.620 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:31:51.984 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57630 10 6452 1 2025-12-03 02:32:52.395 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49188 10 6452 1 2025-12-03 02:33:52.766 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:43850 10 6452 1 2025-12-03 02:34:53.136 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45510 10 6452 1 2025-12-03 02:35:53.551 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49102 10 6452 1 2025-12-03 02:36:22.113 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:36:21.757 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:36:22.164 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:36:22.113 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:36:22.247 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:36:53.956 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43010 10 6452 1 2025-12-03 02:33:09.966 00:05:02.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 02:33:09.969 00:05:02.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 02:37:54.344 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48024 10 6452 1 2025-12-03 02:38:54.748 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50058 10 6452 1 2025-12-03 02:39:55.154 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51844 10 6452 1 2025-12-03 02:40:55.560 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57780 10 6452 1 2025-12-03 02:41:22.457 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:41:22.064 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:41:22.185 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:41:22.374 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:41:22.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:41:55.956 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39022 10 6452 1 2025-12-03 02:42:56.366 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38084 10 6452 1 2025-12-03 02:39:09.970 00:05:02.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 02:39:09.967 00:05:02.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 02:43:56.772 00:00:10.758 TCP 1.101.0.1:3000 -> 23.104.0.1:47980 10 6452 1 2025-12-03 02:44:57.562 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56036 10 6452 1 2025-12-03 02:45:57.962 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48178 10 6452 1 2025-12-03 02:46:22.325 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:46:22.248 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:46:21.877 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:46:22.243 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:46:22.314 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:46:58.367 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39374 10 6452 1 2025-12-03 02:47:58.779 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36680 10 6452 1 2025-12-03 02:48:59.189 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53286 10 6452 1 2025-12-03 02:45:09.969 00:05:02.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 02:45:09.972 00:05:02.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 02:49:59.590 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40436 10 6452 1 2025-12-03 02:50:59.993 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46264 10 6452 1 2025-12-03 02:51:22.537 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:51:22.462 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:51:22.193 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:51:22.454 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:51:22.458 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:52:00.406 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37600 10 6452 1 2025-12-03 02:53:00.813 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54328 10 6452 1 2025-12-03 02:54:01.215 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:44950 10 6452 1 2025-12-03 02:51:09.974 00:05:02.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 02:55:01.570 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58016 10 6452 1 2025-12-03 02:51:09.978 00:05:02.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 02:56:01.977 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51238 10 6452 1 2025-12-03 02:56:22.755 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 02:56:22.608 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 02:56:22.561 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:56:22.672 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 02:56:22.680 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 02:57:02.382 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42926 10 6452 1 2025-12-03 02:58:02.781 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57684 10 6452 1 Summary: total flows: 139, total bytes: 410548, total packets: 1010, avg bps: 896, avg pps: 0, avg bpp: 406 Time window: 2025-12-03 01:57:09 - 2025-12-03 02:58:13 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0041s User: 0.0017s Wall: 0.0014s flows/second: 102732.7 Runtime: 0.0014s