Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 06:58:46.580 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38690 10 6452 1 2025-12-03 06:59:46.944 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52712 10 6452 1 2025-12-03 07:00:47.361 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40444 10 6452 1 2025-12-03 06:57:10.079 00:05:02.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 06:57:10.080 00:05:02.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:01:27.517 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:01:27.472 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:01:27.381 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:01:27.435 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:01:27.441 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:01:47.759 00:00:14.936 TCP 1.101.0.1:3000 -> 23.104.0.1:41224 10 6452 1 2025-12-03 07:02:52.747 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45788 10 6452 1 2025-12-03 07:03:53.155 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37804 10 6452 1 2025-12-03 07:04:53.567 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55038 10 6452 1 2025-12-03 07:05:53.972 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52192 10 6452 1 2025-12-03 07:06:27.656 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:06:27.630 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:06:27.462 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:06:27.574 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:06:27.627 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:06:54.396 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54148 10 6452 1 2025-12-03 07:03:10.081 00:05:02.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:03:10.079 00:05:02.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:07:54.800 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35876 10 6452 1 2025-12-03 07:08:55.207 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44382 10 6452 1 2025-12-03 07:09:55.607 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48996 10 6452 1 2025-12-03 07:10:55.967 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36986 10 6452 1 2025-12-03 07:11:27.813 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:11:27.548 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:11:27.304 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:11:27.730 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:11:27.739 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:11:56.373 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38956 10 6452 1 2025-12-03 07:12:56.775 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:60008 12 10375 1 2025-12-03 07:09:10.080 00:05:02.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:09:10.082 00:05:02.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:13:57.258 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41110 10 6452 1 2025-12-03 07:14:57.621 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52378 10 6452 1 2025-12-03 07:15:58.024 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56882 10 6452 1 2025-12-03 07:16:27.890 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:16:27.717 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:16:27.731 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:16:27.806 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:16:27.714 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:16:58.429 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36846 10 6452 1 2025-12-03 07:17:58.802 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50110 10 6452 1 2025-12-03 07:18:59.211 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35422 10 6452 1 2025-12-03 07:15:10.080 00:05:02.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:15:10.083 00:05:02.153 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:19:59.621 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 10 6452 1 2025-12-03 07:21:00.037 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57002 10 6452 1 2025-12-03 07:21:27.820 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:21:27.738 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:21:27.850 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:21:27.737 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:21:27.904 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:22:00.439 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47888 10 6452 1 2025-12-03 07:23:00.841 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 12 6556 1 2025-12-03 07:24:01.268 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46522 10 6452 1 2025-12-03 07:21:10.081 00:05:02.158 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:25:01.680 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51866 10 6452 1 2025-12-03 07:21:10.084 00:05:02.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:26:02.051 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36682 10 6452 1 2025-12-03 07:26:28.186 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:26:28.166 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:26:28.176 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:26:28.105 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:26:28.106 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:27:02.468 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57224 10 6452 1 2025-12-03 07:28:02.874 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39020 10 6452 1 2025-12-03 07:29:03.281 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45888 10 6452 1 2025-12-03 07:30:03.638 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38904 10 6452 1 2025-12-03 07:27:10.082 00:05:02.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:31:04.058 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58322 10 6452 1 2025-12-03 07:27:10.084 00:05:02.153 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:31:28.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:31:28.073 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:31:28.115 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:31:27.856 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:31:28.197 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:32:04.464 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37188 10 6452 1 2025-12-03 07:33:04.871 00:00:11.129 TCP 1.101.0.1:3000 -> 23.104.0.1:49996 10 6452 1 2025-12-03 07:34:06.050 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60066 10 6452 1 2025-12-03 07:35:06.411 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47030 10 6452 1 2025-12-03 07:36:06.820 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34548 10 6452 1 2025-12-03 07:36:27.807 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:36:28.134 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:36:28.100 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:36:28.086 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:36:28.183 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:33:10.083 00:05:02.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:33:10.084 00:05:02.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:37:07.238 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38046 10 6452 1 2025-12-03 07:38:07.649 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 10 6452 1 2025-12-03 07:39:08.067 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55196 10 6452 1 2025-12-03 07:40:08.433 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39572 10 6452 1 2025-12-03 07:41:08.794 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46584 10 6452 1 2025-12-03 07:41:28.444 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:41:28.396 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:41:28.263 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:41:28.361 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:41:28.199 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:42:09.204 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52478 10 6452 1 2025-12-03 07:39:10.085 00:05:02.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:39:10.087 00:05:02.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:43:09.606 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:34764 10 6452 1 2025-12-03 07:44:10.001 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57588 10 6452 1 2025-12-03 07:45:10.360 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46450 10 6452 1 2025-12-03 07:46:28.417 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:46:10.732 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54038 10 6452 1 2025-12-03 07:46:28.328 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:46:28.316 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:46:28.335 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:46:28.385 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:47:11.144 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58114 10 6452 1 2025-12-03 07:48:11.550 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56992 10 6452 1 2025-12-03 07:45:10.089 00:05:02.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:45:10.088 00:05:02.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:49:11.962 00:00:11.150 TCP 1.101.0.1:3000 -> 23.104.0.1:39420 10 6452 1 2025-12-03 07:50:13.149 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43054 10 6452 1 2025-12-03 07:51:13.548 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54322 10 6452 1 2025-12-03 07:51:28.487 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:51:28.402 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:51:28.110 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:51:28.404 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:51:28.403 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:52:13.953 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58230 10 6452 1 2025-12-03 07:53:14.387 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:44972 12 10369 1 2025-12-03 07:54:14.870 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55168 10 6452 1 2025-12-03 07:51:10.087 00:05:02.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 07:51:10.091 00:05:02.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 07:55:15.238 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60276 10 6452 1 2025-12-03 07:56:28.548 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 07:56:28.626 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:56:28.532 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 07:56:28.539 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 07:56:15.640 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36176 10 6452 1 2025-12-03 07:56:28.616 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 07:57:16.071 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49488 10 6452 1 2025-12-03 07:58:16.431 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47810 10 6452 1 Summary: total flows: 140, total bytes: 424944, total packets: 1026, avg bps: 924, avg pps: 0, avg bpp: 414 Time window: 2025-12-03 06:57:10 - 2025-12-03 07:58:26 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0022s User: 0.0022s Wall: 0.0012s flows/second: 112361.8 Runtime: 0.0013s