Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 22:59:08.775 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51324 10 6452 1 2025-12-03 23:00:09.140 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32998 11 6504 1 2025-12-03 22:57:10.365 00:05:02.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 22:57:10.369 00:05:02.177 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:01:09.556 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49082 10 6452 1 2025-12-03 23:01:46.914 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:01:46.925 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:01:46.731 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:01:46.731 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:01:46.814 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:02:09.962 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43010 10 6452 1 2025-12-03 23:03:10.371 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36346 10 6452 1 2025-12-03 23:04:10.773 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43074 10 6452 1 2025-12-03 23:05:11.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48248 10 6452 1 2025-12-03 23:06:11.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52960 10 6452 1 2025-12-03 23:06:46.779 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:06:46.695 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:06:46.799 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:06:46.789 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:06:46.883 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:03:10.370 00:05:02.177 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:03:10.368 00:05:02.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:07:11.995 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43814 10 6452 1 2025-12-03 23:08:12.398 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59482 10 6452 1 2025-12-03 23:09:12.798 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:49082 10 6452 1 2025-12-03 23:10:13.174 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44084 10 6452 1 2025-12-03 23:11:13.590 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60280 10 6452 1 2025-12-03 23:11:46.980 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:11:47.001 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:11:47.275 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:11:47.274 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:11:47.357 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:12:13.949 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58458 10 6452 1 2025-12-03 23:09:10.368 00:05:02.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:09:10.371 00:05:02.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:13:14.350 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34084 10 6452 1 2025-12-03 23:14:14.760 00:00:10.968 TCP 1.101.0.1:3000 -> 23.104.0.1:42714 10 6452 1 2025-12-03 23:15:15.765 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40050 10 6452 1 2025-12-03 23:16:16.180 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58010 10 6452 1 2025-12-03 23:16:47.515 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:16:47.308 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:16:47.339 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:16:47.433 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:16:47.380 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:17:16.585 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60370 10 6452 1 2025-12-03 23:18:16.994 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57668 10 6452 1 2025-12-03 23:15:10.373 00:05:02.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:15:10.377 00:05:02.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:19:17.413 00:00:11.139 TCP 1.101.0.1:3000 -> 23.104.0.1:45426 10 6452 1 2025-12-03 23:20:18.603 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44488 10 6452 1 2025-12-03 23:21:19.010 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50840 10 6452 1 2025-12-03 23:21:47.316 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:21:47.234 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:21:47.145 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:21:47.235 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:21:47.202 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:22:19.413 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56766 10 6452 1 2025-12-03 23:23:19.818 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55282 10 6452 1 2025-12-03 23:24:20.235 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53054 10 6452 1 2025-12-03 23:21:10.375 00:05:02.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:21:10.378 00:05:02.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:25:20.643 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58114 10 6452 1 2025-12-03 23:26:21.059 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49040 10 6452 1 2025-12-03 23:26:47.249 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:26:47.252 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:26:47.087 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:26:47.166 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:26:47.157 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:27:21.465 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37996 10 6452 1 2025-12-03 23:28:21.867 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:46114 12 10369 1 2025-12-03 23:29:22.357 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57714 10 6452 1 2025-12-03 23:30:22.760 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:37410 10 6452 1 2025-12-03 23:27:10.376 00:05:02.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:27:10.377 00:05:02.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:31:23.143 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48468 10 6452 1 2025-12-03 23:31:47.344 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:31:47.387 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:31:47.460 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:31:47.462 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:31:47.543 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:32:23.550 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49212 10 6452 1 2025-12-03 23:33:23.956 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46736 10 6452 1 2025-12-03 23:34:24.327 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60916 10 6452 1 2025-12-03 23:35:24.734 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33880 10 6452 1 2025-12-03 23:36:25.139 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44336 10 6452 1 2025-12-03 23:36:47.601 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:36:47.147 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:36:47.467 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:36:47.597 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:36:47.550 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:33:10.382 00:05:02.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:33:10.379 00:05:02.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:37:25.552 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:59280 11 6504 1 2025-12-03 23:38:26.001 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40086 10 6452 1 2025-12-03 23:39:26.401 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60060 10 6452 1 2025-12-03 23:40:26.804 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33832 10 6452 1 2025-12-03 23:41:27.208 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34528 10 6452 1 2025-12-03 23:41:47.895 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:41:47.553 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:41:47.895 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:41:47.832 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:41:47.978 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:42:27.567 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54082 10 6452 1 2025-12-03 23:39:10.381 00:05:02.188 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:39:10.384 00:05:02.183 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:43:27.965 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43106 10 6452 1 2025-12-03 23:44:28.367 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54394 10 6452 1 2025-12-03 23:45:28.770 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43790 10 6452 1 2025-12-03 23:46:29.181 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:52284 10 6452 1 2025-12-03 23:46:47.798 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:46:47.722 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:46:47.512 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:46:47.716 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:46:47.652 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:47:29.565 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38540 10 6452 1 2025-12-03 23:48:29.973 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50922 10 6452 1 2025-12-03 23:45:10.382 00:05:02.190 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:45:10.385 00:05:02.185 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:49:30.380 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54268 10 6452 1 2025-12-03 23:50:30.742 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46240 10 6452 1 2025-12-03 23:51:47.700 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:51:31.173 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51760 10 6452 1 2025-12-03 23:51:47.621 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:51:47.669 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:51:47.619 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:51:47.775 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:52:31.543 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46380 10 6452 1 2025-12-03 23:53:31.912 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53782 10 6452 1 2025-12-03 23:54:32.321 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57208 10 6452 1 2025-12-03 23:51:10.383 00:05:02.192 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:51:10.385 00:05:02.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-03 23:55:32.725 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37202 10 6452 1 2025-12-03 23:56:33.133 00:00:10.854 TCP 1.101.0.1:3000 -> 23.104.0.1:38450 10 6452 1 2025-12-03 23:56:47.920 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-03 23:56:48.061 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-03 23:56:48.004 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:56:47.838 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-03 23:56:47.996 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-03 23:57:34.033 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46322 10 6452 1 2025-12-03 23:58:34.438 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47950 10 6452 1 Summary: total flows: 140, total bytes: 421021, total packets: 1024, avg bps: 911, avg pps: 0, avg bpp: 411 Time window: 2025-12-03 22:57:10 - 2025-12-03 23:58:44 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0061s User: 0.0000s Wall: 0.0020s flows/second: 68969.1 Runtime: 0.0020s