Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 01:58:42.181 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40724 10 6452 1 2025-11-01 01:54:53.287 00:06:00.298 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 01:59:42.579 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57038 10 6452 1 2025-11-01 02:00:42.988 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49716 10 6452 1 2025-11-01 02:00:55.877 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:00:55.706 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:00:55.706 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:00:55.745 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:00:55.795 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:01:43.404 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41222 10 6452 1 2025-11-01 01:57:53.292 00:06:00.293 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:02:43.764 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39270 10 6452 1 2025-11-01 02:03:44.179 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41170 10 6452 1 2025-11-01 02:04:44.580 00:00:10.518 TCP 1.101.0.1:3000 -> 23.104.0.1:43978 14 14298 1 2025-11-01 02:05:55.873 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:05:55.831 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:05:55.409 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:05:55.829 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:05:45.135 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54584 10 6452 1 2025-11-01 02:05:55.912 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:01:53.293 00:06:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:06:45.538 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34268 10 6452 1 2025-11-01 02:07:45.941 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52960 10 6452 1 2025-11-01 02:08:46.358 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6452 1 2025-11-01 02:04:53.295 00:06:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:09:46.761 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:32960 10 6452 1 2025-11-01 02:10:55.720 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:10:55.727 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:10:55.739 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:10:55.725 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:10:47.171 00:00:10.895 TCP 1.101.0.1:3000 -> 23.104.0.1:40094 10 6452 1 2025-11-01 02:10:55.809 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:11:48.105 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60700 10 6452 1 2025-11-01 02:12:48.511 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-11-01 02:08:53.296 00:06:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:13:48.917 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35666 10 6452 1 2025-11-01 02:14:49.315 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53640 10 6452 1 2025-11-01 02:15:55.750 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:15:55.748 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:15:55.751 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:15:55.792 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:15:55.833 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:15:49.719 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60388 10 6452 1 2025-11-01 02:11:53.298 00:06:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:16:50.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56974 10 6452 1 2025-11-01 02:17:50.534 00:00:10.500 TCP 1.101.0.1:3000 -> 23.104.0.1:42500 10 6452 1 2025-11-01 02:18:51.095 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40396 10 6452 1 2025-11-01 02:19:51.456 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44750 10 6452 1 2025-11-01 02:15:53.295 00:06:00.298 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:20:55.876 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:20:56.045 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:20:56.047 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:20:55.973 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:20:55.958 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:20:51.867 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56850 10 6452 1 2025-11-01 02:21:52.233 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57416 10 6452 1 2025-11-01 02:22:52.640 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43938 10 6452 1 2025-11-01 02:18:53.300 00:06:00.292 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:23:53.064 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40866 10 6452 1 2025-11-01 02:24:53.464 00:00:12.440 TCP 1.101.0.1:3000 -> 23.104.0.1:37130 10 6452 1 2025-11-01 02:25:56.086 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:25:55.997 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:25:56.095 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:25:55.726 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:25:56.003 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:25:55.950 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34232 10 6452 1 2025-11-01 02:26:56.354 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:42186 10 6452 1 2025-11-01 02:22:53.299 00:06:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:27:56.711 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46086 10 6452 1 2025-11-01 02:28:57.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48718 10 6452 1 2025-11-01 02:29:57.517 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60738 10 6452 1 2025-11-01 02:25:53.303 00:06:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:30:56.205 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:30:56.123 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:30:56.287 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:30:56.259 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:30:55.922 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:30:57.922 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38394 10 6452 1 2025-11-01 02:31:58.297 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48550 10 6452 1 2025-11-01 02:32:58.699 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:46296 10 6452 1 2025-11-01 02:33:59.107 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45748 10 6452 1 2025-11-01 02:29:53.303 00:06:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:34:59.511 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39640 10 6452 1 2025-11-01 02:35:56.329 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:35:56.065 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:35:56.226 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:35:56.250 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:35:56.335 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:35:59.907 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46536 10 6452 1 2025-11-01 02:37:00.312 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44120 10 6452 1 2025-11-01 02:32:53.305 00:06:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:38:00.711 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45066 10 6452 1 2025-11-01 02:39:01.116 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54940 10 6452 1 2025-11-01 02:40:01.523 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45126 10 6452 1 2025-11-01 02:40:56.293 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:40:56.425 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:40:56.426 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:40:56.241 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:40:56.210 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:41:01.930 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:45464 10 6452 1 2025-11-01 02:36:53.329 00:06:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:42:02.354 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42000 10 6452 1 2025-11-01 02:43:02.750 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37568 10 6452 1 2025-11-01 02:44:03.184 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:54048 12 10375 1 2025-11-01 02:39:53.333 00:06:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:45:03.663 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:42266 10 6452 1 2025-11-01 02:45:56.510 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:45:56.822 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:45:56.457 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:45:56.654 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:45:56.427 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:46:04.037 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49618 10 6452 1 2025-11-01 02:47:04.400 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54936 10 6452 1 2025-11-01 02:48:04.803 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-11-01 02:43:53.333 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:49:05.215 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36438 10 6452 1 2025-11-01 02:50:05.620 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:39408 10 6452 1 2025-11-01 02:50:56.559 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:50:56.509 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:50:56.584 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:50:56.493 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:50:56.576 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:51:06.069 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46746 10 6452 1 2025-11-01 02:46:53.337 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:52:06.431 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46380 10 6452 1 2025-11-01 02:53:06.834 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:50210 10 6452 1 2025-11-01 02:54:07.221 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59428 10 6452 1 2025-11-01 02:55:07.623 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34672 10 6452 1 2025-11-01 02:50:53.335 00:06:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:55:56.808 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:55:56.805 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:55:56.620 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:55:56.563 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:55:56.725 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:56:07.990 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:59052 10 6452 1 2025-11-01 02:57:08.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45048 10 6452 1 2025-11-01 02:58:08.768 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48548 10 6452 1 Summary: total flows: 137, total bytes: 428646, total packets: 1024, avg bps: 901, avg pps: 0, avg bpp: 418 Time window: 2025-11-01 01:54:53 - 2025-11-01 02:58:19 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0061s User: 0.0009s Wall: 0.0024s flows/second: 56076.9 Runtime: 0.0025s