Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 20:59:36.001 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:57124 12 10375 1 2025-11-01 21:00:36.481 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43436 10 6452 1 2025-11-01 20:55:53.713 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 21:01:18.533 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:01:18.562 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:01:18.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:01:18.644 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:01:18.451 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:01:36.845 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43162 10 6452 1 2025-11-01 21:02:37.264 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43666 10 6452 1 2025-11-01 21:03:37.665 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39440 10 6452 1 2025-11-01 20:58:53.714 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 21:04:38.024 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38236 10 6452 1 2025-11-01 21:05:38.432 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33910 10 6452 1 2025-11-01 21:06:18.715 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:06:18.589 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:06:18.382 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:06:18.682 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:06:18.767 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:06:38.836 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:58164 10 6452 1 2025-11-01 21:02:53.712 00:05:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 21:07:39.215 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51068 10 6452 1 2025-11-01 21:08:39.578 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60022 10 6452 1 2025-11-01 21:09:39.978 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:41566 12 10369 1 2025-11-01 21:05:53.717 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 21:10:40.468 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45604 10 6452 1 2025-11-01 21:11:18.704 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:11:18.689 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:11:18.667 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:11:18.766 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:11:18.850 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:11:40.834 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:43032 12 6556 1 2025-11-01 21:08:53.714 00:05:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 21:12:41.257 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59818 10 6452 1 2025-11-01 21:13:41.659 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51728 10 6452 1 2025-11-01 21:14:42.066 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55050 10 6452 1 2025-11-01 21:15:42.469 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45742 10 6452 1 2025-11-01 21:11:53.716 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 21:16:18.832 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:16:18.623 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:16:18.709 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:16:18.710 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:16:18.792 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:16:42.833 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59500 10 6452 1 2025-11-01 21:17:43.251 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41892 10 6452 1 2025-11-01 21:18:43.667 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37560 10 6452 1 2025-11-01 21:14:53.715 00:05:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 21:19:44.097 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60338 10 6452 1 2025-11-01 21:20:44.510 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56626 10 6452 1 2025-11-01 21:21:18.836 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:21:18.820 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:21:18.832 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:21:18.995 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:21:18.914 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:17:53.718 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 21:21:44.938 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42818 10 6452 1 2025-11-01 21:22:45.361 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53494 10 6452 1 2025-11-01 21:23:45.721 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55230 10 6452 1 2025-11-01 21:20:53.717 00:05:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 21:24:46.168 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35640 10 6452 1 2025-11-01 21:25:46.573 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34926 10 6452 1 2025-11-01 21:26:19.046 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:26:18.905 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:26:18.682 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:26:18.964 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:26:18.962 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:26:46.971 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53520 10 6452 1 2025-11-01 21:23:53.718 00:05:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 21:27:47.372 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39948 10 6452 1 2025-11-01 21:28:47.732 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2025-11-01 21:29:48.107 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:49212 10 6452 1 2025-11-01 21:26:53.716 00:05:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 21:30:48.478 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59380 10 6452 1 2025-11-01 21:31:18.926 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:31:19.007 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:31:19.090 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:31:19.124 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:31:19.207 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:31:48.882 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:36238 11 6504 1 2025-11-01 21:32:49.320 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50762 10 6452 1 2025-11-01 21:29:53.721 00:05:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 21:33:49.725 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-11-01 21:34:50.139 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49288 10 6452 1 2025-11-01 21:35:50.539 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-11-01 21:36:19.245 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:36:19.247 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:36:18.846 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:36:19.335 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:36:19.418 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:32:53.720 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 21:36:50.944 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 10 6452 1 2025-11-01 21:37:51.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45258 10 6452 1 2025-11-01 21:38:51.766 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:47796 10 6452 1 2025-11-01 21:35:53.724 00:05:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 21:39:52.245 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43514 10 6452 1 2025-11-01 21:40:52.651 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40324 10 6452 1 2025-11-01 21:41:19.122 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:41:19.216 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:41:19.206 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:41:18.996 00:00:00.039 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:41:19.080 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:41:53.016 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:48208 10 6452 1 2025-11-01 21:38:53.722 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 21:42:53.452 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36450 10 6452 1 2025-11-01 21:43:53.863 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:35546 10 6452 1 2025-11-01 21:44:54.240 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42798 10 6452 1 2025-11-01 21:41:53.725 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 21:45:54.602 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49622 10 6452 1 2025-11-01 21:46:19.256 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:46:19.491 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:46:19.400 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:46:19.349 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:46:19.431 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:46:55.010 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48974 10 6452 1 2025-11-01 21:47:55.412 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55638 10 6452 1 2025-11-01 21:44:53.723 00:05:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 21:48:55.776 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:50610 11 6504 1 2025-11-01 21:49:56.235 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59748 10 6452 1 2025-11-01 21:50:56.639 00:00:10.430 TCP 1.101.0.1:3000 -> 23.104.0.1:46896 11 6504 1 2025-11-01 21:51:19.533 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:51:19.534 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:51:19.591 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:51:19.535 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:51:19.618 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:47:53.726 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 21:51:57.109 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33420 10 6452 1 2025-11-01 21:52:57.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47194 10 6452 1 2025-11-01 21:53:57.919 00:00:11.444 TCP 1.101.0.1:3000 -> 23.104.0.1:47788 10 6452 1 2025-11-01 21:50:53.723 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 21:54:59.395 00:00:10.686 TCP 1.101.0.1:3000 -> 23.104.0.1:53700 10 6452 1 2025-11-01 21:56:00.123 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49210 10 6452 1 2025-11-01 21:56:19.711 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 21:56:19.630 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 21:56:19.344 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:56:19.629 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 21:56:19.674 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 21:57:00.529 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54236 10 6452 1 2025-11-01 21:53:53.725 00:05:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 21:58:00.929 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:50492 10 6452 1 Summary: total flows: 139, total bytes: 418894, total packets: 1023, avg bps: 886, avg pps: 0, avg bpp: 409 Time window: 2025-11-01 20:55:53 - 2025-11-01 21:58:54 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0031s User: 0.0031s Wall: 0.0020s flows/second: 70590.7 Runtime: 0.0020s