Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 08:58:53.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42304 10 6452 1 2025-11-05 08:59:53.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41868 10 6452 1 2025-11-05 08:55:55.596 00:06:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 09:00:53.931 00:00:17.439 TCP 1.101.0.1:3000 -> 23.104.0.1:44288 10 6452 1 2025-11-05 09:02:01.408 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38156 10 6452 1 2025-11-05 09:02:59.525 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 08:57:55.601 00:06:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 09:02:59.641 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:02:59.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:02:59.597 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:02:59.680 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 09:03:01.806 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34402 10 6452 1 2025-11-05 09:04:02.215 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42702 10 6452 1 2025-11-05 09:05:02.619 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43580 10 6452 1 2025-11-05 09:06:02.985 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:33088 10 6452 1 2025-11-05 09:07:03.358 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51578 10 6452 1 2025-11-05 09:07:59.567 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:07:59.722 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:07:59.826 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 09:07:59.562 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:07:59.805 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 09:02:55.602 00:06:00.214 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 09:08:03.726 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44344 10 6452 1 2025-11-05 09:09:04.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35808 10 6452 1 2025-11-05 09:04:55.607 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 09:10:04.543 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57940 10 6452 1 2025-11-05 09:11:04.951 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58398 10 6452 1 2025-11-05 09:12:05.367 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55904 10 6452 1 2025-11-05 09:13:00.297 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 09:12:59.964 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 09:12:59.722 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:12:59.780 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:13:00.214 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:13:05.771 00:00:10.669 TCP 1.101.0.1:3000 -> 23.104.0.1:53846 10 6452 1 2025-11-05 09:14:06.485 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53412 10 6452 1 2025-11-05 09:09:55.605 00:06:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 09:15:06.895 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33356 10 6452 1 2025-11-05 09:16:07.308 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56552 10 6452 1 2025-11-05 09:11:55.610 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 09:17:07.712 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42894 10 6452 1 2025-11-05 09:17:59.962 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 09:17:59.907 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:17:59.708 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:18:00.072 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:18:00.155 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 09:18:08.122 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35214 10 6452 1 2025-11-05 09:19:08.524 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44368 10 6452 1 2025-11-05 09:20:08.928 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33924 10 6452 1 2025-11-05 09:21:09.337 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45492 10 6452 1 2025-11-05 09:16:55.606 00:06:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 09:22:09.739 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47682 10 6452 1 2025-11-05 09:22:59.987 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 09:22:59.969 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:22:59.904 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:22:59.969 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 09:22:59.996 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:23:10.136 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33178 10 6452 1 2025-11-05 09:18:55.610 00:06:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 09:24:10.555 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47104 10 6452 1 2025-11-05 09:25:10.967 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49566 10 6452 1 2025-11-05 09:26:11.373 00:00:12.259 TCP 1.101.0.1:3000 -> 23.104.0.1:59510 10 6452 1 2025-11-05 09:27:13.671 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42408 10 6452 1 2025-11-05 09:28:00.397 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 09:27:59.963 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:28:00.193 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 09:28:00.148 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:28:00.314 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:28:14.036 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36924 10 6452 1 2025-11-05 09:23:55.609 00:06:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 09:29:14.436 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46154 10 6452 1 2025-11-05 09:30:14.839 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36778 10 6452 1 2025-11-05 09:25:55.613 00:06:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 09:31:15.264 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37364 10 6452 1 2025-11-05 09:32:15.673 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56514 10 6452 1 2025-11-05 09:32:59.990 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 09:33:00.222 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:33:00.167 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:33:00.227 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:33:00.309 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 09:33:16.037 00:00:20.070 TCP 1.101.0.1:3000 -> 23.104.0.1:51522 10 6452 1 2025-11-05 09:34:26.175 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34718 10 6452 1 2025-11-05 09:35:26.535 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49870 10 6452 1 2025-11-05 09:30:55.611 00:06:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 09:36:26.943 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38376 10 6452 1 2025-11-05 09:37:27.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49190 10 6452 1 2025-11-05 09:32:55.614 00:06:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 09:38:00.342 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 09:38:00.147 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 09:38:00.053 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:38:00.362 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:38:00.259 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:38:27.755 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53644 10 6452 1 2025-11-05 09:39:28.164 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49228 10 6452 1 2025-11-05 09:40:28.526 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51260 10 6452 1 2025-11-05 09:41:28.933 00:00:10.753 TCP 1.101.0.1:3000 -> 23.104.0.1:38044 10 6452 1 2025-11-05 09:42:29.723 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6452 1 2025-11-05 09:37:55.612 00:06:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 09:43:00.408 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 09:43:00.539 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:43:00.076 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:43:00.251 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:43:00.334 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 09:43:30.138 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34468 10 6452 1 2025-11-05 09:44:30.539 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44670 10 6452 1 2025-11-05 09:39:55.616 00:06:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 09:45:30.976 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37216 10 6452 1 2025-11-05 09:46:31.389 00:00:11.422 TCP 1.101.0.1:3000 -> 23.104.0.1:53820 10 6452 1 2025-11-05 09:47:32.847 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:35588 10 6452 1 2025-11-05 09:48:00.644 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 09:48:00.611 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 09:48:00.502 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:48:00.523 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:48:00.561 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:48:33.277 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43492 10 6452 1 2025-11-05 09:49:33.642 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52408 10 6452 1 2025-11-05 09:44:55.616 00:06:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 09:50:34.053 00:00:18.182 TCP 1.101.0.1:3000 -> 23.104.0.1:51202 10 6452 1 2025-11-05 09:51:42.334 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47032 10 6452 1 2025-11-05 09:46:55.619 00:06:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 09:52:42.735 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44012 10 6452 1 2025-11-05 09:53:00.625 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 09:53:00.674 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:53:00.556 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:53:00.679 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:53:00.761 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 09:53:43.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52636 10 6452 1 2025-11-05 09:54:43.546 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37024 10 6452 1 2025-11-05 09:55:43.951 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58932 10 6452 1 2025-11-05 09:56:44.363 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:35566 12 10375 1 2025-11-05 09:51:55.617 00:06:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 09:57:44.845 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-11-05 09:58:00.689 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 09:58:00.552 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 09:58:00.696 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:58:00.794 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 09:58:00.877 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 136, total bytes: 414348, total packets: 1010, avg bps: 889, avg pps: 0, avg bpp: 410 Time window: 2025-11-05 08:55:55 - 2025-11-05 09:58:00 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0019s User: 0.0028s Wall: 0.0019s flows/second: 72150.9 Runtime: 0.0019s