Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-06 12:53:56.195 00:06:00.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 12:59:15.101 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35436 10 6452 1 2025-11-06 13:00:15.510 00:00:10.778 TCP 1.101.0.1:3000 -> 23.104.0.1:36892 10 6452 1 2025-11-06 13:01:16.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33804 10 6452 1 2025-11-06 13:02:16.721 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:50974 12 10375 1 2025-11-06 13:03:33.332 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 13:03:17.211 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49508 10 6452 1 2025-11-06 13:03:33.257 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:03:33.260 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:03:33.322 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:03:33.248 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 12:58:56.200 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 13:04:17.618 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58118 10 6452 1 2025-11-06 13:05:17.979 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48002 10 6452 1 2025-11-06 13:00:56.199 00:06:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 13:06:18.349 00:00:11.461 TCP 1.101.0.1:3000 -> 23.104.0.1:54534 10 6452 1 2025-11-06 13:07:19.850 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37458 10 6452 1 2025-11-06 13:08:33.551 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:08:33.462 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:08:33.314 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:08:20.273 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57858 10 6452 1 2025-11-06 13:08:33.456 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:08:33.539 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 13:09:20.673 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54066 10 6452 1 2025-11-06 13:10:21.105 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42104 10 6452 1 2025-11-06 13:05:56.202 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 13:11:21.507 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:44142 10 6452 1 2025-11-06 13:12:21.872 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40202 10 6452 1 2025-11-06 13:07:56.201 00:06:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 13:13:33.667 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 13:13:33.620 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:13:33.569 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:13:33.638 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:13:33.584 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:13:22.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43156 10 6452 1 2025-11-06 13:14:22.679 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:49456 10 6452 1 2025-11-06 13:15:23.055 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38438 10 6452 1 2025-11-06 13:16:23.456 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41522 10 6452 1 2025-11-06 13:17:23.862 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60406 10 6452 1 2025-11-06 13:12:56.203 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 13:18:33.638 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 13:18:33.618 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:18:33.684 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:18:33.371 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:18:33.556 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:18:24.277 00:00:10.801 TCP 1.101.0.1:3000 -> 23.104.0.1:37934 10 6452 1 2025-11-06 13:19:25.124 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37520 10 6452 1 2025-11-06 13:14:56.201 00:06:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 13:20:25.527 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53444 10 6452 1 2025-11-06 13:21:25.929 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37396 10 6452 1 2025-11-06 13:22:26.345 00:00:10.930 TCP 1.101.0.1:3000 -> 23.104.0.1:36868 10 6452 1 2025-11-06 13:23:33.664 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:23:33.816 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:23:33.861 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:23:33.902 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:23:33.985 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 13:23:27.312 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54358 10 6452 1 2025-11-06 13:24:27.714 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46476 10 6452 1 2025-11-06 13:19:56.204 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 13:25:28.122 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-11-06 13:26:28.528 00:00:10.521 TCP 1.101.0.1:3000 -> 23.104.0.1:56944 10 6452 1 2025-11-06 13:21:56.201 00:06:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 13:27:29.108 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:60042 10 6452 1 2025-11-06 13:28:34.172 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 13:28:33.774 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:28:33.771 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:28:33.633 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:28:34.089 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:28:29.464 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42416 10 6452 1 2025-11-06 13:29:29.866 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42944 10 6452 1 2025-11-06 13:30:30.280 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34260 10 6452 1 2025-11-06 13:31:30.687 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52634 10 6452 1 2025-11-06 13:26:56.207 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 13:32:31.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45936 10 6452 1 2025-11-06 13:33:33.840 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:33:33.911 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:33:33.671 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:33:34.001 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:33:34.084 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 13:33:31.518 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49652 10 6452 1 2025-11-06 13:28:56.204 00:06:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 13:34:31.926 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55292 10 6452 1 2025-11-06 13:35:32.339 00:00:10.681 TCP 1.101.0.1:3000 -> 23.104.0.1:58976 10 6452 1 2025-11-06 13:36:33.066 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:59700 10 6452 1 2025-11-06 13:37:33.427 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:60640 12 10375 1 2025-11-06 13:38:34.219 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 13:38:34.135 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:38:33.923 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:38:33.756 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:38:34.136 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:38:33.911 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59442 10 6452 1 2025-11-06 13:33:56.206 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 13:39:34.311 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45858 10 6452 1 2025-11-06 13:40:34.711 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54984 10 6452 1 2025-11-06 13:35:56.205 00:06:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 13:41:35.122 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42302 10 6452 1 2025-11-06 13:42:35.528 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53730 10 6452 1 2025-11-06 13:43:34.836 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:43:34.839 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:43:34.851 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:43:34.828 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:43:34.910 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 13:43:35.929 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45844 10 6452 1 2025-11-06 13:44:36.297 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37532 10 6452 1 2025-11-06 13:45:36.702 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42372 10 6452 1 2025-11-06 13:40:56.211 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 13:46:37.115 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52002 10 6452 1 2025-11-06 13:47:37.482 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42296 10 6452 1 2025-11-06 13:42:56.209 00:06:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 13:48:34.042 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 13:48:34.307 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:48:34.227 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:48:34.227 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:48:33.961 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:48:37.892 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34174 10 6452 1 2025-11-06 13:49:38.260 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51344 10 6452 1 2025-11-06 13:50:38.670 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59566 10 6452 1 2025-11-06 13:51:39.108 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56238 10 6452 1 2025-11-06 13:52:39.507 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58092 10 6452 1 2025-11-06 13:47:56.211 00:06:00.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 13:53:34.534 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 13:53:34.380 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:53:34.234 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:53:34.451 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:53:34.451 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:53:39.922 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43288 10 6452 1 2025-11-06 13:54:40.320 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41730 10 6452 1 2025-11-06 13:49:56.209 00:06:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 13:55:40.689 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46034 10 6452 1 2025-11-06 13:56:41.105 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60526 12 6556 1 2025-11-06 13:57:41.507 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33968 10 6452 1 2025-11-06 13:58:34.151 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 13:58:34.380 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 13:58:34.444 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:58:34.370 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 13:58:34.454 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 136, total bytes: 418375, total packets: 1014, avg bps: 863, avg pps: 0, avg bpp: 412 Time window: 2025-11-06 12:53:56 - 2025-11-06 13:58:34 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0037s User: 0.0019s Wall: 0.0018s flows/second: 73717.4 Runtime: 0.0019s