Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 00:58:48.351 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60932 10 6452 1 2025-11-13 00:54:59.789 00:05:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 00:59:48.712 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:38220 10 6452 1 2025-11-13 01:00:49.106 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:35366 10 6452 1 2025-11-13 01:01:41.229 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:01:41.056 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:01:41.104 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:01:41.122 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:01:41.147 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:01:49.493 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55524 10 6452 1 2025-11-13 00:58:59.786 00:05:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:02:49.898 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43118 10 6452 1 2025-11-13 01:03:50.269 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39036 10 6452 1 2025-11-13 01:00:59.791 00:05:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:04:50.667 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38362 10 6452 1 2025-11-13 01:05:51.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36840 10 6452 1 2025-11-13 01:06:41.087 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:06:41.169 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:06:41.169 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:06:40.966 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:06:41.004 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:06:51.513 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51264 10 6452 1 2025-11-13 01:07:51.917 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55674 10 6452 1 2025-11-13 01:04:59.788 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:08:52.317 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52334 10 6452 1 2025-11-13 01:09:52.677 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42856 10 6452 1 2025-11-13 01:06:59.791 00:05:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:10:53.107 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:42342 10 6452 1 2025-11-13 01:11:41.622 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:11:41.623 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:11:41.330 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:11:41.565 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:11:41.648 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:11:53.489 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52854 10 6452 1 2025-11-13 01:12:53.892 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:47684 12 6556 1 2025-11-13 01:13:54.315 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 13 13949 1 2025-11-13 01:10:59.791 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:14:54.791 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58062 10 6452 1 2025-11-13 01:15:55.196 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41336 10 6452 1 2025-11-13 01:16:41.261 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:16:41.203 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:16:41.141 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:16:41.309 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:16:41.391 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:12:59.793 00:05:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:16:55.560 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53660 10 6452 1 2025-11-13 01:17:55.965 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60228 10 6452 1 2025-11-13 01:18:56.372 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40608 10 6452 1 2025-11-13 01:19:56.776 00:00:10.946 TCP 1.101.0.1:3000 -> 23.104.0.1:37848 10 6452 1 2025-11-13 01:16:59.793 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:20:57.758 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54638 10 6452 1 2025-11-13 01:21:41.489 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:21:41.483 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:21:41.225 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:21:41.384 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:21:41.407 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:21:58.167 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 10 6452 1 2025-11-13 01:18:59.795 00:05:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:22:58.569 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38472 10 6452 1 2025-11-13 01:23:58.973 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44044 10 6452 1 2025-11-13 01:24:59.384 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57860 10 6452 1 2025-11-13 01:25:59.807 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:60720 10 6452 1 2025-11-13 01:26:41.439 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:26:41.580 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:26:41.351 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:26:41.269 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:26:41.357 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:22:59.793 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:27:00.208 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35710 10 6452 1 2025-11-13 01:28:00.614 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36736 10 6452 1 2025-11-13 01:24:59.798 00:05:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:29:01.021 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 10 6452 1 2025-11-13 01:30:01.423 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49032 10 6452 1 2025-11-13 01:31:01.830 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36054 10 6452 1 2025-11-13 01:31:41.636 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:31:41.541 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:31:41.624 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:31:41.263 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:31:41.555 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:32:02.247 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49486 10 6452 1 2025-11-13 01:28:59.795 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:33:02.615 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36566 10 6452 1 2025-11-13 01:34:03.019 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39206 10 6452 1 2025-11-13 01:30:59.798 00:05:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:35:03.422 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59952 10 6452 1 2025-11-13 01:36:03.783 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52146 10 6452 1 2025-11-13 01:36:41.699 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:36:41.696 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:36:41.522 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:36:41.689 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:36:41.773 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:37:04.187 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35482 10 6452 1 2025-11-13 01:38:04.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52370 10 6452 1 2025-11-13 01:34:59.796 00:05:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:39:04.995 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 10 6452 1 2025-11-13 01:40:05.368 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52736 10 6452 1 2025-11-13 01:36:59.801 00:05:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:41:05.766 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:34216 10 6452 1 2025-11-13 01:41:42.086 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:41:41.814 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:41:41.823 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:41:41.795 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:41:42.004 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:42:06.196 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40362 10 6452 1 2025-11-13 01:43:06.599 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58052 10 6452 1 2025-11-13 01:44:07.020 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45970 10 6452 1 2025-11-13 01:40:59.798 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:45:07.386 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48842 10 6452 1 2025-11-13 01:46:07.792 00:00:10.891 TCP 1.101.0.1:3000 -> 23.104.0.1:52336 10 6452 1 2025-11-13 01:46:41.963 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:46:42.046 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:46:41.955 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:46:41.910 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:46:41.880 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:42:59.801 00:05:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:47:08.719 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55250 10 6452 1 2025-11-13 01:48:09.117 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:39258 10 6452 1 2025-11-13 01:49:09.610 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47574 10 6452 1 2025-11-13 01:50:10.017 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34886 10 6452 1 2025-11-13 01:46:59.800 00:05:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:51:10.420 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45804 10 6452 1 2025-11-13 01:51:42.109 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:51:42.152 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:51:41.942 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:51:42.118 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:51:42.200 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:52:10.824 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55704 10 6452 1 2025-11-13 01:48:59.805 00:05:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:53:11.226 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33092 10 6452 1 2025-11-13 01:54:11.587 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59968 10 6452 1 2025-11-13 01:55:11.988 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39314 10 6452 1 2025-11-13 01:56:12.430 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33152 10 6452 1 2025-11-13 01:56:42.427 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:56:42.522 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:56:42.209 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:56:42.436 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:56:42.520 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:52:59.803 00:05:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:57:12.794 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 10 6452 1 2025-11-13 01:58:13.212 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53092 10 6452 1 Summary: total flows: 140, total bytes: 424601, total packets: 1025, avg bps: 893, avg pps: 0, avg bpp: 414 Time window: 2025-11-13 00:54:59 - 2025-11-13 01:58:23 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0048s User: 0.0000s Wall: 0.0019s flows/second: 72646.6 Runtime: 0.0019s