Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 20:59:03.932 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56680 10 6452 1 2025-11-13 20:55:00.226 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 21:00:04.357 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57264 10 6452 1 2025-11-13 21:01:04.755 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60998 10 6452 1 2025-11-13 21:02:04.933 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:02:04.928 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:02:04.950 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:02:05.066 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:02:04.982 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:02:05.166 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58270 10 6452 1 2025-11-13 21:03:05.566 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37422 10 6452 1 2025-11-13 20:59:00.225 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 21:04:05.931 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:38522 10 6452 1 2025-11-13 21:05:06.311 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52110 10 6452 1 2025-11-13 21:06:06.717 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37114 10 6452 1 2025-11-13 21:02:00.228 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 21:07:05.612 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:07:05.524 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:07:05.642 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:07:05.476 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:07:05.529 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:07:07.121 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48674 12 6556 1 2025-11-13 21:08:07.526 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57630 10 6452 1 2025-11-13 21:09:07.930 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:54424 10 6452 1 2025-11-13 21:10:08.314 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50518 10 6452 1 2025-11-13 21:06:00.225 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 21:11:08.741 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35220 10 6452 1 2025-11-13 21:12:04.963 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:12:05.346 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:12:05.146 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:12:05.265 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:12:05.264 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:12:09.150 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37650 10 6452 1 2025-11-13 21:13:09.514 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45786 10 6452 1 2025-11-13 21:09:00.229 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 21:14:09.922 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47128 10 6452 1 2025-11-13 21:15:10.338 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35760 10 6452 1 2025-11-13 21:16:10.748 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46110 10 6452 1 2025-11-13 21:17:05.467 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:17:05.390 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:17:05.238 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:17:05.102 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:17:05.385 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:17:11.153 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45428 10 6452 1 2025-11-13 21:13:00.226 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 21:18:11.515 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54256 10 6452 1 2025-11-13 21:19:11.910 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47524 10 6452 1 2025-11-13 21:20:12.283 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59988 10 6452 1 2025-11-13 21:16:00.230 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 21:21:12.684 00:00:10.483 TCP 1.101.0.1:3000 -> 23.104.0.1:58902 10 6452 1 2025-11-13 21:22:06.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:22:06.104 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:22:06.009 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:22:06.118 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:22:06.201 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:22:13.205 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35458 10 6452 1 2025-11-13 21:23:13.573 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43180 10 6452 1 2025-11-13 21:24:13.936 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33194 10 6452 1 2025-11-13 21:20:00.230 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 21:25:14.347 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:35626 12 10375 1 2025-11-13 21:26:14.824 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56644 10 6452 1 2025-11-13 21:27:05.528 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:27:05.530 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:27:05.144 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:27:05.531 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:27:05.614 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:27:15.225 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56204 10 6452 1 2025-11-13 21:23:00.233 00:06:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 21:28:15.589 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37710 10 6452 1 2025-11-13 21:29:15.950 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:52428 10 6452 1 2025-11-13 21:30:16.382 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58034 10 6452 1 2025-11-13 21:31:16.794 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 10 6452 1 2025-11-13 21:27:00.230 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 21:32:05.553 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:32:05.785 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:32:05.471 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:32:05.565 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:32:05.470 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:32:17.203 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48658 10 6452 1 2025-11-13 21:33:17.566 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59902 10 6452 1 2025-11-13 21:34:17.982 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:45200 10 6452 1 2025-11-13 21:30:00.235 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 21:35:18.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43648 10 6452 1 2025-11-13 21:36:18.760 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:49770 10 6452 1 2025-11-13 21:37:05.661 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:37:05.562 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:37:05.622 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:37:05.440 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:37:05.522 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:37:19.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54068 10 6452 1 2025-11-13 21:38:19.594 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:42998 10 6452 1 2025-11-13 21:34:00.235 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 21:39:19.961 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43000 10 6452 1 2025-11-13 21:40:20.367 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40402 10 6452 1 2025-11-13 21:41:20.776 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43004 10 6452 1 2025-11-13 21:42:05.961 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:37:00.239 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 21:42:05.873 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:42:05.800 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:42:05.666 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:42:05.878 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:42:21.187 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50508 10 6452 1 2025-11-13 21:43:21.552 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46930 10 6452 1 2025-11-13 21:44:21.955 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38836 10 6452 1 2025-11-13 21:45:22.356 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50200 10 6452 1 2025-11-13 21:41:00.237 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 21:46:22.761 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:40596 10 6452 1 2025-11-13 21:47:05.947 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:47:05.889 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:47:05.751 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:47:05.891 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:47:05.976 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:47:23.142 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46246 10 6452 1 2025-11-13 21:48:23.560 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45082 10 6452 1 2025-11-13 21:44:00.242 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 21:49:23.960 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49408 10 6452 1 2025-11-13 21:50:24.372 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42002 10 6452 1 2025-11-13 21:51:24.787 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48590 10 6452 1 2025-11-13 21:52:06.090 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:52:05.915 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:52:05.998 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:52:05.766 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:52:06.009 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:52:25.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38424 10 6452 1 2025-11-13 21:48:00.239 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 21:53:25.595 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49762 10 6452 1 2025-11-13 21:54:25.957 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32886 10 6452 1 2025-11-13 21:55:26.361 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:34260 11 6504 1 2025-11-13 21:51:00.242 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 21:56:26.817 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35942 10 6452 1 2025-11-13 21:57:06.086 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:57:06.128 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:57:06.304 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:57:06.235 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:57:06.003 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:57:27.217 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43036 10 6452 1 2025-11-13 21:58:27.576 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43664 10 6452 1 Summary: total flows: 137, total bytes: 420956, total packets: 1023, avg bps: 882, avg pps: 0, avg bpp: 411 Time window: 2025-11-13 20:55:00 - 2025-11-13 21:58:37 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0033s User: 0.0022s Wall: 0.0023s flows/second: 58929.3 Runtime: 0.0023s