Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 00:58:49.267 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38934 10 6452 1 2025-11-16 00:54:01.413 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 00:59:49.671 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43918 10 6452 1 2025-11-16 01:00:50.105 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33646 10 6452 1 2025-11-16 00:56:01.411 00:06:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 01:01:50.509 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50942 10 6452 1 2025-11-16 01:02:50.912 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49590 10 6452 1 2025-11-16 01:03:07.642 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:03:07.831 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:03:07.489 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:03:07.638 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:03:07.727 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:03:51.315 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42924 10 6452 1 2025-11-16 01:04:51.727 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50498 10 6452 1 2025-11-16 01:01:01.417 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 01:05:52.141 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52074 10 6452 1 2025-11-16 01:06:52.545 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45386 10 6452 1 2025-11-16 01:07:52.953 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48910 10 6452 1 2025-11-16 01:08:07.726 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:08:07.881 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:08:07.913 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:08:07.482 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:03:01.416 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 01:08:07.965 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:08:53.360 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:42190 10 6452 1 2025-11-16 01:09:53.756 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33710 10 6452 1 2025-11-16 01:10:54.161 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33742 10 6452 1 2025-11-16 01:11:54.573 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48096 10 6452 1 2025-11-16 01:08:01.419 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 01:13:07.727 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:12:54.979 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55070 10 6452 1 2025-11-16 01:13:07.927 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:13:07.623 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:13:07.767 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:13:07.809 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:13:55.397 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59728 10 6452 1 2025-11-16 01:10:01.416 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 01:14:55.827 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54612 10 6452 1 2025-11-16 01:15:56.191 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49072 10 6452 1 2025-11-16 01:16:56.589 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34730 10 6452 1 2025-11-16 01:18:07.971 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:18:07.891 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:18:07.971 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:18:07.915 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:17:56.956 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52058 10 6452 1 2025-11-16 01:18:07.887 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:18:57.374 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45234 10 6452 1 2025-11-16 01:15:01.420 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 01:19:57.782 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49164 10 6452 1 2025-11-16 01:20:58.198 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54286 10 6452 1 2025-11-16 01:17:01.418 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 01:21:58.605 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:38802 12 10375 1 2025-11-16 01:23:07.902 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:22:59.107 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33234 10 6452 1 2025-11-16 01:23:08.052 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:23:07.927 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:23:07.902 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:23:07.986 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:23:59.510 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33028 10 6452 1 2025-11-16 01:24:59.920 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34120 10 6452 1 2025-11-16 01:26:00.317 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56502 10 6452 1 2025-11-16 01:22:01.423 00:06:00.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 01:27:00.725 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:43986 12 10375 1 2025-11-16 01:28:08.199 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:28:08.239 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:28:07.734 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:28:08.152 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:28:08.235 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:28:01.208 00:00:10.729 TCP 1.101.0.1:3000 -> 23.104.0.1:40814 10 6452 1 2025-11-16 01:24:01.421 00:06:00.052 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 01:29:01.969 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50500 10 6452 1 2025-11-16 01:30:02.379 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44734 10 6452 1 2025-11-16 01:31:02.778 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42900 10 6452 1 2025-11-16 01:32:03.188 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54332 10 6452 1 2025-11-16 01:33:07.975 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:33:07.870 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:33:08.152 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:33:08.238 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:33:08.236 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:33:03.554 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50188 10 6452 1 2025-11-16 01:29:01.423 00:06:00.049 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 01:34:03.965 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57884 10 6452 1 2025-11-16 01:35:04.365 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-11-16 01:31:01.421 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 01:36:04.768 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:46012 12 6556 1 2025-11-16 01:37:05.192 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44766 10 6452 1 2025-11-16 01:38:08.689 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:38:08.689 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:38:08.506 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:38:08.656 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:38:08.739 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:38:05.598 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46712 10 6452 1 2025-11-16 01:39:06.025 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46168 10 6452 1 2025-11-16 01:40:06.426 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40602 10 6452 1 2025-11-16 01:36:01.424 00:06:00.050 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 01:41:06.831 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37328 10 6452 1 2025-11-16 01:42:07.246 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:54190 12 10375 1 2025-11-16 01:38:01.424 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 01:43:08.565 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:43:08.318 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:43:08.319 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:43:08.246 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:43:08.481 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:43:07.726 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60196 10 6452 1 2025-11-16 01:44:08.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36246 10 6452 1 2025-11-16 01:45:08.520 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57960 10 6452 1 2025-11-16 01:46:08.879 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47310 10 6452 1 2025-11-16 01:47:09.291 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56830 10 6452 1 2025-11-16 01:43:01.427 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 01:48:08.565 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:48:08.481 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:48:08.337 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:48:08.483 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:48:08.566 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:48:09.656 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35384 10 6452 1 2025-11-16 01:49:10.065 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56190 10 6452 1 2025-11-16 01:45:01.426 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 01:50:10.469 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47594 10 6452 1 2025-11-16 01:51:10.867 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60976 10 6452 1 2025-11-16 01:52:11.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39844 10 6452 1 2025-11-16 01:53:08.548 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:53:08.550 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:53:08.568 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:53:08.621 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:53:08.704 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:53:11.682 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56728 10 6452 1 2025-11-16 01:54:12.054 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60960 10 6452 1 2025-11-16 01:50:01.430 00:06:00.049 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 01:55:12.415 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39266 10 6452 1 2025-11-16 01:56:12.779 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42070 10 6452 1 2025-11-16 01:52:01.428 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 01:57:13.148 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55458 10 6452 1 2025-11-16 01:58:08.912 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 01:58:09.339 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 01:58:08.895 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:58:09.110 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 01:58:09.193 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 01:58:13.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45480 10 6452 1 Summary: total flows: 138, total bytes: 429611, total packets: 1040, avg bps: 889, avg pps: 0, avg bpp: 413 Time window: 2025-11-16 00:54:01 - 2025-11-16 01:58:23 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0051s User: 0.0000s Wall: 0.0020s flows/second: 70270.0 Runtime: 0.0020s