Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 04:59:35.198 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38970 10 6452 1 2025-11-17 05:00:35.629 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:41390 10 6452 1 2025-11-17 05:01:36.015 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33618 10 6452 1 2025-11-17 05:02:36.379 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36374 10 6452 1 2025-11-17 04:59:01.935 00:05:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 04:59:01.938 00:05:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 05:03:41.629 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 05:03:41.507 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:03:41.626 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:03:40.992 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:03:41.546 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:03:36.787 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54436 10 6452 1 2025-11-17 05:04:37.189 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34704 10 6452 1 2025-11-17 05:05:37.552 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55762 10 6452 1 2025-11-17 05:06:37.958 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38582 10 6452 1 2025-11-17 05:07:38.367 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50390 10 6452 1 2025-11-17 05:08:41.178 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:08:41.402 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:08:41.310 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:08:41.285 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:08:41.368 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 05:08:38.774 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49892 10 6452 1 2025-11-17 05:05:01.939 00:05:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 05:05:01.936 00:05:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 05:09:39.184 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:39138 10 6452 1 2025-11-17 05:10:39.576 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59426 10 6452 1 2025-11-17 05:11:39.940 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56316 10 6452 1 2025-11-17 05:12:40.358 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34160 10 6452 1 2025-11-17 05:13:41.498 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:13:41.498 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:13:41.393 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:13:41.621 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:13:41.705 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 05:13:40.764 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56580 10 6452 1 2025-11-17 05:14:41.173 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43718 10 6452 1 2025-11-17 05:11:01.937 00:05:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 05:11:01.940 00:05:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 05:15:41.574 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59298 10 6452 1 2025-11-17 05:16:41.976 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56640 10 6452 1 2025-11-17 05:17:42.388 00:00:10.462 TCP 1.101.0.1:3000 -> 23.104.0.1:40206 10 6452 1 2025-11-17 05:18:42.204 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:18:41.373 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:18:41.605 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:18:42.132 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:18:41.687 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 05:18:42.902 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59354 10 6452 1 2025-11-17 05:19:43.323 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33346 10 6452 1 2025-11-17 05:20:43.747 00:00:10.618 TCP 1.101.0.1:3000 -> 23.104.0.1:38968 10 6452 1 2025-11-17 05:17:01.939 00:05:00.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 05:17:01.940 00:05:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 05:21:44.404 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37200 10 6452 1 2025-11-17 05:22:44.820 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39346 10 6452 1 2025-11-17 05:23:41.616 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:23:41.841 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:23:41.436 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:23:41.778 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:23:41.860 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 05:23:45.192 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34580 10 6452 1 2025-11-17 05:24:45.592 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34874 10 6452 1 2025-11-17 05:25:46.001 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48752 10 6452 1 2025-11-17 05:26:46.400 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59360 10 6452 1 2025-11-17 05:23:01.945 00:05:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 05:23:01.944 00:05:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 05:27:46.769 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38386 10 6452 1 2025-11-17 05:28:41.721 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:28:41.710 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:28:41.553 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:28:41.718 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:28:41.801 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 05:28:47.141 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60032 10 6452 1 2025-11-17 05:29:47.547 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54584 10 6452 1 2025-11-17 05:30:47.965 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58992 10 6452 1 2025-11-17 05:31:48.379 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48582 10 6452 1 2025-11-17 05:32:48.785 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53812 10 6452 1 2025-11-17 05:29:01.945 00:05:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 05:29:01.946 00:05:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 05:33:42.178 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 05:33:41.914 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:33:41.917 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:33:41.937 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:33:42.096 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:33:49.196 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56996 10 6452 1 2025-11-17 05:34:49.557 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54670 10 6452 1 2025-11-17 05:35:49.963 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46038 10 6452 1 2025-11-17 05:36:50.328 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37456 10 6452 1 2025-11-17 05:37:50.694 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59488 10 6452 1 2025-11-17 05:38:41.686 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:38:41.886 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:38:41.865 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:38:41.967 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:38:42.051 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 05:35:01.949 00:05:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 05:38:51.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56334 10 6452 1 2025-11-17 05:35:01.947 00:05:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 05:39:51.526 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42154 10 6452 1 2025-11-17 05:40:51.931 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60514 10 6452 1 2025-11-17 05:41:52.343 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40130 10 6452 1 2025-11-17 05:42:52.756 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:40632 10 6452 1 2025-11-17 05:43:42.052 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 05:43:42.150 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:43:42.148 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:43:42.111 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:43:41.969 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:43:53.196 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46630 10 6452 1 2025-11-17 05:41:01.946 00:05:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 05:44:53.595 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43520 10 6452 1 2025-11-17 05:41:01.950 00:05:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 05:45:53.959 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60956 10 6452 1 2025-11-17 05:46:54.366 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:37002 12 10375 1 2025-11-17 05:47:54.861 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47530 10 6452 1 2025-11-17 05:48:42.250 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:48:42.251 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:48:41.972 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:48:42.050 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:48:42.133 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 05:48:55.278 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49214 10 6452 1 2025-11-17 05:49:55.679 00:00:11.272 TCP 1.101.0.1:3000 -> 23.104.0.1:48098 10 6452 1 2025-11-17 05:47:01.950 00:05:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 05:47:01.947 00:05:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 05:50:56.992 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46154 10 6452 1 2025-11-17 05:51:57.401 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59888 10 6452 1 2025-11-17 05:52:57.801 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34452 10 6452 1 2025-11-17 05:53:42.211 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 05:53:42.271 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:53:42.343 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:53:42.167 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:53:42.128 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:53:58.178 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38048 10 6452 1 2025-11-17 05:54:58.580 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36286 10 6452 1 2025-11-17 05:55:58.985 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45310 10 6452 1 2025-11-17 05:53:01.952 00:05:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 05:53:01.950 00:05:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 05:56:59.348 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42508 10 6452 1 2025-11-17 05:57:59.752 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50902 10 6452 1 2025-11-17 05:58:42.315 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 05:58:42.412 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 05:58:42.493 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:58:42.487 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 05:58:42.570 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 139, total bytes: 414471, total packets: 1012, avg bps: 926, avg pps: 0, avg bpp: 409 Time window: 2025-11-17 04:59:01 - 2025-11-17 05:58:42 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0029s User: 0.0019s Wall: 0.0018s flows/second: 78530.2 Runtime: 0.0018s