Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 19:58:40.388 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38592 10 6870 1 2025-11-18 19:59:28.150 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 19:59:28.149 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 19:59:28.148 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 19:59:28.088 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 19:59:28.234 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 19:59:40.793 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58458 10 6870 1 2025-11-18 20:00:41.197 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34888 10 6870 1 2025-11-18 20:01:41.601 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44396 10 6870 1 2025-11-18 20:02:42.009 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49944 10 6870 1 2025-11-18 19:58:02.706 00:06:00.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 20:03:42.408 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:42836 10 6870 1 2025-11-18 20:04:28.241 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 20:04:28.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 20:04:28.123 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:04:28.232 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:04:28.314 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 20:04:42.767 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46994 10 6870 1 2025-11-18 20:00:02.704 00:06:00.162 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 20:05:43.180 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37724 10 6870 1 2025-11-18 20:06:43.543 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33252 10 6870 1 2025-11-18 20:07:43.906 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44376 10 6870 1 2025-11-18 20:08:44.319 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51166 10 6870 1 2025-11-18 20:09:28.726 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 20:09:28.668 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 20:09:27.993 00:00:00.048 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:09:28.486 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:09:28.568 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 20:09:44.719 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47892 10 6870 1 2025-11-18 20:05:02.707 00:06:00.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 20:10:45.108 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37212 10 6870 1 2025-11-18 20:11:45.506 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40552 10 6870 1 2025-11-18 20:07:02.704 00:06:00.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 20:12:45.913 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48986 10 6870 1 2025-11-18 20:13:46.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36596 10 6870 1 2025-11-18 20:14:28.407 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 20:14:28.395 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 20:14:28.330 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 20:14:28.035 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:14:28.325 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:14:46.721 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60656 10 6870 1 2025-11-18 20:15:47.139 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35204 10 6870 1 2025-11-18 20:16:47.548 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59752 10 6870 1 2025-11-18 20:12:02.709 00:06:00.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 20:17:47.943 00:00:10.496 TCP 1.101.0.1:3000 -> 23.104.0.1:54726 13 10845 1 2025-11-18 20:18:48.479 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55510 10 6870 1 2025-11-18 20:14:02.709 00:06:00.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 20:19:28.583 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 20:19:28.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 20:19:28.406 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 20:19:28.524 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:19:28.500 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:19:48.898 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:59318 12 6974 1 2025-11-18 20:20:49.365 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50786 10 6870 1 2025-11-18 20:21:49.763 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42118 10 6870 1 2025-11-18 20:22:50.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55388 10 6870 1 2025-11-18 20:19:02.714 00:06:00.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 20:23:50.594 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57090 10 6870 1 2025-11-18 20:24:28.534 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 20:24:28.533 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 20:24:28.532 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:24:28.601 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:24:28.685 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 20:24:51.007 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53550 10 6870 1 2025-11-18 20:21:02.711 00:06:00.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 20:25:51.383 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44770 10 6870 1 2025-11-18 20:26:51.789 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49446 10 6870 1 2025-11-18 20:27:52.192 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41294 10 6870 1 2025-11-18 20:28:52.638 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54714 10 6870 1 2025-11-18 20:29:29.125 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 20:29:29.346 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 20:29:29.268 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 20:29:29.143 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:29:29.042 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:29:53.042 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56244 10 6870 1 2025-11-18 20:26:02.715 00:06:00.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 20:30:53.442 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50718 10 6870 1 2025-11-18 20:31:53.841 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:56318 12 6974 1 2025-11-18 20:28:02.712 00:06:00.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 20:32:54.318 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:39258 12 10584 1 2025-11-18 20:33:54.802 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44612 10 6661 1 2025-11-18 20:34:28.882 00:00:00.019 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 20:34:28.830 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 20:34:28.721 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:34:28.830 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:34:28.913 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 20:34:55.208 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50638 10 6661 1 2025-11-18 20:35:55.610 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33434 10 6661 1 2025-11-18 20:36:56.022 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43148 10 6661 1 2025-11-18 20:33:02.715 00:06:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 20:37:56.426 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40274 10 6661 1 2025-11-18 20:38:56.840 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:52050 10 6661 1 2025-11-18 20:39:28.698 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 20:39:28.803 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 20:39:28.814 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:39:28.881 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:39:28.965 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 20:35:02.714 00:06:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 20:39:57.269 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49284 10 6661 1 2025-11-18 20:40:57.670 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55826 10 6661 1 2025-11-18 20:41:58.033 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37548 10 6661 1 2025-11-18 20:42:58.445 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40372 10 6661 1 2025-11-18 20:43:58.818 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45068 10 6661 1 2025-11-18 20:44:29.013 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 20:44:29.061 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 20:44:29.066 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 20:44:28.679 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:44:28.928 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:40:02.717 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 20:44:59.219 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43398 10 6661 1 2025-11-18 20:45:59.584 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33072 10 6661 1 2025-11-18 20:42:02.715 00:06:00.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 20:46:59.947 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55464 10 6661 1 2025-11-18 20:48:00.359 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57256 10 6661 1 2025-11-18 20:49:00.721 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51036 10 6661 1 2025-11-18 20:49:28.904 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 20:49:28.996 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 20:49:29.050 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:49:29.098 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:49:29.181 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 20:50:01.130 00:00:20.312 TCP 1.101.0.1:3000 -> 23.104.0.1:45390 10 6661 1 2025-11-18 20:51:11.489 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58640 12 6765 1 2025-11-18 20:47:02.718 00:06:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 20:52:11.898 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:49016 10 6661 1 2025-11-18 20:53:12.279 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:45824 12 10578 1 2025-11-18 20:49:02.716 00:06:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 20:54:12.722 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40796 10 6661 1 2025-11-18 20:54:29.425 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 20:54:29.343 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 20:54:29.232 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 20:54:29.380 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:54:29.342 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 20:55:13.138 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57900 10 6661 1 2025-11-18 20:56:13.502 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47712 10 6661 1 2025-11-18 20:57:13.903 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56272 12 6765 1 2025-11-18 20:58:14.310 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53384 10 6661 1 Summary: total flows: 136, total bytes: 447893, total packets: 1019, avg bps: 989, avg pps: 0, avg bpp: 439 Time window: 2025-11-18 19:58:02 - 2025-11-18 20:58:24 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0030s User: 0.0020s Wall: 0.0021s flows/second: 65853.8 Runtime: 0.0021s