Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 23:59:19.407 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54392 10 6452 1 2025-11-18 23:59:32.826 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 23:59:32.896 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 23:59:32.528 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 23:59:32.944 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 23:59:33.027 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:00:19.807 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51542 10 6452 1 2025-11-18 23:56:02.778 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 00:01:20.216 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45416 10 6452 1 2025-11-19 00:02:20.625 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60300 10 6452 1 2025-11-18 23:58:02.777 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 00:03:21.028 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38606 10 6452 1 2025-11-19 00:04:33.067 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 00:04:33.125 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 00:04:33.087 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:04:21.447 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57036 10 6452 1 2025-11-19 00:04:33.066 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:04:33.148 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:05:21.861 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58690 10 6452 1 2025-11-19 00:06:22.285 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60252 10 6452 1 2025-11-19 00:07:22.685 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36514 10 6452 1 2025-11-19 00:03:02.779 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 00:08:23.111 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48964 10 6452 1 2025-11-19 00:09:33.342 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:09:33.224 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 00:09:33.226 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 00:09:32.996 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:09:23.519 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57392 10 6452 1 2025-11-19 00:09:33.259 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:05:02.778 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 00:10:23.923 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54678 10 6452 1 2025-11-19 00:11:24.325 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:35280 10 6452 1 2025-11-19 00:12:24.709 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49218 10 6452 1 2025-11-19 00:13:25.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52536 10 6452 1 2025-11-19 00:14:33.544 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:14:33.271 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 00:14:33.397 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 00:14:33.349 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:14:33.462 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:14:25.516 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39178 10 6452 1 2025-11-19 00:10:02.781 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 00:15:25.918 00:00:10.923 TCP 1.101.0.1:3000 -> 23.104.0.1:33568 10 6452 1 2025-11-19 00:16:26.875 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40548 10 6452 1 2025-11-19 00:12:02.780 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 00:17:27.235 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43636 10 6452 1 2025-11-19 00:18:27.654 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35940 10 6452 1 2025-11-19 00:19:33.460 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:19:33.309 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 00:19:33.225 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 00:19:33.312 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:19:33.378 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:19:28.063 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47672 10 6452 1 2025-11-19 00:20:28.464 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36608 10 6452 1 2025-11-19 00:21:28.868 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54600 10 6452 1 2025-11-19 00:17:02.783 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 00:22:29.274 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:49090 12 10369 1 2025-11-19 00:23:29.761 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56378 10 6452 1 2025-11-19 00:19:02.781 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 00:24:33.596 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:24:33.409 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 00:24:33.518 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 00:24:33.369 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:24:33.513 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:24:30.183 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43478 10 6452 1 2025-11-19 00:25:30.548 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41020 10 6452 1 2025-11-19 00:26:30.905 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55220 10 6452 1 2025-11-19 00:27:31.324 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38810 10 6452 1 2025-11-19 00:28:31.738 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51088 10 6452 1 2025-11-19 00:24:02.785 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 00:29:33.661 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:29:33.580 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 00:29:33.581 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 00:29:33.471 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:29:33.579 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:29:32.116 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57338 10 6452 1 2025-11-19 00:30:32.522 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60100 10 6452 1 2025-11-19 00:26:02.782 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 00:31:32.927 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57036 10 6452 1 2025-11-19 00:32:33.344 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44266 10 6452 1 2025-11-19 00:33:33.706 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52984 10 6452 1 2025-11-19 00:34:34.111 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 00:34:34.067 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 00:34:33.858 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:34:33.957 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:34:34.040 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:34:34.088 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33666 10 6452 1 2025-11-19 00:35:34.495 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53622 10 6452 1 2025-11-19 00:31:02.786 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 00:36:34.912 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38794 10 6452 1 2025-11-19 00:37:35.329 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56914 10 6452 1 2025-11-19 00:33:02.783 00:06:00.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 00:38:35.734 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41168 10 6452 1 2025-11-19 00:39:33.917 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 00:39:34.230 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 00:39:33.776 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:39:34.075 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:39:34.158 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:39:36.143 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39254 10 6452 1 2025-11-19 00:40:36.555 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36010 10 6452 1 2025-11-19 00:41:36.968 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60678 10 6452 1 2025-11-19 00:42:37.368 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58472 10 6452 1 2025-11-19 00:38:02.788 00:06:00.182 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 00:43:37.772 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:54338 10 6452 1 2025-11-19 00:44:34.017 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:44:33.669 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 00:44:33.843 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 00:44:33.609 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:44:33.932 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:44:38.147 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52550 10 6452 1 2025-11-19 00:40:02.785 00:06:00.186 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 00:45:38.503 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39968 10 6452 1 2025-11-19 00:46:38.914 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57008 10 6452 1 2025-11-19 00:47:39.321 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:59186 12 10375 1 2025-11-19 00:48:39.802 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43990 10 6452 1 2025-11-19 00:49:33.916 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:49:33.751 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 00:49:33.767 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 00:49:33.837 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:49:33.834 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:49:40.201 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34646 10 6452 1 2025-11-19 00:45:02.790 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 00:50:40.571 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54318 10 6452 1 2025-11-19 00:51:40.973 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50370 10 6452 1 2025-11-19 00:47:02.789 00:06:00.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 00:52:41.376 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:33254 12 10369 1 2025-11-19 00:53:41.811 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54230 10 6452 1 2025-11-19 00:54:33.952 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 00:54:34.199 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 00:54:34.100 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:54:33.953 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 00:54:34.036 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 00:54:42.211 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55824 10 6452 1 2025-11-19 00:55:42.566 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57082 10 6452 1 2025-11-19 00:56:42.974 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39532 10 6452 1 2025-11-19 00:52:02.793 00:06:00.184 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 00:57:43.401 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55848 10 6452 1 Summary: total flows: 136, total bytes: 422182, total packets: 1014, avg bps: 907, avg pps: 0, avg bpp: 416 Time window: 2025-11-18 23:56:02 - 2025-11-19 00:58:02 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0048s User: 0.0010s Wall: 0.0027s flows/second: 50538.3 Runtime: 0.0027s