Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 16:59:38.913 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42392 10 6452 1 2025-11-19 16:59:53.447 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 16:59:53.441 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 16:59:53.443 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 16:59:53.261 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 16:59:53.530 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 16:55:03.162 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 16:55:03.159 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 17:00:39.322 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37078 10 6452 1 2025-11-19 17:01:39.731 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54146 10 6452 1 2025-11-19 17:02:40.113 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42344 10 6452 1 2025-11-19 17:03:40.523 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:38306 10 6452 1 2025-11-19 17:04:53.426 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:04:40.880 00:00:10.942 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-11-19 17:04:53.642 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:04:53.530 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:04:53.426 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:04:53.509 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 17:05:41.861 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:50446 10 6452 1 2025-11-19 17:06:42.237 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59364 11 6492 1 2025-11-19 17:02:03.161 00:06:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 17:02:03.159 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 17:07:42.600 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32778 10 6452 1 2025-11-19 17:08:43.008 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34364 10 6452 1 2025-11-19 17:09:53.764 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:09:53.603 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:09:53.644 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:09:53.726 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:09:43.410 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50110 10 6452 1 2025-11-19 17:09:53.808 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 17:10:43.816 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34236 10 6452 1 2025-11-19 17:11:44.225 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:44666 10 6452 1 2025-11-19 17:12:44.639 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55624 10 6452 1 2025-11-19 17:13:45.039 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34896 10 6452 1 2025-11-19 17:09:03.161 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 17:09:03.164 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 17:14:53.720 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:14:53.561 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:14:53.508 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:14:53.769 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:14:53.852 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 17:14:45.445 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43222 10 6452 1 2025-11-19 17:15:45.847 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:40940 10 6452 1 2025-11-19 17:16:46.273 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54332 10 6452 1 2025-11-19 17:17:46.686 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35982 10 6452 1 2025-11-19 17:18:47.106 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48904 10 6452 1 2025-11-19 17:19:53.854 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:19:53.639 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:19:53.815 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:19:53.731 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:19:53.815 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 17:19:47.477 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56738 10 6452 1 2025-11-19 17:20:47.841 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 10 6452 1 2025-11-19 17:16:03.167 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 17:16:03.164 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 17:21:48.233 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53582 10 6452 1 2025-11-19 17:22:48.637 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43876 10 6452 1 2025-11-19 17:23:49.055 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35722 10 6452 1 2025-11-19 17:24:53.904 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 17:24:53.823 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:24:53.909 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:24:53.953 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:24:53.947 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:24:49.463 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60706 10 6452 1 2025-11-19 17:25:49.865 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43146 10 6452 1 2025-11-19 17:26:50.282 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50668 10 6452 1 2025-11-19 17:23:03.168 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 17:27:50.691 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44810 10 6452 1 2025-11-19 17:23:03.166 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 17:28:51.105 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60858 10 6452 1 2025-11-19 17:29:53.968 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 17:29:54.107 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:29:54.263 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:29:53.935 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:29:53.886 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:29:51.502 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36562 10 6452 1 2025-11-19 17:30:51.913 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57656 10 6452 1 2025-11-19 17:31:52.321 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40710 10 6452 1 2025-11-19 17:32:52.733 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36874 10 6452 1 2025-11-19 17:33:53.148 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35862 10 6452 1 2025-11-19 17:34:54.230 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 17:34:54.265 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:34:54.221 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:34:54.174 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:34:54.146 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:30:03.165 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 17:30:03.169 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 17:34:53.555 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58692 10 6452 1 2025-11-19 17:35:53.955 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35670 10 6452 1 2025-11-19 17:36:54.364 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36084 10 6452 1 2025-11-19 17:37:54.770 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43022 10 6452 1 2025-11-19 17:38:55.204 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60458 10 6452 1 2025-11-19 17:39:54.183 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:39:54.325 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:39:54.211 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:39:54.074 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:39:54.408 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 17:39:55.608 00:00:11.184 TCP 1.101.0.1:3000 -> 23.104.0.1:59038 10 6452 1 2025-11-19 17:40:56.832 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:49934 10 6452 1 2025-11-19 17:37:03.175 00:06:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 17:37:03.172 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 17:41:57.228 00:00:10.812 TCP 1.101.0.1:3000 -> 23.104.0.1:50486 10 6452 1 2025-11-19 17:42:58.103 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43270 10 6452 1 2025-11-19 17:43:58.514 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59320 10 6452 1 2025-11-19 17:44:54.393 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:44:54.387 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:44:54.333 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:44:54.176 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:44:54.475 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 17:44:58.919 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33220 10 6452 1 2025-11-19 17:45:59.314 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45464 10 6452 1 2025-11-19 17:46:59.721 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48684 10 6452 1 2025-11-19 17:48:00.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41900 10 6452 1 2025-11-19 17:44:03.175 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 17:44:03.177 00:06:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 17:49:00.539 00:00:10.559 TCP 1.101.0.1:3000 -> 23.104.0.1:35770 10 6452 1 2025-11-19 17:49:54.970 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 17:49:54.899 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:49:54.228 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:49:54.887 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:49:55.151 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:50:01.140 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55000 10 6452 1 2025-11-19 17:51:01.504 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55060 10 6452 1 2025-11-19 17:52:01.912 00:00:10.951 TCP 1.101.0.1:3000 -> 23.104.0.1:42676 10 6452 1 2025-11-19 17:53:02.915 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43006 10 6452 1 2025-11-19 17:54:03.320 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52578 10 6452 1 2025-11-19 17:54:54.528 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:54:54.528 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:54:54.393 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:54:54.570 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:54:54.654 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 17:55:03.684 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46518 10 6452 1 2025-11-19 17:51:03.176 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 17:51:03.179 00:06:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 17:56:04.120 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54694 10 6452 1 2025-11-19 17:57:04.531 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40740 10 6452 1 2025-11-19 17:58:04.938 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40214 10 6452 1 Summary: total flows: 137, total bytes: 411326, total packets: 1023, avg bps: 867, avg pps: 0, avg bpp: 402 Time window: 2025-11-19 16:55:03 - 2025-11-19 17:58:15 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0035s User: 0.0027s Wall: 0.0029s flows/second: 47208.3 Runtime: 0.0029s