Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 12:58:45.616 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48268 10 6452 1 2025-11-21 12:59:46.021 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35444 10 6452 1 2025-11-21 12:56:04.077 00:04:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 13:00:48.779 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:00:48.746 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:00:48.575 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:00:48.599 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:00:48.695 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:00:46.401 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:38166 10 6452 1 2025-11-21 13:01:46.794 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56690 10 6452 1 2025-11-21 12:57:04.076 00:06:00.299 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 13:02:47.201 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54354 10 6452 1 2025-11-21 13:03:47.606 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49192 10 6452 1 2025-11-21 13:04:48.010 00:00:10.984 TCP 1.101.0.1:3000 -> 23.104.0.1:52114 10 6452 1 2025-11-21 13:05:48.547 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:05:48.474 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:05:48.511 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:05:48.396 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:05:48.463 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:05:49.034 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52854 10 6452 1 2025-11-21 13:01:04.079 00:06:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 13:06:49.443 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54270 10 6452 1 2025-11-21 13:07:49.865 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39922 10 6452 1 2025-11-21 13:04:04.078 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-11-21 13:08:50.268 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50096 10 6452 1 2025-11-21 13:09:50.674 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50982 10 6452 1 2025-11-21 13:10:48.418 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:10:48.276 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:10:48.216 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:10:48.270 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:10:48.354 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:10:51.120 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57514 10 6452 1 2025-11-21 13:11:51.483 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49280 10 6452 1 2025-11-21 13:08:04.079 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-11-21 13:12:51.885 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:45872 10 6452 1 2025-11-21 13:10:04.377 00:03:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 421 1 2025-11-21 13:13:52.313 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49220 10 6452 1 2025-11-21 13:14:52.720 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35276 10 6452 1 2025-11-21 13:15:48.396 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:15:48.474 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:15:48.382 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:15:48.230 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:15:48.313 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:15:53.149 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38216 10 6452 1 2025-11-21 13:14:04.375 00:03:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 440 1 2025-11-21 13:16:53.553 00:00:10.694 TCP 1.101.0.1:3000 -> 23.104.0.1:44512 10 6452 1 2025-11-21 13:17:54.283 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58082 10 6452 1 2025-11-21 13:14:04.079 00:04:00.298 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 13:18:54.681 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38260 10 6452 1 2025-11-21 13:19:55.110 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45980 10 6452 1 2025-11-21 13:20:48.673 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:20:48.643 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:20:48.591 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:20:48.382 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:20:48.590 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:20:55.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54692 10 6452 1 2025-11-21 13:18:04.085 00:04:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 13:21:55.922 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:42244 10 6452 1 2025-11-21 13:19:04.089 00:04:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 13:22:56.304 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33910 10 6452 1 2025-11-21 13:23:56.710 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37350 10 6452 1 2025-11-21 13:24:57.117 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42134 10 6452 1 2025-11-21 13:25:48.760 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:25:48.541 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:25:48.618 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:25:48.647 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:25:48.679 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:25:57.535 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52426 10 6452 1 2025-11-21 13:23:04.092 00:04:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 13:26:57.939 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:58088 10 6452 1 2025-11-21 13:24:04.091 00:04:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 13:27:58.366 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56718 10 6452 1 2025-11-21 13:28:58.772 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56490 10 6452 1 2025-11-21 13:29:59.186 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48270 10 6452 1 2025-11-21 13:30:48.604 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:30:48.607 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:30:48.663 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:30:48.521 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:30:48.733 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:30:59.594 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33094 10 6452 1 2025-11-21 13:28:04.092 00:04:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 13:32:00.015 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58724 10 6452 1 2025-11-21 13:33:00.428 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46618 12 6556 1 2025-11-21 13:29:04.090 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 13:34:00.841 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:56942 10 6452 1 2025-11-21 13:35:01.274 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54282 10 6452 1 2025-11-21 13:35:48.787 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:35:48.873 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:35:48.830 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:35:48.804 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:35:48.705 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:36:01.674 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54846 10 6452 1 2025-11-21 13:37:02.113 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42170 10 6452 1 2025-11-21 13:33:04.093 00:06:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 13:38:02.519 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35202 10 6452 1 2025-11-21 13:39:02.926 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48382 10 6452 1 2025-11-21 13:40:03.338 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35478 10 6452 1 2025-11-21 13:40:48.676 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:40:48.837 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:40:48.900 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:40:48.880 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:40:48.964 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:36:04.094 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-11-21 13:41:03.740 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38180 10 6452 1 2025-11-21 13:42:04.144 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55812 10 6452 1 2025-11-21 13:43:04.506 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38714 10 6452 1 2025-11-21 13:44:04.912 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53812 10 6452 1 2025-11-21 13:40:04.096 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-11-21 13:45:05.320 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43972 10 6452 1 2025-11-21 13:45:48.947 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:45:48.957 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:45:49.061 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:45:48.873 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:45:49.029 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:46:05.688 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48298 10 6452 1 2025-11-21 13:42:04.384 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 790 1 2025-11-21 13:47:06.076 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59220 10 6452 1 2025-11-21 13:48:06.480 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58774 10 6452 1 2025-11-21 13:49:06.886 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43790 10 6452 1 2025-11-21 13:49:04.096 00:01:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-21 13:50:07.261 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44440 10 6452 1 2025-11-21 13:50:49.407 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:50:49.325 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:50:48.892 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:50:49.158 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:50:48.955 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:46:04.383 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-11-21 13:51:07.663 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50122 10 6452 1 2025-11-21 13:52:08.087 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60308 10 6452 1 2025-11-21 13:53:08.489 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57072 10 6452 1 2025-11-21 13:53:04.101 00:01:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-21 13:54:08.892 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 12 6556 1 2025-11-21 13:51:04.098 00:04:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 13:55:09.309 00:00:15.160 TCP 1.101.0.1:3000 -> 23.104.0.1:50866 11 6504 1 2025-11-21 13:55:49.283 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 13:55:49.199 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:55:49.293 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 13:55:49.248 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 13:55:49.131 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 13:56:14.513 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34822 10 6452 1 2025-11-21 13:57:14.917 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52818 10 6452 1 2025-11-21 13:58:15.317 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 10 6452 1 Summary: total flows: 142, total bytes: 417014, total packets: 1021, avg bps: 891, avg pps: 0, avg bpp: 408 Time window: 2025-11-21 12:56:04 - 2025-11-21 13:58:25 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0031s User: 0.0020s Wall: 0.0020s flows/second: 71465.2 Runtime: 0.0020s