Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 14:59:38.728 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43574 10 6661 1 2025-11-22 15:00:39.146 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53132 10 6661 1 2025-11-22 14:57:04.614 00:05:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 15:01:19.212 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:01:19.310 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:01:19.340 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:01:19.442 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:01:19.526 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:01:39.559 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37858 10 6661 1 2025-11-22 14:58:04.612 00:05:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 15:02:39.966 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59280 10 6661 1 2025-11-22 15:03:40.379 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54910 10 6661 1 2025-11-22 15:04:40.781 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47534 10 6661 1 2025-11-22 15:05:41.145 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42516 10 6661 1 2025-11-22 15:06:19.478 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:06:19.648 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:06:19.282 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:06:19.711 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:06:19.794 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:06:41.544 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48472 10 6661 1 2025-11-22 15:03:04.615 00:05:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 15:07:41.904 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39224 10 6661 1 2025-11-22 15:04:04.613 00:05:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 15:08:42.328 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34894 10 6661 1 2025-11-22 15:09:42.734 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51336 10 6661 1 2025-11-22 15:10:43.109 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32778 10 6661 1 2025-11-22 15:11:19.633 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:11:19.451 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:11:19.718 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:11:19.451 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:11:19.534 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:11:43.469 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60128 10 6661 1 2025-11-22 15:12:43.873 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53560 10 6661 1 2025-11-22 15:09:04.616 00:05:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 15:13:44.285 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42366 10 6661 1 2025-11-22 15:10:04.613 00:05:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 15:14:44.690 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58400 10 6661 1 2025-11-22 15:15:45.059 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51826 10 6661 1 2025-11-22 15:16:19.840 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:16:19.716 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:16:19.617 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:16:19.758 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:16:19.719 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:16:45.454 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53850 10 6661 1 2025-11-22 15:17:45.858 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:37114 10 6661 1 2025-11-22 15:18:46.276 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40750 10 6661 1 2025-11-22 15:15:04.620 00:05:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 15:19:46.681 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52352 10 6661 1 2025-11-22 15:16:04.618 00:05:00.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 15:20:47.109 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:45716 11 6713 1 2025-11-22 15:21:19.900 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:21:19.826 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:21:19.726 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:21:19.870 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:21:19.953 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:21:47.563 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36294 10 6661 1 2025-11-22 15:22:47.960 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35550 10 6661 1 2025-11-22 15:23:48.365 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:39646 10 6661 1 2025-11-22 15:24:48.824 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51600 10 6661 1 2025-11-22 15:21:04.620 00:05:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 15:25:49.202 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:36022 10 6661 1 2025-11-22 15:22:04.618 00:05:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 15:26:19.893 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:26:19.910 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:26:19.899 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:26:19.867 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:26:19.810 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:26:49.563 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33858 10 6661 1 2025-11-22 15:27:49.971 00:00:10.425 TCP 1.101.0.1:3000 -> 23.104.0.1:57680 11 6713 1 2025-11-22 15:28:50.438 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47816 10 6661 1 2025-11-22 15:29:50.852 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44952 10 6661 1 2025-11-22 15:30:51.270 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:53046 11 6713 1 2025-11-22 15:27:04.620 00:05:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 15:31:19.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:31:19.873 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:31:19.725 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:31:20.072 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:31:19.989 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:31:51.719 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51692 10 6661 1 2025-11-22 15:28:04.619 00:05:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 15:32:52.136 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34146 10 6661 1 2025-11-22 15:33:52.545 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46030 10 6661 1 2025-11-22 15:34:52.910 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:36992 12 10584 1 2025-11-22 15:35:53.397 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43712 10 6661 1 2025-11-22 15:36:19.881 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:36:19.789 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:36:20.080 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:36:20.190 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:36:20.162 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:36:53.803 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38532 10 6661 1 2025-11-22 15:33:04.623 00:05:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 15:37:54.210 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45958 10 6661 1 2025-11-22 15:34:04.622 00:05:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 15:38:54.578 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49030 10 6661 1 2025-11-22 15:39:54.942 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:43382 10 6661 1 2025-11-22 15:40:55.371 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48860 10 6661 1 2025-11-22 15:41:20.287 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:41:19.988 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:41:20.208 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:41:19.995 00:00:00.048 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:41:20.078 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:41:55.781 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58342 10 6661 1 2025-11-22 15:39:04.624 00:05:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 15:42:56.138 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40434 10 6661 1 2025-11-22 15:40:04.622 00:05:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 15:43:56.546 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48980 10 6661 1 2025-11-22 15:44:56.948 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55948 10 6661 1 2025-11-22 15:45:57.355 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58258 10 6661 1 2025-11-22 15:46:20.366 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:46:20.284 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:46:20.199 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:46:20.057 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:46:20.283 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:46:57.761 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:39882 10 6661 1 2025-11-22 15:47:58.165 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38946 10 6661 1 2025-11-22 15:45:04.625 00:05:00.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 15:48:58.563 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34604 10 6661 1 2025-11-22 15:49:58.927 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:51144 10 6661 1 2025-11-22 15:46:04.624 00:05:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 15:50:59.383 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55888 10 6661 1 2025-11-22 15:51:20.397 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:51:20.313 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:51:20.044 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:51:20.389 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:51:20.471 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:51:59.787 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51962 10 6661 1 2025-11-22 15:53:00.191 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:59988 10 6661 1 2025-11-22 15:54:00.551 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37268 10 6661 1 2025-11-22 15:51:04.627 00:05:00.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 15:55:00.960 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34272 10 6661 1 2025-11-22 15:52:04.624 00:05:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 15:56:01.367 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51628 10 6661 1 2025-11-22 15:56:20.404 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 15:56:20.480 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 15:56:20.320 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 15:56:20.332 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:56:20.320 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 15:57:01.774 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34142 10 6661 1 2025-11-22 15:58:02.186 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39912 10 6661 1 Summary: total flows: 139, total bytes: 426958, total packets: 1015, avg bps: 931, avg pps: 0, avg bpp: 420 Time window: 2025-11-22 14:57:04 - 2025-11-22 15:58:12 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0045s User: 0.0009s Wall: 0.0019s flows/second: 74735.1 Runtime: 0.0019s