Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 11:58:56.829 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37426 10 6452 1 2025-11-23 11:54:05.052 00:06:00.814 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-23 11:54:05.049 00:06:00.819 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-23 11:59:57.190 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57068 10 6452 1 2025-11-23 12:00:57.597 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34354 10 6452 1 2025-11-23 12:01:44.853 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:01:44.768 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:01:44.589 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:01:44.966 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:01:45.049 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:01:58.018 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32874 10 6452 1 2025-11-23 12:02:58.422 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:48448 11 6504 1 2025-11-23 12:03:58.879 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51914 10 6452 1 2025-11-23 12:04:59.242 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:54202 10 6452 1 2025-11-23 12:01:05.052 00:06:00.816 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-23 12:01:05.050 00:06:00.821 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-23 12:05:59.688 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55050 10 6452 1 2025-11-23 12:06:44.719 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:06:44.688 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:06:44.848 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:06:44.717 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:06:44.800 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:07:00.061 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49200 10 6452 1 2025-11-23 12:08:00.466 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49698 10 6452 1 2025-11-23 12:09:00.873 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57788 10 6452 1 2025-11-23 12:10:01.276 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56888 10 6452 1 2025-11-23 12:11:01.677 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40904 10 6452 1 2025-11-23 12:11:44.940 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:11:44.746 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:11:44.917 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:11:44.683 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:11:44.857 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:12:02.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49944 10 6452 1 2025-11-23 12:08:05.055 00:06:00.816 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-23 12:08:05.053 00:06:00.821 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-23 12:13:02.511 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60148 10 6452 1 2025-11-23 12:14:02.952 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49768 10 6452 1 2025-11-23 12:15:03.326 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35404 10 6452 1 2025-11-23 12:16:03.753 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35732 10 6452 1 2025-11-23 12:16:45.229 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:16:45.191 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:16:45.165 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:16:45.185 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:16:45.269 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:17:04.153 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41642 10 6452 1 2025-11-23 12:18:04.558 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54942 10 6452 1 2025-11-23 12:19:04.959 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47260 10 6452 1 2025-11-23 12:15:05.054 00:06:00.821 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-23 12:15:05.058 00:06:00.816 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-23 12:20:05.366 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37178 10 6452 1 2025-11-23 12:21:05.769 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50368 10 6452 1 2025-11-23 12:21:44.911 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:21:45.089 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:21:44.987 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:21:44.982 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:21:45.171 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:22:06.178 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40930 10 6452 1 2025-11-23 12:23:06.544 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51040 10 6452 1 2025-11-23 12:24:06.946 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:59542 10 6452 1 2025-11-23 12:25:07.322 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42482 10 6452 1 2025-11-23 12:26:07.683 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51614 10 6452 1 2025-11-23 12:26:45.264 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:26:45.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:26:45.130 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:26:45.072 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:26:45.181 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:22:05.059 00:06:00.818 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-23 12:22:05.056 00:06:00.823 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-23 12:27:08.109 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50770 10 6452 1 2025-11-23 12:28:08.520 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57280 10 6452 1 2025-11-23 12:29:08.892 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:46584 10 6452 1 2025-11-23 12:30:09.272 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:32814 10 6452 1 2025-11-23 12:31:09.640 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:33050 12 10375 1 2025-11-23 12:31:45.423 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:31:45.069 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:31:45.237 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:31:45.338 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:31:45.421 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:32:10.119 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:42564 10 6452 1 2025-11-23 12:33:10.500 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:39918 10 6452 1 2025-11-23 12:29:05.061 00:06:00.822 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-23 12:29:05.063 00:06:00.817 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-23 12:34:10.919 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59874 10 6452 1 2025-11-23 12:35:11.317 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54440 10 6452 1 2025-11-23 12:36:11.720 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37958 10 6452 1 2025-11-23 12:36:45.870 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:36:45.788 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:36:45.778 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:36:45.794 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:36:45.954 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:37:12.132 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60212 10 6452 1 2025-11-23 12:38:12.536 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40282 10 6452 1 2025-11-23 12:39:12.903 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54224 12 6556 1 2025-11-23 12:40:13.312 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52822 10 6452 1 2025-11-23 12:36:05.065 00:06:00.833 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-23 12:36:05.062 00:06:00.838 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-23 12:41:13.711 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60742 10 6452 1 2025-11-23 12:41:45.428 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:41:45.576 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:41:45.518 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:41:45.425 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:41:45.510 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:42:14.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45994 10 6452 1 2025-11-23 12:43:14.524 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60446 10 6452 1 2025-11-23 12:44:14.927 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60782 10 6452 1 2025-11-23 12:45:15.347 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:33118 10 6452 1 2025-11-23 12:46:15.839 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:45324 10 6452 1 2025-11-23 12:46:45.767 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:46:45.613 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:46:45.392 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:46:45.324 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:46:45.684 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:47:16.267 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51674 10 6452 1 2025-11-23 12:43:05.065 00:06:00.833 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-23 12:43:05.064 00:06:00.838 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-23 12:48:16.673 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37674 10 6452 1 2025-11-23 12:49:17.031 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41600 10 6452 1 2025-11-23 12:50:17.399 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42534 10 6452 1 2025-11-23 12:51:17.801 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:34474 10 6452 1 2025-11-23 12:51:45.854 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:51:45.649 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:51:45.769 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:51:45.652 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:51:45.772 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:52:18.182 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46612 10 6452 1 2025-11-23 12:53:18.544 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43384 10 6452 1 2025-11-23 12:54:18.951 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55112 10 6452 1 2025-11-23 12:50:05.071 00:06:00.835 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-23 12:50:05.068 00:06:00.840 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-23 12:55:19.357 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38386 10 6452 1 2025-11-23 12:56:19.757 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35282 10 6452 1 2025-11-23 12:56:45.941 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 12:56:46.156 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 12:56:46.182 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:56:46.181 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 12:56:46.265 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 12:57:20.176 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51176 10 6452 1 2025-11-23 12:58:20.580 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:35488 10 6452 1 Summary: total flows: 138, total bytes: 421817, total packets: 1037, avg bps: 872, avg pps: 0, avg bpp: 406 Time window: 2025-11-23 11:54:05 - 2025-11-23 12:58:30 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0040s User: 0.0020s Wall: 0.0018s flows/second: 74917.7 Runtime: 0.0019s