Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 07:59:35.624 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47184 10 6452 1 2025-11-24 08:00:35.988 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53986 10 6452 1 2025-11-24 08:01:36.391 00:00:10.314 TCP 1.101.0.1:3000 -> 23.104.0.1:54340 10 6452 1 2025-11-24 08:02:08.844 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:58:05.457 00:05:00.984 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:02:08.764 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:02:08.882 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:02:08.740 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:02:08.764 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:02:36.745 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49988 10 6452 1 2025-11-24 07:59:05.460 00:05:00.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:03:37.148 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40456 10 6452 1 2025-11-24 08:04:37.550 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43022 10 6452 1 2025-11-24 08:05:37.965 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38614 10 6452 1 2025-11-24 08:06:38.325 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51696 10 6452 1 2025-11-24 08:07:08.872 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:07:08.791 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:07:08.727 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:07:08.731 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:07:08.790 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:07:38.690 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55194 10 6452 1 2025-11-24 08:04:05.459 00:05:00.984 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:08:39.110 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:60530 10 6452 1 2025-11-24 08:05:05.461 00:05:00.979 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:09:39.502 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40206 10 6452 1 2025-11-24 08:10:39.870 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37400 10 6452 1 2025-11-24 08:11:40.277 00:00:10.682 TCP 1.101.0.1:3000 -> 23.104.0.1:54552 10 6452 1 2025-11-24 08:12:09.052 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:12:08.709 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:12:08.734 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:12:08.851 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:12:08.816 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:12:40.997 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47380 10 6452 1 2025-11-24 08:13:41.403 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-11-24 08:10:05.457 00:05:00.986 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:14:41.806 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43382 10 6452 1 2025-11-24 08:11:05.463 00:05:00.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:15:42.210 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41890 10 6452 1 2025-11-24 08:16:42.609 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45542 10 6452 1 2025-11-24 08:17:08.854 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:17:08.769 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:17:08.862 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:17:08.830 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:17:08.936 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:17:43.011 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53242 10 6452 1 2025-11-24 08:18:43.366 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46684 10 6452 1 2025-11-24 08:19:43.727 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43784 10 6452 1 2025-11-24 08:16:05.463 00:05:00.982 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:20:44.137 00:00:11.394 TCP 1.101.0.1:3000 -> 23.104.0.1:33208 12 10369 1 2025-11-24 08:17:05.465 00:05:00.977 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:21:45.572 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57232 10 6452 1 2025-11-24 08:22:09.000 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:22:09.102 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:22:09.112 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:22:09.150 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:22:09.233 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:22:45.972 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55372 10 6452 1 2025-11-24 08:23:46.384 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38978 10 6452 1 2025-11-24 08:24:46.792 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39742 10 6452 1 2025-11-24 08:25:47.204 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49312 10 6452 1 2025-11-24 08:22:05.463 00:05:00.983 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:26:47.603 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51662 10 6452 1 2025-11-24 08:27:09.538 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:23:05.466 00:05:00.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:27:09.196 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:27:09.331 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:27:09.394 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:27:09.477 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:27:48.004 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42030 10 6452 1 2025-11-24 08:28:48.363 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:50664 10 6452 1 2025-11-24 08:29:48.733 00:00:10.425 TCP 1.101.0.1:3000 -> 23.104.0.1:55474 10 6452 1 2025-11-24 08:30:49.197 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49996 10 6452 1 2025-11-24 08:31:49.603 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60620 10 6452 1 2025-11-24 08:32:09.390 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:32:09.540 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:32:09.354 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:32:09.543 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:28:05.469 00:05:00.998 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:32:09.623 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:32:50.007 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:50522 10 6452 1 2025-11-24 08:29:05.470 00:05:00.984 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:33:50.406 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48790 10 6452 1 2025-11-24 08:34:50.812 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58374 10 6452 1 2025-11-24 08:35:51.182 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60378 10 6452 1 2025-11-24 08:36:51.579 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44038 10 6452 1 2025-11-24 08:37:09.464 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:37:09.343 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:37:09.263 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:37:09.347 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:37:09.432 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:37:51.942 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53886 10 6452 1 2025-11-24 08:34:05.470 00:05:00.988 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:38:52.346 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38638 10 6452 1 2025-11-24 08:35:05.474 00:05:00.982 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:39:52.746 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51200 10 6452 1 2025-11-24 08:40:53.151 00:00:10.798 TCP 1.101.0.1:3000 -> 23.104.0.1:44886 10 6452 1 2025-11-24 08:41:53.985 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42448 10 6452 1 2025-11-24 08:42:09.805 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:42:09.949 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:42:09.743 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:42:10.084 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:42:10.004 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:42:54.400 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60658 10 6452 1 2025-11-24 08:43:54.777 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48038 10 6452 1 2025-11-24 08:40:05.477 00:05:00.982 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:41:05.480 00:05:00.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:44:55.183 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42562 10 6452 1 2025-11-24 08:45:55.585 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54882 10 6452 1 2025-11-24 08:47:09.622 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:47:09.343 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:47:09.679 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:47:09.774 00:00:00.020 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:46:55.994 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38852 10 6452 1 2025-11-24 08:47:09.857 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:47:56.395 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6452 1 2025-11-24 08:48:56.761 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50220 10 6452 1 2025-11-24 08:46:05.477 00:05:00.994 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:49:57.173 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37400 10 6452 1 2025-11-24 08:47:05.479 00:05:00.990 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:50:57.528 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55256 10 6452 1 2025-11-24 08:52:09.837 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:52:09.832 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:52:09.763 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:52:09.647 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:51:57.929 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42784 10 6452 1 2025-11-24 08:52:09.754 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:52:58.345 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59466 10 6452 1 2025-11-24 08:53:58.706 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39128 10 6452 1 2025-11-24 08:54:59.111 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47432 10 6452 1 2025-11-24 08:55:59.475 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34310 10 6452 1 2025-11-24 08:52:05.481 00:05:00.994 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:57:09.700 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:57:09.636 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:53:05.482 00:05:00.989 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:57:09.789 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:57:09.845 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:57:09.618 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:56:59.900 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:35156 10 6452 1 2025-11-24 08:58:00.278 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52134 10 6452 1 Summary: total flows: 139, total bytes: 414465, total packets: 1012, avg bps: 919, avg pps: 0, avg bpp: 409 Time window: 2025-11-24 07:58:05 - 2025-11-24 08:58:10 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0051s User: 0.0000s Wall: 0.0019s flows/second: 72288.7 Runtime: 0.0019s