Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 01:58:42.181 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40724 10 6452 1 2025-11-01 01:53:53.290 00:06:00.292 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 01:59:42.579 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57038 10 6452 1 2025-11-01 02:00:55.705 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:00:55.744 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:00:55.794 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:00:55.705 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:00:42.987 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49716 10 6452 1 2025-11-01 02:00:55.879 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:01:43.404 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41222 10 6452 1 2025-11-01 02:02:43.764 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39270 10 6452 1 2025-11-01 02:03:44.178 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41170 10 6452 1 2025-11-01 01:59:53.292 00:06:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:04:44.580 00:00:10.518 TCP 1.101.0.1:3000 -> 23.104.0.1:43978 14 14298 1 2025-11-01 02:05:45.135 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54584 10 6452 1 2025-11-01 02:05:55.873 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:05:55.409 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:05:55.829 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:05:55.831 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:00:53.295 00:06:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:05:55.912 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:06:45.538 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34268 10 6452 1 2025-11-01 02:07:45.942 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52960 10 6452 1 2025-11-01 02:08:46.359 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6452 1 2025-11-01 02:09:46.761 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:32960 10 6452 1 2025-11-01 02:10:55.720 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:10:55.739 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:10:55.725 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:10:55.726 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:10:55.809 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:10:47.171 00:00:10.895 TCP 1.101.0.1:3000 -> 23.104.0.1:40094 10 6452 1 2025-11-01 02:06:53.294 00:06:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:11:48.107 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60700 10 6452 1 2025-11-01 02:07:53.296 00:06:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:12:48.511 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-11-01 02:13:48.915 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35666 10 6452 1 2025-11-01 02:14:49.315 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53640 10 6452 1 2025-11-01 02:15:55.747 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:15:55.792 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:15:55.750 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:15:55.750 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:15:55.834 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:15:49.719 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60388 10 6452 1 2025-11-01 02:16:50.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56974 10 6452 1 2025-11-01 02:17:50.534 00:00:10.499 TCP 1.101.0.1:3000 -> 23.104.0.1:42500 10 6452 1 2025-11-01 02:13:53.295 00:06:00.296 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:18:51.094 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40396 10 6452 1 2025-11-01 02:14:53.298 00:06:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:19:51.457 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44750 10 6452 1 2025-11-01 02:20:55.958 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:20:55.973 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:20:55.875 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:20:56.044 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:20:56.046 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:20:51.868 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56850 10 6452 1 2025-11-01 02:21:52.233 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57416 10 6452 1 2025-11-01 02:22:52.640 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43938 10 6452 1 2025-11-01 02:23:53.063 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40866 10 6452 1 2025-11-01 02:24:53.466 00:00:12.439 TCP 1.101.0.1:3000 -> 23.104.0.1:37130 10 6452 1 2025-11-01 02:25:55.726 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:25:55.997 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:25:56.003 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:25:56.095 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:20:53.297 00:06:00.298 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:25:56.086 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:25:55.950 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34232 10 6452 1 2025-11-01 02:21:53.299 00:06:00.293 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:26:56.354 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:42186 10 6452 1 2025-11-01 02:27:56.710 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46086 10 6452 1 2025-11-01 02:28:57.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48718 10 6452 1 2025-11-01 02:29:57.518 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60738 10 6452 1 2025-11-01 02:30:55.921 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:30:56.206 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:30:56.286 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:30:56.122 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:30:56.258 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:30:57.923 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38394 10 6452 1 2025-11-01 02:31:58.296 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48550 10 6452 1 2025-11-01 02:27:53.301 00:06:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:32:58.699 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:46296 10 6452 1 2025-11-01 02:28:53.304 00:06:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:33:59.108 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45748 10 6452 1 2025-11-01 02:34:59.510 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39640 10 6452 1 2025-11-01 02:35:56.330 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:35:56.227 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:35:56.251 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:35:56.066 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:35:56.333 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:35:59.907 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46536 10 6452 1 2025-11-01 02:37:00.312 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44120 10 6452 1 2025-11-01 02:38:00.710 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45066 10 6452 1 2025-11-01 02:39:01.116 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54940 10 6452 1 2025-11-01 02:34:53.327 00:06:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:40:01.522 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45126 10 6452 1 2025-11-01 02:35:53.332 00:06:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:40:56.425 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:40:56.240 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:40:56.210 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:40:56.426 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:40:56.293 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:41:01.930 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:45464 10 6452 1 2025-11-01 02:42:02.353 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42000 10 6452 1 2025-11-01 02:43:02.751 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37568 10 6452 1 2025-11-01 02:44:03.183 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:54048 12 10375 1 2025-11-01 02:45:03.663 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:42266 10 6452 1 2025-11-01 02:45:56.822 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:45:56.655 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:45:56.427 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:45:56.457 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:45:56.509 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:46:04.036 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49618 10 6452 1 2025-11-01 02:41:53.330 00:06:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:47:04.398 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54936 10 6452 1 2025-11-01 02:42:53.335 00:06:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:48:04.804 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-11-01 02:49:05.214 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36438 10 6452 1 2025-11-01 02:50:05.620 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39408 10 6452 1 2025-11-01 02:50:56.576 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:50:56.560 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:50:56.585 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:50:56.494 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:50:56.510 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:51:06.069 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46746 10 6452 1 2025-11-01 02:52:06.430 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46380 10 6452 1 2025-11-01 02:53:06.833 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:50210 10 6452 1 2025-11-01 02:48:53.334 00:06:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 02:54:07.220 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59428 10 6452 1 2025-11-01 02:49:53.338 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 02:55:07.623 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34672 10 6452 1 2025-11-01 02:55:56.808 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 02:55:56.726 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:55:56.620 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 02:55:56.805 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 02:55:56.563 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 02:56:07.990 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:59052 10 6452 1 2025-11-01 02:57:08.365 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45048 10 6452 1 2025-11-01 02:58:08.767 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48548 10 6452 1 Summary: total flows: 137, total bytes: 428646, total packets: 1024, avg bps: 887, avg pps: 0, avg bpp: 418 Time window: 2025-11-01 01:53:53 - 2025-11-01 02:58:19 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0049s User: 0.0010s Wall: 0.0022s flows/second: 61628.0 Runtime: 0.0022s