Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 14:59:32.408 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47650 10 6452 1 2025-11-01 15:00:32.816 00:00:10.908 TCP 1.101.0.1:3000 -> 23.104.0.1:49394 10 6452 1 2025-11-01 15:01:11.410 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:01:11.082 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:01:11.283 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:01:11.285 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:01:11.365 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:01:33.763 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:32940 10 6452 1 2025-11-01 14:56:53.619 00:06:00.277 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 15:02:34.183 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48474 10 6452 1 2025-11-01 14:57:53.620 00:06:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 15:03:34.586 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60252 10 6452 1 2025-11-01 15:04:34.995 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48654 10 6452 1 2025-11-01 15:05:35.402 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37950 10 6452 1 2025-11-01 15:06:11.457 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:06:11.310 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:06:11.365 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:06:11.205 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:06:11.448 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:06:35.814 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47302 10 6452 1 2025-11-01 15:07:36.219 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57920 10 6452 1 2025-11-01 15:08:36.620 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51448 10 6452 1 2025-11-01 15:03:53.619 00:06:00.277 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 15:09:36.986 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60154 10 6452 1 2025-11-01 15:04:53.623 00:06:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 15:10:37.401 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:35634 10 6452 1 2025-11-01 15:11:11.634 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:11:11.598 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:11:11.216 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:11:11.552 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:11:11.422 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:11:37.860 00:00:10.848 TCP 1.101.0.1:3000 -> 23.104.0.1:41544 10 6452 1 2025-11-01 15:12:38.747 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52702 10 6452 1 2025-11-01 15:13:39.148 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56586 10 6452 1 2025-11-01 15:14:39.551 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39664 10 6452 1 2025-11-01 15:15:39.917 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45410 10 6452 1 2025-11-01 15:10:53.621 00:06:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 15:16:11.633 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:16:11.556 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:16:11.598 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:16:11.725 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:16:11.682 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:16:40.321 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36686 10 6452 1 2025-11-01 15:11:53.624 00:06:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 15:17:40.681 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:49842 10 6452 1 2025-11-01 15:18:41.116 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34454 10 6452 1 2025-11-01 15:19:41.525 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59822 10 6452 1 2025-11-01 15:20:41.951 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57756 10 6452 1 2025-11-01 15:21:11.831 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:21:11.782 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:21:11.835 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:21:11.987 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:21:11.917 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:21:42.362 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53498 10 6452 1 2025-11-01 15:17:53.626 00:06:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 15:22:42.770 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34028 10 6452 1 2025-11-01 15:23:43.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49514 10 6452 1 2025-11-01 15:18:53.629 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 15:24:43.596 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35496 10 6452 1 2025-11-01 15:25:43.964 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58690 10 6452 1 2025-11-01 15:26:11.630 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:26:11.863 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:26:11.672 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:26:11.548 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:26:11.757 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:26:44.371 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42122 10 6452 1 2025-11-01 15:27:44.780 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36084 10 6452 1 2025-11-01 15:28:45.184 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34810 10 6452 1 2025-11-01 15:24:53.628 00:06:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 15:29:45.585 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40670 10 6452 1 2025-11-01 15:25:53.630 00:06:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 15:30:45.997 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:50614 10 6452 1 2025-11-01 15:31:11.914 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:31:11.691 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:31:11.722 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:31:11.917 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:31:11.805 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:31:46.398 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39770 10 6452 1 2025-11-01 15:32:46.796 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39428 10 6452 1 2025-11-01 15:33:47.212 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39308 10 6452 1 2025-11-01 15:34:47.613 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39400 10 6452 1 2025-11-01 15:35:48.018 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56630 10 6452 1 2025-11-01 15:36:11.943 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:36:11.786 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:36:11.863 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:36:11.860 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:36:11.783 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:31:53.631 00:06:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 15:36:48.384 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44556 10 6452 1 2025-11-01 15:32:53.635 00:06:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 15:37:48.748 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58984 10 6452 1 2025-11-01 15:38:49.152 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38314 10 6452 1 2025-11-01 15:39:49.522 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39432 10 6452 1 2025-11-01 15:40:49.884 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38840 10 6452 1 2025-11-01 15:41:12.073 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:41:11.823 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:41:12.082 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:41:12.002 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:41:12.165 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:41:50.243 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59894 10 6452 1 2025-11-01 15:42:50.649 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40076 10 6452 1 2025-11-01 15:38:53.631 00:06:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 15:43:51.076 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41010 10 6452 1 2025-11-01 15:39:53.635 00:06:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 15:44:51.479 00:00:10.751 TCP 1.101.0.1:3000 -> 23.104.0.1:43202 10 6452 1 2025-11-01 15:45:52.272 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53994 10 6452 1 2025-11-01 15:46:12.147 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:46:12.049 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:46:12.196 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:46:12.064 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:46:12.252 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:46:52.682 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35584 10 6452 1 2025-11-01 15:47:53.060 00:00:10.592 TCP 1.101.0.1:3000 -> 23.104.0.1:60348 10 6452 1 2025-11-01 15:48:53.691 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32822 10 6452 1 2025-11-01 15:49:54.113 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47608 10 6452 1 2025-11-01 15:45:53.634 00:06:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 15:50:54.478 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57312 10 6452 1 2025-11-01 15:51:12.259 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:51:12.085 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:51:12.401 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:51:12.330 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:51:12.483 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:46:53.637 00:06:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 15:51:54.889 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37370 10 6452 1 2025-11-01 15:52:55.303 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34286 10 6452 1 2025-11-01 15:53:55.664 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6452 1 2025-11-01 15:54:56.071 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33626 10 6452 1 2025-11-01 15:55:56.435 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37814 10 6452 1 2025-11-01 15:56:12.921 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 15:56:12.839 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 15:56:12.360 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:56:12.839 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 15:56:12.836 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 15:56:56.838 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:38218 10 6452 1 2025-11-01 15:52:53.635 00:06:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 15:57:57.260 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56492 10 6452 1 Summary: total flows: 136, total bytes: 410425, total packets: 1008, avg bps: 882, avg pps: 0, avg bpp: 407 Time window: 2025-11-01 14:56:53 - 2025-11-01 15:58:53 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0039s User: 0.0029s Wall: 0.0021s flows/second: 64828.4 Runtime: 0.0021s