Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 22:54:53.749 00:05:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 22:59:34.664 00:00:10.801 TCP 1.101.0.1:3000 -> 23.104.0.1:47928 12 10375 1 2025-11-01 22:55:53.754 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:00:35.503 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36424 10 6452 1 2025-11-01 23:01:20.875 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:01:20.660 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:01:20.710 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:01:20.873 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:01:20.792 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:01:35.912 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57696 10 6452 1 2025-11-01 23:02:36.272 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47802 10 6452 1 2025-11-01 23:03:36.678 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56324 10 6452 1 2025-11-01 23:04:37.116 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54330 10 6452 1 2025-11-01 23:00:53.753 00:05:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:05:37.491 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50266 10 6452 1 2025-11-01 23:01:53.756 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:06:20.920 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:06:20.826 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:06:20.923 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:06:21.188 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:06:21.271 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:06:37.857 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34228 10 6452 1 2025-11-01 23:07:38.272 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59932 10 6452 1 2025-11-01 23:08:38.673 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59868 10 6452 1 2025-11-01 23:09:39.039 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36956 10 6452 1 2025-11-01 23:10:39.451 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60856 10 6452 1 2025-11-01 23:06:53.756 00:05:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:11:21.437 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:11:21.433 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:11:21.110 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:11:21.355 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:11:21.440 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:11:39.809 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52106 10 6452 1 2025-11-01 23:07:53.759 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:12:40.179 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59648 10 6452 1 2025-11-01 23:13:40.576 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56122 10 6452 1 2025-11-01 23:14:40.986 00:00:11.417 TCP 1.101.0.1:3000 -> 23.104.0.1:33886 12 10375 1 2025-11-01 23:15:42.439 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42308 10 6452 1 2025-11-01 23:16:21.089 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:16:21.232 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:16:21.247 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:16:21.187 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:16:21.330 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:16:42.805 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37054 10 6452 1 2025-11-01 23:12:53.757 00:05:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:17:43.206 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34218 10 6452 1 2025-11-01 23:13:53.760 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:18:43.564 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33724 10 6452 1 2025-11-01 23:19:43.975 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40540 10 6452 1 2025-11-01 23:20:44.398 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44112 10 6452 1 2025-11-01 23:21:21.250 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:21:21.373 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:21:21.057 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:21:21.167 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:21:21.260 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:21:44.803 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57232 10 6452 1 2025-11-01 23:22:45.205 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46708 10 6452 1 2025-11-01 23:18:53.759 00:05:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:19:53.761 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:23:45.572 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44084 10 6452 1 2025-11-01 23:24:45.977 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43088 10 6452 1 2025-11-01 23:25:46.388 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60930 10 6452 1 2025-11-01 23:26:21.768 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:26:21.629 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:26:21.176 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:26:21.687 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:26:21.629 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:26:46.796 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:53752 10 6452 1 2025-11-01 23:27:47.173 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41364 10 6452 1 2025-11-01 23:24:53.759 00:05:00.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:28:47.582 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50208 10 6452 1 2025-11-01 23:25:53.762 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:29:47.947 00:00:10.525 TCP 1.101.0.1:3000 -> 23.104.0.1:59872 14 14292 1 2025-11-01 23:30:48.508 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35334 10 6452 1 2025-11-01 23:31:21.778 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:31:21.487 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:31:21.680 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:31:21.683 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:31:21.762 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:31:48.912 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56720 10 6452 1 2025-11-01 23:32:49.324 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39362 10 6452 1 2025-11-01 23:33:49.729 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55782 10 6452 1 2025-11-01 23:30:53.763 00:05:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:34:50.139 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37122 10 6452 1 2025-11-01 23:31:53.765 00:05:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:35:50.542 00:00:10.620 TCP 1.101.0.1:3000 -> 23.104.0.1:36420 10 6452 1 2025-11-01 23:36:21.753 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:36:21.672 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:36:21.481 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:36:21.670 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:36:21.535 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:36:51.201 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39140 10 6452 1 2025-11-01 23:37:51.600 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53334 10 6452 1 2025-11-01 23:38:52.007 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38860 10 6452 1 2025-11-01 23:39:52.405 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:50362 10 6452 1 2025-11-01 23:36:53.767 00:05:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:40:52.830 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46240 10 6452 1 2025-11-01 23:41:21.843 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:41:21.711 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:41:21.755 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:41:21.726 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:41:21.760 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:37:53.770 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:41:53.199 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39746 10 6452 1 2025-11-01 23:42:53.600 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53514 10 6452 1 2025-11-01 23:43:54.004 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55474 10 6452 1 2025-11-01 23:44:54.411 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53432 10 6452 1 2025-11-01 23:45:54.777 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51120 10 6452 1 2025-11-01 23:46:21.680 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:46:21.868 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:46:21.947 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:46:21.883 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:46:22.030 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:42:53.767 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:46:55.179 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35430 10 6452 1 2025-11-01 23:43:53.771 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:47:55.583 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46466 10 6452 1 2025-11-01 23:48:55.998 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42120 10 6452 1 2025-11-01 23:49:56.366 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60506 10 6452 1 2025-11-01 23:50:56.767 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35552 10 6452 1 2025-11-01 23:51:22.287 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:51:22.257 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:51:22.244 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:51:22.205 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:51:22.315 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:51:57.173 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-11-01 23:48:53.769 00:05:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:52:57.573 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46956 10 6452 1 2025-11-01 23:49:53.772 00:05:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:53:57.930 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:39876 10 6452 1 2025-11-01 23:54:58.360 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33078 10 6452 1 2025-11-01 23:55:58.770 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46068 10 6452 1 2025-11-01 23:56:22.112 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:56:22.051 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:56:22.257 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:56:22.109 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:56:22.341 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:56:59.187 00:00:10.542 TCP 1.101.0.1:3000 -> 23.104.0.1:43450 10 6452 1 2025-11-01 23:57:59.771 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40668 10 6452 1 Summary: total flows: 139, total bytes: 426234, total packets: 1018, avg bps: 898, avg pps: 0, avg bpp: 418 Time window: 2025-11-01 22:54:53 - 2025-11-01 23:58:10 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0025s User: 0.0025s Wall: 0.0017s flows/second: 83037.8 Runtime: 0.0017s