Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 22:59:25.027 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54700 10 6452 1 2025-11-02 23:00:25.426 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48284 10 6452 1 2025-11-02 23:01:25.839 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49994 10 6452 1 2025-11-02 23:01:49.764 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:01:49.776 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:01:49.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:01:49.680 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:01:49.931 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:56:54.241 00:06:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-02 23:02:26.238 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58722 10 6452 1 2025-11-02 23:03:26.650 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53346 11 6492 1 2025-11-02 22:58:54.245 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-02 23:04:27.056 00:00:10.628 TCP 1.101.0.1:3000 -> 23.104.0.1:58568 10 6452 1 2025-11-02 23:05:27.726 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58164 10 6452 1 2025-11-02 23:06:28.146 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47244 10 6452 1 2025-11-02 23:06:50.050 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:06:49.883 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:06:49.857 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:06:49.967 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:06:49.941 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:07:28.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54410 10 6452 1 2025-11-02 23:08:28.952 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42854 10 6452 1 2025-11-02 23:03:54.242 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-02 23:09:29.360 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52674 10 6452 1 2025-11-02 23:10:29.760 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59696 10 6452 1 2025-11-02 23:05:54.246 00:06:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-02 23:11:30.179 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45728 10 6452 1 2025-11-02 23:11:49.931 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:11:49.776 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:11:49.862 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:11:49.842 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:11:50.014 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:12:30.587 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41612 10 6452 1 2025-11-02 23:13:30.989 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46788 10 6452 1 2025-11-02 23:14:31.401 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53318 10 6452 1 2025-11-02 23:15:31.809 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55382 10 6452 1 2025-11-02 23:10:54.245 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-02 23:16:32.223 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35324 10 6452 1 2025-11-02 23:16:49.944 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:16:50.068 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:16:50.014 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:16:50.012 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:16:50.095 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:17:32.626 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38182 10 6452 1 2025-11-02 23:12:54.248 00:06:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-02 23:18:33.030 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44192 10 6452 1 2025-11-02 23:19:33.438 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54310 10 6452 1 2025-11-02 23:20:33.843 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:37588 10 6452 1 2025-11-02 23:21:34.267 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58378 10 6452 1 2025-11-02 23:21:50.241 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:21:50.314 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:21:50.178 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:21:50.157 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:21:50.278 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:22:34.673 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34578 10 6452 1 2025-11-02 23:17:54.247 00:06:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-02 23:23:35.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33758 10 6452 1 2025-11-02 23:24:35.515 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:57212 10 6452 1 2025-11-02 23:19:54.248 00:06:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-02 23:25:35.891 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55928 10 6452 1 2025-11-02 23:26:50.330 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:26:50.003 00:00:00.036 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:26:36.311 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43626 10 6452 1 2025-11-02 23:26:50.270 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:26:50.276 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:26:50.352 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:27:36.718 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56090 10 6452 1 2025-11-02 23:28:37.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 2025-11-02 23:29:37.518 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38200 10 6452 1 2025-11-02 23:24:54.246 00:06:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-02 23:30:37.923 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50570 10 6452 1 2025-11-02 23:31:50.456 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:31:38.332 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:37630 10 6452 1 2025-11-02 23:31:50.376 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:31:50.500 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:31:50.373 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:31:50.266 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:26:54.249 00:06:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-02 23:32:38.688 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50416 10 6452 1 2025-11-02 23:33:39.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33550 10 6452 1 2025-11-02 23:34:39.515 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41414 10 6452 1 2025-11-02 23:35:39.920 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:44628 10 6452 1 2025-11-02 23:36:40.285 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45024 10 6452 1 2025-11-02 23:36:50.434 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:36:50.563 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:36:50.426 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:36:50.497 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:36:50.507 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:31:54.246 00:06:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-02 23:37:40.700 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49500 10 6452 1 2025-11-02 23:38:41.109 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:47274 11 6504 1 2025-11-02 23:33:54.253 00:06:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-02 23:39:41.569 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46598 10 6452 1 2025-11-02 23:40:41.984 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44076 10 6452 1 2025-11-02 23:41:50.709 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:41:50.712 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:41:50.647 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:41:50.644 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:41:50.732 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:41:42.387 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45710 10 6452 1 2025-11-02 23:42:42.793 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53430 10 6452 1 2025-11-02 23:38:54.249 00:06:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-02 23:43:43.206 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60574 10 6452 1 2025-11-02 23:44:43.614 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53314 10 6452 1 2025-11-02 23:45:44.018 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48324 10 6452 1 2025-11-02 23:40:54.252 00:06:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-02 23:46:50.683 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:46:50.792 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:46:50.823 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:46:50.829 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:46:50.906 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:46:44.428 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53444 10 6452 1 2025-11-02 23:47:44.839 00:00:11.012 TCP 1.101.0.1:3000 -> 23.104.0.1:56598 10 6452 1 2025-11-02 23:48:45.887 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:38918 10 6452 1 2025-11-02 23:49:46.270 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:56012 10 6452 1 2025-11-02 23:45:54.250 00:06:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-02 23:50:46.747 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36810 10 6452 1 2025-11-02 23:51:51.029 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:51:50.886 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:51:50.946 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:51:51.181 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:51:51.068 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:51:47.156 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40304 10 6452 1 2025-11-02 23:47:54.255 00:06:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-02 23:52:47.556 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34018 10 6452 1 2025-11-02 23:53:47.921 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54618 10 6452 1 2025-11-02 23:54:48.337 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43258 10 6452 1 2025-11-02 23:55:48.697 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39772 10 6452 1 2025-11-02 23:56:50.771 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:56:50.624 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:56:50.786 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:56:50.857 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:56:50.869 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:56:49.071 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:59246 11 6504 1 2025-11-02 23:52:54.255 00:06:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-02 23:57:49.526 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49718 10 6452 1 Summary: total flows: 136, total bytes: 410569, total packets: 1011, avg bps: 882, avg pps: 0, avg bpp: 406 Time window: 2025-11-02 22:56:54 - 2025-11-02 23:58:54 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0034s User: 0.0009s Wall: 0.0027s flows/second: 50935.4 Runtime: 0.0027s