Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 14:58:53.781 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44272 10 6452 1 2025-11-03 14:59:54.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58786 10 6452 1 2025-11-03 14:55:54.603 00:06:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 15:00:54.593 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57490 10 6452 1 2025-11-03 15:01:54.957 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36608 10 6452 1 2025-11-03 15:02:09.078 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:02:08.988 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:02:09.076 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:02:09.135 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:02:09.159 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 14:57:54.605 00:06:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 15:02:55.319 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59140 10 6452 1 2025-11-03 15:03:55.714 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6452 1 2025-11-03 15:04:56.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45190 10 6452 1 2025-11-03 15:05:56.512 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52800 10 6452 1 2025-11-03 15:07:09.407 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 15:07:09.316 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:07:09.319 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:07:09.324 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:07:09.233 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:06:56.911 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38940 12 6556 1 2025-11-03 15:02:54.605 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 15:07:57.314 00:00:11.117 TCP 1.101.0.1:3000 -> 23.104.0.1:60082 10 6452 1 2025-11-03 15:08:58.473 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37426 10 6452 1 2025-11-03 15:04:54.607 00:06:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 15:09:58.877 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53670 10 6452 1 2025-11-03 15:10:59.280 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:36192 12 10369 1 2025-11-03 15:12:09.406 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:12:09.286 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:12:09.401 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:12:09.346 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:11:59.763 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52298 10 6452 1 2025-11-03 15:12:09.484 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 15:13:00.170 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48154 10 6452 1 2025-11-03 15:14:00.575 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50696 10 6452 1 2025-11-03 15:09:54.606 00:06:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 15:15:00.977 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46244 10 6452 1 2025-11-03 15:16:01.384 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40274 10 6452 1 2025-11-03 15:11:54.608 00:06:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 15:17:09.389 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:17:09.289 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:17:09.451 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:17:09.539 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:17:09.534 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 15:17:01.788 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43888 10 6452 1 2025-11-03 15:18:02.191 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59220 10 6452 1 2025-11-03 15:19:02.559 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 10 6452 1 2025-11-03 15:20:02.966 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45772 10 6452 1 2025-11-03 15:21:03.367 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46232 10 6452 1 2025-11-03 15:16:54.608 00:06:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 15:22:09.508 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 15:22:09.419 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:22:09.279 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:22:09.425 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:22:09.328 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:22:03.769 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52766 12 6556 1 2025-11-03 15:23:04.180 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:32990 10 6452 1 2025-11-03 15:18:54.611 00:06:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 15:24:04.593 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35958 10 6452 1 2025-11-03 15:25:05.000 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38742 10 6452 1 2025-11-03 15:26:05.411 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50448 10 6452 1 2025-11-03 15:27:09.422 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:27:09.707 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:27:09.547 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:27:09.649 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:27:09.629 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 15:27:05.824 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57638 10 6452 1 2025-11-03 15:28:06.234 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46884 10 6452 1 2025-11-03 15:23:54.608 00:06:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 15:29:06.634 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59614 10 6452 1 2025-11-03 15:30:07.001 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:59150 12 10375 1 2025-11-03 15:25:54.613 00:06:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 15:31:07.480 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33702 10 6452 1 2025-11-03 15:32:09.694 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 15:32:09.699 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:32:09.730 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:32:09.613 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:32:09.833 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:32:07.845 00:00:10.738 TCP 1.101.0.1:3000 -> 23.104.0.1:59062 10 6452 1 2025-11-03 15:33:08.618 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38774 10 6452 1 2025-11-03 15:34:09.023 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57048 10 6452 1 2025-11-03 15:35:09.424 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:36806 10 6452 1 2025-11-03 15:30:54.609 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 15:36:09.876 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41126 10 6452 1 2025-11-03 15:37:09.858 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 15:37:09.862 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:37:09.698 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:37:09.776 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:37:09.862 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:37:10.239 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42214 10 6452 1 2025-11-03 15:32:54.612 00:06:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 15:38:10.643 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49668 10 6452 1 2025-11-03 15:39:11.049 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:44672 10 6452 1 2025-11-03 15:40:11.414 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33612 10 6452 1 2025-11-03 15:41:11.822 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49014 10 6452 1 2025-11-03 15:42:09.938 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 15:42:10.203 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:42:10.087 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:42:09.855 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:42:10.243 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:42:12.189 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42762 10 6452 1 2025-11-03 15:37:54.612 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 15:43:12.591 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38054 10 6452 1 2025-11-03 15:44:13.003 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57968 10 6452 1 2025-11-03 15:39:54.616 00:06:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 15:45:13.405 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40784 10 6452 1 2025-11-03 15:46:13.766 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51536 10 6452 1 2025-11-03 15:47:09.924 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:47:09.770 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:47:10.096 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:47:10.003 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:47:10.179 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 15:47:14.171 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59412 10 6452 1 2025-11-03 15:48:14.576 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52344 10 6452 1 2025-11-03 15:49:14.983 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:52382 10 6452 1 2025-11-03 15:44:54.614 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 15:50:15.412 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40478 10 6452 1 2025-11-03 15:51:15.774 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42226 10 6452 1 2025-11-03 15:46:54.616 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 15:52:10.230 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 15:52:10.148 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:52:10.047 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:52:10.145 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:52:10.073 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:52:16.184 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:43490 10 6452 1 2025-11-03 15:53:16.544 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51520 10 6452 1 2025-11-03 15:54:16.908 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42220 10 6452 1 2025-11-03 15:55:17.277 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38768 10 6452 1 2025-11-03 15:56:17.688 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40076 10 6452 1 2025-11-03 15:51:54.616 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 15:57:10.074 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 15:57:10.101 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:57:09.918 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 15:57:10.338 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 15:57:10.003 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 15:57:18.142 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44342 10 6452 1 2025-11-03 15:58:18.540 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32888 10 6452 1 Summary: total flows: 137, total bytes: 424925, total packets: 1026, avg bps: 905, avg pps: 0, avg bpp: 414 Time window: 2025-11-03 14:55:54 - 2025-11-03 15:58:28 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0033s User: 0.0022s Wall: 0.0024s flows/second: 58195.2 Runtime: 0.0024s