Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 18:58:41.649 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44922 10 6452 1 2025-11-03 18:59:42.005 00:00:11.800 TCP 1.101.0.1:3000 -> 23.104.0.1:59656 10 6452 1 2025-11-03 19:00:43.841 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49472 10 6452 1 2025-11-03 18:56:54.669 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 19:01:44.264 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48180 10 6452 1 2025-11-03 19:02:13.980 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:02:13.845 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:02:13.963 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:02:13.943 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:02:14.045 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:02:44.671 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59616 10 6452 1 2025-11-03 18:58:54.673 00:05:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 19:03:45.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43890 10 6452 1 2025-11-03 19:04:45.511 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47350 10 6452 1 2025-11-03 19:05:45.922 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:45120 12 10375 1 2025-11-03 19:02:54.671 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 19:06:46.356 00:00:10.529 TCP 1.101.0.1:3000 -> 23.104.0.1:36380 10 6452 1 2025-11-03 19:07:14.004 00:00:00.050 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:07:13.726 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:07:13.841 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:07:14.139 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:07:13.923 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:07:46.923 00:00:10.593 TCP 1.101.0.1:3000 -> 23.104.0.1:35808 10 6452 1 2025-11-03 19:04:54.678 00:05:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 19:08:47.561 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57278 10 6452 1 2025-11-03 19:09:47.963 00:00:10.670 TCP 1.101.0.1:3000 -> 23.104.0.1:39500 10 6452 1 2025-11-03 19:10:48.673 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48562 10 6452 1 2025-11-03 19:11:49.037 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47674 10 6452 1 2025-11-03 19:12:14.274 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:12:14.158 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:12:13.938 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:12:14.192 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:12:14.112 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:08:54.675 00:05:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 19:12:49.441 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33256 10 6452 1 2025-11-03 19:13:49.840 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:45018 10 6452 1 2025-11-03 19:10:54.678 00:05:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 19:14:50.269 00:00:10.691 TCP 1.101.0.1:3000 -> 23.104.0.1:45334 10 6452 1 2025-11-03 19:15:51.011 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50114 10 6452 1 2025-11-03 19:16:51.410 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51826 10 6452 1 2025-11-03 19:17:14.596 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:17:14.506 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:17:14.613 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:17:14.498 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:17:14.514 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:17:51.810 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37158 10 6452 1 2025-11-03 19:14:54.675 00:05:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 19:18:52.178 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35450 10 6452 1 2025-11-03 19:19:52.579 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45692 10 6452 1 2025-11-03 19:16:54.679 00:05:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 19:20:52.984 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53976 10 6452 1 2025-11-03 19:21:53.387 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-11-03 19:22:14.340 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:22:14.149 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:22:14.272 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:22:14.257 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:22:14.321 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:22:53.796 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38038 10 6452 1 2025-11-03 19:23:54.184 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52694 10 6452 1 2025-11-03 19:20:54.677 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 19:24:54.583 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:41084 10 6452 1 2025-11-03 19:25:54.952 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48652 10 6452 1 2025-11-03 19:22:54.679 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 19:26:55.355 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37262 10 6452 1 2025-11-03 19:27:14.487 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:27:14.342 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:27:14.301 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:27:14.404 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:27:14.470 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:27:55.754 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:35968 10 6452 1 2025-11-03 19:28:56.180 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49528 10 6452 1 2025-11-03 19:29:56.582 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:45044 10 6452 1 2025-11-03 19:26:54.679 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 19:30:56.947 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:58396 12 10375 1 2025-11-03 19:32:14.761 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:31:57.433 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37278 10 6452 1 2025-11-03 19:32:14.516 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:32:14.426 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:32:14.679 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:32:14.719 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:28:54.680 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 19:32:57.836 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:36912 10 6452 1 2025-11-03 19:33:58.263 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57954 10 6452 1 2025-11-03 19:34:58.675 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46642 10 6452 1 2025-11-03 19:35:59.102 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50536 10 6452 1 2025-11-03 19:32:54.678 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 19:36:59.503 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42706 10 6452 1 2025-11-03 19:37:14.550 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:37:14.479 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:37:14.288 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:37:14.467 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:37:14.669 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:37:59.881 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52590 10 6452 1 2025-11-03 19:34:54.681 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 19:39:00.292 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43148 10 6452 1 2025-11-03 19:40:00.700 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:46728 10 6452 1 2025-11-03 19:41:01.151 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33434 10 6452 1 2025-11-03 19:42:14.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:42:14.795 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:42:14.586 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:42:14.739 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:42:01.551 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37248 10 6452 1 2025-11-03 19:42:14.737 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:38:54.679 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 19:43:01.948 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59200 10 6452 1 2025-11-03 19:44:02.355 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57836 10 6452 1 2025-11-03 19:40:54.682 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 19:45:02.762 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:40536 10 6452 1 2025-11-03 19:46:03.131 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33274 10 6452 1 2025-11-03 19:47:14.826 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:47:03.537 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55448 10 6452 1 2025-11-03 19:47:14.878 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:47:14.770 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:47:14.744 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:47:14.542 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:48:03.936 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50402 10 6452 1 2025-11-03 19:44:54.681 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 19:49:04.357 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41790 10 6452 1 2025-11-03 19:50:04.760 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40574 10 6452 1 2025-11-03 19:46:54.687 00:05:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 19:51:05.179 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32804 10 6452 1 2025-11-03 19:52:15.036 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:52:05.582 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41776 10 6452 1 2025-11-03 19:52:14.864 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:52:14.970 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:52:14.952 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:52:14.959 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:53:05.950 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39050 10 6452 1 2025-11-03 19:54:06.363 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:41278 10 6452 1 2025-11-03 19:50:54.689 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 19:55:06.795 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38554 10 6452 1 2025-11-03 19:56:07.210 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50564 10 6452 1 2025-11-03 19:52:54.693 00:05:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 19:57:15.010 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 19:57:14.964 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:57:15.134 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 19:57:14.921 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 19:57:15.218 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 19:57:07.628 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44390 12 6556 1 2025-11-03 19:58:08.034 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40838 10 6452 1 Summary: total flows: 140, total bytes: 424950, total packets: 1026, avg bps: 922, avg pps: 0, avg bpp: 414 Time window: 2025-11-03 18:56:54 - 2025-11-03 19:58:18 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0045s User: 0.0011s Wall: 0.0021s flows/second: 65793.0 Runtime: 0.0021s