Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 21:58:59.099 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41446 10 6452 1 2025-11-09 21:54:58.054 00:06:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 21:54:58.052 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 22:00:10.741 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:59:59.502 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45146 10 6452 1 2025-11-09 22:00:10.719 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:00:10.638 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:00:10.658 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:00:10.818 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:00:59.869 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35850 10 6452 1 2025-11-09 22:02:00.279 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47014 10 6452 1 2025-11-09 22:03:00.703 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46404 10 6452 1 2025-11-09 22:04:01.116 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45984 10 6452 1 2025-11-09 22:05:10.892 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 22:05:10.804 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:05:10.554 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:05:10.808 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:05:10.739 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:05:01.524 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35354 10 6452 1 2025-11-09 22:06:01.936 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:58860 10 6452 1 2025-11-09 22:01:58.052 00:06:00.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 22:01:58.056 00:06:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 22:07:02.314 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56292 10 6452 1 2025-11-09 22:08:02.714 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54420 10 6452 1 2025-11-09 22:09:03.124 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57876 10 6452 1 2025-11-09 22:10:10.742 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 22:10:10.659 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:10:10.758 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:10:10.759 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:10:10.716 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:10:03.527 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54384 10 6452 1 2025-11-09 22:11:03.927 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35806 10 6452 1 2025-11-09 22:12:04.341 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48468 10 6452 1 2025-11-09 22:13:04.747 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:39028 10 6452 1 2025-11-09 22:08:58.057 00:06:00.069 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 22:08:58.053 00:06:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 22:14:05.189 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:51134 10 6452 1 2025-11-09 22:15:11.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:15:11.114 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:15:11.154 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:15:11.192 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:15:11.236 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 22:15:05.665 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6452 1 2025-11-09 22:16:06.093 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36700 10 6452 1 2025-11-09 22:17:06.466 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36036 10 6452 1 2025-11-09 22:18:06.870 00:00:10.560 TCP 1.101.0.1:3000 -> 23.104.0.1:56300 10 6452 1 2025-11-09 22:19:07.477 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34004 10 6452 1 2025-11-09 22:20:11.239 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:20:11.110 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:20:11.336 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:20:11.284 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:20:11.419 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 22:20:07.881 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46402 10 6452 1 2025-11-09 22:15:58.058 00:06:00.069 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 22:15:58.056 00:06:00.074 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 22:21:08.239 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55948 10 6452 1 2025-11-09 22:22:08.639 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37084 10 6452 1 2025-11-09 22:23:09.051 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39224 10 6452 1 2025-11-09 22:24:09.453 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47056 10 6452 1 2025-11-09 22:25:11.256 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:25:10.999 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:25:11.207 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:25:11.255 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:25:11.288 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 22:25:09.855 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42232 10 6452 1 2025-11-09 22:26:10.266 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39292 10 6452 1 2025-11-09 22:27:10.665 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44726 10 6452 1 2025-11-09 22:22:58.076 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 22:22:58.081 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 22:28:11.077 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47826 10 6452 1 2025-11-09 22:29:11.441 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42966 10 6452 1 2025-11-09 22:30:11.328 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 22:30:11.231 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:30:11.173 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:30:11.245 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:30:11.305 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:30:11.802 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40504 10 6452 1 2025-11-09 22:31:12.204 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59462 11 6504 1 2025-11-09 22:32:12.622 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50100 10 6452 1 2025-11-09 22:33:12.987 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59422 10 6452 1 2025-11-09 22:34:13.406 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44732 10 6452 1 2025-11-09 22:29:58.082 00:06:00.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 22:29:58.079 00:06:00.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 22:35:11.380 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:35:11.402 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:35:11.569 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:35:11.353 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:35:11.651 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 22:35:13.809 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34518 10 6452 1 2025-11-09 22:36:14.220 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46154 10 6452 1 2025-11-09 22:37:14.622 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44794 10 6452 1 2025-11-09 22:38:14.981 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:48160 12 10369 1 2025-11-09 22:39:15.472 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60324 12 6556 1 2025-11-09 22:40:12.504 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 22:40:12.369 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:40:12.257 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:40:12.420 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:40:12.364 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:40:15.871 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39834 10 6452 1 2025-11-09 22:41:16.281 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55384 10 6452 1 2025-11-09 22:36:58.083 00:06:00.052 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 22:36:58.080 00:06:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 22:42:16.678 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49618 10 6452 1 2025-11-09 22:43:17.035 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:35026 12 10375 1 2025-11-09 22:44:17.497 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55192 10 6452 1 2025-11-09 22:45:11.494 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:45:11.866 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:45:11.753 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:45:11.818 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:45:11.949 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 22:45:17.912 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60462 10 6452 1 2025-11-09 22:46:18.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35006 10 6452 1 2025-11-09 22:47:18.691 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59342 10 6452 1 2025-11-09 22:48:19.106 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50176 10 6452 1 2025-11-09 22:43:58.082 00:06:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 22:43:58.084 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 22:49:19.508 00:00:10.592 TCP 1.101.0.1:3000 -> 23.104.0.1:57346 10 6452 1 2025-11-09 22:50:11.867 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:50:11.704 00:00:00.034 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:50:11.869 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:50:11.734 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:50:11.952 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 22:50:20.142 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55166 10 6452 1 2025-11-09 22:51:20.545 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59590 10 6452 1 2025-11-09 22:52:20.953 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37428 10 6452 1 2025-11-09 22:53:21.360 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60476 10 6452 1 2025-11-09 22:54:21.771 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41600 10 6452 1 2025-11-09 22:55:11.837 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 22:55:11.807 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:55:11.689 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 22:55:11.684 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 22:55:11.773 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 22:55:22.181 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-11-09 22:50:58.082 00:06:00.060 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 22:50:58.085 00:06:00.055 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 22:56:22.582 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52218 10 6452 1 2025-11-09 22:57:23.006 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47144 10 6452 1 2025-11-09 22:58:23.403 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57586 10 6452 1 Summary: total flows: 138, total bytes: 425734, total packets: 1039, avg bps: 892, avg pps: 0, avg bpp: 409 Time window: 2025-11-09 21:54:58 - 2025-11-09 22:58:33 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0040s User: 0.0013s Wall: 0.0042s flows/second: 32997.8 Runtime: 0.0042s