Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 07:59:20.942 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:54310 10 6452 1 2025-11-10 08:00:23.084 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:00:22.924 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:00:22.824 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:00:22.949 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:00:23.167 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:00:21.364 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47846 10 6452 1 2025-11-10 08:01:21.775 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46736 10 6452 1 2025-11-10 07:56:58.369 00:06:00.034 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 07:56:58.394 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 08:02:22.185 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43208 10 6452 1 2025-11-10 08:03:22.587 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34844 10 6452 1 2025-11-10 08:04:22.984 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:37232 10 6452 1 2025-11-10 08:05:22.903 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:05:22.848 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:05:22.897 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:05:22.970 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:05:22.980 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:05:23.417 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48734 10 6452 1 2025-11-10 08:06:23.779 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39946 10 6452 1 2025-11-10 08:07:24.186 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45916 10 6452 1 2025-11-10 08:08:24.585 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:41460 12 10375 1 2025-11-10 08:03:58.399 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 08:03:58.373 00:06:00.029 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 08:09:25.090 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35472 10 6452 1 2025-11-10 08:10:23.059 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:10:22.977 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:10:23.070 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:10:22.976 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:10:22.981 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:10:25.488 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58952 10 6452 1 2025-11-10 08:11:25.893 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:54378 10 6452 1 2025-11-10 08:12:26.275 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50074 10 6452 1 2025-11-10 08:13:26.681 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60148 10 6452 1 2025-11-10 08:14:27.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45376 10 6452 1 2025-11-10 08:15:23.047 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:15:22.940 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:15:23.050 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:15:22.928 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:15:23.134 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:15:27.510 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47846 10 6452 1 2025-11-10 08:10:58.374 00:06:00.029 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 08:10:58.400 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 08:16:27.914 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35658 10 6452 1 2025-11-10 08:17:28.320 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33700 10 6452 1 2025-11-10 08:18:28.726 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45428 10 6452 1 2025-11-10 08:19:29.101 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40278 10 6452 1 2025-11-10 08:20:23.163 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:20:23.373 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:20:23.239 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:20:23.360 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:20:23.323 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:20:29.505 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44656 10 6452 1 2025-11-10 08:21:29.864 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56148 10 6452 1 2025-11-10 08:22:30.279 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36284 10 6452 1 2025-11-10 08:17:58.378 00:06:00.028 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 08:17:58.401 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 08:23:30.691 00:00:10.539 TCP 1.101.0.1:3000 -> 23.104.0.1:48294 10 6452 1 2025-11-10 08:24:31.270 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51970 10 6452 1 2025-11-10 08:25:23.344 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:25:23.343 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:25:23.176 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:25:23.419 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:25:23.259 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:25:31.671 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50096 10 6452 1 2025-11-10 08:26:32.102 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43784 10 6452 1 2025-11-10 08:27:32.508 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59240 10 6452 1 2025-11-10 08:28:32.915 00:00:10.948 TCP 1.101.0.1:3000 -> 23.104.0.1:36010 10 6452 1 2025-11-10 08:29:33.899 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:37508 10 6452 1 2025-11-10 08:24:58.376 00:06:00.036 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 08:24:58.404 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 08:30:23.318 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:30:23.266 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:30:23.300 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:30:23.327 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:30:23.382 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:30:34.311 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41822 10 6452 1 2025-11-10 08:31:34.718 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:46684 10 6452 1 2025-11-10 08:32:35.110 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52528 10 6452 1 2025-11-10 08:33:35.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39168 10 6452 1 2025-11-10 08:34:35.914 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42030 10 6452 1 2025-11-10 08:35:23.611 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:35:23.168 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:35:23.570 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:35:23.356 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:35:23.653 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:35:36.322 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45620 10 6452 1 2025-11-10 08:36:36.727 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45418 10 6452 1 2025-11-10 08:31:58.381 00:06:00.033 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 08:31:58.412 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 08:37:37.130 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59662 10 6452 1 2025-11-10 08:38:37.531 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54698 10 6452 1 2025-11-10 08:39:37.891 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:35282 10 6452 1 2025-11-10 08:40:23.500 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:40:23.279 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:40:23.668 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:40:23.669 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:40:23.754 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:40:38.267 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53128 10 6452 1 2025-11-10 08:41:38.679 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45242 10 6452 1 2025-11-10 08:42:39.107 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34618 10 6452 1 2025-11-10 08:43:39.510 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54838 10 6452 1 2025-11-10 08:38:58.382 00:06:00.034 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 08:38:58.411 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 08:44:39.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56620 10 6452 1 2025-11-10 08:45:23.612 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:45:23.612 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:45:23.762 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:45:23.649 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:45:23.696 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:45:40.317 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53362 10 6452 1 2025-11-10 08:46:40.681 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57108 10 6452 1 2025-11-10 08:47:41.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39994 10 6452 1 2025-11-10 08:48:41.510 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51290 10 6452 1 2025-11-10 08:49:41.914 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50498 10 6452 1 2025-11-10 08:50:23.833 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:50:23.441 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:50:23.693 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:50:23.833 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:50:23.778 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:50:42.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59474 10 6452 1 2025-11-10 08:45:58.384 00:06:00.036 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 08:45:58.415 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 08:51:42.720 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57710 10 6452 1 2025-11-10 08:52:43.129 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49062 10 6452 1 2025-11-10 08:53:43.546 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35336 10 6452 1 2025-11-10 08:54:43.945 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39042 10 6452 1 2025-11-10 08:55:23.817 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 08:55:23.730 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:55:23.718 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 08:55:23.812 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 08:55:23.801 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 08:55:44.361 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42256 10 6452 1 2025-11-10 08:56:44.767 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:33688 10 6452 1 2025-11-10 08:57:45.186 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35426 10 6452 1 2025-11-10 08:52:58.417 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 08:52:58.387 00:06:00.036 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 137, total bytes: 411933, total packets: 961, avg bps: 885, avg pps: 0, avg bpp: 428 Time window: 2025-11-10 07:56:58 - 2025-11-10 08:58:58 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0045s User: 0.0011s Wall: 0.0020s flows/second: 67419.9 Runtime: 0.0020s