Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 10:59:35.312 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39936 10 6452 1 2025-11-10 11:00:26.238 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:00:26.363 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:00:26.274 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:00:26.155 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:00:26.413 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:00:35.712 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53442 10 6452 1 2025-11-10 11:01:36.126 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45082 10 6452 1 2025-11-10 11:02:36.522 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33016 10 6452 1 2025-11-10 11:03:36.944 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:42594 12 10369 1 2025-11-10 10:58:58.434 00:06:00.027 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 10:58:58.457 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 11:04:37.434 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39932 10 6452 1 2025-11-10 11:05:26.626 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:05:26.296 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:05:26.333 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:05:26.543 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:05:26.475 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:05:37.865 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55130 10 6452 1 2025-11-10 11:06:38.232 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58956 10 6452 1 2025-11-10 11:07:38.597 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45672 10 6452 1 2025-11-10 11:08:39.009 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45268 10 6452 1 2025-11-10 11:09:39.381 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54468 10 6452 1 2025-11-10 11:10:26.541 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:10:26.680 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:10:26.432 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:10:26.457 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:10:26.685 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:10:39.788 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54456 10 6452 1 2025-11-10 11:05:58.461 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 11:05:58.437 00:06:00.027 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 11:11:40.192 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34702 10 6452 1 2025-11-10 11:12:40.596 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48898 10 6452 1 2025-11-10 11:13:41.001 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40614 10 6452 1 2025-11-10 11:14:41.400 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33710 10 6452 1 2025-11-10 11:15:26.842 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:15:26.906 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:15:26.841 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:15:26.773 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:15:26.924 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:15:41.802 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45178 10 6452 1 2025-11-10 11:16:42.209 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54200 10 6452 1 2025-11-10 11:17:42.613 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:59972 12 10375 1 2025-11-10 11:12:58.462 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 11:12:58.439 00:06:00.027 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 11:18:43.109 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48940 10 6452 1 2025-11-10 11:19:43.517 00:00:10.735 TCP 1.101.0.1:3000 -> 23.104.0.1:47148 10 6452 1 2025-11-10 11:20:26.967 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:20:26.364 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:20:26.657 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:20:26.655 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:20:26.740 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:20:44.286 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52064 10 6452 1 2025-11-10 11:21:44.694 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34654 10 6452 1 2025-11-10 11:22:45.109 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:59672 12 10375 1 2025-11-10 11:23:45.594 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40488 10 6452 1 2025-11-10 11:19:58.440 00:06:00.026 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 11:24:46.004 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38000 10 6452 1 2025-11-10 11:19:58.464 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 11:25:26.748 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:25:26.611 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:25:26.814 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:25:26.833 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:25:26.896 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:25:46.407 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37714 10 6452 1 2025-11-10 11:26:46.812 00:00:10.848 TCP 1.101.0.1:3000 -> 23.104.0.1:39226 10 6452 1 2025-11-10 11:27:47.696 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40840 10 6452 1 2025-11-10 11:28:48.091 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46096 10 6452 1 2025-11-10 11:29:48.499 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43272 10 6452 1 2025-11-10 11:30:27.000 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:30:26.956 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:30:26.958 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:30:27.053 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:30:27.082 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:30:48.901 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:55878 10 6452 1 2025-11-10 11:31:49.269 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:53798 10 6452 1 2025-11-10 11:26:58.465 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 11:26:58.442 00:06:00.029 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 11:32:49.710 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43194 10 6452 1 2025-11-10 11:33:50.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33240 10 6452 1 2025-11-10 11:34:50.514 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:32822 10 6452 1 2025-11-10 11:35:26.973 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:35:26.685 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:35:27.076 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:35:26.971 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:35:27.161 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:35:50.881 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34800 10 6452 1 2025-11-10 11:36:51.288 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56790 10 6452 1 2025-11-10 11:37:51.693 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51472 10 6452 1 2025-11-10 11:33:58.442 00:06:00.030 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 11:33:58.469 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 11:38:52.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52224 10 6452 1 2025-11-10 11:39:52.514 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50114 10 6452 1 2025-11-10 11:40:27.225 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:40:27.138 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:40:27.215 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:40:27.143 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:40:27.132 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:40:52.924 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:40248 10 6452 1 2025-11-10 11:41:53.339 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:38944 10 6452 1 2025-11-10 11:42:53.778 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50344 10 6452 1 2025-11-10 11:43:54.145 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55314 10 6452 1 2025-11-10 11:44:54.511 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33800 10 6452 1 2025-11-10 11:45:27.268 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:45:27.112 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:45:26.990 00:00:00.054 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:45:27.185 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:45:27.244 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:40:58.446 00:06:00.039 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 11:40:58.470 00:06:00.011 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 11:45:54.914 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49520 10 6452 1 2025-11-10 11:46:55.273 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35906 10 6452 1 2025-11-10 11:47:55.674 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51824 10 6452 1 2025-11-10 11:48:56.036 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47642 10 6452 1 2025-11-10 11:49:56.436 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35684 10 6452 1 2025-11-10 11:50:27.340 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:50:27.259 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:50:27.285 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:50:27.257 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:50:27.319 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:50:56.836 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:35676 10 6452 1 2025-11-10 11:51:57.275 00:00:15.893 TCP 1.101.0.1:3000 -> 23.104.0.1:42216 10 6452 1 2025-11-10 11:47:58.484 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 11:47:58.448 00:06:00.040 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 11:53:03.214 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:37492 12 10375 1 2025-11-10 11:54:03.695 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59550 10 6452 1 2025-11-10 11:55:04.115 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51790 10 6452 1 2025-11-10 11:55:27.488 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 11:55:27.354 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 11:55:27.297 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:55:27.406 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 11:55:27.234 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 11:56:04.518 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35562 10 6452 1 2025-11-10 11:57:04.877 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59444 10 6452 1 2025-11-10 11:58:05.284 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60932 10 6452 1 Summary: total flows: 135, total bytes: 422338, total packets: 946, avg bps: 949, avg pps: 0, avg bpp: 446 Time window: 2025-11-10 10:58:58 - 2025-11-10 11:58:15 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0040s User: 0.0000s Wall: 0.0012s flows/second: 108535.8 Runtime: 0.0013s