Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 19:58:51.111 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60574 10 6452 1 2025-11-10 19:59:51.514 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48824 10 6452 1 2025-11-10 20:00:37.162 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:00:37.222 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:00:37.107 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:00:37.162 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:00:37.188 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:00:51.918 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36376 10 6452 1 2025-11-10 20:01:52.321 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55308 10 6452 1 2025-11-10 19:57:58.664 00:06:00.022 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 19:57:58.682 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-11-10 20:02:52.723 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43910 10 6452 1 2025-11-10 20:03:53.130 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55494 10 6452 1 2025-11-10 20:04:53.534 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35410 10 6452 1 2025-11-10 20:05:37.223 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:05:37.390 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:05:37.296 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:05:37.314 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:05:37.379 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:05:53.949 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51166 10 6452 1 2025-11-10 20:06:54.360 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48224 10 6452 1 2025-11-10 20:07:54.766 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46874 10 6452 1 2025-11-10 20:08:55.185 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55388 10 6452 1 2025-11-10 20:04:58.665 00:06:00.021 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 20:04:58.684 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-11-10 20:09:55.590 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44800 10 6452 1 2025-11-10 20:10:37.215 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:10:37.236 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:10:37.388 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:10:37.316 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:10:37.471 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:10:55.993 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37992 10 6452 1 2025-11-10 20:11:56.399 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56002 10 6452 1 2025-11-10 20:12:56.799 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52506 10 6452 1 2025-11-10 20:13:57.205 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34406 10 6452 1 2025-11-10 20:14:57.609 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58016 10 6452 1 2025-11-10 20:15:37.735 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:15:37.364 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:15:37.732 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:15:37.748 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:15:37.815 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:15:58.025 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38532 10 6452 1 2025-11-10 20:11:58.666 00:06:00.024 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 20:11:58.684 00:06:00.050 TCP 179.21.23.23:179 -> 179.21.23.21:38570 8 549 1 2025-11-10 20:16:58.430 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48102 10 6452 1 2025-11-10 20:17:58.840 00:00:10.470 TCP 1.101.0.1:3000 -> 23.104.0.1:60100 12 10375 1 2025-11-10 20:18:59.348 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56060 10 6452 1 2025-11-10 20:19:59.753 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54932 10 6452 1 2025-11-10 20:20:37.617 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:20:37.405 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:20:37.536 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:20:37.659 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:20:37.547 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:21:00.157 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34770 10 6452 1 2025-11-10 20:22:00.557 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60592 10 6452 1 2025-11-10 20:23:00.956 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41336 10 6452 1 2025-11-10 20:18:58.683 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 8 549 1 2025-11-10 20:18:58.680 00:06:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 20:24:01.359 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44430 10 6452 1 2025-11-10 20:25:01.769 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38568 10 6452 1 2025-11-10 20:25:37.509 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:25:37.515 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:25:37.589 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:25:37.712 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:25:37.671 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:26:02.185 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53518 10 6452 1 2025-11-10 20:27:02.586 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50928 10 6452 1 2025-11-10 20:28:02.986 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46934 10 6452 1 2025-11-10 20:29:03.398 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38260 10 6452 1 2025-11-10 20:30:03.801 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:37000 10 6452 1 2025-11-10 20:30:37.684 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:30:37.852 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:30:37.473 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:30:37.678 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:30:37.555 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:25:58.685 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-11-10 20:25:58.681 00:06:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 20:31:04.189 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56486 10 6452 1 2025-11-10 20:32:04.594 00:00:10.621 TCP 1.101.0.1:3000 -> 23.104.0.1:50402 10 6452 1 2025-11-10 20:33:05.257 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37610 10 6452 1 2025-11-10 20:34:05.660 00:00:11.009 TCP 1.101.0.1:3000 -> 23.104.0.1:42756 10 6452 1 2025-11-10 20:35:06.704 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35190 10 6452 1 2025-11-10 20:35:37.958 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:35:37.975 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:35:37.779 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:35:37.771 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:35:37.863 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:36:07.113 00:00:10.465 TCP 1.101.0.1:3000 -> 23.104.0.1:58708 10 6452 1 2025-11-10 20:37:07.616 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59184 10 6452 1 2025-11-10 20:32:58.681 00:06:00.037 TCP 179.21.23.21:38570 -> 179.21.23.23:179 9 601 1 2025-11-10 20:32:58.690 00:06:00.033 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-11-10 20:38:07.980 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51368 10 6452 1 2025-11-10 20:39:08.388 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38900 10 6452 1 2025-11-10 20:40:08.749 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56978 10 6452 1 2025-11-10 20:40:38.233 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:40:38.150 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:40:38.188 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:40:38.150 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:40:38.404 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:41:09.171 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37576 10 6452 1 2025-11-10 20:42:09.581 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:44422 10 6452 1 2025-11-10 20:43:09.947 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40726 10 6452 1 2025-11-10 20:44:10.353 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57370 10 6452 1 2025-11-10 20:39:58.719 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 20:39:58.691 00:06:00.034 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 20:45:10.762 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:55204 10 6452 1 2025-11-10 20:45:38.074 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:45:38.001 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:45:38.070 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:45:38.068 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:45:38.152 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:46:11.185 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37880 10 6452 1 2025-11-10 20:47:11.588 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56554 10 6452 1 2025-11-10 20:48:11.993 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55732 10 6452 1 2025-11-10 20:49:12.398 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:53876 10 6452 1 2025-11-10 20:50:12.757 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46332 10 6452 1 2025-11-10 20:50:38.154 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:50:37.762 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:50:38.156 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:50:38.159 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:50:38.239 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:51:13.172 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50380 10 6452 1 2025-11-10 20:46:58.722 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 20:46:58.692 00:06:00.035 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 20:52:13.579 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41274 10 6452 1 2025-11-10 20:53:13.978 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53112 10 6452 1 2025-11-10 20:54:14.388 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53862 10 6452 1 2025-11-10 20:55:14.782 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37674 10 6452 1 2025-11-10 20:55:38.346 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 20:55:38.320 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 20:55:38.196 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:55:38.263 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 20:55:38.313 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 20:56:15.193 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59116 10 6452 1 2025-11-10 20:57:15.591 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48670 10 6452 1 2025-11-10 20:58:16.003 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49780 10 6452 1 Summary: total flows: 136, total bytes: 417183, total packets: 953, avg bps: 920, avg pps: 0, avg bpp: 437 Time window: 2025-11-10 19:57:58 - 2025-11-10 20:58:26 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0031s User: 0.0031s Wall: 0.0019s flows/second: 71285.3 Runtime: 0.0019s