Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 21:59:07.515 00:00:10.895 TCP 1.101.0.1:3000 -> 23.104.0.1:56342 10 6452 1 2025-11-12 22:00:08.462 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45132 10 6452 1 2025-11-12 22:01:08.867 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40032 10 6452 1 2025-11-12 22:01:37.427 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:01:37.140 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:01:37.364 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:01:37.501 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:01:37.447 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 21:56:59.723 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 22:02:09.273 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60968 10 6452 1 2025-11-12 21:57:59.726 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 22:03:09.676 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:47434 11 6504 1 2025-11-12 22:04:10.149 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45074 10 6452 1 2025-11-12 22:05:10.548 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57656 10 6452 1 2025-11-12 22:06:10.912 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59536 10 6452 1 2025-11-12 22:06:37.380 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:06:37.073 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:06:37.631 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:06:37.510 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:06:37.715 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 22:07:11.280 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44440 10 6452 1 2025-11-12 22:08:11.687 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49546 10 6452 1 2025-11-12 22:03:59.728 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 22:09:12.111 00:00:11.107 TCP 1.101.0.1:3000 -> 23.104.0.1:39928 10 6452 1 2025-11-12 22:04:59.730 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 22:10:13.261 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59882 10 6452 1 2025-11-12 22:11:13.665 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46794 10 6452 1 2025-11-12 22:11:37.669 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 22:11:37.525 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:11:37.612 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:11:37.586 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:11:37.586 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:12:14.086 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43570 10 6452 1 2025-11-12 22:13:14.446 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51222 10 6452 1 2025-11-12 22:14:14.851 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40876 10 6452 1 2025-11-12 22:15:15.271 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34390 10 6452 1 2025-11-12 22:10:59.728 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 22:16:15.636 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51878 10 6452 1 2025-11-12 22:16:37.845 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 22:16:37.811 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:16:37.588 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:16:37.763 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:16:37.761 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:11:59.732 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 22:17:16.036 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53792 10 6452 1 2025-11-12 22:18:16.445 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58750 10 6452 1 2025-11-12 22:19:16.851 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:43580 10 6452 1 2025-11-12 22:20:17.273 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59902 10 6452 1 2025-11-12 22:21:17.677 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36666 10 6452 1 2025-11-12 22:21:38.067 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:21:37.798 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:21:37.922 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:21:37.982 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:21:38.007 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 22:22:18.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42744 10 6452 1 2025-11-12 22:17:59.729 00:06:00.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 22:23:18.527 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59462 10 6452 1 2025-11-12 22:18:59.732 00:06:00.228 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 22:24:18.887 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:35732 12 10369 1 2025-11-12 22:25:19.373 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57972 10 6452 1 2025-11-12 22:26:19.736 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42746 10 6452 1 2025-11-12 22:26:37.595 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:26:37.827 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:26:37.856 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:26:37.698 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:26:37.939 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 22:27:20.106 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57786 10 6452 1 2025-11-12 22:28:20.516 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49974 10 6452 1 2025-11-12 22:29:20.927 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:46944 10 6452 1 2025-11-12 22:24:59.732 00:06:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 22:30:21.365 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36988 10 6452 1 2025-11-12 22:25:59.735 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 22:31:21.768 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56754 10 6452 1 2025-11-12 22:31:37.785 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 22:31:37.605 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:31:37.703 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:31:37.869 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:31:37.936 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:32:22.176 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40100 10 6452 1 2025-11-12 22:33:22.544 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42528 10 6452 1 2025-11-12 22:34:22.909 00:00:22.015 TCP 1.101.0.1:3000 -> 23.104.0.1:41654 10 6452 1 2025-11-12 22:35:34.973 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57324 10 6452 1 2025-11-12 22:36:38.205 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 22:36:37.875 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:36:37.832 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:36:38.123 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:36:38.059 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:36:35.380 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:59938 10 6452 1 2025-11-12 22:31:59.737 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 22:37:35.814 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36716 10 6452 1 2025-11-12 22:32:59.740 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 22:38:36.222 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59888 10 6452 1 2025-11-12 22:39:36.627 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42948 10 6452 1 2025-11-12 22:40:36.989 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43398 10 6452 1 2025-11-12 22:41:38.056 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:41:38.237 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:41:38.224 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:41:38.232 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:41:38.307 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 22:41:37.396 00:00:10.856 TCP 1.101.0.1:3000 -> 23.104.0.1:47964 10 6452 1 2025-11-12 22:42:38.291 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55678 10 6452 1 2025-11-12 22:43:38.697 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:53640 10 6452 1 2025-11-12 22:38:59.740 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 22:44:39.166 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:39436 12 10375 1 2025-11-12 22:39:59.742 00:06:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 22:45:39.611 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50378 10 6452 1 2025-11-12 22:46:38.446 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:46:38.239 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:46:38.403 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:46:38.442 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:46:38.485 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 22:46:40.030 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59400 10 6452 1 2025-11-12 22:47:40.436 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54694 10 6452 1 2025-11-12 22:48:40.838 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60830 10 6452 1 2025-11-12 22:49:41.259 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57072 10 6452 1 2025-11-12 22:50:41.667 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58166 10 6452 1 2025-11-12 22:45:59.740 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 22:51:38.588 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:51:38.338 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:51:38.593 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:51:38.284 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:51:38.677 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 22:51:42.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49522 10 6452 1 2025-11-12 22:46:59.743 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 22:52:42.516 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54458 10 6452 1 2025-11-12 22:53:42.881 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43330 10 6452 1 2025-11-12 22:54:43.283 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60664 10 6452 1 2025-11-12 22:55:43.651 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40674 10 6452 1 2025-11-12 22:56:38.385 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 22:56:38.704 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:56:38.512 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 22:56:38.387 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 22:56:38.596 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 22:56:44.068 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36444 10 6452 1 2025-11-12 22:57:44.468 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58714 10 6452 1 2025-11-12 22:52:59.746 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 136, total bytes: 418317, total packets: 1013, avg bps: 899, avg pps: 0, avg bpp: 412 Time window: 2025-11-12 21:56:59 - 2025-11-12 22:58:59 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0045s User: 0.0018s Wall: 0.0023s flows/second: 59780.5 Runtime: 0.0023s