Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 02:58:55.919 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33768 10 6452 1 2025-11-13 02:55:59.828 00:05:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 02:59:56.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39510 10 6452 1 2025-11-13 03:00:56.728 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33132 10 6452 1 2025-11-13 03:01:43.454 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:01:43.385 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:01:43.392 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:01:43.371 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:01:43.289 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 02:57:59.826 00:05:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 03:01:57.105 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48814 10 6452 1 2025-11-13 03:02:57.511 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33512 11 6492 1 2025-11-13 03:03:57.912 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59172 10 6452 1 2025-11-13 03:04:58.269 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37098 10 6452 1 2025-11-13 03:01:59.829 00:05:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 03:05:58.631 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42654 10 6452 1 2025-11-13 03:06:43.517 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:06:43.462 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:06:43.506 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:06:43.658 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 03:06:43.589 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:06:58.995 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39756 10 6452 1 2025-11-13 03:03:59.826 00:05:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 03:07:59.403 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59522 10 6452 1 2025-11-13 03:08:59.805 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-11-13 03:10:00.172 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56356 10 6452 1 2025-11-13 03:11:00.579 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36768 10 6452 1 2025-11-13 03:11:43.847 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:11:43.564 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:11:43.653 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:11:43.527 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 03:11:43.735 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:07:59.830 00:05:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 03:12:00.988 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47584 10 6452 1 2025-11-13 03:13:01.390 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37050 10 6452 1 2025-11-13 03:09:59.826 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 03:14:01.789 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51572 10 6452 1 2025-11-13 03:15:02.190 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33416 10 6452 1 2025-11-13 03:16:02.594 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57342 10 6452 1 2025-11-13 03:16:43.755 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:16:43.667 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:16:43.651 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:16:43.924 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 03:16:43.734 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:17:03.002 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35606 10 6452 1 2025-11-13 03:13:59.833 00:05:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 03:18:03.411 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34876 10 6452 1 2025-11-13 03:19:03.820 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45850 10 6452 1 2025-11-13 03:15:59.830 00:05:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 03:20:04.223 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53150 10 6452 1 2025-11-13 03:21:04.616 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54164 10 6452 1 2025-11-13 03:21:43.907 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:21:43.878 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:21:43.907 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:21:43.907 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 03:21:43.990 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:22:05.026 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59702 10 6452 1 2025-11-13 03:23:05.431 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33796 10 6452 1 2025-11-13 03:19:59.832 00:05:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 03:24:05.795 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52230 10 6452 1 2025-11-13 03:25:06.200 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:32976 10 6452 1 2025-11-13 03:21:59.830 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 03:26:06.561 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44654 10 6452 1 2025-11-13 03:26:43.962 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:26:43.614 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:26:44.093 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:26:43.958 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 03:26:44.176 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:27:06.960 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42882 10 6452 1 2025-11-13 03:28:07.366 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43986 10 6452 1 2025-11-13 03:29:07.763 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48956 10 6452 1 2025-11-13 03:25:59.834 00:05:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 03:30:08.174 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-11-13 03:31:08.577 00:00:19.188 TCP 1.101.0.1:3000 -> 23.104.0.1:33220 10 6452 1 2025-11-13 03:31:44.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:31:43.928 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:31:44.003 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 03:31:43.915 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:31:44.011 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:27:59.831 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 03:32:17.805 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42166 10 6452 1 2025-11-13 03:33:18.218 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43922 10 6452 1 2025-11-13 03:34:18.625 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51496 10 6452 1 2025-11-13 03:35:19.031 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:57088 10 6452 1 2025-11-13 03:31:59.836 00:05:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 03:36:19.428 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33750 10 6452 1 2025-11-13 03:36:44.139 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:36:43.881 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:36:44.141 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:36:44.135 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 03:36:44.225 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:37:19.828 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51538 10 6452 1 2025-11-13 03:33:59.834 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 03:38:20.242 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39668 10 6452 1 2025-11-13 03:39:20.652 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42738 10 6452 1 2025-11-13 03:40:21.064 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58586 10 6452 1 2025-11-13 03:41:21.471 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35484 10 6452 1 2025-11-13 03:41:44.199 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:41:44.205 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:41:44.148 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:41:44.117 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:41:44.294 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 03:37:59.839 00:05:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 03:42:21.872 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44558 10 6452 1 2025-11-13 03:43:22.279 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45094 10 6452 1 2025-11-13 03:39:59.836 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 03:44:22.685 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41138 10 6452 1 2025-11-13 03:45:23.111 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54280 10 6452 1 2025-11-13 03:46:23.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36700 10 6452 1 2025-11-13 03:46:44.431 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:46:44.540 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:46:44.492 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:46:44.348 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:46:44.505 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 03:47:23.917 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47456 10 6452 1 2025-11-13 03:43:59.839 00:05:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 03:48:24.316 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39002 10 6452 1 2025-11-13 03:49:24.676 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53272 10 6452 1 2025-11-13 03:45:59.837 00:05:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 03:50:25.114 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:53060 10 6452 1 2025-11-13 03:51:25.506 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59864 10 6452 1 2025-11-13 03:51:44.437 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:51:44.361 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:51:44.289 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:51:44.353 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:51:44.507 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 03:52:25.916 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47402 10 6452 1 2025-11-13 03:53:26.283 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46112 10 6452 1 2025-11-13 03:49:59.842 00:05:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 03:54:26.690 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:52980 12 10375 1 2025-11-13 03:55:27.190 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51934 10 6452 1 2025-11-13 03:51:59.841 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 03:56:27.592 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56524 10 6452 1 2025-11-13 03:56:44.501 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 03:56:44.286 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:56:44.505 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 03:56:44.513 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 03:56:44.588 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 03:57:28.006 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52364 10 6452 1 2025-11-13 03:58:28.406 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:59196 10 6452 1 Summary: total flows: 140, total bytes: 420963, total packets: 1023, avg bps: 895, avg pps: 0, avg bpp: 411 Time window: 2025-11-13 02:55:59 - 2025-11-13 03:58:38 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0031s User: 0.0016s Wall: 0.0013s flows/second: 109798.5 Runtime: 0.0013s