Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 20:59:03.932 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56680 10 6452 1 2025-11-13 21:00:04.357 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57264 10 6452 1 2025-11-13 21:01:04.755 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60998 10 6452 1 2025-11-13 21:02:05.065 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:02:04.934 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:02:04.951 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:02:04.983 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:02:04.928 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:02:05.166 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58270 10 6452 1 2025-11-13 20:59:00.228 00:04:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 20:59:00.225 00:04:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 21:03:05.567 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37422 10 6452 1 2025-11-13 21:04:05.932 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:38522 10 6452 1 2025-11-13 21:04:00.229 00:01:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-13 21:04:00.228 00:01:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-13 21:05:06.311 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52110 10 6452 1 2025-11-13 21:06:06.718 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37114 10 6452 1 2025-11-13 21:07:05.525 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:07:05.477 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:07:05.530 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:07:05.643 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:07:05.612 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:07:07.120 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48674 12 6556 1 2025-11-13 21:08:07.528 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57630 10 6452 1 2025-11-13 21:09:07.929 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:54424 10 6452 1 2025-11-13 21:06:00.226 00:04:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 21:06:00.228 00:04:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 21:10:08.314 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50518 10 6452 1 2025-11-13 21:11:08.742 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35220 10 6452 1 2025-11-13 21:12:05.145 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:12:04.964 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:12:05.263 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:12:05.264 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:12:05.347 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:12:09.150 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37650 10 6452 1 2025-11-13 21:13:09.514 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45786 10 6452 1 2025-11-13 21:14:09.921 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47128 10 6452 1 2025-11-13 21:11:00.226 00:04:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 21:11:00.229 00:04:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 21:15:10.339 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35760 10 6452 1 2025-11-13 21:16:10.749 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46110 10 6452 1 2025-11-13 21:17:05.390 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:17:05.101 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:17:05.385 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:17:05.237 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:17:05.466 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:17:11.153 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:45428 10 6452 1 2025-11-13 21:18:11.513 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54256 10 6452 1 2025-11-13 21:19:11.910 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47524 10 6452 1 2025-11-13 21:16:00.232 00:04:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 21:16:00.229 00:04:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 21:20:12.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59988 10 6452 1 2025-11-13 21:21:12.684 00:00:10.483 TCP 1.101.0.1:3000 -> 23.104.0.1:58902 10 6452 1 2025-11-13 21:22:06.104 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:22:06.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:22:06.009 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:22:06.118 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:22:06.201 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:22:13.205 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35458 10 6452 1 2025-11-13 21:23:13.572 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43180 10 6452 1 2025-11-13 21:24:13.936 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33194 10 6452 1 2025-11-13 21:21:00.234 00:04:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 21:21:00.231 00:04:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 21:25:14.347 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:35626 12 10375 1 2025-11-13 21:26:14.825 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56644 10 6452 1 2025-11-13 21:27:05.528 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:27:05.144 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:27:05.531 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:27:05.529 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:27:05.615 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:27:15.226 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56204 10 6452 1 2025-11-13 21:28:15.589 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37710 10 6452 1 2025-11-13 21:29:15.950 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:52428 10 6452 1 2025-11-13 21:26:00.233 00:04:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 21:26:00.231 00:04:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 21:30:16.382 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58034 10 6452 1 2025-11-13 21:31:16.792 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 10 6452 1 2025-11-13 21:31:00.236 00:01:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-13 21:32:05.785 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:32:05.565 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:32:05.470 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:32:05.471 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:32:05.553 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:32:17.202 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48658 10 6452 1 2025-11-13 21:33:17.566 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59902 10 6452 1 2025-11-13 21:34:17.980 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:45200 10 6452 1 2025-11-13 21:33:00.237 00:02:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-13 21:31:00.235 00:04:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 21:35:18.358 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43648 10 6452 1 2025-11-13 21:36:18.760 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:49770 10 6452 1 2025-11-13 21:36:00.239 00:01:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-13 21:36:00.237 00:01:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-13 21:37:05.439 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:37:05.562 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:37:05.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:37:05.622 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:37:05.522 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:37:19.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54068 10 6452 1 2025-11-13 21:38:19.595 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:42998 10 6452 1 2025-11-13 21:39:19.961 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43000 10 6452 1 2025-11-13 21:38:00.240 00:02:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-13 21:38:00.236 00:02:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-13 21:40:20.367 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40402 10 6452 1 2025-11-13 21:41:20.776 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43004 10 6452 1 2025-11-13 21:41:00.240 00:01:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-13 21:41:00.237 00:01:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-13 21:42:05.873 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:42:05.666 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:42:05.878 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:42:05.801 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:42:05.961 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:42:21.188 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50508 10 6452 1 2025-11-13 21:43:21.552 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46930 10 6452 1 2025-11-13 21:44:21.956 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38836 10 6452 1 2025-11-13 21:45:22.355 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50200 10 6452 1 2025-11-13 21:46:22.762 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:40596 10 6452 1 2025-11-13 21:43:00.240 00:04:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 21:47:05.947 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:47:05.752 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:47:05.892 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:47:05.889 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:43:00.237 00:04:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 21:47:05.974 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:47:23.142 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46246 10 6452 1 2025-11-13 21:48:23.561 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45082 10 6452 1 2025-11-13 21:49:23.960 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49408 10 6452 1 2025-11-13 21:50:24.370 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42002 10 6452 1 2025-11-13 21:51:24.786 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48590 10 6452 1 2025-11-13 21:48:00.242 00:04:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 21:48:00.239 00:04:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 21:52:05.915 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:52:05.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:52:06.008 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:52:05.998 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:52:06.089 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:52:25.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38424 10 6452 1 2025-11-13 21:53:25.594 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49762 10 6452 1 2025-11-13 21:54:25.957 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32886 10 6452 1 2025-11-13 21:55:26.361 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:34260 11 6504 1 2025-11-13 21:56:26.817 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35942 10 6452 1 2025-11-13 21:53:00.243 00:04:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 21:53:00.239 00:04:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 21:57:06.304 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 21:57:06.128 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 21:57:06.235 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:57:06.002 00:00:00.047 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 21:57:06.085 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 21:57:27.217 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43036 10 6452 1 2025-11-13 21:58:27.577 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43664 10 6452 1 Summary: total flows: 149, total bytes: 420833, total packets: 1021, avg bps: 941, avg pps: 0, avg bpp: 412 Time window: 2025-11-13 20:59:00 - 2025-11-13 21:58:37 Total flows processed: 149, passed: 149, Blocks skipped: 0, Bytes read: 15560 Sys: 0.0057s User: 0.0010s Wall: 0.0021s flows/second: 69531.7 Runtime: 0.0022s