Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 21:58:44.515 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42118 10 6452 1 2025-11-18 21:59:30.591 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 21:59:30.546 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 21:59:30.795 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 21:59:30.669 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 21:59:30.877 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 21:59:44.910 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34704 10 6452 1 2025-11-18 21:55:02.735 00:06:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 22:00:45.273 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56830 10 6452 1 2025-11-18 22:01:45.682 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50436 10 6452 1 2025-11-18 21:57:02.739 00:06:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 22:02:46.113 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44916 10 6452 1 2025-11-18 22:03:46.474 00:00:22.855 TCP 1.101.0.1:3000 -> 23.104.0.1:53460 10 6452 1 2025-11-18 22:04:30.782 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 22:04:30.819 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:04:30.570 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:04:30.701 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:04:30.856 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:04:59.371 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41160 10 6452 1 2025-11-18 22:05:59.733 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49474 10 6452 1 2025-11-18 22:02:02.737 00:06:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 22:07:00.112 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47986 10 6452 1 2025-11-18 22:08:00.515 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59522 12 6556 1 2025-11-18 22:04:02.739 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 22:09:00.922 00:00:10.574 TCP 1.101.0.1:3000 -> 23.104.0.1:44204 10 6452 1 2025-11-18 22:09:30.961 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 22:09:30.799 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:09:30.757 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:09:30.879 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:09:30.458 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:10:01.536 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45484 10 6452 1 2025-11-18 22:11:01.897 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36230 12 6556 1 2025-11-18 22:12:02.309 00:00:17.520 TCP 1.101.0.1:3000 -> 23.104.0.1:51828 10 6452 1 2025-11-18 22:13:09.875 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:47170 12 10369 1 2025-11-18 22:09:02.737 00:06:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 22:14:10.366 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45024 10 6452 1 2025-11-18 22:14:30.919 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 22:14:30.763 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:14:30.594 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:14:30.837 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:14:30.890 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:15:10.765 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57730 10 6452 1 2025-11-18 22:11:02.740 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 22:16:11.177 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55742 10 6452 1 2025-11-18 22:17:11.541 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59454 10 6452 1 2025-11-18 22:18:11.945 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35310 10 6452 1 2025-11-18 22:19:12.365 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50736 10 6452 1 2025-11-18 22:19:30.556 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:19:31.405 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 22:19:31.311 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:19:31.322 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:19:31.105 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:20:12.767 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38816 10 6452 1 2025-11-18 22:16:02.738 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 22:21:13.181 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39756 10 6452 1 2025-11-18 22:22:13.545 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48026 10 6452 1 2025-11-18 22:18:02.742 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 22:23:13.949 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:55300 10 6452 1 2025-11-18 22:24:14.375 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38602 10 6452 1 2025-11-18 22:24:30.830 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:24:30.924 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:24:31.067 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:24:30.983 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:24:31.151 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 22:25:14.737 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43478 10 6452 1 2025-11-18 22:26:15.141 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49510 10 6452 1 2025-11-18 22:27:15.506 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36280 10 6452 1 2025-11-18 22:23:02.739 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 22:28:15.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33646 10 6452 1 2025-11-18 22:29:31.218 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 22:29:16.318 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40684 10 6452 1 2025-11-18 22:29:31.081 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:29:31.102 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:29:31.137 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:29:31.351 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:25:02.744 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 22:30:16.724 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35546 10 6452 1 2025-11-18 22:31:17.148 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46714 10 6452 1 2025-11-18 22:32:17.559 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51352 10 6452 1 2025-11-18 22:33:17.973 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36122 10 6452 1 2025-11-18 22:34:18.381 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34244 10 6452 1 2025-11-18 22:34:31.301 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:34:31.131 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:34:30.993 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:34:31.188 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:34:31.076 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 22:30:02.741 00:06:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 22:35:18.781 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34202 10 6452 1 2025-11-18 22:36:19.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59950 10 6452 1 2025-11-18 22:32:02.745 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 22:37:19.594 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36598 10 6452 1 2025-11-18 22:38:20.002 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43594 10 6452 1 2025-11-18 22:39:20.404 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34552 10 6452 1 2025-11-18 22:39:31.693 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 22:39:31.684 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:39:31.542 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:39:31.611 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:39:31.682 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:40:20.810 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57620 10 6452 1 2025-11-18 22:41:21.211 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48796 10 6452 1 2025-11-18 22:37:02.745 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 22:42:21.613 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:48470 12 10375 1 2025-11-18 22:43:22.055 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54538 10 6452 1 2025-11-18 22:39:02.748 00:06:00.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 22:44:31.559 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 22:44:31.480 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:44:31.173 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:44:31.477 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:44:31.516 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:44:22.458 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44792 10 6452 1 2025-11-18 22:45:22.870 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:57484 10 6452 1 2025-11-18 22:46:23.242 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53314 10 6452 1 2025-11-18 22:47:23.603 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52126 10 6452 1 2025-11-18 22:48:24.006 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34274 10 6452 1 2025-11-18 22:44:02.748 00:06:00.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 22:49:31.513 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 22:49:31.503 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:49:24.405 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41086 10 6452 1 2025-11-18 22:49:31.466 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:49:31.430 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:49:31.430 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:50:24.822 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33510 10 6452 1 2025-11-18 22:46:02.751 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 22:51:25.233 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45802 10 6452 1 2025-11-18 22:52:25.639 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44216 10 6452 1 2025-11-18 22:53:26.064 00:00:24.646 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 10 6452 1 2025-11-18 22:54:31.668 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 22:54:31.658 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 22:54:31.609 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:54:31.585 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 22:54:31.664 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 22:54:40.752 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44012 10 6452 1 2025-11-18 22:55:41.174 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:59610 10 6452 1 2025-11-18 22:51:02.749 00:06:00.189 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 22:56:41.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37730 10 6452 1 2025-11-18 22:57:41.940 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50374 10 6452 1 2025-11-18 22:53:02.752 00:06:00.184 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 137, total bytes: 419334, total packets: 1030, avg bps: 873, avg pps: 0, avg bpp: 407 Time window: 2025-11-18 21:55:02 - 2025-11-18 22:59:02 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0050s User: 0.0008s Wall: 0.0026s flows/second: 52935.9 Runtime: 0.0026s