Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 14:59:30.431 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39676 10 6661 1 2025-11-19 14:59:50.884 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 14:59:51.180 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 14:59:51.161 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 14:59:51.098 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 14:59:50.984 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:00:30.831 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 10 6661 1 2025-11-19 14:56:03.108 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 15:01:31.238 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33764 10 6661 1 2025-11-19 15:02:31.644 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:47076 10 6661 1 2025-11-19 15:03:32.125 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58896 10 6661 1 2025-11-19 14:59:03.111 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 15:04:32.528 00:00:10.552 TCP 1.101.0.1:3000 -> 23.104.0.1:51486 10 6661 1 2025-11-19 15:04:51.371 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 15:04:51.050 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 15:04:51.191 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:04:51.288 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:04:51.307 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:05:33.115 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33120 10 6661 1 2025-11-19 15:06:33.474 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41898 10 6661 1 2025-11-19 15:07:33.875 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60648 10 6661 1 2025-11-19 15:03:03.115 00:06:00.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 15:08:34.283 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36734 10 6661 1 2025-11-19 15:09:34.688 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48010 10 6661 1 2025-11-19 15:09:51.519 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 15:09:51.470 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 15:09:51.200 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:09:51.438 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:09:51.437 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:10:35.105 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56640 10 6661 1 2025-11-19 15:06:03.115 00:06:00.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 15:11:35.508 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40074 10 6661 1 2025-11-19 15:12:35.959 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44126 10 6661 1 2025-11-19 15:13:36.366 00:00:10.775 TCP 1.101.0.1:3000 -> 23.104.0.1:44002 10 6661 1 2025-11-19 15:14:51.769 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 15:14:37.179 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42762 10 6661 1 2025-11-19 15:14:51.641 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 15:14:51.358 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:14:51.687 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:14:51.693 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:10:03.135 00:06:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 15:15:37.579 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58334 10 6661 1 2025-11-19 15:16:37.939 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44784 10 6661 1 2025-11-19 15:17:38.350 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40132 10 6661 1 2025-11-19 15:13:03.124 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 15:18:38.755 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37942 10 6661 1 2025-11-19 15:19:39.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36262 10 6661 1 2025-11-19 15:19:51.638 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 15:19:51.395 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 15:19:51.403 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:19:51.556 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:19:51.286 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:20:39.519 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41276 10 6661 1 2025-11-19 15:21:39.923 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53458 10 6661 1 2025-11-19 15:17:03.128 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 15:22:40.320 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45454 10 6661 1 2025-11-19 15:23:40.725 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45004 10 6661 1 2025-11-19 15:24:51.761 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 15:24:51.456 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 15:24:51.644 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:24:51.679 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:24:51.561 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:24:41.130 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59062 10 6661 1 2025-11-19 15:20:03.132 00:06:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 15:25:41.490 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51428 10 6661 1 2025-11-19 15:26:41.850 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53616 10 6661 1 2025-11-19 15:27:42.272 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43082 10 6661 1 2025-11-19 15:28:42.643 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44714 10 6661 1 2025-11-19 15:24:03.136 00:06:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 15:29:51.849 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 15:29:43.099 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 10 6661 1 2025-11-19 15:29:51.659 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 15:29:51.724 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:29:51.766 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:29:51.723 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:30:43.502 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53442 10 6661 1 2025-11-19 15:31:43.869 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42132 10 6661 1 2025-11-19 15:27:03.133 00:06:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 15:32:44.277 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49234 10 6661 1 2025-11-19 15:33:44.677 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40192 10 6661 1 2025-11-19 15:34:51.849 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 15:34:51.767 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 15:34:51.922 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:34:51.767 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:34:52.098 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:34:45.104 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51952 10 6661 1 2025-11-19 15:35:45.467 00:00:13.631 TCP 1.101.0.1:3000 -> 23.104.0.1:52894 10 6661 1 2025-11-19 15:31:03.136 00:06:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 15:36:49.142 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40414 10 6661 1 2025-11-19 15:37:49.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37308 10 6661 1 2025-11-19 15:38:49.912 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43276 10 6661 1 2025-11-19 15:34:03.134 00:06:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 15:39:51.911 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 15:39:51.864 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:39:51.916 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:39:51.962 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:39:51.999 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 15:39:50.270 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36694 10 6661 1 2025-11-19 15:40:50.674 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51116 10 6661 1 2025-11-19 15:41:51.105 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37266 10 6661 1 2025-11-19 15:42:51.511 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39866 10 6661 1 2025-11-19 15:38:03.138 00:06:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 15:43:51.911 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60586 10 6661 1 2025-11-19 15:44:51.980 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 15:44:51.935 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:44:51.978 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:44:52.060 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:44:52.060 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 15:44:52.319 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42036 10 6661 1 2025-11-19 15:41:03.137 00:06:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 15:45:52.724 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44652 10 6661 1 2025-11-19 15:46:53.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39836 10 6661 1 2025-11-19 15:47:53.533 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44892 10 6661 1 2025-11-19 15:48:53.935 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55678 10 6661 1 2025-11-19 15:49:52.323 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 15:49:52.313 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 15:49:52.370 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:49:52.240 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:49:52.364 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:49:54.313 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43856 10 6661 1 2025-11-19 15:45:03.140 00:06:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 15:50:54.715 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42458 10 6661 1 2025-11-19 15:51:55.126 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42338 10 6661 1 2025-11-19 15:52:55.525 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:54984 12 10375 1 2025-11-19 15:48:03.140 00:06:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 15:53:56.014 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41078 10 6452 1 2025-11-19 15:54:51.860 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 15:54:52.105 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:54:51.976 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 15:54:52.099 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 15:54:52.060 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 15:54:56.422 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47766 10 6452 1 2025-11-19 15:55:56.830 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:58398 10 6452 1 2025-11-19 15:52:03.142 00:06:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 15:56:57.248 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32806 10 6452 1 2025-11-19 15:57:57.650 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35160 12 6556 1 Summary: total flows: 136, total bytes: 425529, total packets: 1012, avg bps: 913, avg pps: 0, avg bpp: 420 Time window: 2025-11-19 14:56:03 - 2025-11-19 15:58:08 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0029s User: 0.0029s Wall: 0.0018s flows/second: 75006.6 Runtime: 0.0018s