Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 17:54:03.177 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 17:59:05.353 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45822 10 6452 1 2025-11-19 17:59:54.684 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 17:59:54.686 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:59:54.679 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 17:59:54.684 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 17:59:54.762 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:00:05.771 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:36542 10 6452 1 2025-11-19 18:01:06.143 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55202 10 6452 1 2025-11-19 18:02:06.544 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60232 10 6452 1 2025-11-19 17:58:03.181 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 18:03:06.944 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60276 10 6452 1 2025-11-19 18:04:07.358 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47742 10 6452 1 2025-11-19 18:04:55.422 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:04:55.340 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:04:55.221 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 18:04:55.227 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 18:04:55.181 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:05:07.720 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37100 10 6452 1 2025-11-19 18:01:03.180 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 18:06:08.134 00:00:10.862 TCP 1.101.0.1:3000 -> 23.104.0.1:39870 10 6452 1 2025-11-19 18:07:09.035 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34512 10 6452 1 2025-11-19 18:08:09.441 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42862 10 6452 1 2025-11-19 18:09:09.845 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:34976 10 6452 1 2025-11-19 18:09:55.224 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:09:55.056 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 18:09:54.982 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:09:55.141 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:09:55.071 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 18:05:03.182 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 18:10:10.278 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50262 10 6452 1 2025-11-19 18:11:10.633 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56968 10 6452 1 2025-11-19 18:12:11.034 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54068 10 6452 1 2025-11-19 18:08:03.181 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 18:13:11.394 00:00:10.558 TCP 1.101.0.1:3000 -> 23.104.0.1:56866 10 6452 1 2025-11-19 18:14:11.991 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47630 10 6452 1 2025-11-19 18:14:54.964 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 18:14:54.689 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:14:54.821 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:14:55.095 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 18:14:54.903 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:15:12.398 00:00:14.380 TCP 1.101.0.1:3000 -> 23.104.0.1:37510 10 6452 1 2025-11-19 18:16:16.816 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57052 10 6452 1 2025-11-19 18:12:03.185 00:06:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 18:17:17.221 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:51302 10 6452 1 2025-11-19 18:18:17.577 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56078 10 6452 1 2025-11-19 18:19:17.986 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50212 10 6452 1 2025-11-19 18:19:55.231 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:19:55.108 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 18:19:55.108 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:19:55.149 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:19:55.182 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 18:15:03.183 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 18:20:18.389 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37514 10 6452 1 2025-11-19 18:21:18.795 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51406 10 6452 1 2025-11-19 18:22:19.213 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50096 10 6452 1 2025-11-19 18:23:19.619 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59812 10 6452 1 2025-11-19 18:19:03.185 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 18:24:20.016 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42714 10 6452 1 2025-11-19 18:24:55.173 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:24:55.047 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 18:24:54.936 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 18:24:54.855 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:24:55.263 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:25:20.413 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36630 10 6452 1 2025-11-19 18:26:20.827 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57622 10 6452 1 2025-11-19 18:22:03.183 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 18:27:21.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42920 10 6452 1 2025-11-19 18:28:21.598 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:36590 10 6452 1 2025-11-19 18:29:21.992 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60816 10 6452 1 2025-11-19 18:29:55.316 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 18:29:55.003 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:29:55.290 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:29:55.374 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 18:29:55.373 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:30:22.397 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51010 10 6452 1 2025-11-19 18:26:03.186 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 18:31:22.811 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58872 10 6452 1 2025-11-19 18:32:23.225 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58164 10 6452 1 2025-11-19 18:33:23.629 00:00:11.890 TCP 1.101.0.1:3000 -> 23.104.0.1:36962 10 6452 1 2025-11-19 18:29:03.185 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 18:34:25.565 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36062 10 6452 1 2025-11-19 18:34:55.420 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:34:55.374 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 18:34:55.326 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 18:34:55.013 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:34:55.503 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:35:25.968 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37010 10 6452 1 2025-11-19 18:36:26.367 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38114 10 6452 1 2025-11-19 18:37:26.784 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46444 10 6452 1 2025-11-19 18:33:03.188 00:06:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 18:38:27.147 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51636 10 6452 1 2025-11-19 18:39:27.521 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54322 10 6452 1 2025-11-19 18:39:55.502 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 18:39:55.472 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:39:55.501 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:39:55.384 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 18:39:55.585 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:40:27.933 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:49014 10 6452 1 2025-11-19 18:36:03.185 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 18:41:28.359 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43462 10 6452 1 2025-11-19 18:42:28.764 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:49858 10 6452 1 2025-11-19 18:43:29.253 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43518 10 6452 1 2025-11-19 18:44:29.662 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52504 10 6452 1 2025-11-19 18:44:55.560 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:44:55.481 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 18:44:55.424 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:44:55.478 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:44:55.581 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 18:40:03.189 00:06:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 18:45:30.100 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52924 10 6452 1 2025-11-19 18:46:30.501 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48858 10 6452 1 2025-11-19 18:47:30.886 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:59876 10 6452 1 2025-11-19 18:43:03.186 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 18:48:31.339 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33892 10 6452 1 2025-11-19 18:49:31.755 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:46010 10 6452 1 2025-11-19 18:49:55.753 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:49:55.770 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 18:49:55.695 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:49:55.671 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:49:55.770 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 18:50:32.184 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:51858 11 6504 1 2025-11-19 18:51:32.645 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59592 10 6452 1 2025-11-19 18:47:03.191 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-19 18:52:33.007 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60352 10 6452 1 2025-11-19 18:53:33.398 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60634 10 6452 1 2025-11-19 18:54:33.803 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:43934 10 6452 1 2025-11-19 18:54:55.844 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 18:54:55.423 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:54:55.762 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 18:54:55.613 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-19 18:54:55.846 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 18:50:03.190 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-19 18:55:34.192 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46092 10 6452 1 2025-11-19 18:56:34.558 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54702 10 6452 1 2025-11-19 18:57:34.923 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40590 10 6452 1 2025-11-19 18:58:35.288 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60212 10 6452 1 Summary: total flows: 137, total bytes: 416929, total packets: 1019, avg bps: 859, avg pps: 0, avg bpp: 409 Time window: 2025-11-19 17:54:03 - 2025-11-19 18:58:45 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0061s User: 0.0000s Wall: 0.0020s flows/second: 66862.9 Runtime: 0.0021s