Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 09:59:04.728 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38434 10 6661 1 2025-11-23 10:00:05.139 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59100 10 6661 1 2025-11-23 10:01:05.542 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47570 10 6661 1 2025-11-23 10:01:42.560 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:01:42.311 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:01:42.413 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:01:42.171 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:01:42.478 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:02:05.940 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51426 10 6661 1 2025-11-23 09:59:04.982 00:05:00.813 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 09:59:04.979 00:05:00.819 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 10:03:06.349 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52436 10 6661 1 2025-11-23 10:04:06.757 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43144 10 6661 1 2025-11-23 10:05:07.176 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43296 10 6661 1 2025-11-23 10:06:07.582 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59516 10 6661 1 2025-11-23 10:06:42.080 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:06:41.860 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:06:42.035 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:06:42.086 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:06:42.117 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:07:07.984 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45626 10 6661 1 2025-11-23 10:08:08.343 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33410 10 6661 1 2025-11-23 10:05:04.981 00:05:00.818 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 10:05:04.984 00:05:00.812 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 10:09:08.743 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53116 10 6661 1 2025-11-23 10:10:09.145 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42184 10 6661 1 2025-11-23 10:11:09.509 00:00:11.056 TCP 1.101.0.1:3000 -> 23.104.0.1:54476 10 6661 1 2025-11-23 10:11:42.740 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:11:42.657 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:11:42.527 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:11:42.656 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:11:42.581 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:12:10.603 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39460 10 6661 1 2025-11-23 10:13:11.014 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60176 10 6661 1 2025-11-23 10:14:11.420 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60936 10 6661 1 2025-11-23 10:11:04.981 00:05:00.818 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 10:11:04.984 00:05:00.813 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 10:15:11.824 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49724 10 6661 1 2025-11-23 10:16:12.222 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34944 10 6661 1 2025-11-23 10:16:42.759 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:16:42.555 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:16:42.629 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:16:42.761 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:16:42.713 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:17:12.624 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45650 10 6661 1 2025-11-23 10:18:13.027 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47466 10 6661 1 2025-11-23 10:19:13.430 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45154 10 6661 1 2025-11-23 10:20:13.839 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:60868 10 6661 1 2025-11-23 10:17:04.989 00:05:00.815 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 10:17:04.992 00:05:00.810 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 10:21:14.268 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53168 10 6661 1 2025-11-23 10:21:42.819 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:21:42.713 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:21:42.766 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:21:42.769 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:21:42.848 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:22:14.687 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37950 10 6661 1 2025-11-23 10:23:15.122 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60272 10 6661 1 2025-11-23 10:24:15.482 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48142 10 6661 1 2025-11-23 10:25:15.879 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54756 10 6661 1 2025-11-23 10:26:16.279 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35552 10 6661 1 2025-11-23 10:26:42.819 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:26:43.048 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:26:42.819 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:26:42.814 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:26:42.904 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:23:04.994 00:05:00.810 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 10:23:04.992 00:05:00.814 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 10:27:16.678 00:00:10.627 TCP 1.101.0.1:3000 -> 23.104.0.1:50716 10 6661 1 2025-11-23 10:28:17.348 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50796 10 6661 1 2025-11-23 10:29:17.751 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33306 10 6661 1 2025-11-23 10:30:18.155 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:41746 10 6661 1 2025-11-23 10:31:18.515 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41832 10 6661 1 2025-11-23 10:31:42.833 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:31:42.555 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:31:43.083 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:31:42.847 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:31:43.167 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:32:18.924 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59626 10 6661 1 2025-11-23 10:29:04.992 00:05:00.815 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 10:29:04.995 00:05:00.810 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 10:33:19.333 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58704 10 6661 1 2025-11-23 10:34:19.697 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46506 10 6661 1 2025-11-23 10:35:20.112 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60872 10 6661 1 2025-11-23 10:36:20.518 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52984 10 6661 1 2025-11-23 10:36:43.089 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:36:42.914 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:36:42.993 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:36:42.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:36:43.077 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:37:20.937 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:44566 13 6817 1 2025-11-23 10:38:21.408 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43876 10 6661 1 2025-11-23 10:35:04.997 00:05:00.811 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 10:35:04.993 00:05:00.816 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 10:39:21.777 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41588 10 6661 1 2025-11-23 10:40:22.183 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39688 10 6661 1 2025-11-23 10:41:22.591 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50562 10 6661 1 2025-11-23 10:41:42.920 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:41:42.839 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:41:42.963 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:41:43.083 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:41:42.770 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:42:22.990 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34014 10 6661 1 2025-11-23 10:43:23.398 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42286 10 6661 1 2025-11-23 10:44:23.798 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58654 10 6661 1 2025-11-23 10:41:04.997 00:05:00.812 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 10:41:04.995 00:05:00.817 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 10:45:24.203 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46882 10 6661 1 2025-11-23 10:46:24.606 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35024 10 6661 1 2025-11-23 10:46:43.523 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:46:43.406 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:46:43.571 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:46:43.461 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:46:43.653 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:47:25.012 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 10 6661 1 2025-11-23 10:48:25.424 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35042 10 6661 1 2025-11-23 10:49:25.792 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51000 10 6661 1 2025-11-23 10:50:26.198 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48864 10 6661 1 2025-11-23 10:47:04.997 00:05:00.816 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 10:51:26.559 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57076 10 6661 1 2025-11-23 10:51:43.643 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:51:43.209 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:51:43.404 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:51:43.561 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:51:43.487 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:47:05.000 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-11-23 10:52:26.956 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46872 10 6661 1 2025-11-23 10:53:27.361 00:00:11.974 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6661 1 2025-11-23 10:54:29.375 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58070 10 6661 1 2025-11-23 10:55:29.741 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34172 10 6661 1 2025-11-23 10:56:30.144 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58402 10 6661 1 2025-11-23 10:56:43.484 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 10:56:43.471 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 10:56:43.328 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:56:43.403 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 10:56:43.406 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 10:53:04.997 00:05:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 11 686 1 2025-11-23 10:57:30.547 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47596 10 6661 1 2025-11-23 10:53:05.831 00:05:59.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 10:58:30.951 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56574 10 6661 1 Summary: total flows: 140, total bytes: 429696, total packets: 1023, avg bps: 954, avg pps: 0, avg bpp: 420 Time window: 2025-11-23 09:59:04 - 2025-11-23 10:59:05 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0050s User: 0.0010s Wall: 0.0022s flows/second: 63667.2 Runtime: 0.0022s