Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 06:59:10.629 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33382 10 6452 1 2025-11-24 07:00:11.030 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51212 10 6452 1 2025-11-24 07:01:11.432 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35202 10 6452 1 2025-11-24 06:58:05.443 00:05:00.974 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 07:02:07.643 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:02:07.557 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:02:07.331 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:02:07.561 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:02:07.456 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:58:05.447 00:05:00.968 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 07:02:11.835 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52282 10 6452 1 2025-11-24 07:03:12.246 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57694 10 6452 1 2025-11-24 07:04:12.644 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60122 10 6452 1 2025-11-24 07:05:13.054 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43450 10 6452 1 2025-11-24 07:06:13.465 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48192 10 6452 1 2025-11-24 07:07:07.922 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:07:07.838 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:07:07.540 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:07:07.840 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:07:07.713 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:07:13.825 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53880 10 6452 1 2025-11-24 07:04:05.447 00:05:00.970 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 07:04:05.444 00:05:00.975 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 07:08:14.232 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50340 10 6452 1 2025-11-24 07:09:14.597 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36098 10 6452 1 2025-11-24 07:10:15.004 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:52942 10 6452 1 2025-11-24 07:11:15.389 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:40058 10 6452 1 2025-11-24 07:12:07.905 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:12:07.579 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:12:08.033 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:12:07.822 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:12:07.584 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:12:15.782 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:40852 11 6504 1 2025-11-24 07:13:16.243 00:00:10.866 TCP 1.101.0.1:3000 -> 23.104.0.1:58738 10 6452 1 2025-11-24 07:10:05.449 00:05:00.967 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 07:10:05.448 00:05:00.972 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 07:14:17.157 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51516 10 6452 1 2025-11-24 07:15:17.560 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49844 10 6452 1 2025-11-24 07:16:17.932 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33086 10 6452 1 2025-11-24 07:17:07.885 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:17:07.485 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:17:07.897 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:17:07.745 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:17:07.981 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:17:18.347 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40088 10 6452 1 2025-11-24 07:18:18.747 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49678 10 6452 1 2025-11-24 07:19:19.148 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35152 10 6452 1 2025-11-24 07:16:05.451 00:05:00.968 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 07:16:05.447 00:05:00.974 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 07:20:19.553 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58104 10 6452 1 2025-11-24 07:21:19.959 00:00:10.759 TCP 1.101.0.1:3000 -> 23.104.0.1:37514 10 6452 1 2025-11-24 07:22:07.807 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:22:07.756 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:22:07.888 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:22:07.892 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:22:07.970 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:22:20.765 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59056 10 6452 1 2025-11-24 07:23:21.183 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:38154 11 6504 1 2025-11-24 07:24:21.653 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39246 10 6452 1 2025-11-24 07:25:22.106 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51664 10 6452 1 2025-11-24 07:22:05.450 00:05:00.971 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 07:22:05.449 00:05:00.975 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 07:26:22.518 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34674 10 6452 1 2025-11-24 07:27:08.007 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:27:07.923 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:27:08.108 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:27:07.926 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:27:07.838 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:27:22.883 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34388 10 6452 1 2025-11-24 07:28:23.286 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46414 10 6452 1 2025-11-24 07:29:23.691 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38114 10 6452 1 2025-11-24 07:30:24.112 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35154 10 6452 1 2025-11-24 07:31:24.480 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58776 10 6452 1 2025-11-24 07:28:05.450 00:05:00.979 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 07:32:08.190 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:32:07.906 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:32:08.069 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:32:08.106 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:32:08.153 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:28:05.451 00:05:00.974 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 07:32:24.883 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57974 10 6452 1 2025-11-24 07:33:25.284 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49570 10 6452 1 2025-11-24 07:34:25.686 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41246 10 6452 1 2025-11-24 07:35:26.105 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53530 10 6452 1 2025-11-24 07:36:26.506 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46796 10 6452 1 2025-11-24 07:37:08.381 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:37:08.201 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:37:08.127 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:37:08.297 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:37:08.291 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:37:26.868 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45864 10 6452 1 2025-11-24 07:34:05.454 00:05:00.972 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 07:34:05.451 00:05:00.977 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 07:38:27.281 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38726 10 6452 1 2025-11-24 07:39:27.654 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47804 10 6452 1 2025-11-24 07:40:28.070 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34964 10 6452 1 2025-11-24 07:41:28.429 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58428 10 6452 1 2025-11-24 07:42:08.315 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:42:08.242 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:42:08.071 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:42:08.233 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:42:08.240 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:42:28.834 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:55686 10 6452 1 2025-11-24 07:43:29.222 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58280 10 6452 1 2025-11-24 07:40:05.455 00:05:00.976 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 07:40:05.452 00:05:00.981 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 07:44:29.628 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35620 10 6452 1 2025-11-24 07:45:30.055 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44766 10 6452 1 2025-11-24 07:46:30.420 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58878 10 6452 1 2025-11-24 07:47:08.505 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:47:08.180 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:47:08.228 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:47:08.504 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:47:08.312 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:47:30.829 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33378 10 6452 1 2025-11-24 07:48:31.193 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:58248 10 6452 1 2025-11-24 07:49:31.641 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52872 10 6452 1 2025-11-24 07:46:05.456 00:05:00.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 07:46:05.454 00:05:00.983 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 07:50:32.009 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35258 10 6452 1 2025-11-24 07:51:32.428 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42152 10 6452 1 2025-11-24 07:52:09.018 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:52:08.935 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:52:08.865 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:52:08.934 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:52:08.934 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:52:32.838 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:60572 10 6452 1 2025-11-24 07:53:33.226 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39708 10 6452 1 2025-11-24 07:54:33.635 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40578 10 6452 1 2025-11-24 07:55:34.034 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57440 10 6452 1 2025-11-24 07:52:05.455 00:05:00.984 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 07:52:05.458 00:05:00.979 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 07:56:34.437 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32830 10 6452 1 2025-11-24 07:57:08.760 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 07:57:08.415 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:57:08.679 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 07:57:08.678 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:57:08.624 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 07:57:34.839 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:40650 10 6452 1 2025-11-24 07:58:35.228 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33706 10 6452 1 Summary: total flows: 140, total bytes: 417104, total packets: 1022, avg bps: 916, avg pps: 0, avg bpp: 408 Time window: 2025-11-24 06:58:05 - 2025-11-24 07:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0049s User: 0.0000s Wall: 0.0015s flows/second: 90561.8 Runtime: 0.0016s