Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 13:59:15.270 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49968 10 6452 1 2025-11-24 14:00:15.675 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57344 10 6452 1 2025-11-24 14:01:16.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55970 10 6452 1 2025-11-24 13:58:05.589 00:05:01.032 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 13:58:05.591 00:05:01.027 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 14:02:15.972 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:02:15.896 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:02:15.863 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:02:15.946 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:02:16.137 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:02:16.524 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51516 10 6452 1 2025-11-24 14:03:16.893 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:42640 10 6452 1 2025-11-24 14:04:17.269 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58860 10 6452 1 2025-11-24 14:05:17.674 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:52620 10 6452 1 2025-11-24 14:06:18.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60332 10 6452 1 2025-11-24 14:07:15.941 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:07:16.156 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:07:15.991 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:07:16.073 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:07:15.996 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:07:18.511 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50382 10 6452 1 2025-11-24 14:04:05.590 00:05:01.033 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 14:04:05.593 00:05:01.028 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 14:08:18.870 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47952 10 6452 1 2025-11-24 14:09:19.279 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46382 10 6452 1 2025-11-24 14:10:19.689 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46412 10 6452 1 2025-11-24 14:11:20.115 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:57790 12 10375 1 2025-11-24 14:12:15.930 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:12:16.160 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:12:16.094 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:12:16.077 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:12:16.153 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:12:20.587 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46688 10 6452 1 2025-11-24 14:13:20.994 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60240 10 6452 1 2025-11-24 14:10:05.598 00:05:01.031 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 14:10:05.600 00:05:01.025 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 14:14:21.401 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38468 10 6452 1 2025-11-24 14:15:21.767 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34660 10 6452 1 2025-11-24 14:16:22.178 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51242 10 6452 1 2025-11-24 14:17:16.436 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:17:16.276 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:17:16.013 00:00:00.036 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:17:16.352 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:17:16.197 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:17:22.535 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35814 10 6452 1 2025-11-24 14:18:22.895 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52846 10 6452 1 2025-11-24 14:19:23.299 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35082 10 6452 1 2025-11-24 14:16:05.598 00:05:01.048 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 14:16:05.602 00:05:01.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 14:20:23.704 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44072 10 6452 1 2025-11-24 14:21:24.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37430 10 6452 1 2025-11-24 14:22:16.572 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:22:16.679 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:22:16.819 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:22:16.663 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:22:16.903 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:22:24.519 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39106 10 6452 1 2025-11-24 14:23:24.918 00:00:10.732 TCP 1.101.0.1:3000 -> 23.104.0.1:33236 10 6452 1 2025-11-24 14:24:25.689 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39084 10 6452 1 2025-11-24 14:25:26.125 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45396 10 6452 1 2025-11-24 14:22:05.601 00:05:01.047 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 14:22:05.604 00:05:01.042 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 14:26:26.479 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44658 10 6452 1 2025-11-24 14:27:16.401 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:27:16.176 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:27:16.397 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:27:16.212 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:27:16.481 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:27:26.882 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57648 10 6452 1 2025-11-24 14:28:27.285 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54312 10 6452 1 2025-11-24 14:29:27.703 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48214 10 6452 1 2025-11-24 14:30:28.116 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:41100 10 6452 1 2025-11-24 14:31:28.490 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40182 10 6452 1 2025-11-24 14:28:05.602 00:05:01.048 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 14:28:05.606 00:05:01.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 14:32:16.415 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:32:16.440 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:32:16.575 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:32:16.572 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:32:16.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:32:28.903 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57208 10 6452 1 2025-11-24 14:33:29.322 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48142 12 6556 1 2025-11-24 14:34:29.719 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34890 10 6452 1 2025-11-24 14:35:30.132 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36510 10 6452 1 2025-11-24 14:36:30.532 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51266 10 6452 1 2025-11-24 14:37:16.782 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:37:16.647 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:37:16.354 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:37:16.700 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:37:16.686 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:37:30.928 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:50426 10 6452 1 2025-11-24 14:34:05.608 00:05:01.041 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 14:34:05.606 00:05:01.046 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 14:38:31.352 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33852 10 6452 1 2025-11-24 14:39:31.756 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:36216 10 6452 1 2025-11-24 14:40:32.129 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42720 10 6452 1 2025-11-24 14:41:32.535 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49608 10 6452 1 2025-11-24 14:42:16.613 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:42:16.903 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:42:16.892 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:42:16.674 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:42:16.974 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:42:32.942 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57396 10 6452 1 2025-11-24 14:43:33.358 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60858 10 6452 1 2025-11-24 14:40:05.613 00:05:01.038 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 14:40:05.611 00:05:01.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 14:44:33.757 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 10 6452 1 2025-11-24 14:45:34.125 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46822 10 6452 1 2025-11-24 14:46:34.533 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:59486 10 6452 1 2025-11-24 14:47:17.077 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:47:17.215 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:47:16.935 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:47:16.994 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:47:17.096 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:47:34.883 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:59648 10 6452 1 2025-11-24 14:48:35.261 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 10 6452 1 2025-11-24 14:49:35.670 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35390 10 6452 1 2025-11-24 14:46:05.615 00:05:01.036 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 14:46:05.614 00:05:01.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 14:50:36.099 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35818 10 6452 1 2025-11-24 14:51:36.499 00:00:10.877 TCP 1.101.0.1:3000 -> 23.104.0.1:60982 10 6452 1 2025-11-24 14:52:16.833 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:52:16.853 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:52:16.930 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:52:16.835 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:52:17.015 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:52:37.415 00:00:11.430 TCP 1.101.0.1:3000 -> 23.104.0.1:42374 10 6452 1 2025-11-24 14:53:38.883 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:41536 10 6452 1 2025-11-24 14:54:39.271 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39566 11 6492 1 2025-11-24 14:55:39.675 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42758 10 6452 1 2025-11-24 14:52:05.616 00:05:01.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 14:52:05.620 00:05:01.036 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 14:56:40.101 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34650 10 6452 1 2025-11-24 14:57:17.571 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 14:57:17.655 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 14:57:17.434 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:57:17.487 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 14:57:17.582 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 14:57:40.504 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45690 10 6452 1 Summary: total flows: 139, total bytes: 414615, total packets: 1015, avg bps: 925, avg pps: 0, avg bpp: 408 Time window: 2025-11-24 13:58:05 - 2025-11-24 14:57:50 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0038s User: 0.0019s Wall: 0.0022s flows/second: 62810.6 Runtime: 0.0022s