Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 04:58:57.675 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36508 10 6452 1 2025-10-01 04:59:58.105 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50530 10 6452 1 2025-10-01 04:55:37.427 00:06:00.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 05:01:03.150 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:01:03.068 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:01:03.145 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:01:03.116 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:01:02.979 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:00:58.503 00:00:24.262 TCP 1.101.0.1:3000 -> 23.104.0.1:60842 10 6452 1 2025-10-01 05:02:12.830 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57936 10 6452 1 2025-10-01 05:03:13.229 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48050 10 6452 1 2025-10-01 05:04:13.633 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38482 10 6452 1 2025-10-01 05:05:14.037 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54698 10 6452 1 2025-10-01 05:00:37.426 00:06:00.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 05:06:03.490 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:06:03.657 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:06:03.692 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:06:03.613 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:06:03.574 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:06:14.442 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49448 10 6452 1 2025-10-01 05:07:14.799 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35666 10 6452 1 2025-10-01 05:02:37.428 00:06:00.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 05:08:15.217 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:32910 10 6452 1 2025-10-01 05:09:15.579 00:00:10.881 TCP 1.101.0.1:3000 -> 23.104.0.1:56456 10 6452 1 2025-10-01 05:10:16.492 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33330 10 6452 1 2025-10-01 05:11:03.647 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:11:03.750 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:11:03.708 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:11:03.818 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:11:03.901 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:11:16.909 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56804 10 6452 1 2025-10-01 05:12:17.274 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59212 10 6452 1 2025-10-01 05:07:37.426 00:06:00.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 05:13:17.677 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57080 10 6452 1 2025-10-01 05:14:18.110 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47936 10 6452 1 2025-10-01 05:09:37.428 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 05:15:18.512 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39620 10 6452 1 2025-10-01 05:16:03.795 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:16:03.928 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:16:03.797 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:16:03.868 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:16:03.950 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:16:18.915 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42670 10 6452 1 2025-10-01 05:17:19.316 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57052 10 6452 1 2025-10-01 05:18:19.720 00:00:10.932 TCP 1.101.0.1:3000 -> 23.104.0.1:46066 10 6452 1 2025-10-01 05:19:20.689 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54326 10 6452 1 2025-10-01 05:14:37.435 00:06:00.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 05:20:21.109 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40944 10 6452 1 2025-10-01 05:21:03.968 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:21:04.004 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:21:03.869 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:21:03.840 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:21:03.923 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:21:21.521 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49126 10 6452 1 2025-10-01 05:16:37.437 00:06:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 05:22:21.944 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59308 10 6452 1 2025-10-01 05:23:22.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41828 10 6452 1 2025-10-01 05:24:22.765 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:42266 10 6452 1 2025-10-01 05:25:23.145 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32844 10 6452 1 2025-10-01 05:26:04.069 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:26:04.151 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:26:03.946 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:26:03.993 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:26:04.152 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:26:23.551 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34618 10 6452 1 2025-10-01 05:21:37.436 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 05:27:23.987 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40804 10 6452 1 2025-10-01 05:28:24.395 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52916 10 6452 1 2025-10-01 05:23:37.438 00:06:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 05:29:24.756 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52156 10 6452 1 2025-10-01 05:30:25.171 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36724 10 6452 1 2025-10-01 05:31:04.036 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:31:04.151 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:31:04.134 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:31:04.064 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:31:04.147 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:31:25.569 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39286 10 6452 1 2025-10-01 05:32:25.975 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54016 10 6452 1 2025-10-01 05:28:37.437 00:06:00.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 05:33:26.377 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:60328 10 6452 1 2025-10-01 05:34:26.737 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52782 10 6452 1 2025-10-01 05:30:37.440 00:06:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 05:35:27.149 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56284 10 6452 1 2025-10-01 05:36:04.405 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:36:04.542 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:36:04.349 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:36:04.311 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:36:04.394 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:36:27.552 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59030 10 6452 1 2025-10-01 05:37:27.953 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46196 10 6452 1 2025-10-01 05:38:28.358 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:50212 12 10375 1 2025-10-01 05:39:28.806 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:51518 10 6452 1 2025-10-01 05:35:37.439 00:06:00.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 05:40:29.182 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44136 10 6452 1 2025-10-01 05:41:04.403 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:41:04.202 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:41:04.264 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:41:04.267 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:41:04.347 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:41:29.582 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41084 10 6452 1 2025-10-01 05:37:37.442 00:06:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 05:42:29.984 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35386 10 6452 1 2025-10-01 05:43:30.393 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41520 10 6452 1 2025-10-01 05:44:30.798 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:47558 10 6452 1 2025-10-01 05:45:31.171 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45420 10 6452 1 2025-10-01 05:46:04.494 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:46:04.357 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:46:04.374 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:46:04.508 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:46:04.458 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:46:31.575 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42380 10 6452 1 2025-10-01 05:42:37.442 00:06:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 05:47:31.976 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:42278 10 6452 1 2025-10-01 05:48:32.395 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46912 10 6452 1 2025-10-01 05:44:37.445 00:06:00.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 05:49:32.809 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53174 10 6452 1 2025-10-01 05:50:33.217 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54610 10 6452 1 2025-10-01 05:51:04.916 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:51:04.835 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:51:04.908 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:51:04.940 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:51:04.944 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:51:33.619 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36504 12 6556 1 2025-10-01 05:52:34.029 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51574 10 6452 1 2025-10-01 05:53:34.434 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49378 10 6452 1 2025-10-01 05:49:37.443 00:06:00.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 05:54:34.838 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:59802 10 6452 1 2025-10-01 05:55:35.219 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55830 10 6452 1 2025-10-01 05:56:04.653 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 05:56:04.492 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 05:56:04.420 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:56:04.659 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 05:56:04.740 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 05:51:37.446 00:06:00.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 05:56:35.629 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33526 10 6452 1 2025-10-01 05:57:36.038 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43150 10 6452 1 2025-10-01 05:58:36.439 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50310 10 6452 1 Summary: total flows: 137, total bytes: 420904, total packets: 1022, avg bps: 888, avg pps: 0, avg bpp: 411 Time window: 2025-10-01 04:55:37 - 2025-10-01 05:58:46 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0018s User: 0.0027s Wall: 0.0016s flows/second: 86279.2 Runtime: 0.0016s