Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 18:58:40.550 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60878 10 6452 1 2025-10-01 18:59:40.949 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:37716 10 6452 1 2025-10-01 18:55:37.694 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 19:00:41.325 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51310 10 6452 1 2025-10-01 19:01:20.798 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:01:20.392 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:01:20.517 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:01:20.613 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:01:20.696 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:01:41.729 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42040 10 6452 1 2025-10-01 19:02:42.146 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47734 10 6452 1 2025-10-01 19:03:42.507 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44244 10 6452 1 2025-10-01 19:04:42.871 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35964 10 6452 1 2025-10-01 19:00:37.693 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 19:05:43.239 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38134 10 6452 1 2025-10-01 19:06:20.487 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:06:20.575 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:06:20.571 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:06:20.165 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:06:20.401 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:06:43.639 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57000 10 6452 1 2025-10-01 19:02:37.696 00:06:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 19:07:44.042 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55028 10 6452 1 2025-10-01 19:08:44.405 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39050 10 6452 1 2025-10-01 19:09:44.806 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42046 10 6452 1 2025-10-01 19:10:45.204 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33672 10 6452 1 2025-10-01 19:11:20.659 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:11:20.820 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:11:20.866 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:11:20.674 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:11:20.574 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:11:45.616 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35622 10 6452 1 2025-10-01 19:07:37.695 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 19:12:45.988 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36858 10 6452 1 2025-10-01 19:13:46.406 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37546 10 6452 1 2025-10-01 19:09:37.697 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 19:14:46.771 00:00:10.502 TCP 1.101.0.1:3000 -> 23.104.0.1:54944 10 6452 1 2025-10-01 19:15:47.313 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39988 10 6452 1 2025-10-01 19:16:20.757 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:16:20.748 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:16:20.392 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:16:20.753 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:16:20.836 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:16:47.713 00:00:10.820 TCP 1.101.0.1:3000 -> 23.104.0.1:58620 10 6452 1 2025-10-01 19:17:48.572 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53008 10 6452 1 2025-10-01 19:18:48.934 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:59826 10 6452 1 2025-10-01 19:14:37.696 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 19:19:49.361 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57892 10 6452 1 2025-10-01 19:20:49.764 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36168 10 6452 1 2025-10-01 19:21:20.813 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:21:20.740 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:21:20.804 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:21:20.831 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:21:20.895 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:16:37.699 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 19:21:50.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43048 10 6452 1 2025-10-01 19:22:50.580 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44638 10 6452 1 2025-10-01 19:23:50.987 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55722 10 6452 1 2025-10-01 19:24:51.388 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48646 10 6452 1 2025-10-01 19:25:51.818 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47182 10 6452 1 2025-10-01 19:26:20.900 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:26:20.970 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:26:20.902 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:26:20.838 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:26:20.982 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:21:37.698 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 19:26:52.271 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43192 10 6452 1 2025-10-01 19:27:52.679 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41918 10 6452 1 2025-10-01 19:23:37.700 00:06:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 19:28:53.040 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50328 10 6452 1 2025-10-01 19:29:53.441 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38296 10 6452 1 2025-10-01 19:30:53.848 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:37662 10 6452 1 2025-10-01 19:31:21.161 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:31:21.093 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:31:20.804 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:31:20.972 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:31:21.056 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:31:54.270 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39616 10 6452 1 2025-10-01 19:32:54.677 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:37346 10 6452 1 2025-10-01 19:28:37.698 00:06:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 19:33:55.059 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40274 10 6452 1 2025-10-01 19:34:55.465 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37024 10 6452 1 2025-10-01 19:30:37.702 00:06:00.228 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 19:35:55.862 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37012 10 6452 1 2025-10-01 19:36:21.209 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:36:21.274 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:36:21.117 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:36:21.126 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:36:21.291 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:36:56.234 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57604 10 6452 1 2025-10-01 19:37:56.596 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43588 10 6452 1 2025-10-01 19:38:56.958 00:00:11.871 TCP 1.101.0.1:3000 -> 23.104.0.1:46106 10 6452 1 2025-10-01 19:39:58.869 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43692 10 6452 1 2025-10-01 19:35:37.701 00:06:00.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 19:40:59.275 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48598 10 6452 1 2025-10-01 19:41:21.796 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:41:21.632 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:41:21.632 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:41:21.647 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:41:21.714 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:41:59.679 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57780 10 6452 1 2025-10-01 19:37:37.705 00:06:00.228 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 19:43:00.115 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49998 10 6452 1 2025-10-01 19:44:00.518 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59516 10 6452 1 2025-10-01 19:45:00.927 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51004 10 6452 1 2025-10-01 19:46:01.342 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55458 10 6452 1 2025-10-01 19:46:21.493 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:46:21.430 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:46:21.618 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:46:21.437 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:46:21.411 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:47:01.750 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60104 10 6452 1 2025-10-01 19:42:37.703 00:06:00.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 19:48:02.153 00:00:10.518 TCP 1.101.0.1:3000 -> 23.104.0.1:46430 14 14292 1 2025-10-01 19:49:02.708 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46570 10 6452 1 2025-10-01 19:44:37.707 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 19:50:03.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56252 10 6452 1 2025-10-01 19:51:03.519 00:00:10.601 TCP 1.101.0.1:3000 -> 23.104.0.1:49590 10 6452 1 2025-10-01 19:51:21.249 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:51:21.389 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:51:21.193 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:51:21.467 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:51:21.549 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:52:04.158 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54956 10 6452 1 2025-10-01 19:53:04.560 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37764 10 6452 1 2025-10-01 19:54:04.923 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52656 10 6452 1 2025-10-01 19:49:37.705 00:06:00.243 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 19:55:05.327 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:37602 10 6452 1 2025-10-01 19:56:05.729 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38830 10 6452 1 2025-10-01 19:56:21.591 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 19:56:21.538 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 19:56:21.212 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:56:21.648 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 19:56:21.731 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 19:51:37.709 00:06:00.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 19:57:06.138 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49828 10 6452 1 2025-10-01 19:58:06.549 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57972 10 6452 1 Summary: total flows: 137, total bytes: 424717, total packets: 1022, avg bps: 903, avg pps: 0, avg bpp: 415 Time window: 2025-10-01 18:55:37 - 2025-10-01 19:58:16 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0049s User: 0.0010s Wall: 0.0022s flows/second: 62786.2 Runtime: 0.0022s