Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 18:59:18.471 00:00:19.059 TCP 1.101.0.1:3000 -> 23.104.0.1:56138 10 6452 1 2025-10-02 19:00:27.569 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41938 10 6452 1 2025-10-02 18:56:38.170 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 19:01:27.976 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41046 10 6452 1 2025-10-02 19:01:49.083 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:01:49.195 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:01:49.208 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:01:49.188 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:01:49.271 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:02:28.394 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51744 10 6452 1 2025-10-02 19:03:28.799 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:44742 12 10375 1 2025-10-02 18:59:38.173 00:06:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 19:04:29.248 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51122 10 6452 1 2025-10-02 19:05:29.646 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39792 10 6452 1 2025-10-02 19:06:30.061 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55166 10 6452 1 2025-10-02 19:06:49.410 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:06:49.683 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:06:49.328 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:06:49.160 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:06:49.327 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:07:30.461 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53112 10 6452 1 2025-10-02 19:03:38.172 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 19:08:30.860 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60122 10 6452 1 2025-10-02 19:09:31.277 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57868 10 6452 1 2025-10-02 19:10:31.644 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45066 10 6452 1 2025-10-02 19:06:38.175 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 19:11:32.055 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51180 10 6452 1 2025-10-02 19:11:49.325 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:11:49.516 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:11:49.523 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:11:49.325 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:11:49.407 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:12:32.462 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50030 10 6452 1 2025-10-02 19:13:32.868 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48360 10 6452 1 2025-10-02 19:14:33.278 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60138 10 6452 1 2025-10-02 19:10:38.172 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 19:15:33.647 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41040 10 6452 1 2025-10-02 19:16:34.062 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54938 10 6452 1 2025-10-02 19:16:49.778 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:16:49.460 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:16:49.375 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:16:49.669 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:16:49.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:17:34.470 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36738 10 6452 1 2025-10-02 19:13:38.175 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 19:18:34.876 00:00:10.466 TCP 1.101.0.1:3000 -> 23.104.0.1:47352 12 10375 1 2025-10-02 19:19:35.372 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34704 10 6452 1 2025-10-02 19:20:35.806 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35460 10 6452 1 2025-10-02 19:21:49.577 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:21:36.215 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39182 10 6452 1 2025-10-02 19:21:49.736 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:21:49.809 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:21:49.730 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:21:49.811 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:17:38.173 00:06:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 19:22:36.628 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35656 10 6452 1 2025-10-02 19:23:37.035 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43750 10 6452 1 2025-10-02 19:24:37.449 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34844 10 6452 1 2025-10-02 19:20:38.176 00:06:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 19:25:37.853 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:39156 10 6452 1 2025-10-02 19:26:49.867 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:26:49.925 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:26:49.695 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:26:38.226 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60522 10 6452 1 2025-10-02 19:26:49.785 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:26:49.785 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:27:38.640 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32962 10 6452 1 2025-10-02 19:28:39.037 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39770 10 6452 1 2025-10-02 19:24:38.174 00:06:00.296 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 19:29:39.442 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45592 10 6452 1 2025-10-02 19:30:39.841 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:50894 10 6452 1 2025-10-02 19:31:49.955 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:31:49.961 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:31:50.167 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:31:40.263 00:00:10.588 TCP 1.101.0.1:3000 -> 23.104.0.1:56548 10 6452 1 2025-10-02 19:31:50.094 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:31:50.085 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:27:38.177 00:06:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 19:32:40.897 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35602 10 6452 1 2025-10-02 19:33:41.314 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39304 10 6452 1 2025-10-02 19:34:41.714 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51132 10 6452 1 2025-10-02 19:35:42.118 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:41400 10 6452 1 2025-10-02 19:31:38.177 00:06:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 19:36:50.155 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:36:50.169 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:36:50.155 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:36:50.206 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:36:42.471 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56646 10 6452 1 2025-10-02 19:36:50.237 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:37:42.876 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59192 10 6452 1 2025-10-02 19:38:43.285 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:32790 10 6452 1 2025-10-02 19:34:38.184 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 19:39:43.647 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55216 10 6452 1 2025-10-02 19:40:44.046 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50522 10 6452 1 2025-10-02 19:41:50.081 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:41:44.442 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36884 10 6452 1 2025-10-02 19:41:50.129 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:41:50.133 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:41:50.138 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:41:50.221 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:42:44.842 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39316 10 6452 1 2025-10-02 19:38:38.183 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 19:43:45.251 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51708 10 6452 1 2025-10-02 19:44:45.660 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:39872 10 6452 1 2025-10-02 19:45:46.112 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53458 10 6452 1 2025-10-02 19:41:38.187 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 19:46:50.770 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:46:50.541 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:46:50.485 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:46:50.618 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:46:50.700 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:46:46.480 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34080 10 6452 1 2025-10-02 19:47:46.878 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54342 10 6452 1 2025-10-02 19:48:47.241 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34704 10 6452 1 2025-10-02 19:49:47.642 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47056 10 6452 1 2025-10-02 19:45:38.184 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 19:50:48.052 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48382 10 6452 1 2025-10-02 19:51:49.955 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:51:50.271 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:51:50.323 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:51:50.262 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:51:50.346 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:51:48.459 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51092 10 6452 1 2025-10-02 19:52:48.858 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35686 10 6452 1 2025-10-02 19:48:38.187 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 19:53:49.225 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49376 10 6452 1 2025-10-02 19:54:49.589 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6452 1 2025-10-02 19:55:49.993 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37366 10 6452 1 2025-10-02 19:56:50.223 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 19:56:50.169 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:56:50.400 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 19:56:50.448 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 19:56:50.485 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 19:56:50.394 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33110 10 6452 1 2025-10-02 19:52:38.186 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 19:57:50.756 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39722 10 6452 1 Summary: total flows: 136, total bytes: 418271, total packets: 1012, avg bps: 899, avg pps: 0, avg bpp: 413 Time window: 2025-10-02 18:56:38 - 2025-10-02 19:58:38 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0050s User: 0.0000s Wall: 0.0018s flows/second: 76485.0 Runtime: 0.0018s