Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 06:59:09.919 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50806 10 6452 1 2025-10-08 06:59:28.217 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:59:28.118 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:59:28.222 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:59:27.976 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:59:28.086 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:54:41.085 00:06:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 07:00:10.321 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36030 10 6452 1 2025-10-08 07:01:10.731 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52152 10 6452 1 2025-10-08 07:02:11.102 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51408 10 6452 1 2025-10-08 07:03:11.521 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48478 10 6452 1 2025-10-08 06:58:41.083 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 07:04:11.924 00:00:12.221 TCP 1.101.0.1:3000 -> 23.104.0.1:60850 10 6452 1 2025-10-08 07:04:28.277 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 07:04:28.242 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 07:04:27.931 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:04:28.325 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:04:28.409 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 07:05:14.181 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:55954 10 6452 1 2025-10-08 07:06:14.553 00:00:10.741 TCP 1.101.0.1:3000 -> 23.104.0.1:53232 10 6452 1 2025-10-08 07:01:41.085 00:06:00.296 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 07:07:15.332 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59576 10 6452 1 2025-10-08 07:08:15.739 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37788 10 6452 1 2025-10-08 07:09:28.590 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 07:09:29.092 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 07:09:29.106 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 07:09:28.207 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:09:16.118 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57020 10 6452 1 2025-10-08 07:09:28.509 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:10:16.520 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49392 10 6452 1 2025-10-08 07:05:41.085 00:06:00.303 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 07:11:16.928 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33788 10 6452 1 2025-10-08 07:12:17.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41496 10 6452 1 2025-10-08 07:13:17.789 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39228 10 6452 1 2025-10-08 07:08:41.087 00:06:00.297 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 07:14:28.396 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 07:14:28.379 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 07:14:28.390 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 07:14:28.048 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:14:28.313 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:14:18.154 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43556 10 6452 1 2025-10-08 07:15:18.555 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45532 10 6452 1 2025-10-08 07:16:18.915 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57676 10 6452 1 2025-10-08 07:17:19.278 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57852 10 6452 1 2025-10-08 07:12:41.086 00:06:00.302 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 07:18:19.689 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42868 10 6452 1 2025-10-08 07:19:28.573 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 07:19:28.641 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 07:19:28.292 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:19:28.639 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:19:28.722 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 07:19:20.112 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:33394 10 6452 1 2025-10-08 07:20:20.505 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54428 10 6452 1 2025-10-08 07:15:41.089 00:06:00.297 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 07:21:20.909 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43994 10 6452 1 2025-10-08 07:22:21.318 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51320 10 6452 1 2025-10-08 07:23:21.689 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55478 10 6452 1 2025-10-08 07:24:28.746 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 07:24:28.503 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 07:24:28.507 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 07:24:28.450 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:24:28.663 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:24:22.109 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60284 10 6452 1 2025-10-08 07:19:41.087 00:06:00.302 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 07:25:22.514 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34154 10 6452 1 2025-10-08 07:26:22.916 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:33874 10 6452 1 2025-10-08 07:27:23.311 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54332 10 6452 1 2025-10-08 07:22:41.089 00:06:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 07:28:23.719 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44842 10 6452 1 2025-10-08 07:29:28.883 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 07:29:28.780 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 07:29:28.827 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:29:28.945 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:29:29.029 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 07:29:24.104 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34870 10 6452 1 2025-10-08 07:30:24.519 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56640 10 6452 1 2025-10-08 07:31:24.924 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53754 10 6452 1 2025-10-08 07:26:41.087 00:06:00.303 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 07:32:25.341 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50424 10 6452 1 2025-10-08 07:33:25.744 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57270 10 6452 1 2025-10-08 07:34:28.951 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 07:34:28.836 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 07:34:28.922 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:34:28.962 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:34:29.045 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 07:34:26.155 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:38470 12 10375 1 2025-10-08 07:29:41.090 00:06:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 07:35:26.634 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42414 10 6452 1 2025-10-08 07:36:27.029 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53636 10 6452 1 2025-10-08 07:37:27.425 00:00:10.832 TCP 1.101.0.1:3000 -> 23.104.0.1:43908 10 6452 1 2025-10-08 07:38:28.298 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45758 10 6452 1 2025-10-08 07:33:41.088 00:06:00.302 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 07:39:29.030 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 07:39:28.879 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 07:39:28.882 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 07:39:28.837 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:39:28.946 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:39:28.700 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43746 10 6452 1 2025-10-08 07:40:29.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59108 10 6452 1 2025-10-08 07:41:29.511 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54160 10 6452 1 2025-10-08 07:36:41.092 00:06:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 07:42:29.919 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54390 10 6452 1 2025-10-08 07:43:30.281 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39688 10 6452 1 2025-10-08 07:44:29.038 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 07:44:29.071 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 07:44:28.921 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:44:29.185 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:44:29.266 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 07:44:30.682 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34138 10 6452 1 2025-10-08 07:45:31.100 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59854 10 6452 1 2025-10-08 07:40:41.090 00:06:00.303 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 07:46:31.505 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44662 10 6452 1 2025-10-08 07:47:31.912 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59794 10 6452 1 2025-10-08 07:43:41.092 00:06:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 07:48:32.312 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40828 10 6452 1 2025-10-08 07:49:29.415 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 07:49:29.386 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 07:49:29.332 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 07:49:28.854 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:49:29.334 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:49:32.717 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60098 10 6452 1 2025-10-08 07:50:33.119 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52586 10 6452 1 2025-10-08 07:51:33.524 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38664 10 6452 1 2025-10-08 07:47:41.090 00:06:00.303 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 07:52:33.930 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:53222 10 6452 1 2025-10-08 07:53:34.352 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58792 10 6452 1 2025-10-08 07:54:29.320 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 07:54:29.067 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 07:54:29.324 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 07:54:29.070 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:54:29.238 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 07:54:34.769 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40120 10 6452 1 2025-10-08 07:50:41.095 00:06:00.297 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 07:55:35.184 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46782 10 6452 1 2025-10-08 07:56:35.556 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:55718 10 6452 1 2025-10-08 07:57:36.030 00:00:10.461 TCP 1.101.0.1:3000 -> 23.104.0.1:60104 10 6452 1 2025-10-08 07:58:36.530 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38326 10 6452 1 Summary: total flows: 137, total bytes: 420800, total packets: 1020, avg bps: 875, avg pps: 0, avg bpp: 412 Time window: 2025-10-08 06:54:41 - 2025-10-08 07:58:46 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0011s User: 0.0033s Wall: 0.0016s flows/second: 87607.8 Runtime: 0.0016s