Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-10 22:58:59.967 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41692 10 6452 1 2025-10-10 22:54:42.325 00:06:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-10 23:00:00.368 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53666 10 6452 1 2025-10-10 23:00:45.328 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:00:45.362 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:00:45.156 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:00:45.322 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:00:45.405 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:01:00.771 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34292 10 6452 1 2025-10-10 22:56:42.322 00:06:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-10 23:02:01.182 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33616 10 6452 1 2025-10-10 23:03:01.543 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:33918 10 6452 1 2025-10-10 23:04:01.903 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57870 10 6452 1 2025-10-10 23:05:02.318 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54198 10 6452 1 2025-10-10 23:05:45.694 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:05:45.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:05:45.620 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:05:45.092 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:05:45.613 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:06:02.682 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40092 10 6452 1 2025-10-10 23:01:42.326 00:06:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-10 23:07:03.112 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50336 10 6452 1 2025-10-10 23:08:03.514 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34200 10 6452 1 2025-10-10 23:03:42.326 00:06:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-10 23:09:03.878 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35020 10 6452 1 2025-10-10 23:10:04.245 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57710 10 6452 1 2025-10-10 23:10:45.421 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:10:45.331 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:10:45.240 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:10:45.180 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:10:45.262 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:11:04.669 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58122 10 6452 1 2025-10-10 23:12:05.043 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52238 10 6452 1 2025-10-10 23:13:05.449 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42284 10 6452 1 2025-10-10 23:08:42.328 00:06:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-10 23:14:05.857 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60690 10 6452 1 2025-10-10 23:15:06.273 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56872 10 6452 1 2025-10-10 23:10:42.327 00:06:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-10 23:15:45.810 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:15:45.440 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:15:45.520 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:15:45.332 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:15:45.727 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:16:06.682 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 10 6452 1 2025-10-10 23:17:07.107 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35328 10 6452 1 2025-10-10 23:18:07.468 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49168 10 6452 1 2025-10-10 23:19:07.867 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38866 10 6452 1 2025-10-10 23:20:08.277 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:43128 10 6452 1 2025-10-10 23:15:42.332 00:06:00.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-10 23:20:45.787 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:20:45.560 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:20:45.590 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:20:45.630 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:20:45.713 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:21:08.707 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49054 10 6452 1 2025-10-10 23:22:09.115 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43434 10 6452 1 2025-10-10 23:17:42.328 00:06:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-10 23:23:09.475 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54780 10 6452 1 2025-10-10 23:24:09.841 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:50228 10 6452 1 2025-10-10 23:25:10.274 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38970 10 6452 1 2025-10-10 23:25:45.563 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:25:45.567 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:25:45.750 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:25:45.756 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:25:45.838 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:26:10.677 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59978 10 6452 1 2025-10-10 23:27:11.104 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37664 10 6452 1 2025-10-10 23:22:42.331 00:06:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-10 23:28:11.507 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38892 10 6452 1 2025-10-10 23:29:11.925 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52642 10 6452 1 2025-10-10 23:24:42.330 00:06:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-10 23:30:12.334 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34282 10 6452 1 2025-10-10 23:30:45.683 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:30:45.758 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:30:45.683 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:30:45.673 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:30:45.756 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:31:12.737 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55440 10 6452 1 2025-10-10 23:32:13.150 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35336 10 6452 1 2025-10-10 23:33:13.553 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50390 10 6452 1 2025-10-10 23:34:13.968 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41552 10 6452 1 2025-10-10 23:29:42.333 00:06:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-10 23:35:14.381 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38840 10 6452 1 2025-10-10 23:35:45.865 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:35:45.707 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:35:45.920 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:35:45.802 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:35:45.885 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:36:14.744 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38736 10 6452 1 2025-10-10 23:31:42.331 00:06:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-10 23:37:15.149 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44148 10 6452 1 2025-10-10 23:38:15.560 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:58350 10 6452 1 2025-10-10 23:39:15.990 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55080 10 6452 1 2025-10-10 23:40:16.399 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:36400 11 6504 1 2025-10-10 23:40:45.599 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:40:45.949 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:40:45.947 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:40:45.990 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:40:46.072 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:41:16.857 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39736 10 6452 1 2025-10-10 23:36:42.334 00:06:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-10 23:42:17.273 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36926 10 6452 1 2025-10-10 23:43:17.643 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53542 10 6452 1 2025-10-10 23:38:42.334 00:06:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-10 23:44:18.064 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43388 10 6452 1 2025-10-10 23:45:18.428 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58470 10 6452 1 2025-10-10 23:45:45.965 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:45:46.142 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:45:46.211 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:45:45.962 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:45:46.049 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:46:18.832 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40368 10 6452 1 2025-10-10 23:47:19.260 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33754 10 6452 1 2025-10-10 23:48:19.661 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38220 10 6452 1 2025-10-10 23:43:42.337 00:06:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-10 23:49:20.026 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37754 10 6452 1 2025-10-10 23:50:20.427 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:36616 12 10369 1 2025-10-10 23:45:42.335 00:06:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-10 23:50:46.311 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:50:46.222 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:50:46.134 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:50:46.096 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:50:46.227 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:51:20.863 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49624 10 6452 1 2025-10-10 23:52:21.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45378 10 6452 1 2025-10-10 23:53:21.675 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46144 10 6452 1 2025-10-10 23:54:22.111 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42046 10 6452 1 2025-10-10 23:55:22.519 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55460 10 6452 1 2025-10-10 23:50:42.341 00:06:00.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-10 23:55:46.252 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-10 23:55:46.177 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-10 23:55:46.086 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:55:46.176 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-10 23:55:46.258 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-10 23:56:22.884 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:45050 12 6556 1 2025-10-10 23:57:23.319 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49524 10 6452 1 2025-10-10 23:52:42.339 00:06:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-10 23:58:23.693 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40352 10 6452 1 Summary: total flows: 138, total bytes: 421811, total packets: 1037, avg bps: 878, avg pps: 0, avg bpp: 406 Time window: 2025-10-10 22:54:42 - 2025-10-10 23:58:42 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0022s User: 0.0022s Wall: 0.0015s flows/second: 91570.0 Runtime: 0.0015s