Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 05:59:02.190 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33746 10 6452 1 2025-10-11 05:54:42.447 00:06:00.403 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 06:00:02.599 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54298 10 6452 1 2025-10-11 06:00:53.385 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:00:53.660 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:00:53.616 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:00:53.465 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:00:53.468 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:01:03.008 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55318 10 6452 1 2025-10-11 05:56:42.444 00:06:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 06:02:03.406 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35058 10 6452 1 2025-10-11 06:03:03.805 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45646 10 6452 1 2025-10-11 06:04:04.173 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53350 10 6452 1 2025-10-11 06:05:04.572 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58994 10 6452 1 2025-10-11 06:05:53.761 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:05:53.681 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:05:53.628 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:05:53.547 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:05:53.359 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:06:04.985 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44634 10 6452 1 2025-10-11 06:01:42.448 00:06:00.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 06:07:05.390 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51746 10 6452 1 2025-10-11 06:08:05.793 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 10 6452 1 2025-10-11 06:03:42.447 00:06:00.410 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 06:09:06.200 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49196 10 6452 1 2025-10-11 06:10:06.592 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59506 10 6452 1 2025-10-11 06:10:53.863 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:10:53.860 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:10:53.645 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:10:53.431 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:10:53.781 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:11:07.003 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:55900 10 6452 1 2025-10-11 06:12:07.401 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53314 10 6452 1 2025-10-11 06:13:07.808 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:59484 10 6452 1 2025-10-11 06:08:42.451 00:06:00.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 06:14:08.182 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41308 10 6452 1 2025-10-11 06:15:08.538 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37806 10 6452 1 2025-10-11 06:10:42.448 00:06:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 06:15:53.956 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:15:53.767 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:15:53.792 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:15:53.876 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:15:53.771 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:16:08.935 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:40410 10 6452 1 2025-10-11 06:17:09.363 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40942 10 6452 1 2025-10-11 06:18:09.763 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33808 10 6452 1 2025-10-11 06:19:10.186 00:00:10.498 TCP 1.101.0.1:3000 -> 23.104.0.1:47324 10 6452 1 2025-10-11 06:20:10.743 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:40210 10 6452 1 2025-10-11 06:15:42.455 00:06:00.404 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 06:20:53.779 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:20:53.842 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:20:53.800 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:20:53.935 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:20:54.019 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:21:11.192 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44080 10 6452 1 2025-10-11 06:22:11.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38128 10 6452 1 2025-10-11 06:17:42.452 00:06:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 06:23:11.999 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53634 10 6452 1 2025-10-11 06:24:12.402 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42908 10 6452 1 2025-10-11 06:25:12.814 00:00:13.528 TCP 1.101.0.1:3000 -> 23.104.0.1:52822 10 6452 1 2025-10-11 06:25:54.236 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:25:54.048 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:25:54.170 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:25:54.062 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:25:54.151 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:26:16.383 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38248 10 6452 1 2025-10-11 06:27:16.784 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51830 10 6452 1 2025-10-11 06:22:42.459 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 06:28:17.195 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41696 10 6452 1 2025-10-11 06:29:17.603 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50418 10 6452 1 2025-10-11 06:24:42.458 00:06:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 06:30:18.007 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34736 10 6452 1 2025-10-11 06:30:54.260 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:30:54.059 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:30:54.262 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:30:54.177 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:30:54.176 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:31:18.419 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59610 10 6452 1 2025-10-11 06:32:18.824 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52302 10 6452 1 2025-10-11 06:33:19.222 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55924 10 6452 1 2025-10-11 06:34:19.626 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60754 10 6452 1 2025-10-11 06:29:42.460 00:06:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 06:35:19.985 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35510 10 6452 1 2025-10-11 06:35:54.097 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:35:54.193 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:35:54.371 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:35:54.327 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:35:54.453 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:36:20.390 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60032 10 6452 1 2025-10-11 06:31:42.458 00:06:00.405 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 06:37:20.797 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47620 10 6452 1 2025-10-11 06:38:21.197 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37020 10 6452 1 2025-10-11 06:39:21.605 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:32810 10 6452 1 2025-10-11 06:40:22.003 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34854 10 6452 1 2025-10-11 06:40:54.376 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:40:54.325 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:40:54.286 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:40:54.052 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:40:54.135 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:41:22.401 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51026 10 6452 1 2025-10-11 06:36:42.462 00:06:00.402 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 06:42:22.777 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34718 10 6452 1 2025-10-11 06:43:23.193 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47138 10 6452 1 2025-10-11 06:38:42.459 00:06:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 06:44:23.590 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55008 10 6452 1 2025-10-11 06:45:23.952 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48542 10 6452 1 2025-10-11 06:45:54.740 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:45:54.582 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:45:54.977 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:45:54.983 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:45:55.067 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:46:24.318 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:55262 10 6452 1 2025-10-11 06:47:24.787 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54080 10 6452 1 2025-10-11 06:48:25.214 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35228 10 6452 1 2025-10-11 06:43:42.464 00:06:00.403 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 06:49:25.628 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59564 10 6452 1 2025-10-11 06:50:26.029 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60334 10 6452 1 2025-10-11 06:45:42.462 00:06:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 06:50:54.621 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:50:54.621 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:50:54.564 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:50:54.291 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:50:54.375 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:51:26.451 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-10-11 06:52:26.853 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47696 10 6452 1 2025-10-11 06:53:27.281 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48354 10 6452 1 2025-10-11 06:54:27.687 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55978 10 6452 1 2025-10-11 06:55:28.109 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34060 10 6452 1 2025-10-11 06:50:42.465 00:06:00.403 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 06:55:54.597 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 06:55:54.798 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 06:55:54.439 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:55:54.489 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 06:55:54.572 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 06:56:28.516 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37524 10 6452 1 2025-10-11 06:57:28.919 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:51212 10 6452 1 2025-10-11 06:52:42.464 00:06:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 06:58:29.348 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42234 10 6452 1 Summary: total flows: 138, total bytes: 417738, total packets: 1032, avg bps: 870, avg pps: 0, avg bpp: 404 Time window: 2025-10-11 05:54:42 - 2025-10-11 06:58:42 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0030s User: 0.0020s Wall: 0.0019s flows/second: 71396.8 Runtime: 0.0019s