Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 07:58:56.616 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51528 10 6452 1 2025-10-11 07:59:57.024 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57314 10 6452 1 2025-10-11 07:55:42.486 00:06:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 08:00:55.856 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:00:55.667 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:00:55.768 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:00:55.936 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:00:56.021 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:00:57.424 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:52144 12 10369 1 2025-10-11 08:01:57.903 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51988 12 6556 1 2025-10-11 08:02:58.316 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53646 10 6452 1 2025-10-11 08:03:58.736 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37056 10 6452 1 2025-10-11 08:04:59.111 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48148 10 6452 1 2025-10-11 08:00:42.491 00:06:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 08:05:55.984 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:05:55.982 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:05:56.096 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:05:55.987 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:05:56.069 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:05:59.518 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36412 10 6452 1 2025-10-11 08:06:59.923 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:37492 10 6452 1 2025-10-11 08:02:42.489 00:06:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 08:08:00.350 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54762 10 6452 1 2025-10-11 08:09:00.759 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49834 10 6452 1 2025-10-11 08:10:01.124 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47722 10 6452 1 2025-10-11 08:10:56.501 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:10:56.621 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:10:56.523 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:10:56.621 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:10:56.704 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:11:01.527 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54588 10 6452 1 2025-10-11 08:12:01.938 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45870 10 6452 1 2025-10-11 08:07:42.493 00:06:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 08:13:02.357 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38906 10 6452 1 2025-10-11 08:14:02.766 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52754 10 6452 1 2025-10-11 08:09:42.490 00:06:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 08:15:03.175 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60746 10 6452 1 2025-10-11 08:15:56.302 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:15:56.282 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:15:56.479 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:15:56.373 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:15:56.376 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:16:03.577 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:33586 12 10375 1 2025-10-11 08:17:04.064 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56220 10 6452 1 2025-10-11 08:18:04.492 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46946 10 6452 1 2025-10-11 08:19:04.861 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:42664 10 6452 1 2025-10-11 08:14:42.493 00:06:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 08:20:05.282 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48424 10 6452 1 2025-10-11 08:20:56.516 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:20:56.430 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:20:56.383 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:20:56.134 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:20:56.433 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:21:05.685 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45950 10 6452 1 2025-10-11 08:16:42.491 00:06:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 08:22:06.109 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50932 10 6452 1 2025-10-11 08:23:06.514 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46458 10 6452 1 2025-10-11 08:24:06.873 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46036 10 6452 1 2025-10-11 08:25:07.280 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52550 10 6452 1 2025-10-11 08:25:56.394 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:25:56.404 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:25:56.491 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:25:56.487 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:25:56.570 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:26:07.642 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50732 10 6452 1 2025-10-11 08:21:42.495 00:06:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 08:27:08.074 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46218 10 6452 1 2025-10-11 08:28:08.478 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48688 10 6452 1 2025-10-11 08:23:42.492 00:06:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 08:29:08.882 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48410 12 6556 1 2025-10-11 08:30:09.293 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33498 10 6452 1 2025-10-11 08:30:56.728 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:30:56.453 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:30:56.644 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:30:56.505 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:30:56.646 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:31:09.695 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47064 10 6452 1 2025-10-11 08:32:10.118 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52968 10 6452 1 2025-10-11 08:33:10.479 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:36940 10 6452 1 2025-10-11 08:28:42.496 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 08:34:10.836 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53224 10 6452 1 2025-10-11 08:35:11.256 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33232 10 6452 1 2025-10-11 08:30:42.492 00:06:00.405 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 08:35:56.662 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:35:56.666 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:35:56.661 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:35:56.465 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:35:56.745 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:36:11.663 00:00:10.920 TCP 1.101.0.1:3000 -> 23.104.0.1:58030 10 6452 1 2025-10-11 08:37:12.622 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56780 10 6452 1 2025-10-11 08:38:13.023 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40184 10 6452 1 2025-10-11 08:39:13.383 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47672 10 6452 1 2025-10-11 08:40:13.785 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52584 10 6452 1 2025-10-11 08:35:42.497 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 08:40:56.742 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:40:56.540 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:40:56.587 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:40:56.873 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:40:56.957 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:41:14.194 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36796 10 6452 1 2025-10-11 08:42:14.597 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33114 10 6452 1 2025-10-11 08:37:42.494 00:06:00.405 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 08:43:15.005 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36352 10 6452 1 2025-10-11 08:44:15.410 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40934 10 6452 1 2025-10-11 08:45:15.810 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46632 10 6452 1 2025-10-11 08:45:57.141 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:45:56.801 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:45:56.952 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:45:56.834 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:45:57.060 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:46:16.210 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58920 10 6452 1 2025-10-11 08:47:16.620 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40624 10 6452 1 2025-10-11 08:42:42.498 00:06:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 08:48:16.987 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59436 10 6452 1 2025-10-11 08:49:17.405 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43796 10 6452 1 2025-10-11 08:44:42.495 00:06:00.406 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 08:50:17.823 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33086 10 6452 1 2025-10-11 08:50:56.928 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:50:56.980 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:50:56.922 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:50:56.679 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:50:56.845 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:51:18.231 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50178 10 6452 1 2025-10-11 08:52:18.599 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47298 10 6452 1 2025-10-11 08:53:18.959 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41094 10 6452 1 2025-10-11 08:54:19.368 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37010 10 6452 1 2025-10-11 08:49:42.501 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 08:55:19.731 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45982 10 6452 1 2025-10-11 08:55:57.017 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 08:55:56.746 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 08:55:56.789 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:55:57.096 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 08:55:57.179 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 08:56:20.143 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46378 10 6452 1 2025-10-11 08:51:42.499 00:06:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 08:57:20.508 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53284 10 6452 1 2025-10-11 08:58:20.928 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:48348 10 6452 1 Summary: total flows: 137, total bytes: 424925, total packets: 1026, avg bps: 901, avg pps: 0, avg bpp: 414 Time window: 2025-10-11 07:55:42 - 2025-10-11 08:58:31 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0043s User: 0.0009s Wall: 0.0020s flows/second: 67586.4 Runtime: 0.0020s