Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 10:59:07.540 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:46752 10 6452 1 2025-10-15 11:00:07.965 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43686 10 6452 1 2025-10-15 10:59:44.543 00:01:00.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 11:01:08.369 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45552 10 6452 1 2025-10-15 11:02:08.773 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:48908 10 6452 1 2025-10-15 11:01:44.546 00:01:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 11:02:55.209 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:02:55.035 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:02:55.123 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:02:55.251 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:02:55.206 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:03:09.141 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36088 10 6452 1 2025-10-15 10:59:44.541 00:05:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 11:04:09.545 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57212 10 6452 1 2025-10-15 11:05:09.956 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35694 10 6452 1 2025-10-15 11:06:10.359 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54550 10 6452 1 2025-10-15 11:07:10.774 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52770 10 6452 1 2025-10-15 11:03:44.546 00:05:00.481 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 11:07:55.524 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:07:55.481 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:07:55.410 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:07:55.483 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:07:55.566 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:08:11.179 00:00:10.722 TCP 1.101.0.1:3000 -> 23.104.0.1:55738 10 6452 1 2025-10-15 11:09:11.939 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42742 10 6452 1 2025-10-15 11:05:44.545 00:05:00.488 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 11:10:12.354 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49214 10 6452 1 2025-10-15 11:11:12.771 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:54650 12 10375 1 2025-10-15 11:12:13.225 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46232 10 6452 1 2025-10-15 11:12:55.224 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:12:55.121 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:12:55.351 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:12:55.237 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:12:55.320 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:13:13.630 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55462 10 6452 1 2025-10-15 11:09:44.548 00:05:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 11:14:14.037 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44718 10 6452 1 2025-10-15 11:15:14.432 00:00:10.572 TCP 1.101.0.1:3000 -> 23.104.0.1:60384 10 6452 1 2025-10-15 11:11:44.546 00:05:00.494 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 11:16:15.040 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60022 10 6452 1 2025-10-15 11:17:15.439 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39188 10 6452 1 2025-10-15 11:17:55.515 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:17:55.507 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:17:55.274 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:17:55.434 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:17:55.511 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:18:15.840 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47216 10 6452 1 2025-10-15 11:19:16.266 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57286 10 6452 1 2025-10-15 11:15:44.552 00:05:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 11:20:16.667 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45612 10 6452 1 2025-10-15 11:21:17.100 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52616 10 6452 1 2025-10-15 11:17:44.549 00:05:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 11:22:17.505 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51786 10 6452 1 2025-10-15 11:22:55.691 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:22:55.573 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:22:55.623 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:22:55.608 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:22:55.568 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:23:17.907 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36046 10 6452 1 2025-10-15 11:24:18.276 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58758 10 6452 1 2025-10-15 11:25:18.678 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44700 10 6452 1 2025-10-15 11:21:44.552 00:05:00.489 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 11:26:19.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46810 10 6452 1 2025-10-15 11:27:19.514 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37424 10 6452 1 2025-10-15 11:23:44.550 00:05:00.496 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 11:27:55.678 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:27:55.615 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:27:55.321 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:27:55.623 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:27:55.706 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:28:19.916 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59722 10 6452 1 2025-10-15 11:29:20.330 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42908 10 6452 1 2025-10-15 11:30:20.744 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47838 10 6452 1 2025-10-15 11:31:21.149 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50584 10 6452 1 2025-10-15 11:27:44.555 00:05:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 11:32:21.559 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45096 10 6452 1 2025-10-15 11:32:56.724 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:32:56.642 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:32:56.646 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:32:56.421 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:32:56.555 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:33:21.921 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46798 10 6452 1 2025-10-15 11:29:44.554 00:05:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 11:34:22.291 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:47234 10 6452 1 2025-10-15 11:35:22.653 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34976 10 6452 1 2025-10-15 11:36:23.066 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33636 10 6452 1 2025-10-15 11:37:23.468 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52232 10 6452 1 2025-10-15 11:33:44.556 00:05:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 11:37:55.900 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:37:55.815 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:37:55.765 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:37:55.818 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:37:55.816 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:38:23.872 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59168 10 6452 1 2025-10-15 11:39:24.276 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43394 10 6452 1 2025-10-15 11:35:44.554 00:05:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 11:40:24.640 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36212 10 6452 1 2025-10-15 11:41:25.059 00:00:10.628 TCP 1.101.0.1:3000 -> 23.104.0.1:49198 12 10375 1 2025-10-15 11:42:25.723 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47156 10 6452 1 2025-10-15 11:42:55.892 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:42:56.062 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:42:56.063 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:42:55.927 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:42:55.811 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:43:26.132 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39734 10 6452 1 2025-10-15 11:39:44.558 00:05:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 11:44:26.544 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53536 10 6452 1 2025-10-15 11:45:26.908 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54030 10 6452 1 2025-10-15 11:41:44.556 00:05:00.495 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 11:46:27.309 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60420 10 6452 1 2025-10-15 11:47:27.673 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34448 10 6452 1 2025-10-15 11:47:56.186 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:47:56.097 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:47:56.102 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:47:55.920 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:47:56.103 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:48:28.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53954 10 6452 1 2025-10-15 11:49:28.515 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33488 10 6452 1 2025-10-15 11:45:44.562 00:05:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 11:50:28.915 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46940 10 6452 1 2025-10-15 11:51:29.322 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44160 10 6452 1 2025-10-15 11:47:44.557 00:05:00.496 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 11:52:29.725 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34666 10 6452 1 2025-10-15 11:52:56.195 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:52:56.101 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:52:56.011 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:52:55.977 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:52:56.060 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:53:30.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38904 10 6452 1 2025-10-15 11:54:30.517 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39724 10 6452 1 2025-10-15 11:55:30.919 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:45242 10 6452 1 2025-10-15 11:51:44.563 00:05:00.489 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 11:56:31.348 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36848 10 6452 1 2025-10-15 11:57:31.758 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:40548 10 6452 1 2025-10-15 11:53:44.561 00:05:00.494 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 11:57:56.526 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 11:57:56.258 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 11:57:56.256 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 11:57:56.188 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:57:56.442 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 11:58:32.179 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55590 10 6452 1 Summary: total flows: 141, total bytes: 424600, total packets: 1020, avg bps: 949, avg pps: 0, avg bpp: 416 Time window: 2025-10-15 10:59:07 - 2025-10-15 11:58:45 Total flows processed: 141, passed: 141, Blocks skipped: 0, Bytes read: 14728 Sys: 0.0041s User: 0.0010s Wall: 0.0018s flows/second: 76665.4 Runtime: 0.0019s