Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 12:59:04.603 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57768 10 6452 1 2025-10-21 13:00:05.008 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53052 10 6452 1 2025-10-21 13:00:50.767 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:00:50.844 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:00:50.824 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:00:50.854 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:00:50.936 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:01:05.407 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47976 10 6452 1 2025-10-21 12:57:47.702 00:05:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 13:02:05.810 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:55126 10 6452 1 2025-10-21 13:03:06.258 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34804 10 6452 1 2025-10-21 12:59:47.706 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 13:04:06.619 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47122 10 6452 1 2025-10-21 13:05:07.025 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40090 10 6452 1 2025-10-21 13:05:50.966 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:05:50.970 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:05:50.986 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:05:50.829 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:05:50.913 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:06:07.458 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50926 10 6452 1 2025-10-21 13:07:07.865 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39668 10 6452 1 2025-10-21 13:03:47.703 00:05:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 13:08:08.297 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60216 10 6452 1 2025-10-21 13:09:08.696 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49086 10 6452 1 2025-10-21 13:05:47.707 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 13:10:09.109 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33480 10 6452 1 2025-10-21 13:10:50.949 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:10:50.841 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:10:51.074 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:10:50.897 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:10:50.866 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:11:09.515 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59586 10 6452 1 2025-10-21 13:12:09.874 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41004 10 6452 1 2025-10-21 13:13:10.300 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44396 10 6452 1 2025-10-21 13:09:47.705 00:05:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 13:14:10.705 00:00:10.979 TCP 1.101.0.1:3000 -> 23.104.0.1:40868 12 10375 1 2025-10-21 13:15:11.727 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35524 10 6452 1 2025-10-21 13:11:47.707 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 13:15:51.302 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:15:51.002 00:00:00.049 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:15:51.083 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:15:51.001 00:00:00.051 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:15:51.085 00:00:00.051 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:16:12.141 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34924 10 6452 1 2025-10-21 13:17:12.547 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48712 10 6452 1 2025-10-21 13:18:12.955 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39210 11 6492 1 2025-10-21 13:19:13.323 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32994 10 6452 1 2025-10-21 13:15:47.712 00:05:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 13:20:13.728 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45850 10 6452 1 2025-10-21 13:20:51.276 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:20:51.274 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:20:50.978 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:20:51.276 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:20:51.359 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:21:14.135 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37384 10 6452 1 2025-10-21 13:17:47.712 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 13:22:14.536 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53462 10 6452 1 2025-10-21 13:23:14.946 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41706 10 6452 1 2025-10-21 13:24:15.321 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:33468 10 6452 1 2025-10-21 13:25:15.709 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45084 10 6452 1 2025-10-21 13:21:47.723 00:05:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 13:25:51.455 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:25:51.257 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:25:51.284 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:25:51.570 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:25:51.656 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:26:16.112 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39962 10 6452 1 2025-10-21 13:27:16.474 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36856 10 6452 1 2025-10-21 13:23:47.727 00:05:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 13:28:16.884 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49876 10 6452 1 2025-10-21 13:29:17.296 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53728 10 6452 1 2025-10-21 13:30:17.663 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40398 10 6452 1 2025-10-21 13:30:51.557 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:30:51.708 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:30:51.607 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:30:51.295 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:30:51.476 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:31:18.098 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38528 10 6452 1 2025-10-21 13:27:47.727 00:05:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 13:32:18.501 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40594 10 6452 1 2025-10-21 13:33:18.908 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51548 12 6556 1 2025-10-21 13:29:47.730 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 13:34:19.317 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52208 10 6452 1 2025-10-21 13:35:19.712 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41006 10 6452 1 2025-10-21 13:35:51.756 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:35:51.843 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:35:51.772 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:35:51.681 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:35:51.765 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:36:20.118 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:51918 10 6452 1 2025-10-21 13:37:20.506 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43376 10 6452 1 2025-10-21 13:33:47.729 00:05:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 13:38:20.910 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46262 10 6452 1 2025-10-21 13:39:21.319 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39356 10 6452 1 2025-10-21 13:35:47.731 00:05:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 13:40:21.680 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41176 10 6452 1 2025-10-21 13:40:51.673 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:40:51.780 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:40:51.614 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:40:51.799 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:40:51.881 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:41:22.039 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52964 10 6452 1 2025-10-21 13:42:22.405 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36196 10 6452 1 2025-10-21 13:43:22.772 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47602 10 6452 1 2025-10-21 13:39:47.737 00:05:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 13:44:23.185 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45190 10 6452 1 2025-10-21 13:45:23.590 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38482 10 6452 1 2025-10-21 13:41:47.740 00:05:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 13:45:51.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:45:51.734 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:45:51.686 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:45:51.850 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:45:51.934 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:46:23.992 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36930 10 6452 1 2025-10-21 13:47:24.395 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49026 10 6452 1 2025-10-21 13:48:24.758 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33034 10 6452 1 2025-10-21 13:49:25.121 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49106 10 6452 1 2025-10-21 13:45:47.738 00:05:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 13:50:25.524 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48038 10 6452 1 2025-10-21 13:50:52.094 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:50:52.097 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:50:51.677 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:50:52.154 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:50:52.237 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:51:25.938 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55742 10 6452 1 2025-10-21 13:47:47.741 00:05:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 13:52:26.356 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55976 10 6452 1 2025-10-21 13:53:26.765 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53446 10 6452 1 2025-10-21 13:54:27.187 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55382 10 6452 1 2025-10-21 13:55:27.564 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57316 10 6452 1 2025-10-21 13:51:47.738 00:05:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 13:55:52.109 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 13:55:51.905 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:55:52.254 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 13:55:51.880 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 13:55:52.338 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 13:56:27.976 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54204 10 6452 1 2025-10-21 13:57:28.378 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:46652 10 6452 1 2025-10-21 13:53:47.741 00:05:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 13:58:28.774 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40894 10 6452 1 Summary: total flows: 140, total bytes: 421067, total packets: 1025, avg bps: 920, avg pps: 0, avg bpp: 410 Time window: 2025-10-21 12:57:47 - 2025-10-21 13:58:48 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0035s User: 0.0012s Wall: 0.0019s flows/second: 73685.9 Runtime: 0.0019s