Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 00:59:07.116 00:00:11.452 TCP 1.101.0.1:3000 -> 23.104.0.1:57778 10 6452 1 2025-10-22 01:00:08.603 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56856 10 6452 1 2025-10-22 01:01:05.298 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:01:05.319 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:01:05.189 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:01:05.302 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:01:05.272 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:01:09.003 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39214 10 6452 1 2025-10-22 00:57:47.971 00:05:00.321 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:02:09.405 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54852 10 6452 1 2025-10-22 01:03:09.813 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53258 10 6452 1 2025-10-22 00:59:47.973 00:05:00.316 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:04:10.211 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57428 10 6452 1 2025-10-22 01:05:10.624 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53658 10 6452 1 2025-10-22 01:06:05.651 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:06:05.521 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:06:05.561 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:06:05.273 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:06:05.355 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:06:11.035 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36456 10 6452 1 2025-10-22 01:07:11.435 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:36678 11 6504 1 2025-10-22 01:03:47.972 00:05:00.321 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:08:11.890 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40520 10 6452 1 2025-10-22 01:09:12.311 00:00:11.092 TCP 1.101.0.1:3000 -> 23.104.0.1:45040 10 6452 1 2025-10-22 01:05:47.974 00:05:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:10:13.443 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36026 10 6452 1 2025-10-22 01:11:05.587 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:11:05.539 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:11:05.498 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:11:05.328 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:11:05.670 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:11:13.843 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:50846 10 6452 1 2025-10-22 01:12:14.270 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38628 10 6452 1 2025-10-22 01:13:14.633 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34988 10 6452 1 2025-10-22 01:09:47.972 00:05:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:14:15.035 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39350 10 6452 1 2025-10-22 01:15:15.437 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56998 10 6452 1 2025-10-22 01:11:47.975 00:05:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:16:05.648 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:16:05.647 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:16:05.519 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:16:05.642 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:16:05.724 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:16:15.842 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53780 10 6452 1 2025-10-22 01:17:16.257 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34308 10 6452 1 2025-10-22 01:18:16.655 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60720 10 6452 1 2025-10-22 01:19:17.060 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36608 10 6452 1 2025-10-22 01:15:47.973 00:05:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:20:17.469 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50212 10 6452 1 2025-10-22 01:21:05.826 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:21:05.454 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:21:05.747 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:21:05.676 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:21:05.759 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:21:17.883 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52790 10 6452 1 2025-10-22 01:17:47.976 00:05:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:22:18.285 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33008 10 6452 1 2025-10-22 01:23:18.696 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50876 10 6452 1 2025-10-22 01:24:19.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38288 10 6452 1 2025-10-22 01:25:19.516 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41346 10 6452 1 2025-10-22 01:21:47.975 00:05:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:26:05.910 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:26:05.783 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:26:05.816 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:26:05.855 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:26:05.937 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:26:19.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60160 10 6452 1 2025-10-22 01:27:20.315 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54096 10 6452 1 2025-10-22 01:23:47.977 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:28:20.714 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54466 10 6452 1 2025-10-22 01:29:21.117 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55888 10 6452 1 2025-10-22 01:30:21.522 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49260 10 6452 1 2025-10-22 01:31:06.153 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:31:06.152 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:31:06.064 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:31:05.967 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:31:06.071 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:31:21.920 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47256 10 6452 1 2025-10-22 01:27:47.975 00:05:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:32:22.281 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50858 10 6452 1 2025-10-22 01:33:22.682 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37080 10 6452 1 2025-10-22 01:29:47.978 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:34:23.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41434 10 6452 1 2025-10-22 01:35:23.509 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36726 10 6452 1 2025-10-22 01:36:06.073 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:36:05.990 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:36:06.071 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:36:05.989 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:36:05.915 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:36:23.869 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42162 10 6452 1 2025-10-22 01:37:24.279 00:00:10.610 TCP 1.101.0.1:3000 -> 23.104.0.1:45138 10 6452 1 2025-10-22 01:33:47.980 00:05:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:38:24.928 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:46354 10 6452 1 2025-10-22 01:39:25.318 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55004 10 6452 1 2025-10-22 01:35:47.984 00:05:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:40:25.688 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45434 10 6452 1 2025-10-22 01:41:06.043 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:41:06.173 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:41:06.074 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:41:06.048 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:41:06.130 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:41:26.107 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58950 10 6452 1 2025-10-22 01:42:26.512 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60694 10 6452 1 2025-10-22 01:43:26.916 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40808 10 6452 1 2025-10-22 01:39:47.981 00:05:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:44:27.334 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35616 10 6452 1 2025-10-22 01:45:27.746 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52856 10 6452 1 2025-10-22 01:41:47.984 00:05:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:46:06.136 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:46:06.285 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:46:06.260 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:46:06.125 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:46:06.054 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:46:28.148 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40906 10 6452 1 2025-10-22 01:47:28.557 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46688 10 6452 1 2025-10-22 01:48:28.921 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40878 10 6452 1 2025-10-22 01:49:29.338 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41460 10 6452 1 2025-10-22 01:45:47.983 00:05:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:50:29.700 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59762 10 6452 1 2025-10-22 01:51:06.370 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:51:06.263 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:51:06.132 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:51:06.265 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:51:06.349 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:51:30.117 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54096 10 6452 1 2025-10-22 01:47:47.988 00:05:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:52:30.482 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6452 1 2025-10-22 01:53:30.886 00:00:10.782 TCP 1.101.0.1:3000 -> 23.104.0.1:42828 10 6452 1 2025-10-22 01:54:31.705 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59068 10 6452 1 2025-10-22 01:55:32.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33644 10 6452 1 2025-10-22 01:51:47.989 00:05:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:56:06.319 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:56:06.259 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:56:06.392 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:56:06.324 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:56:06.474 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:56:32.516 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48076 10 6452 1 2025-10-22 01:57:32.916 00:00:10.813 TCP 1.101.0.1:3000 -> 23.104.0.1:56044 10 6452 1 2025-10-22 01:53:47.990 00:05:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:58:33.770 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55600 10 6452 1 Summary: total flows: 140, total bytes: 417052, total packets: 1021, avg bps: 911, avg pps: 0, avg bpp: 408 Time window: 2025-10-22 00:57:47 - 2025-10-22 01:58:48 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0043s User: 0.0007s Wall: 0.0024s flows/second: 58527.1 Runtime: 0.0024s