Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 05:58:41.508 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48804 10 6452 1 2025-10-26 05:59:41.866 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46428 10 6452 1 2025-10-26 05:54:50.240 00:06:00.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 06:00:42.280 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46716 10 6452 1 2025-10-26 05:56:50.242 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 06:01:42.681 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50114 10 6452 1 2025-10-26 06:02:43.108 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51814 10 6452 1 2025-10-26 06:03:07.242 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:03:07.245 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:03:07.087 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:03:07.192 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:03:07.277 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:03:43.470 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43364 10 6452 1 2025-10-26 06:04:43.870 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57876 10 6452 1 2025-10-26 06:05:44.281 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47988 10 6452 1 2025-10-26 06:01:50.242 00:06:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 06:06:44.685 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39620 10 6452 1 2025-10-26 06:07:45.059 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:60742 10 6452 1 2025-10-26 06:08:07.169 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:08:07.339 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:08:07.087 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:08:07.317 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:08:07.399 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:03:50.244 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 06:08:45.487 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42640 10 6452 1 2025-10-26 06:09:45.888 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51188 12 6556 1 2025-10-26 06:10:46.315 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:34084 12 10375 1 2025-10-26 06:11:46.797 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55942 10 6452 1 2025-10-26 06:12:47.202 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59836 10 6452 1 2025-10-26 06:13:07.616 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:13:07.534 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:13:07.537 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:13:07.580 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:13:07.557 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:08:50.242 00:06:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 06:13:47.607 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45486 10 6452 1 2025-10-26 06:14:48.020 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36882 10 6452 1 2025-10-26 06:10:50.246 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 06:15:48.388 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60946 10 6452 1 2025-10-26 06:16:48.795 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59894 10 6452 1 2025-10-26 06:18:07.615 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:17:49.157 00:00:11.193 TCP 1.101.0.1:3000 -> 23.104.0.1:52840 10 6452 1 2025-10-26 06:18:07.353 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:18:07.254 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:18:07.206 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:18:07.533 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:18:50.387 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33906 10 6452 1 2025-10-26 06:19:50.792 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59526 10 6452 1 2025-10-26 06:15:50.250 00:06:00.207 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 06:20:51.153 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41528 10 6452 1 2025-10-26 06:21:51.563 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38680 10 6452 1 2025-10-26 06:17:50.253 00:06:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 06:22:51.969 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:59336 10 6452 1 2025-10-26 06:23:07.506 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:23:07.472 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:23:07.717 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:23:07.564 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:23:07.800 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:23:52.391 00:00:21.295 TCP 1.101.0.1:3000 -> 23.104.0.1:57144 10 6452 1 2025-10-26 06:25:03.791 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47124 10 6452 1 2025-10-26 06:26:04.202 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39440 10 6452 1 2025-10-26 06:27:04.560 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53952 10 6452 1 2025-10-26 06:22:50.252 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 06:28:07.730 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:28:07.649 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:28:07.666 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:28:07.651 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:28:07.702 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:28:04.963 00:00:10.857 TCP 1.101.0.1:3000 -> 23.104.0.1:33016 10 6452 1 2025-10-26 06:29:05.857 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:53954 10 6452 1 2025-10-26 06:24:50.256 00:06:00.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 06:30:06.228 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57322 10 6452 1 2025-10-26 06:31:06.586 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36276 10 6452 1 2025-10-26 06:32:06.991 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38886 10 6452 1 2025-10-26 06:33:07.849 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:33:07.839 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:33:07.533 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:33:07.794 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:33:07.877 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:33:07.398 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41164 10 6452 1 2025-10-26 06:34:07.799 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35334 10 6452 1 2025-10-26 06:29:50.256 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 06:35:08.207 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59048 10 6452 1 2025-10-26 06:36:08.613 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60738 10 6452 1 2025-10-26 06:31:50.259 00:06:00.199 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 06:37:09.064 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51634 10 6452 1 2025-10-26 06:38:08.199 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:38:08.282 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:38:08.132 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:38:07.928 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:38:08.281 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:38:09.472 00:00:11.010 TCP 1.101.0.1:3000 -> 23.104.0.1:58958 10 6452 1 2025-10-26 06:39:10.541 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36188 10 6452 1 2025-10-26 06:40:10.949 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55892 10 6452 1 2025-10-26 06:41:11.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 10 6452 1 2025-10-26 06:36:50.261 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 06:42:11.755 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43722 10 6452 1 2025-10-26 06:43:07.870 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:43:08.066 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:43:07.964 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:43:07.833 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:43:07.789 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:43:12.180 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39638 10 6452 1 2025-10-26 06:38:50.263 00:06:00.194 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 06:44:12.548 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38574 10 6452 1 2025-10-26 06:45:12.945 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:51990 10 6452 1 2025-10-26 06:46:13.367 00:00:10.771 TCP 1.101.0.1:3000 -> 23.104.0.1:57026 10 6452 1 2025-10-26 06:47:14.174 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47716 10 6452 1 2025-10-26 06:48:08.431 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:48:08.105 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:48:08.280 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:48:08.230 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:48:08.350 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:48:14.575 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40240 10 6452 1 2025-10-26 06:43:50.262 00:06:00.207 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 06:49:14.979 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52934 10 6452 1 2025-10-26 06:50:15.352 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42118 10 6452 1 2025-10-26 06:45:50.266 00:06:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 06:51:15.716 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38190 10 6452 1 2025-10-26 06:52:16.123 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34148 10 6452 1 2025-10-26 06:53:08.107 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:53:08.288 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:53:08.242 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:53:08.198 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:53:08.281 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:53:16.528 00:00:14.821 TCP 1.101.0.1:3000 -> 23.104.0.1:40342 10 6452 1 2025-10-26 06:54:21.386 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56658 10 6452 1 2025-10-26 06:55:21.790 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60640 10 6452 1 2025-10-26 06:50:50.266 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 06:56:22.199 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55876 10 6452 1 2025-10-26 06:57:22.562 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46144 10 6452 1 2025-10-26 06:52:50.270 00:06:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 06:58:08.394 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 06:58:08.492 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 06:58:08.407 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:58:08.547 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 06:58:08.629 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 06:58:22.964 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37862 10 6452 1 Summary: total flows: 138, total bytes: 421765, total packets: 1036, avg bps: 878, avg pps: 0, avg bpp: 407 Time window: 2025-10-26 05:54:50 - 2025-10-26 06:58:50 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0035s User: 0.0000s Wall: 0.0013s flows/second: 108758.7 Runtime: 0.0013s