Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 06:58:59.791 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57152 10 6452 1 2025-10-31 06:55:52.721 00:05:00.406 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 07:00:00.203 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43370 10 6452 1 2025-10-31 07:00:32.757 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:00:32.893 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:00:32.762 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:00:32.670 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:00:32.840 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:01:00.612 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33080 10 6452 1 2025-10-31 06:57:52.723 00:05:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 07:02:01.016 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56466 10 6452 1 2025-10-31 07:03:01.378 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46536 10 6452 1 2025-10-31 07:04:01.777 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43906 10 6452 1 2025-10-31 07:05:02.190 00:00:10.877 TCP 1.101.0.1:3000 -> 23.104.0.1:60996 10 6452 1 2025-10-31 07:05:32.801 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:05:32.735 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:05:32.827 00:00:00.020 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:05:32.645 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:05:32.728 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:01:52.721 00:05:00.406 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 07:06:03.121 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34404 10 6452 1 2025-10-31 07:07:03.528 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35970 10 6452 1 2025-10-31 07:03:52.724 00:05:00.404 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 07:08:03.940 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42328 10 6452 1 2025-10-31 07:09:04.353 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59800 10 6452 1 2025-10-31 07:10:04.721 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33730 10 6452 1 2025-10-31 07:10:33.074 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:10:32.644 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:10:33.052 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:10:33.072 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:10:33.133 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:11:05.141 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42588 10 6452 1 2025-10-31 07:07:52.723 00:05:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 07:12:05.507 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46158 10 6452 1 2025-10-31 07:13:05.914 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58492 12 6556 1 2025-10-31 07:09:52.726 00:05:00.404 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 07:14:06.332 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:48498 10 6452 1 2025-10-31 07:15:06.780 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59432 10 6452 1 2025-10-31 07:15:33.004 00:00:00.037 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:15:32.925 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:15:32.748 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:15:32.926 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:15:33.011 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:16:07.191 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51396 10 6452 1 2025-10-31 07:17:07.600 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54556 10 6452 1 2025-10-31 07:13:52.725 00:05:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 07:18:08.000 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46200 10 6452 1 2025-10-31 07:19:08.368 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44082 10 6452 1 2025-10-31 07:15:52.728 00:05:00.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 07:20:08.766 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55492 10 6452 1 2025-10-31 07:20:32.849 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:20:33.010 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:20:33.193 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:20:33.188 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:20:33.276 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:21:09.172 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42384 10 6452 1 2025-10-31 07:22:09.575 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40158 10 6452 1 2025-10-31 07:23:09.944 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38854 10 6452 1 2025-10-31 07:19:52.728 00:05:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 07:24:10.356 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55836 10 6452 1 2025-10-31 07:25:10.754 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:35742 11 6504 1 2025-10-31 07:25:33.407 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:25:33.063 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:25:33.222 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:25:33.110 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:25:33.324 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:21:52.731 00:05:00.404 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 07:26:11.194 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48538 10 6452 1 2025-10-31 07:27:11.600 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39286 10 6452 1 2025-10-31 07:28:12.012 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57714 10 6452 1 2025-10-31 07:29:12.412 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38350 10 6452 1 2025-10-31 07:25:52.730 00:05:00.419 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 07:30:12.809 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39926 10 6452 1 2025-10-31 07:30:33.403 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:30:33.447 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:30:33.322 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:30:33.466 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:30:33.320 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:31:13.219 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58914 10 6452 1 2025-10-31 07:27:52.734 00:05:00.414 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 07:32:13.627 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:49644 10 6452 1 2025-10-31 07:33:14.050 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34928 10 6452 1 2025-10-31 07:34:14.453 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37126 10 6452 1 2025-10-31 07:35:14.815 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42326 10 6452 1 2025-10-31 07:35:33.459 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:35:33.468 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:35:33.467 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:35:33.493 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:35:33.376 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:31:52.731 00:05:00.420 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 07:36:15.221 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40764 10 6452 1 2025-10-31 07:37:15.624 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60632 10 6452 1 2025-10-31 07:33:52.737 00:05:00.412 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 07:38:16.028 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56362 10 6452 1 2025-10-31 07:39:16.391 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50924 10 6452 1 2025-10-31 07:40:16.797 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41968 10 6452 1 2025-10-31 07:40:33.571 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:40:33.474 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:40:33.288 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:40:33.568 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:40:33.489 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:41:17.202 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41200 10 6452 1 2025-10-31 07:37:52.734 00:05:00.418 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 07:42:17.599 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57200 10 6452 1 2025-10-31 07:43:18.015 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47832 10 6452 1 2025-10-31 07:39:52.737 00:05:00.428 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 07:44:18.385 00:00:11.152 TCP 1.101.0.1:3000 -> 23.104.0.1:44400 10 6452 1 2025-10-31 07:45:19.591 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34832 10 6452 1 2025-10-31 07:45:33.841 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:45:33.588 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:45:33.402 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:45:33.543 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:45:33.924 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:46:19.997 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52944 10 6452 1 2025-10-31 07:47:20.404 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58182 10 6452 1 2025-10-31 07:43:52.735 00:05:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 07:48:20.807 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:44330 12 10375 1 2025-10-31 07:49:21.281 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34842 10 6452 1 2025-10-31 07:45:52.738 00:05:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 07:50:33.583 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:50:33.579 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:50:33.801 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:50:33.775 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:50:21.685 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40184 10 6452 1 2025-10-31 07:50:33.858 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:51:22.109 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56604 10 6452 1 2025-10-31 07:52:22.511 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49902 10 6452 1 2025-10-31 07:53:22.913 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35836 10 6452 1 2025-10-31 07:49:52.736 00:05:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 07:54:23.315 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53094 10 6452 1 2025-10-31 07:55:33.966 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:55:33.609 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 07:55:23.720 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36148 10 6452 1 2025-10-31 07:55:33.605 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 07:55:33.583 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 07:55:34.049 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 07:51:52.740 00:05:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 07:56:24.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34512 10 6452 1 2025-10-31 07:57:24.512 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:32854 10 6452 1 2025-10-31 07:58:24.930 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:58550 10 6452 1 Summary: total flows: 140, total bytes: 421079, total packets: 1025, avg bps: 895, avg pps: 0, avg bpp: 410 Time window: 2025-10-31 06:55:52 - 2025-10-31 07:58:35 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0023s Wall: 0.0024s flows/second: 57852.5 Runtime: 0.0024s