Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 00:59:13.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37400 10 6452 1 2025-10-01 00:54:37.350 00:06:00.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 01:00:14.398 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37878 10 6452 1 2025-10-01 00:55:37.353 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 01:00:58.816 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:00:58.576 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:00:58.715 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:00:58.718 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:00:58.798 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:01:14.802 00:00:10.993 TCP 1.101.0.1:3000 -> 23.104.0.1:53390 10 6452 1 2025-10-01 01:02:15.834 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:32994 11 6504 1 2025-10-01 01:03:16.278 00:00:11.430 TCP 1.101.0.1:3000 -> 23.104.0.1:56824 10 6452 1 2025-10-01 01:04:17.741 00:00:10.627 TCP 1.101.0.1:3000 -> 23.104.0.1:40628 10 6452 1 2025-10-01 01:05:18.409 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56806 10 6452 1 2025-10-01 01:05:58.836 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:05:58.680 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:05:58.894 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:05:58.659 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:05:58.976 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:06:18.826 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51518 10 6452 1 2025-10-01 01:01:37.355 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 01:07:19.187 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47382 10 6452 1 2025-10-01 01:02:37.357 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 01:08:19.554 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34990 10 6452 1 2025-10-01 01:09:19.971 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34174 10 6452 1 2025-10-01 01:10:20.386 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45408 10 6452 1 2025-10-01 01:10:58.961 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:10:58.877 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:10:58.941 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:10:58.870 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:10:58.978 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:11:20.785 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56964 10 6452 1 2025-10-01 01:12:21.190 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37296 10 6452 1 2025-10-01 01:13:21.593 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48836 10 6452 1 2025-10-01 01:08:37.357 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 01:14:21.998 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42606 10 6452 1 2025-10-01 01:09:37.358 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 01:15:22.405 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42558 10 6452 1 2025-10-01 01:15:59.247 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:15:59.065 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:15:58.898 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:15:59.163 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:15:59.062 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:16:22.809 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33838 10 6452 1 2025-10-01 01:17:23.210 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43518 10 6452 1 2025-10-01 01:18:23.616 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46598 10 6452 1 2025-10-01 01:19:24.018 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35036 10 6452 1 2025-10-01 01:20:24.420 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43212 10 6452 1 2025-10-01 01:15:37.357 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 01:20:59.204 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:20:58.981 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:20:58.946 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:20:59.166 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:20:59.028 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:21:24.785 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32922 10 6452 1 2025-10-01 01:16:37.360 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 01:22:25.192 00:00:10.486 TCP 1.101.0.1:3000 -> 23.104.0.1:46012 13 10421 1 2025-10-01 01:23:25.720 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59380 10 6452 1 2025-10-01 01:24:26.134 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39620 10 6452 1 2025-10-01 01:25:26.538 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59794 10 6452 1 2025-10-01 01:25:59.405 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:25:59.377 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:25:59.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:25:59.401 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:25:59.348 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:26:26.949 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59690 10 6452 1 2025-10-01 01:22:37.358 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 01:27:27.356 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45326 10 6452 1 2025-10-01 01:28:27.759 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44606 10 6452 1 2025-10-01 01:23:37.360 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 01:29:28.168 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34754 10 6452 1 2025-10-01 01:30:28.574 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43350 10 6452 1 2025-10-01 01:30:59.300 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:30:59.323 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:30:59.361 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:30:59.289 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:30:59.443 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:31:28.972 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44362 10 6452 1 2025-10-01 01:32:29.383 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52204 10 6452 1 2025-10-01 01:33:29.756 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:59402 10 6452 1 2025-10-01 01:34:30.185 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47792 10 6452 1 2025-10-01 01:29:37.360 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 01:35:30.587 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40594 10 6452 1 2025-10-01 01:30:37.362 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 01:35:59.330 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:35:59.184 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:35:59.332 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:35:59.467 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:35:59.422 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:36:30.989 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36998 10 6452 1 2025-10-01 01:37:31.395 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:39824 12 10375 1 2025-10-01 01:38:31.881 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35142 10 6452 1 2025-10-01 01:39:32.281 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45678 10 6452 1 2025-10-01 01:40:32.686 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42336 10 6452 1 2025-10-01 01:40:59.788 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:40:59.781 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:40:59.614 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:40:59.705 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:40:59.656 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:36:37.360 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 01:41:33.110 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60048 10 6452 1 2025-10-01 01:37:37.364 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 01:42:33.515 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53640 10 6452 1 2025-10-01 01:43:33.919 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43278 10 6452 1 2025-10-01 01:44:34.329 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39894 10 6452 1 2025-10-01 01:45:34.736 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52174 10 6452 1 2025-10-01 01:46:00.098 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:45:59.348 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:45:59.751 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:46:00.094 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:45:59.834 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:46:35.152 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37994 10 6452 1 2025-10-01 01:47:35.568 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56376 10 6452 1 2025-10-01 01:43:37.364 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 01:48:35.968 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59076 10 6452 1 2025-10-01 01:44:37.368 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 01:49:36.372 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55134 12 6556 1 2025-10-01 01:50:36.782 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60540 10 6452 1 2025-10-01 01:50:59.762 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:50:59.761 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:50:59.539 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:50:59.679 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:50:59.856 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:51:37.218 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39722 10 6452 1 2025-10-01 01:52:37.621 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55514 10 6452 1 2025-10-01 01:53:38.022 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49810 10 6452 1 2025-10-01 01:54:38.427 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45608 10 6452 1 2025-10-01 01:50:37.365 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 01:55:38.787 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52254 10 6452 1 2025-10-01 01:56:00.161 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 01:55:59.754 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:55:59.905 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 01:55:59.905 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 01:55:59.989 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 01:51:37.367 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 01:56:39.190 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58782 10 6452 1 2025-10-01 01:57:39.556 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40808 10 6452 1 2025-10-01 01:58:39.958 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40960 10 6452 1 Summary: total flows: 138, total bytes: 425786, total packets: 1040, avg bps: 884, avg pps: 0, avg bpp: 409 Time window: 2025-10-01 00:54:37 - 2025-10-01 01:58:50 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0041s User: 0.0010s Wall: 0.0020s flows/second: 67618.5 Runtime: 0.0021s