Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 01:58:44.773 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34256 10 6452 1 2025-10-02 01:59:45.182 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48074 10 6452 1 2025-10-02 02:00:45.593 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37764 10 6452 1 2025-10-02 02:01:29.033 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:01:28.854 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:01:28.990 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:01:28.951 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:01:28.955 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 01:57:37.804 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 02:01:46.001 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41692 10 6452 1 2025-10-02 02:02:46.382 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38734 10 6452 1 2025-10-02 01:59:37.807 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 02:03:46.748 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38114 10 6452 1 2025-10-02 02:04:47.148 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52558 10 6452 1 2025-10-02 02:05:47.510 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59808 10 6452 1 2025-10-02 02:06:28.995 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:06:28.992 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:06:28.866 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:06:28.913 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:06:28.916 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 02:06:47.911 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52116 10 6452 1 2025-10-02 02:03:37.803 00:05:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 02:07:48.274 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46952 10 6452 1 2025-10-02 02:08:48.681 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49424 10 6452 1 2025-10-02 02:05:37.807 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 02:09:49.109 00:00:10.643 TCP 1.101.0.1:3000 -> 23.104.0.1:41282 10 6452 1 2025-10-02 02:10:49.788 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49448 10 6452 1 2025-10-02 02:11:29.210 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:11:28.834 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:11:29.351 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:11:29.089 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 02:11:29.434 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:11:50.195 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34286 10 6452 1 2025-10-02 02:12:50.596 00:00:10.473 TCP 1.101.0.1:3000 -> 23.104.0.1:42202 12 10375 1 2025-10-02 02:09:37.804 00:05:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 02:13:51.110 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41622 10 6452 1 2025-10-02 02:14:51.512 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39318 10 6452 1 2025-10-02 02:11:37.809 00:05:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 02:15:51.917 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36730 10 6452 1 2025-10-02 02:16:29.292 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:16:29.012 00:00:00.037 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:16:29.148 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:16:29.209 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:16:29.306 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 02:16:52.279 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:35102 10 6452 1 2025-10-02 02:17:52.657 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56618 10 6452 1 2025-10-02 02:18:53.073 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46070 10 6452 1 2025-10-02 02:15:37.806 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 02:19:53.479 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37988 10 6452 1 2025-10-02 02:20:53.894 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:58632 10 6452 1 2025-10-02 02:21:29.147 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:21:29.268 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:21:29.240 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:21:29.023 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 02:21:29.323 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:17:37.810 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 02:21:54.314 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39306 10 6452 1 2025-10-02 02:22:54.716 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33608 10 6452 1 2025-10-02 02:23:55.133 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34608 10 6452 1 2025-10-02 02:24:55.557 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59362 10 6452 1 2025-10-02 02:21:37.809 00:05:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 02:25:55.968 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:56570 10 6452 1 2025-10-02 02:26:29.665 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:26:29.399 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:26:29.816 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:26:29.814 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 02:26:29.898 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:26:56.397 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39988 10 6452 1 2025-10-02 02:23:37.812 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 02:27:56.805 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60888 10 6452 1 2025-10-02 02:28:57.208 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33078 10 6452 1 2025-10-02 02:29:57.571 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:58212 11 6504 1 2025-10-02 02:30:58.029 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42462 10 6452 1 2025-10-02 02:31:29.731 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:31:29.627 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:31:29.663 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:31:29.396 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 02:31:29.746 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:27:37.810 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 02:31:58.436 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43490 10 6452 1 2025-10-02 02:32:58.838 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:47226 10 6452 1 2025-10-02 02:29:37.814 00:05:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 02:33:59.233 00:00:18.769 TCP 1.101.0.1:3000 -> 23.104.0.1:34040 10 6452 1 2025-10-02 02:35:08.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57704 10 6452 1 2025-10-02 02:36:08.446 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:56360 10 6452 1 2025-10-02 02:36:29.721 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:36:29.605 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:36:29.644 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:36:29.766 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 02:36:29.727 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:37:08.903 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34754 10 6452 1 2025-10-02 02:33:37.811 00:05:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 02:38:09.263 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:32942 10 6452 1 2025-10-02 02:39:09.633 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46996 10 6452 1 2025-10-02 02:35:37.814 00:05:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 02:40:10.049 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38362 10 6452 1 2025-10-02 02:41:10.455 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43310 10 6452 1 2025-10-02 02:41:29.498 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:41:29.673 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:41:29.724 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:41:29.507 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 02:41:29.808 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:42:10.856 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33688 10 6452 1 2025-10-02 02:43:11.274 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:40286 10 6452 1 2025-10-02 02:39:37.813 00:05:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 02:44:11.746 00:00:10.817 TCP 1.101.0.1:3000 -> 23.104.0.1:39878 10 6452 1 2025-10-02 02:45:12.597 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45700 10 6452 1 2025-10-02 02:41:37.816 00:05:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 02:46:12.957 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34536 10 6452 1 2025-10-02 02:46:30.389 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:46:30.508 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:46:30.465 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:46:30.306 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:46:30.508 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 02:47:13.362 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33780 10 6452 1 2025-10-02 02:48:13.722 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:59704 12 10375 1 2025-10-02 02:49:14.212 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47272 10 6452 1 2025-10-02 02:45:37.813 00:05:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 02:50:14.613 00:00:10.544 TCP 1.101.0.1:3000 -> 23.104.0.1:42128 10 6452 1 2025-10-02 02:51:15.195 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41798 10 6452 1 2025-10-02 02:51:30.166 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:51:29.912 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:51:29.715 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:51:30.082 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:51:30.110 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 02:47:37.817 00:05:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 02:52:15.594 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50732 10 6452 1 2025-10-02 02:53:15.995 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38988 10 6452 1 2025-10-02 02:54:16.398 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39934 10 6452 1 2025-10-02 02:55:16.811 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59504 10 6452 1 2025-10-02 02:51:37.814 00:05:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 02:56:30.166 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 02:56:17.220 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47394 10 6452 1 2025-10-02 02:56:30.194 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 02:56:29.871 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:56:30.084 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 02:56:30.122 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 02:57:17.630 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51428 10 6452 1 2025-10-02 02:53:37.817 00:05:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 02:58:18.032 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35250 10 6452 1 Summary: total flows: 140, total bytes: 424898, total packets: 1025, avg bps: 928, avg pps: 0, avg bpp: 414 Time window: 2025-10-02 01:57:37 - 2025-10-02 02:58:38 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0038s User: 0.0009s Wall: 0.0013s flows/second: 107349.6 Runtime: 0.0013s