Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 04:59:05.954 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37198 10 6452 1 2025-10-03 05:00:06.358 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57528 10 6452 1 2025-10-03 05:01:06.723 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45492 10 6452 1 2025-10-03 04:56:38.414 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 05:02:01.509 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:02:01.128 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:02:01.337 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:02:01.427 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:02:01.313 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:02:07.129 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44558 10 6452 1 2025-10-03 05:03:07.530 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58804 10 6452 1 2025-10-03 05:04:07.933 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35924 10 6452 1 2025-10-03 04:59:38.419 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 05:05:08.351 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57502 10 6452 1 2025-10-03 05:06:08.755 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43974 10 6452 1 2025-10-03 05:07:01.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:07:01.697 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:07:01.671 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:07:01.614 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:07:01.753 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:07:09.174 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35158 10 6452 1 2025-10-03 05:08:09.580 00:00:10.919 TCP 1.101.0.1:3000 -> 23.104.0.1:51502 10 6452 1 2025-10-03 05:03:38.416 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 05:09:10.541 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53402 10 6452 1 2025-10-03 05:10:10.945 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38536 10 6452 1 2025-10-03 05:11:11.359 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59886 10 6452 1 2025-10-03 05:06:38.422 00:06:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 05:12:01.673 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:12:01.244 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:12:01.524 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:12:01.607 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:12:01.607 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:12:11.757 00:00:10.639 TCP 1.101.0.1:3000 -> 23.104.0.1:45662 10 6452 1 2025-10-03 05:13:12.438 00:00:10.587 TCP 1.101.0.1:3000 -> 23.104.0.1:39602 10 6452 1 2025-10-03 05:14:13.071 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42046 10 6452 1 2025-10-03 05:15:13.476 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46392 10 6452 1 2025-10-03 05:10:38.419 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 05:16:13.833 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:36644 10 6452 1 2025-10-03 05:17:01.515 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:17:01.714 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:17:01.646 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:17:01.431 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:17:01.640 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:17:14.263 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41478 10 6452 1 2025-10-03 05:18:14.665 00:00:11.229 TCP 1.101.0.1:3000 -> 23.104.0.1:40936 10 6452 1 2025-10-03 05:13:38.424 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 05:19:15.931 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50184 10 6452 1 2025-10-03 05:20:16.346 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59214 10 6452 1 2025-10-03 05:21:16.713 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34084 10 6452 1 2025-10-03 05:22:01.807 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:22:01.717 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:22:01.808 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:22:01.757 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:22:01.891 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:22:17.109 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57734 10 6452 1 2025-10-03 05:17:38.421 00:06:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 05:23:17.528 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59630 10 6452 1 2025-10-03 05:24:17.932 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:56468 10 6452 1 2025-10-03 05:25:18.367 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38526 10 6452 1 2025-10-03 05:20:38.424 00:06:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 05:26:18.773 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42670 10 6452 1 2025-10-03 05:27:01.894 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:27:01.703 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:27:01.739 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:27:01.811 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:27:01.809 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:27:19.176 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60606 10 6452 1 2025-10-03 05:28:19.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49294 10 6452 1 2025-10-03 05:29:19.983 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:54334 10 6452 1 2025-10-03 05:24:38.428 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 05:30:20.374 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33354 10 6452 1 2025-10-03 05:31:20.790 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52910 10 6452 1 2025-10-03 05:32:02.044 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:32:02.057 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:32:01.580 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:32:01.961 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:32:01.886 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:32:21.197 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48448 10 6452 1 2025-10-03 05:27:38.429 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 05:33:21.560 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40028 10 6452 1 2025-10-03 05:34:21.965 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54404 10 6452 1 2025-10-03 05:35:22.366 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35202 10 6452 1 2025-10-03 05:36:22.764 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42534 10 6452 1 2025-10-03 05:31:38.429 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 05:37:02.171 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:37:02.109 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:37:02.094 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:37:02.090 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:37:02.177 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:37:23.175 00:00:11.696 TCP 1.101.0.1:3000 -> 23.104.0.1:34696 10 6452 1 2025-10-03 05:38:24.911 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:46316 12 10375 1 2025-10-03 05:34:38.432 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 05:39:25.389 00:00:10.973 TCP 1.101.0.1:3000 -> 23.104.0.1:49038 10 6452 1 2025-10-03 05:40:26.406 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59800 10 6452 1 2025-10-03 05:41:26.809 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41792 10 6452 1 2025-10-03 05:42:02.162 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:42:02.225 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:42:02.150 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:42:01.865 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:42:02.233 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:42:27.224 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32994 10 6452 1 2025-10-03 05:38:38.432 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 05:43:27.629 00:00:10.513 TCP 1.101.0.1:3000 -> 23.104.0.1:44604 14 14286 1 2025-10-03 05:44:28.183 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51414 10 6452 1 2025-10-03 05:45:28.590 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45598 10 6452 1 2025-10-03 05:46:29.002 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49964 10 6452 1 2025-10-03 05:41:38.435 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 05:47:02.280 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:47:02.323 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:47:02.203 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:47:02.196 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:47:02.205 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:47:29.404 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45374 10 6452 1 2025-10-03 05:48:29.803 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33314 10 6452 1 2025-10-03 05:49:30.208 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38042 10 6452 1 2025-10-03 05:50:30.612 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44272 10 6452 1 2025-10-03 05:45:38.434 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 05:51:31.012 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41876 10 6452 1 2025-10-03 05:52:02.308 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:52:02.241 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:52:02.312 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:52:02.133 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:52:02.395 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:52:31.369 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51384 10 6452 1 2025-10-03 05:48:38.441 00:06:00.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 05:53:31.779 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43684 10 6452 1 2025-10-03 05:54:32.185 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35424 10 6452 1 2025-10-03 05:55:32.545 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49916 10 6452 1 2025-10-03 05:56:32.943 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47224 10 6452 1 2025-10-03 05:57:02.700 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 05:57:02.543 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:57:02.699 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 05:57:02.445 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 05:57:02.781 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 05:52:38.437 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 05:57:33.355 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54042 10 6452 1 2025-10-03 05:58:33.724 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:57020 11 6504 1 Summary: total flows: 137, total bytes: 428686, total packets: 1025, avg bps: 920, avg pps: 0, avg bpp: 418 Time window: 2025-10-03 04:56:38 - 2025-10-03 05:58:44 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0026s User: 0.0013s Wall: 0.0023s flows/second: 59153.8 Runtime: 0.0023s