Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 19:58:42.035 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45336 10 6452 1 2025-10-03 19:55:38.706 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 19:59:42.439 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42718 10 6452 1 2025-10-03 20:00:42.804 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37950 10 6452 1 2025-10-03 20:01:43.208 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33570 10 6452 1 2025-10-03 20:02:19.987 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:02:19.908 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:02:19.808 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:02:19.905 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:02:19.858 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:02:43.612 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55456 10 6452 1 2025-10-03 19:59:38.710 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:03:44.029 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38472 10 6452 1 2025-10-03 20:04:44.431 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36526 10 6452 1 2025-10-03 20:01:38.709 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:05:44.795 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40736 10 6452 1 2025-10-03 20:06:45.157 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58560 10 6452 1 2025-10-03 20:07:19.573 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:07:19.587 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:07:19.623 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:07:19.684 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:07:19.705 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:07:45.562 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47234 10 6452 1 2025-10-03 20:08:45.926 00:00:10.808 TCP 1.101.0.1:3000 -> 23.104.0.1:39028 10 6452 1 2025-10-03 20:05:38.713 00:05:00.366 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:09:46.769 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52550 10 6452 1 2025-10-03 20:10:47.148 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39566 10 6452 1 2025-10-03 20:07:38.711 00:05:00.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:11:47.553 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44234 10 6452 1 2025-10-03 20:12:19.502 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:12:19.647 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:12:19.838 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:12:19.784 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:12:19.922 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:12:47.974 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34536 10 6452 1 2025-10-03 20:13:48.379 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37302 10 6452 1 2025-10-03 20:14:48.779 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55888 10 6452 1 2025-10-03 20:11:38.713 00:05:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:15:49.191 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48476 10 6452 1 2025-10-03 20:16:49.553 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52312 10 6452 1 2025-10-03 20:17:19.911 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:17:19.880 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:17:19.847 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:17:19.829 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:17:19.883 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:13:38.711 00:05:00.374 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:17:49.954 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59858 10 6452 1 2025-10-03 20:18:50.361 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53426 10 6452 1 2025-10-03 20:19:50.759 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46760 10 6452 1 2025-10-03 20:20:51.180 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35526 10 6452 1 2025-10-03 20:17:38.719 00:05:00.364 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:21:51.580 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56366 10 6452 1 2025-10-03 20:22:19.914 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:22:19.793 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:22:20.107 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:22:19.804 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:22:20.197 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:22:51.988 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50040 10 6452 1 2025-10-03 20:19:38.717 00:05:00.370 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:23:52.352 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54580 10 6452 1 2025-10-03 20:24:52.765 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59686 10 6452 1 2025-10-03 20:25:53.177 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35838 10 6452 1 2025-10-03 20:26:53.584 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46350 10 6452 1 2025-10-03 20:27:20.509 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:27:20.463 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:27:20.316 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:27:20.425 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:27:20.458 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:23:38.720 00:05:00.365 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:27:53.952 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:39194 10 6452 1 2025-10-03 20:28:54.379 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40170 10 6452 1 2025-10-03 20:25:38.717 00:05:00.370 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:29:54.782 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36752 10 6452 1 2025-10-03 20:30:55.215 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50912 10 6452 1 2025-10-03 20:31:55.579 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41656 10 6452 1 2025-10-03 20:32:20.182 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:32:19.856 00:00:00.016 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:32:20.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:32:20.050 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:32:20.301 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:32:55.989 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:43050 10 6452 1 2025-10-03 20:29:38.720 00:05:00.365 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:33:56.367 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33054 10 6452 1 2025-10-03 20:34:56.730 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47474 10 6452 1 2025-10-03 20:31:38.719 00:05:00.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:35:57.135 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33326 10 6452 1 2025-10-03 20:36:57.571 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 11 6504 1 2025-10-03 20:37:20.341 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:37:20.206 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:37:20.149 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:37:20.253 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:37:20.231 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:37:58.027 00:00:11.539 TCP 1.101.0.1:3000 -> 23.104.0.1:44354 10 6452 1 2025-10-03 20:38:59.599 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35034 10 6452 1 2025-10-03 20:35:38.721 00:05:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:39:59.997 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36206 10 6452 1 2025-10-03 20:41:00.404 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44054 10 6452 1 2025-10-03 20:37:38.720 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:42:00.804 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54038 10 6452 1 2025-10-03 20:42:20.508 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:42:20.434 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:42:20.726 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:42:20.764 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:42:20.809 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:43:01.213 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38006 10 6452 1 2025-10-03 20:44:01.623 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59236 10 6452 1 2025-10-03 20:45:02.034 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38658 10 6452 1 2025-10-03 20:41:38.723 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:46:02.442 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34872 12 6556 1 2025-10-03 20:47:02.840 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:55974 10 6452 1 2025-10-03 20:47:20.459 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:47:20.108 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:47:20.140 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:47:20.385 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:47:20.223 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:43:38.722 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:48:03.271 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38404 10 6452 1 2025-10-03 20:49:03.673 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45650 10 6452 1 2025-10-03 20:50:04.100 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52224 10 6452 1 2025-10-03 20:51:04.466 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34258 10 6452 1 2025-10-03 20:47:38.724 00:05:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:52:04.870 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38472 10 6452 1 2025-10-03 20:52:20.644 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:52:20.571 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:52:20.532 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:52:20.563 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:52:20.468 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:53:05.276 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58058 10 6452 1 2025-10-03 20:49:38.721 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:54:05.678 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53094 10 6452 1 2025-10-03 20:55:06.040 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53818 10 6452 1 2025-10-03 20:56:06.410 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33942 10 6452 1 2025-10-03 20:57:20.616 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:57:20.289 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:57:20.695 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:57:20.531 00:00:00.013 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:57:06.822 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44846 10 6452 1 2025-10-03 20:57:20.778 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:53:38.725 00:05:00.369 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:58:07.217 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:50390 12 10375 1 Summary: total flows: 140, total bytes: 421079, total packets: 1025, avg bps: 891, avg pps: 0, avg bpp: 410 Time window: 2025-10-03 19:55:38 - 2025-10-03 20:58:39 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0050s User: 0.0008s Wall: 0.0028s flows/second: 50034.3 Runtime: 0.0028s