Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 20:59:02.442 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-10-05 21:00:02.861 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48002 10 6452 1 2025-10-05 20:56:39.681 00:05:00.441 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:01:03.232 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38818 10 6452 1 2025-10-05 21:02:03.595 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59376 10 6452 1 2025-10-05 21:03:04.005 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56944 10 6452 1 2025-10-05 21:03:18.437 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:03:18.410 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:03:18.425 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:03:18.465 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:03:18.521 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:04:04.411 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56806 10 6452 1 2025-10-05 21:00:39.678 00:05:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:05:04.833 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:48034 10 6452 1 2025-10-05 21:06:05.263 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45458 10 6452 1 2025-10-05 21:02:39.681 00:05:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:07:05.661 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 10 6452 1 2025-10-05 21:08:18.703 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:08:18.536 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:08:18.543 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:08:18.620 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:08:18.530 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:08:06.072 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43460 10 6452 1 2025-10-05 21:09:06.475 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60870 10 6452 1 2025-10-05 21:10:06.837 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:42086 10 6452 1 2025-10-05 21:06:39.679 00:05:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:11:07.263 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42454 10 6452 1 2025-10-05 21:12:07.669 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50836 10 6452 1 2025-10-05 21:08:39.682 00:05:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:13:19.136 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:13:18.633 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:13:08.038 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40400 10 6452 1 2025-10-05 21:13:18.370 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:13:19.055 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:13:18.928 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:14:08.438 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35588 10 6452 1 2025-10-05 21:15:08.845 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33914 10 6452 1 2025-10-05 21:16:09.253 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42870 10 6452 1 2025-10-05 21:12:39.679 00:05:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:17:09.656 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48282 10 6452 1 2025-10-05 21:18:18.572 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:18:18.406 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:18:18.647 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:18:18.648 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:18:10.016 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47178 10 6452 1 2025-10-05 21:18:18.729 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:14:39.683 00:05:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:19:10.419 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53290 10 6452 1 2025-10-05 21:20:10.778 00:00:10.834 TCP 1.101.0.1:3000 -> 23.104.0.1:57838 10 6452 1 2025-10-05 21:21:11.651 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38084 10 6452 1 2025-10-05 21:22:12.060 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-10-05 21:18:39.681 00:05:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:23:19.059 00:00:00.020 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:23:18.626 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:23:18.572 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:23:18.942 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:23:18.654 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:23:12.465 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38296 10 6452 1 2025-10-05 21:24:12.868 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:51050 12 10375 1 2025-10-05 21:20:39.684 00:05:00.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:25:13.355 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47228 10 6452 1 2025-10-05 21:26:13.757 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:60552 10 6452 1 2025-10-05 21:27:14.181 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55986 10 6452 1 2025-10-05 21:28:18.975 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:28:18.963 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:28:18.977 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:28:18.774 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:28:19.057 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:28:14.541 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:58290 10 6452 1 2025-10-05 21:24:39.682 00:05:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:29:14.913 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51404 10 6452 1 2025-10-05 21:30:15.328 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55290 10 6452 1 2025-10-05 21:26:39.685 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:31:15.733 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57578 10 6452 1 2025-10-05 21:32:16.105 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57114 10 6452 1 2025-10-05 21:33:19.155 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:33:19.062 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:33:18.771 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:33:19.071 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:33:19.065 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:33:16.508 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57936 10 6452 1 2025-10-05 21:34:16.875 00:00:10.731 TCP 1.101.0.1:3000 -> 23.104.0.1:33136 10 6452 1 2025-10-05 21:30:39.683 00:05:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:35:17.646 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43130 10 6452 1 2025-10-05 21:36:18.051 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51952 10 6452 1 2025-10-05 21:32:39.686 00:05:00.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:37:18.452 00:00:11.115 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 10 6452 1 2025-10-05 21:38:19.158 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:38:18.835 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:38:19.156 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:38:18.895 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:38:19.239 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:38:19.608 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50588 10 6452 1 2025-10-05 21:39:20.015 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:53732 12 10375 1 2025-10-05 21:40:20.497 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36394 10 6452 1 2025-10-05 21:36:39.685 00:05:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:41:20.859 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38926 10 6452 1 2025-10-05 21:42:21.228 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43242 10 6452 1 2025-10-05 21:38:39.688 00:05:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:43:19.227 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:43:19.140 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:43:19.294 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:43:19.109 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:43:19.377 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:43:21.591 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48614 10 6452 1 2025-10-05 21:44:21.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36516 10 6452 1 2025-10-05 21:45:22.401 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44178 10 6452 1 2025-10-05 21:46:22.802 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60112 10 6452 1 2025-10-05 21:42:39.687 00:05:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:47:23.211 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45598 10 6452 1 2025-10-05 21:48:19.264 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:48:19.293 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:48:19.169 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:48:19.344 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:48:19.252 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:48:23.610 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52610 10 6452 1 2025-10-05 21:44:39.690 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:49:24.013 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60456 10 6452 1 2025-10-05 21:50:24.420 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55966 10 6452 1 2025-10-05 21:51:24.827 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33442 10 6452 1 2025-10-05 21:52:25.232 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57210 10 6452 1 2025-10-05 21:48:39.689 00:05:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:53:19.316 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:53:19.461 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:53:19.294 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:53:19.232 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:53:19.355 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:53:25.591 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33676 10 6452 1 2025-10-05 21:54:25.955 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60788 10 6452 1 2025-10-05 21:50:39.691 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:55:26.370 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50080 10 6452 1 2025-10-05 21:56:26.777 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45854 10 6452 1 2025-10-05 21:57:27.148 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57740 10 6452 1 2025-10-05 21:58:19.456 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:58:19.638 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:58:19.395 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:58:19.372 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:58:19.623 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:54:39.689 00:05:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:58:27.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42832 10 6452 1 Summary: total flows: 140, total bytes: 424846, total packets: 1024, avg bps: 899, avg pps: 0, avg bpp: 414 Time window: 2025-10-05 20:56:39 - 2025-10-05 21:59:40 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0022s User: 0.0022s Wall: 0.0025s flows/second: 55266.1 Runtime: 0.0026s