Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 02:58:52.582 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40092 10 6452 1 2025-10-06 02:59:52.952 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54210 10 6452 1 2025-10-06 02:56:39.817 00:05:00.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 03:00:53.376 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35242 10 6452 1 2025-10-06 03:01:53.740 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41342 10 6452 1 2025-10-06 03:02:54.159 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52322 10 6452 1 2025-10-06 03:03:25.697 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:03:25.769 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:03:25.652 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:03:25.615 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:03:25.609 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:03:54.565 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 10 6452 1 2025-10-06 03:00:39.815 00:05:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 03:04:54.936 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51084 10 6452 1 2025-10-06 03:05:55.364 00:00:10.995 TCP 1.101.0.1:3000 -> 23.104.0.1:49484 10 6452 1 2025-10-06 03:02:39.818 00:05:00.436 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 03:06:56.408 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52356 10 6452 1 2025-10-06 03:07:56.782 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44806 10 6452 1 2025-10-06 03:08:25.664 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:08:25.669 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:08:25.666 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:08:25.824 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:08:25.749 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:08:57.160 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44694 10 6452 1 2025-10-06 03:09:57.521 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60270 10 6452 1 2025-10-06 03:06:39.817 00:05:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 03:10:57.929 00:00:10.561 TCP 1.101.0.1:3000 -> 23.104.0.1:34806 10 6452 1 2025-10-06 03:11:58.528 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53486 10 6452 1 2025-10-06 03:08:39.822 00:05:00.436 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 03:12:58.942 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:48128 10 6452 1 2025-10-06 03:13:26.219 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:13:26.088 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:13:26.220 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:13:26.218 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:13:26.302 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:13:59.315 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36550 10 6452 1 2025-10-06 03:14:59.717 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45946 10 6452 1 2025-10-06 03:16:00.118 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39076 10 6452 1 2025-10-06 03:12:39.820 00:05:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 03:17:00.518 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55096 10 6452 1 2025-10-06 03:18:00.927 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49562 10 6452 1 2025-10-06 03:18:25.910 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:18:25.724 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:18:25.959 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:18:25.685 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:18:26.042 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:14:39.823 00:05:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 03:19:01.350 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37748 10 6452 1 2025-10-06 03:20:01.751 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:58614 10 6452 1 2025-10-06 03:21:02.178 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45572 10 6452 1 2025-10-06 03:22:02.586 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37056 10 6452 1 2025-10-06 03:18:39.822 00:05:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 03:23:02.997 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48560 10 6452 1 2025-10-06 03:23:25.953 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:23:26.036 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:23:26.032 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:23:26.057 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:23:26.009 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:24:03.416 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:39858 12 10375 1 2025-10-06 03:20:39.824 00:05:00.436 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 03:25:03.852 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:46516 10 6452 1 2025-10-06 03:26:04.232 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 10 6452 1 2025-10-06 03:27:04.633 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43872 10 6452 1 2025-10-06 03:28:05.039 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34846 10 6452 1 2025-10-06 03:28:25.922 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:28:26.274 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:28:26.068 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:28:26.191 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:28:26.129 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:24:39.824 00:05:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 03:29:05.444 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:52158 12 10375 1 2025-10-06 03:30:05.918 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34330 10 6452 1 2025-10-06 03:26:39.827 00:05:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 03:31:06.330 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43962 10 6452 1 2025-10-06 03:32:06.738 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50674 10 6452 1 2025-10-06 03:33:07.138 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38520 10 6452 1 2025-10-06 03:33:26.307 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:33:26.228 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:33:26.013 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:33:26.224 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:33:26.226 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:34:07.538 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:44020 10 6452 1 2025-10-06 03:30:39.830 00:05:00.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 03:35:08.018 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:52732 10 6452 1 2025-10-06 03:36:08.448 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55616 10 6452 1 2025-10-06 03:32:39.835 00:05:00.430 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 03:37:08.850 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:32880 10 6452 1 2025-10-06 03:38:09.279 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35712 10 6452 1 2025-10-06 03:38:26.670 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:38:26.521 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:38:26.509 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:38:26.302 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:38:26.593 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:39:09.684 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:41116 10 6452 1 2025-10-06 03:40:10.063 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47932 10 6452 1 2025-10-06 03:36:39.834 00:05:00.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 03:41:10.469 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57262 10 6452 1 2025-10-06 03:42:10.881 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32900 10 6452 1 2025-10-06 03:38:39.835 00:05:00.430 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 03:43:11.280 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47256 10 6452 1 2025-10-06 03:43:26.443 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:43:26.462 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:43:26.438 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:43:26.364 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:43:26.521 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:44:11.679 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47692 10 6452 1 2025-10-06 03:45:12.116 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59066 10 6452 1 2025-10-06 03:46:12.527 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33408 10 6452 1 2025-10-06 03:42:39.834 00:05:00.436 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 03:47:12.938 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60234 10 6452 1 2025-10-06 03:48:13.351 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48116 10 6452 1 2025-10-06 03:48:26.441 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:48:26.468 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:48:26.445 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:48:26.436 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:48:26.528 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:44:39.849 00:05:00.418 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 03:49:13.748 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36364 10 6452 1 2025-10-06 03:50:14.153 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34156 10 6452 1 2025-10-06 03:51:14.517 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40576 10 6452 1 2025-10-06 03:52:14.924 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42376 10 6452 1 2025-10-06 03:48:39.849 00:05:00.423 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 03:53:15.334 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51530 10 6452 1 2025-10-06 03:53:26.832 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:53:26.730 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:53:26.720 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:53:26.642 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:53:26.802 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:54:15.749 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:37220 10 6452 1 2025-10-06 03:50:39.852 00:05:00.418 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 03:55:16.174 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55952 10 6452 1 2025-10-06 03:56:16.575 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56144 10 6452 1 2025-10-06 03:57:16.976 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47582 10 6452 1 2025-10-06 03:58:26.789 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 03:58:26.632 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 03:58:26.645 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:58:26.707 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 03:58:26.711 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 03:58:17.384 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58734 10 6452 1 2025-10-06 03:54:39.850 00:05:00.422 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 140, total bytes: 424846, total packets: 1024, avg bps: 899, avg pps: 0, avg bpp: 414 Time window: 2025-10-06 02:56:39 - 2025-10-06 03:59:40 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0037s User: 0.0009s Wall: 0.0025s flows/second: 56772.9 Runtime: 0.0025s