Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 03:59:17.788 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55636 10 6452 1 2025-10-06 04:00:18.193 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55840 10 6452 1 2025-10-06 03:56:39.853 00:05:00.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:01:18.594 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 10 6452 1 2025-10-06 04:02:18.993 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43386 10 6452 1 2025-10-06 04:03:26.804 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:03:19.402 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60230 10 6452 1 2025-10-06 04:03:26.743 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:03:26.895 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:03:26.728 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:03:26.978 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:04:19.808 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55770 10 6452 1 2025-10-06 04:00:39.851 00:05:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:05:20.217 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39884 10 6452 1 2025-10-06 04:06:20.660 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56852 10 6452 1 2025-10-06 04:02:39.854 00:05:00.427 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:07:21.097 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59052 10 6452 1 2025-10-06 04:08:27.140 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:08:26.950 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:08:26.844 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:08:27.057 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:08:27.054 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:08:21.501 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44498 10 6452 1 2025-10-06 04:09:21.880 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42542 10 6452 1 2025-10-06 04:10:22.283 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60906 10 6452 1 2025-10-06 04:06:39.853 00:05:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:11:22.687 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57350 10 6452 1 2025-10-06 04:12:23.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50136 10 6452 1 2025-10-06 04:08:39.855 00:05:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:13:27.077 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:13:26.852 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:13:27.163 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:13:27.121 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:13:27.246 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:13:23.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35382 10 6452 1 2025-10-06 04:14:23.920 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:41338 12 10375 1 2025-10-06 04:15:24.369 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38240 10 6452 1 2025-10-06 04:16:24.775 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42440 10 6452 1 2025-10-06 04:12:39.853 00:05:00.433 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:17:25.190 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48006 10 6452 1 2025-10-06 04:18:27.151 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:18:26.814 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:18:26.923 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:18:27.069 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:18:27.070 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:18:25.597 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50572 10 6452 1 2025-10-06 04:14:39.856 00:05:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:19:26.006 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60252 10 6452 1 2025-10-06 04:20:26.405 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41924 10 6452 1 2025-10-06 04:21:26.810 00:00:10.491 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 2025-10-06 04:22:27.342 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48544 10 6452 1 2025-10-06 04:18:39.854 00:05:00.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:23:27.457 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:23:27.188 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:23:27.300 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:23:27.461 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:23:27.384 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:23:27.716 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44910 10 6452 1 2025-10-06 04:24:28.174 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60080 10 6452 1 2025-10-06 04:20:39.856 00:05:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:25:28.582 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33528 10 6452 1 2025-10-06 04:26:28.993 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:37332 10 6452 1 2025-10-06 04:27:29.385 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48406 10 6452 1 2025-10-06 04:28:27.224 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:28:27.090 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:28:27.365 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:28:27.361 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:28:27.449 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:24:39.857 00:05:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:28:29.799 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54946 10 6452 1 2025-10-06 04:29:30.205 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42668 10 6452 1 2025-10-06 04:30:30.608 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57034 10 6452 1 2025-10-06 04:26:39.859 00:05:00.427 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:31:31.005 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59986 10 6452 1 2025-10-06 04:32:31.411 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39114 10 6452 1 2025-10-06 04:33:27.332 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:33:27.348 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:33:27.159 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:33:27.248 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:33:27.409 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:33:31.815 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49426 10 6452 1 2025-10-06 04:30:39.857 00:05:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:34:32.215 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39730 10 6452 1 2025-10-06 04:35:32.624 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56066 10 6452 1 2025-10-06 04:32:39.862 00:05:00.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:36:33.029 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50232 10 6452 1 2025-10-06 04:37:33.427 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43744 10 6452 1 2025-10-06 04:38:27.554 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:38:27.542 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:38:27.443 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:38:27.472 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:38:27.542 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:38:33.827 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:54118 10 6452 1 2025-10-06 04:39:34.273 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:46656 12 10369 1 2025-10-06 04:36:39.859 00:05:00.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:40:34.754 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:59850 10 6452 1 2025-10-06 04:41:35.187 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33364 10 6452 1 2025-10-06 04:42:35.585 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38988 10 6452 1 2025-10-06 04:38:39.863 00:05:00.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:43:28.127 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:43:27.938 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:43:27.897 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:43:27.984 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:43:27.980 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:43:35.944 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35610 10 6452 1 2025-10-06 04:44:36.355 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44606 10 6452 1 2025-10-06 04:45:36.756 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52884 10 6452 1 2025-10-06 04:42:39.863 00:05:00.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:46:37.176 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44864 10 6452 1 2025-10-06 04:47:37.542 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55944 10 6452 1 2025-10-06 04:48:27.722 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:48:27.636 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:48:27.926 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:48:27.721 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:48:28.010 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:44:39.865 00:05:00.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:48:37.943 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:60398 10 6452 1 2025-10-06 04:49:38.313 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:43248 11 6504 1 2025-10-06 04:50:38.778 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34502 10 6452 1 2025-10-06 04:51:39.142 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58932 10 6452 1 2025-10-06 04:48:39.863 00:05:00.436 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:52:39.549 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:43068 10 6452 1 2025-10-06 04:53:27.947 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:53:27.764 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:53:28.052 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:53:27.984 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:53:28.134 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:53:39.981 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58678 10 6452 1 2025-10-06 04:50:39.865 00:05:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:54:40.385 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39184 10 6452 1 2025-10-06 04:55:40.744 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45884 10 6452 1 2025-10-06 04:56:41.151 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53980 10 6452 1 2025-10-06 04:57:41.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46032 10 6452 1 2025-10-06 04:58:27.847 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:58:27.942 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:58:27.921 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:58:27.923 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:58:28.004 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:54:39.866 00:05:00.436 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 418440, total packets: 1015, avg bps: 885, avg pps: 0, avg bpp: 412 Time window: 2025-10-06 03:56:39 - 2025-10-06 04:59:40 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0023s User: 0.0023s Wall: 0.0020s flows/second: 70132.1 Runtime: 0.0020s