Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 09:59:17.406 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35834 10 6452 1 2025-10-06 09:55:39.980 00:05:00.421 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 10:00:17.804 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:53120 10 6452 1 2025-10-06 10:01:18.183 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54208 10 6452 1 2025-10-06 10:02:18.608 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52654 10 6452 1 2025-10-06 10:03:19.070 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:50922 10 6452 1 2025-10-06 10:03:34.167 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 10:03:33.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:03:33.948 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:03:34.084 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:03:33.993 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:04:19.488 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40248 10 6452 1 2025-10-06 10:00:39.978 00:05:00.426 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 10:05:19.854 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:45294 10 6452 1 2025-10-06 10:01:39.992 00:05:00.411 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 10:06:20.240 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59204 10 6452 1 2025-10-06 10:07:20.646 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37818 10 6452 1 2025-10-06 10:08:34.085 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:08:33.871 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:08:21.012 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56870 10 6452 1 2025-10-06 10:08:34.082 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:08:34.082 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:08:34.165 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 10:09:21.408 00:00:11.040 TCP 1.101.0.1:3000 -> 23.104.0.1:50074 10 6452 1 2025-10-06 10:10:22.482 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34478 10 6452 1 2025-10-06 10:06:39.979 00:05:00.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 10:11:22.847 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:37814 10 6452 1 2025-10-06 10:07:39.982 00:05:00.422 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 10:12:23.277 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42120 10 6452 1 2025-10-06 10:13:34.537 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:13:34.340 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:13:34.656 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:13:34.762 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:13:23.684 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57794 10 6452 1 2025-10-06 10:13:34.744 00:00:00.016 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 10:14:24.108 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40306 10 6452 1 2025-10-06 10:13:39.984 00:01:00.420 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-06 10:15:24.477 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58200 10 6452 1 2025-10-06 10:16:24.880 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52474 10 6452 1 2025-10-06 10:12:39.981 00:05:00.426 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 10:17:25.245 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50872 10 6452 1 2025-10-06 10:18:34.591 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 10:18:34.440 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:18:34.354 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:18:25.607 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51360 10 6452 1 2025-10-06 10:18:34.508 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:18:34.201 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:19:26.015 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50972 10 6452 1 2025-10-06 10:15:39.988 00:05:00.417 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 10:20:26.417 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45154 10 6452 1 2025-10-06 10:21:26.776 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53978 10 6452 1 2025-10-06 10:22:27.185 00:00:10.823 TCP 1.101.0.1:3000 -> 23.104.0.1:60912 10 6452 1 2025-10-06 10:18:39.987 00:05:00.420 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 10:23:34.511 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:23:34.201 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:23:34.465 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:23:34.502 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:23:34.548 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 10:23:28.059 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38886 10 6452 1 2025-10-06 10:24:28.464 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56790 10 6452 1 2025-10-06 10:25:28.864 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:57718 10 6452 1 2025-10-06 10:21:39.991 00:05:00.417 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 10:26:29.236 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43674 10 6452 1 2025-10-06 10:27:29.640 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40882 10 6452 1 2025-10-06 10:28:34.524 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:28:34.385 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:28:34.434 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:28:34.532 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:28:34.516 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 10:24:39.991 00:05:00.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 10:28:30.051 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:35908 10 6452 1 2025-10-06 10:29:30.430 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51606 10 6452 1 2025-10-06 10:30:30.838 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:43518 10 6452 1 2025-10-06 10:27:39.995 00:05:00.413 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 10:31:31.298 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58018 10 6452 1 2025-10-06 10:32:31.721 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42500 10 6452 1 2025-10-06 10:33:35.068 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:33:34.754 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:33:35.172 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:33:34.767 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:33:35.150 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 10:33:32.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32952 10 6452 1 2025-10-06 10:34:32.519 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44610 10 6452 1 2025-10-06 10:30:39.992 00:05:00.418 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 10:35:32.885 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:49022 10 6452 1 2025-10-06 10:36:33.261 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46144 10 6452 1 2025-10-06 10:37:33.679 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37808 10 6452 1 2025-10-06 10:33:39.995 00:05:00.420 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 10:38:34.758 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:38:34.426 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:38:34.677 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:38:34.660 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:38:34.760 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 10:38:34.113 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57036 10 6452 1 2025-10-06 10:39:34.472 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34156 10 6452 1 2025-10-06 10:36:39.994 00:05:00.426 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 10:40:34.878 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54844 10 6452 1 2025-10-06 10:41:35.240 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60704 10 6452 1 2025-10-06 10:42:35.642 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48448 10 6452 1 2025-10-06 10:43:34.834 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:43:34.915 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:43:34.762 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:43:34.766 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:43:34.845 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 10:43:36.059 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45528 10 6452 1 2025-10-06 10:39:39.999 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-10-06 10:44:36.463 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56486 10 6452 1 2025-10-06 10:45:36.865 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44742 10 6452 1 2025-10-06 10:42:39.997 00:04:00.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-06 10:46:37.274 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60624 10 6452 1 2025-10-06 10:47:37.672 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49646 10 6452 1 2025-10-06 10:48:35.130 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 10:48:35.024 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:48:34.974 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:48:35.048 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:48:35.052 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:48:38.036 00:00:10.726 TCP 1.101.0.1:3000 -> 23.104.0.1:55386 10 6452 1 2025-10-06 10:49:38.795 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:53026 10 6452 1 2025-10-06 10:45:40.420 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-10-06 10:50:39.181 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41058 10 6452 1 2025-10-06 10:47:39.998 00:05:00.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 10:51:39.586 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51450 10 6452 1 2025-10-06 10:52:40.004 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47226 10 6452 1 2025-10-06 10:53:35.151 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:53:35.150 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:53:35.399 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:53:34.974 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:53:35.234 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 10:53:40.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49700 10 6452 1 2025-10-06 10:54:40.803 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34572 10 6452 1 2025-10-06 10:55:41.212 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:53992 10 6452 1 2025-10-06 10:56:41.707 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46630 10 6452 1 2025-10-06 10:53:39.998 00:05:00.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 10:52:40.001 00:06:00.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 10:57:42.114 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48498 10 6452 1 2025-10-06 10:58:34.825 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 10:58:34.968 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:58:35.059 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:58:35.036 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 10:58:35.142 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 140, total bytes: 410917, total packets: 1016, avg bps: 869, avg pps: 0, avg bpp: 404 Time window: 2025-10-06 09:55:39 - 2025-10-06 10:58:40 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0035s User: 0.0012s Wall: 0.0020s flows/second: 69450.3 Runtime: 0.0020s