Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 05:58:43.753 00:00:10.747 TCP 1.101.0.1:3000 -> 23.104.0.1:33016 10 6452 1 2025-10-08 05:59:27.215 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 05:59:26.861 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 05:59:27.012 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 05:59:27.132 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 05:59:26.943 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 05:59:44.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37168 10 6452 1 2025-10-08 06:00:44.945 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40916 10 6452 1 2025-10-08 05:56:41.067 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 06:01:45.357 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34226 10 6452 1 2025-10-08 06:02:45.770 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:42984 10 6452 1 2025-10-08 06:03:46.190 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48998 10 6452 1 2025-10-08 06:04:26.975 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:04:27.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:04:26.607 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:04:26.893 00:00:00.020 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:04:26.901 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:04:46.587 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43570 10 6452 1 2025-10-08 06:00:41.067 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 06:05:46.995 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59006 10 6452 1 2025-10-08 06:06:47.404 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40430 10 6452 1 2025-10-08 06:07:47.808 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37792 10 6452 1 2025-10-08 06:03:41.068 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 06:08:48.214 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53158 10 6452 1 2025-10-08 06:09:27.367 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:09:27.066 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:09:27.285 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:09:27.283 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:09:27.368 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:09:48.614 00:00:11.060 TCP 1.101.0.1:3000 -> 23.104.0.1:55720 10 6452 1 2025-10-08 06:10:49.708 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36134 10 6452 1 2025-10-08 06:11:50.113 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39492 10 6452 1 2025-10-08 06:07:41.067 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 06:12:50.519 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59758 10 6452 1 2025-10-08 06:13:50.923 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38420 10 6452 1 2025-10-08 06:14:27.267 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:14:27.123 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:14:27.211 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:14:27.185 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:14:27.182 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:14:51.342 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:54970 12 10375 1 2025-10-08 06:10:41.071 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 06:15:51.818 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51664 10 6452 1 2025-10-08 06:16:52.220 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60024 10 6452 1 2025-10-08 06:17:52.624 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52512 10 6452 1 2025-10-08 06:18:53.028 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39174 10 6452 1 2025-10-08 06:19:27.300 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:19:27.081 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:19:27.341 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:19:27.334 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:19:27.425 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:14:41.068 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 06:19:53.429 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57328 10 6452 1 2025-10-08 06:20:53.839 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:60992 10 6452 1 2025-10-08 06:21:54.220 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41588 10 6452 1 2025-10-08 06:17:41.072 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 06:22:54.579 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35536 10 6452 1 2025-10-08 06:23:54.993 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56628 10 6452 1 2025-10-08 06:24:27.425 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:24:27.342 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:24:27.351 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:24:27.344 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:24:27.547 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:24:55.397 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:54548 12 10375 1 2025-10-08 06:25:55.881 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50056 10 6452 1 2025-10-08 06:21:41.068 00:06:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 06:26:56.282 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56124 10 6452 1 2025-10-08 06:27:56.702 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33668 10 6452 1 2025-10-08 06:28:57.116 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40058 10 6452 1 2025-10-08 06:29:27.649 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:29:27.530 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:29:27.714 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:29:27.723 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:29:27.797 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:24:41.074 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 06:29:57.487 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45016 10 6452 1 2025-10-08 06:30:57.859 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59304 10 6452 1 2025-10-08 06:31:58.275 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43478 10 6452 1 2025-10-08 06:32:58.681 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56450 10 6452 1 2025-10-08 06:28:41.073 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 06:33:59.114 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44018 10 6452 1 2025-10-08 06:34:28.358 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:34:27.982 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:34:28.194 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:34:28.275 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:34:28.277 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:34:59.529 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52398 10 6452 1 2025-10-08 06:35:59.894 00:00:10.709 TCP 1.101.0.1:3000 -> 23.104.0.1:55126 12 6556 1 2025-10-08 06:31:41.076 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 06:37:00.641 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40390 10 6452 1 2025-10-08 06:38:01.006 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45570 10 6452 1 2025-10-08 06:39:01.414 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53080 10 6452 1 2025-10-08 06:39:27.900 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:39:27.815 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:39:27.712 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:39:27.819 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:39:27.764 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:40:01.831 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50950 10 6452 1 2025-10-08 06:35:41.075 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 06:41:02.255 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:52858 10 6452 1 2025-10-08 06:42:02.635 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47026 10 6452 1 2025-10-08 06:43:03.003 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34146 10 6452 1 2025-10-08 06:38:41.078 00:06:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 06:44:03.369 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35470 10 6452 1 2025-10-08 06:44:27.842 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:44:27.789 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:44:27.716 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:44:27.635 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:44:27.800 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:45:03.771 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40904 10 6452 1 2025-10-08 06:46:04.202 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54918 10 6452 1 2025-10-08 06:47:04.600 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56148 10 6452 1 2025-10-08 06:42:41.080 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 06:48:04.970 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:60810 10 6452 1 2025-10-08 06:49:05.388 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50148 10 6452 1 2025-10-08 06:49:27.793 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:49:27.709 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:49:27.863 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:49:27.791 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:49:27.946 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:50:05.792 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37332 10 6452 1 2025-10-08 06:45:41.083 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 06:51:06.196 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55480 10 6452 1 2025-10-08 06:52:06.594 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56436 10 6452 1 2025-10-08 06:53:06.997 00:00:10.791 TCP 1.101.0.1:3000 -> 23.104.0.1:49012 10 6452 1 2025-10-08 06:54:07.831 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:59630 10 6452 1 2025-10-08 06:54:27.933 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 06:54:27.942 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:54:28.088 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 06:54:27.922 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 06:54:28.171 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 06:49:41.081 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 06:55:08.257 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56486 10 6452 1 2025-10-08 06:56:08.678 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47194 10 6452 1 2025-10-08 06:57:09.107 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47636 10 6452 1 2025-10-08 06:52:41.085 00:06:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 06:58:09.515 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38978 10 6452 1 Summary: total flows: 137, total bytes: 424827, total packets: 1024, avg bps: 913, avg pps: 0, avg bpp: 414 Time window: 2025-10-08 05:56:41 - 2025-10-08 06:58:41 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0042s User: 0.0011s Wall: 0.0022s flows/second: 61993.7 Runtime: 0.0022s