Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 17:59:06.278 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56744 10 6452 1 2025-10-09 17:55:41.754 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 18:00:10.230 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:00:10.107 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:00:10.165 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:00:10.296 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:00:10.247 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:00:06.684 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42900 10 6452 1 2025-10-09 18:01:07.073 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:41098 10 6452 1 2025-10-09 18:02:07.498 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43942 10 6452 1 2025-10-09 17:58:41.757 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 18:03:07.900 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50166 12 6556 1 2025-10-09 18:04:08.313 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44896 10 6452 1 2025-10-09 18:05:10.437 00:00:00.018 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:05:10.156 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:05:10.161 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:05:10.175 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:05:10.244 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:05:08.678 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:55714 12 10375 1 2025-10-09 18:01:41.754 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 18:06:09.156 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59206 10 6452 1 2025-10-09 18:07:09.565 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53770 10 6452 1 2025-10-09 18:08:09.976 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52672 10 6452 1 2025-10-09 18:04:41.760 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 18:09:10.392 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33318 10 6452 1 2025-10-09 18:10:10.583 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:10:10.392 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:10:10.314 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:10:10.500 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:10:10.392 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:10:10.758 00:00:10.687 TCP 1.101.0.1:3000 -> 23.104.0.1:48872 10 6452 1 2025-10-09 18:11:11.484 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50228 10 6452 1 2025-10-09 18:07:41.757 00:05:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 18:12:11.887 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:39558 10 6452 1 2025-10-09 18:13:12.310 00:00:14.781 TCP 1.101.0.1:3000 -> 23.104.0.1:50652 10 6452 1 2025-10-09 18:14:17.141 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37758 10 6452 1 2025-10-09 18:10:41.760 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 18:15:10.516 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:15:10.387 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:15:10.513 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:15:10.590 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:15:10.595 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:15:17.545 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40210 10 6452 1 2025-10-09 18:16:17.946 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60988 10 6452 1 2025-10-09 18:17:18.362 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:37886 10 6452 1 2025-10-09 18:13:41.757 00:05:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 18:18:18.794 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36400 10 6452 1 2025-10-09 18:19:19.200 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38348 10 6452 1 2025-10-09 18:20:10.702 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:20:10.708 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:20:10.648 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:20:10.620 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:20:10.636 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:20:19.604 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34236 10 6452 1 2025-10-09 18:16:41.761 00:05:00.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 18:21:20.006 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45234 10 6452 1 2025-10-09 18:22:20.406 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37796 10 6452 1 2025-10-09 18:23:20.777 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59972 10 6452 1 2025-10-09 18:19:41.759 00:05:00.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 18:24:21.139 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38708 10 6452 1 2025-10-09 18:25:10.842 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:25:10.809 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:25:10.701 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:25:10.759 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:25:10.809 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:25:21.507 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35982 10 6452 1 2025-10-09 18:26:21.911 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:48668 10 6452 1 2025-10-09 18:22:41.763 00:05:00.388 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 18:27:22.283 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40410 10 6452 1 2025-10-09 18:28:22.645 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56274 10 6452 1 2025-10-09 18:29:23.065 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32924 10 6452 1 2025-10-09 18:25:41.761 00:05:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 18:30:11.194 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:30:11.063 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:30:11.062 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:30:11.111 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:30:11.146 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:30:23.467 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57640 10 6452 1 2025-10-09 18:31:23.877 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40318 10 6452 1 2025-10-09 18:32:24.285 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45834 10 6452 1 2025-10-09 18:28:41.764 00:05:00.387 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 18:33:24.647 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51700 10 6452 1 2025-10-09 18:34:25.097 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41626 10 6452 1 2025-10-09 18:35:10.771 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:35:10.697 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:35:10.856 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:35:10.857 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:35:10.938 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:35:25.499 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37460 10 6452 1 2025-10-09 18:31:41.762 00:05:00.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 18:36:25.901 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52680 12 6556 1 2025-10-09 18:37:26.305 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60076 10 6452 1 2025-10-09 18:38:26.668 00:00:11.157 TCP 1.101.0.1:3000 -> 23.104.0.1:49672 10 6452 1 2025-10-09 18:34:41.764 00:05:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 18:39:27.862 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44132 10 6452 1 2025-10-09 18:40:10.969 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:40:11.066 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:40:11.121 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:40:11.064 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:40:11.205 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:40:28.282 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55026 10 6452 1 2025-10-09 18:41:28.684 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51552 10 6452 1 2025-10-09 18:37:41.763 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 18:42:29.112 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50356 10 6452 1 2025-10-09 18:43:29.477 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43302 10 6452 1 2025-10-09 18:44:29.885 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51992 12 6556 1 2025-10-09 18:40:41.765 00:05:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 18:45:10.930 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:45:11.318 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:45:11.189 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:45:11.103 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:45:11.235 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:45:30.308 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40062 10 6452 1 2025-10-09 18:46:30.713 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44324 10 6452 1 2025-10-09 18:43:41.765 00:05:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 18:47:31.118 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51854 10 6452 1 2025-10-09 18:48:31.478 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:45686 10 6452 1 2025-10-09 18:49:31.946 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41614 10 6452 1 2025-10-09 18:50:11.399 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:50:11.188 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:50:11.275 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:50:11.316 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:50:11.314 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:50:32.361 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44340 10 6452 1 2025-10-09 18:46:41.769 00:05:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 18:51:32.765 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:36212 10 6452 1 2025-10-09 18:52:33.182 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56538 10 6452 1 2025-10-09 18:53:33.592 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39754 10 6452 1 2025-10-09 18:49:41.768 00:05:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 18:54:34.004 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57154 10 6452 1 2025-10-09 18:55:11.447 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 18:55:11.146 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 18:55:11.330 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:55:11.365 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 18:55:11.133 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 18:55:34.401 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46096 10 6452 1 2025-10-09 18:56:34.804 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:59600 10 6452 1 2025-10-09 18:52:41.770 00:05:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 18:57:35.189 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55916 10 6452 1 2025-10-09 18:58:35.588 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42466 10 6452 1 Summary: total flows: 140, total bytes: 421235, total packets: 1028, avg bps: 890, avg pps: 0, avg bpp: 409 Time window: 2025-10-09 17:55:41 - 2025-10-09 18:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0082s User: 0.0000s Wall: 0.0020s flows/second: 68526.4 Runtime: 0.0021s