Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 11:58:50.511 00:00:11.025 TCP 1.101.0.1:3000 -> 23.104.0.1:47352 10 6452 1 2025-10-11 11:59:51.571 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54352 10 6452 1 2025-10-11 12:01:00.937 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:01:00.858 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:01:00.664 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:01:00.855 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:01:00.941 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:00:51.971 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48318 10 6452 1 2025-10-11 11:56:42.547 00:06:00.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 12:01:52.380 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:36672 10 6452 1 2025-10-11 12:02:52.775 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36422 10 6452 1 2025-10-11 11:58:42.546 00:06:00.427 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 12:03:53.182 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 10 6452 1 2025-10-11 12:04:53.578 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39568 10 6452 1 2025-10-11 12:06:00.915 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:06:00.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:06:00.914 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:06:00.986 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:05:53.987 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54378 10 6452 1 2025-10-11 12:06:01.069 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:06:54.389 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41674 10 6452 1 2025-10-11 12:07:54.809 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48724 10 6452 1 2025-10-11 12:03:42.550 00:06:00.422 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 12:08:55.223 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46356 10 6452 1 2025-10-11 12:09:55.635 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:39638 10 6452 1 2025-10-11 12:05:42.548 00:06:00.427 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 12:11:00.957 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:11:00.937 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:11:00.916 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:11:00.875 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:11:01.004 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:10:56.023 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58390 10 6452 1 2025-10-11 12:11:56.428 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57030 10 6452 1 2025-10-11 12:12:56.831 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37078 10 6452 1 2025-10-11 12:13:57.233 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37230 10 6452 1 2025-10-11 12:14:57.645 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53424 10 6452 1 2025-10-11 12:10:42.556 00:06:00.417 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 12:16:00.941 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:16:01.142 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:16:01.178 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:16:01.176 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:16:01.260 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:15:58.055 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41940 10 6452 1 2025-10-11 12:16:58.462 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 10 6452 1 2025-10-11 12:12:42.555 00:06:00.420 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 12:17:58.868 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49720 10 6452 1 2025-10-11 12:18:59.271 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39008 10 6452 1 2025-10-11 12:19:59.677 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50904 10 6452 1 2025-10-11 12:21:00.955 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:21:01.302 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:21:01.220 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:21:01.255 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:21:01.218 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:21:00.102 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 10 6452 1 2025-10-11 12:22:00.505 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:57804 10 6452 1 2025-10-11 12:17:42.558 00:06:00.416 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 12:23:00.902 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:59438 10 6452 1 2025-10-11 12:24:01.270 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53796 10 6452 1 2025-10-11 12:19:42.558 00:06:00.420 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 12:25:01.686 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53228 10 6452 1 2025-10-11 12:26:01.317 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:26:01.367 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:26:01.243 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:26:01.234 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:26:01.219 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:26:02.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47314 10 6452 1 2025-10-11 12:27:02.507 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51460 10 6452 1 2025-10-11 12:28:02.911 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48480 10 6452 1 2025-10-11 12:29:03.314 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38734 10 6452 1 2025-10-11 12:24:42.560 00:06:00.416 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 12:30:03.718 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54478 10 6452 1 2025-10-11 12:31:01.308 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:31:01.451 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:31:01.344 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:31:01.226 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:31:01.390 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:31:04.129 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40848 10 6452 1 2025-10-11 12:26:42.558 00:06:00.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 12:32:04.526 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41162 10 6452 1 2025-10-11 12:33:04.887 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:43504 12 6556 1 2025-10-11 12:34:05.305 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40138 10 6452 1 2025-10-11 12:35:05.715 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47000 10 6452 1 2025-10-11 12:36:01.521 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:36:01.582 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:36:01.536 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:36:01.439 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:36:01.628 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:36:06.117 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44802 10 6452 1 2025-10-11 12:31:42.561 00:06:00.416 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 12:37:06.519 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52464 10 6452 1 2025-10-11 12:38:06.889 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36900 12 6556 1 2025-10-11 12:33:42.560 00:06:00.420 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 12:39:07.307 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34352 10 6452 1 2025-10-11 12:40:07.711 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45166 10 6452 1 2025-10-11 12:41:01.651 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:41:01.561 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:41:01.589 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:41:01.568 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:41:01.646 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:41:08.117 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48300 10 6452 1 2025-10-11 12:42:08.477 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55066 10 6452 1 2025-10-11 12:43:08.839 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:56386 10 6452 1 2025-10-11 12:38:42.562 00:06:00.417 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 12:44:09.264 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:57782 10 6452 1 2025-10-11 12:45:09.662 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46248 10 6452 1 2025-10-11 12:40:42.560 00:06:00.422 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 12:46:01.858 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:46:01.834 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:46:01.907 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:46:01.775 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:46:01.885 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:46:10.091 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60468 10 6452 1 2025-10-11 12:47:10.490 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39680 10 6452 1 2025-10-11 12:48:10.856 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:36000 10 6452 1 2025-10-11 12:49:11.234 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:47528 10 6452 1 2025-10-11 12:50:11.586 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46588 10 6452 1 2025-10-11 12:45:42.567 00:06:00.415 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 12:51:01.867 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:51:01.713 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:51:01.637 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:51:01.784 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:51:01.788 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:51:11.987 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6452 1 2025-10-11 12:52:12.389 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60376 10 6452 1 2025-10-11 12:47:42.564 00:06:00.419 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 12:53:12.793 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38028 10 6452 1 2025-10-11 12:54:13.195 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56760 10 6452 1 2025-10-11 12:55:13.596 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36970 10 6452 1 2025-10-11 12:56:01.876 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 12:56:01.884 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:56:01.773 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 12:56:01.933 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 12:56:01.856 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 12:56:13.996 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:55666 10 6452 1 2025-10-11 12:57:14.367 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54336 10 6452 1 2025-10-11 12:52:42.567 00:06:00.415 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 12:58:14.763 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:33452 10 6452 1 Summary: total flows: 137, total bytes: 417085, total packets: 1022, avg bps: 896, avg pps: 0, avg bpp: 408 Time window: 2025-10-11 11:56:42 - 2025-10-11 12:58:42 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0034s User: 0.0017s Wall: 0.0026s flows/second: 52897.0 Runtime: 0.0026s