Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 22:58:57.810 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60638 10 6452 1 2025-10-11 22:59:58.225 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54306 10 6452 1 2025-10-11 23:01:13.783 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:00:58.629 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50246 10 6452 1 2025-10-11 23:01:14.071 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:01:13.848 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:01:13.702 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:01:13.914 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:01:59.058 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55220 10 6452 1 2025-10-11 22:58:42.770 00:05:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 23:02:59.459 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43724 10 6452 1 2025-10-11 23:03:59.877 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42786 10 6452 1 2025-10-11 23:00:42.768 00:05:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 23:05:00.277 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45472 10 6452 1 2025-10-11 23:06:14.083 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:06:00.679 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37530 10 6452 1 2025-10-11 23:06:14.002 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:06:14.069 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:06:14.071 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:06:14.152 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:07:01.105 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34618 10 6452 1 2025-10-11 23:08:01.512 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38626 10 6452 1 2025-10-11 23:04:42.772 00:05:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 23:09:01.920 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39556 10 6452 1 2025-10-11 23:10:02.301 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58774 10 6452 1 2025-10-11 23:06:42.769 00:05:00.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 23:11:14.689 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:11:02.704 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43500 10 6452 1 2025-10-11 23:11:14.541 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:11:13.972 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:11:14.605 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:11:14.735 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:12:03.097 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49012 10 6452 1 2025-10-11 23:13:03.498 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36354 10 6452 1 2025-10-11 23:14:03.899 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37510 12 6556 1 2025-10-11 23:10:42.772 00:05:00.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 23:15:04.303 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33630 10 6452 1 2025-10-11 23:16:14.417 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:16:04.706 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47068 10 6452 1 2025-10-11 23:16:14.319 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:16:14.277 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:16:14.336 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:16:14.319 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:12:42.770 00:05:00.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 23:17:05.113 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:32986 10 6452 1 2025-10-11 23:18:05.471 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:55224 10 6452 1 2025-10-11 23:19:05.869 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47632 10 6452 1 2025-10-11 23:20:06.273 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:32878 10 6452 1 2025-10-11 23:16:42.773 00:05:00.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 23:21:14.553 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:21:14.336 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:21:14.470 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:21:14.321 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:21:14.388 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:21:06.681 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47990 10 6452 1 2025-10-11 23:22:07.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54430 10 6452 1 2025-10-11 23:18:42.774 00:05:00.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 23:23:07.519 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41226 10 6452 1 2025-10-11 23:24:07.916 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43594 10 6452 1 2025-10-11 23:25:08.313 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50566 10 6452 1 2025-10-11 23:26:14.635 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:26:14.499 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:26:14.468 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:26:14.552 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:26:14.425 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:26:08.719 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48452 10 6452 1 2025-10-11 23:22:42.780 00:05:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 23:27:09.126 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54924 10 6452 1 2025-10-11 23:28:09.552 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52928 10 6452 1 2025-10-11 23:24:42.777 00:05:00.460 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 23:29:09.952 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54218 10 6452 1 2025-10-11 23:30:10.322 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49794 10 6452 1 2025-10-11 23:31:14.792 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:31:14.578 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:31:14.722 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:31:14.612 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:31:14.804 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:31:10.726 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55280 10 6452 1 2025-10-11 23:32:11.142 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40082 10 6452 1 2025-10-11 23:28:42.781 00:05:00.458 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 23:33:11.557 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41604 10 6452 1 2025-10-11 23:34:11.966 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55506 10 6452 1 2025-10-11 23:30:42.778 00:05:00.469 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 23:35:12.369 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57022 10 6452 1 2025-10-11 23:36:14.844 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:36:14.767 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:36:14.396 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:36:14.760 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:36:14.762 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:36:12.771 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58594 10 6452 1 2025-10-11 23:37:13.184 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59842 10 6452 1 2025-10-11 23:38:13.590 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58658 10 6452 1 2025-10-11 23:34:42.783 00:05:00.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 23:39:13.993 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40020 10 6452 1 2025-10-11 23:40:14.394 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37238 10 6452 1 2025-10-11 23:36:42.782 00:05:00.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 23:41:14.604 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:41:14.807 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:41:14.799 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:41:14.520 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:41:14.863 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:41:14.802 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33186 10 6452 1 2025-10-11 23:42:15.206 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38762 10 6452 1 2025-10-11 23:43:15.609 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60670 10 6452 1 2025-10-11 23:44:16.017 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36542 10 6452 1 2025-10-11 23:40:42.784 00:05:00.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 23:45:16.376 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39634 10 6452 1 2025-10-11 23:46:15.021 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:46:14.801 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:46:14.622 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:46:14.938 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:46:14.807 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:46:16.733 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39942 10 6452 1 2025-10-11 23:42:42.783 00:05:00.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 23:47:17.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44156 10 6452 1 2025-10-11 23:48:17.543 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42258 10 6452 1 2025-10-11 23:49:17.947 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44606 10 6452 1 2025-10-11 23:50:18.358 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50730 10 6452 1 2025-10-11 23:46:42.785 00:05:00.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 23:51:14.896 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:51:14.802 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:51:14.820 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:51:14.813 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:51:14.800 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:51:18.762 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57964 10 6452 1 2025-10-11 23:52:19.168 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57104 10 6452 1 2025-10-11 23:48:42.783 00:05:00.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 23:53:19.571 00:00:10.828 TCP 1.101.0.1:3000 -> 23.104.0.1:38044 12 6556 1 2025-10-11 23:54:20.434 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52676 10 6452 1 2025-10-11 23:55:20.838 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:42600 10 6452 1 2025-10-11 23:56:15.299 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 23:56:15.164 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:56:15.438 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 23:56:15.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 23:56:15.521 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 23:56:21.272 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38302 10 6452 1 2025-10-11 23:52:42.787 00:05:00.457 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 23:57:21.684 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37398 10 6452 1 2025-10-11 23:58:22.054 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44290 10 6452 1 2025-10-11 23:54:42.786 00:05:00.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 140, total bytes: 417208, total packets: 1024, avg bps: 911, avg pps: 0, avg bpp: 407 Time window: 2025-10-11 22:58:42 - 2025-10-11 23:59:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0048s User: 0.0000s Wall: 0.0021s flows/second: 65638.6 Runtime: 0.0021s