Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 05:59:00.361 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:48640 12 10375 1 2025-10-21 05:54:47.548 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:00:00.840 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39642 10 6452 1 2025-10-21 06:00:42.324 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:00:42.266 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:00:42.394 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:00:42.230 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:00:42.478 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:01:01.270 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49998 10 6452 1 2025-10-21 06:02:01.681 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58398 10 6452 1 2025-10-21 06:03:02.103 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36956 10 6452 1 2025-10-21 06:04:02.504 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46370 10 6452 1 2025-10-21 05:59:47.551 00:06:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:05:02.906 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39658 10 6452 1 2025-10-21 06:05:42.758 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:05:42.470 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:05:42.717 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:05:42.723 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:05:42.801 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:06:03.267 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44888 10 6452 1 2025-10-21 06:01:47.548 00:06:00.304 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:07:03.637 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60652 10 6452 1 2025-10-21 06:08:03.997 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33682 10 6452 1 2025-10-21 06:09:04.412 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:51258 12 10369 1 2025-10-21 06:10:04.889 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43148 10 6452 1 2025-10-21 06:10:42.710 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:10:42.244 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:10:42.464 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:10:42.615 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:10:42.548 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:11:05.305 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44454 10 6452 1 2025-10-21 06:06:47.552 00:06:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:12:05.714 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53644 10 6452 1 2025-10-21 06:13:06.125 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46280 10 6452 1 2025-10-21 06:08:47.550 00:06:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:14:06.487 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50080 10 6452 1 2025-10-21 06:15:06.893 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:36366 10 6452 1 2025-10-21 06:15:42.798 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:15:42.652 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:15:42.620 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:15:42.717 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:15:42.565 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:16:07.268 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50810 10 6452 1 2025-10-21 06:17:07.669 00:00:10.979 TCP 1.101.0.1:3000 -> 23.104.0.1:43584 10 6452 1 2025-10-21 06:18:08.686 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58642 10 6452 1 2025-10-21 06:13:47.554 00:06:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:19:09.055 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52830 10 6452 1 2025-10-21 06:20:09.455 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45906 10 6452 1 2025-10-21 06:20:42.850 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:20:42.492 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:20:42.651 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:20:42.653 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:20:42.734 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:15:47.551 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:21:09.856 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59788 10 6452 1 2025-10-21 06:22:10.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43552 10 6452 1 2025-10-21 06:23:10.682 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35194 10 6452 1 2025-10-21 06:24:11.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45972 10 6452 1 2025-10-21 06:25:11.516 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38496 10 6452 1 2025-10-21 06:25:43.071 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:25:42.682 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:25:42.966 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:25:42.978 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:25:43.048 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:20:47.555 00:06:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:26:11.923 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:45452 10 6452 1 2025-10-21 06:27:12.354 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55826 10 6452 1 2025-10-21 06:22:47.553 00:06:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:28:12.758 00:00:12.781 TCP 1.101.0.1:3000 -> 23.104.0.1:38316 10 6452 1 2025-10-21 06:29:15.593 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:45206 12 10369 1 2025-10-21 06:30:16.113 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52912 10 6452 1 2025-10-21 06:30:43.190 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:30:43.142 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:30:43.102 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:30:43.108 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:30:42.953 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:31:16.512 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41714 10 6452 1 2025-10-21 06:32:16.913 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38260 12 6556 1 2025-10-21 06:27:47.558 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:33:17.320 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:60034 10 6452 1 2025-10-21 06:34:17.672 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35182 10 6452 1 2025-10-21 06:29:47.557 00:06:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:35:18.105 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55760 10 6452 1 2025-10-21 06:35:43.307 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:35:43.137 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:35:42.878 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:35:43.224 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:35:43.310 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:36:18.512 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42114 10 6452 1 2025-10-21 06:37:18.921 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48744 10 6452 1 2025-10-21 06:38:19.324 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50786 10 6452 1 2025-10-21 06:39:19.728 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42946 10 6452 1 2025-10-21 06:34:47.576 00:06:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:40:20.135 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41388 10 6452 1 2025-10-21 06:40:43.263 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:40:43.112 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:40:43.253 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:40:43.259 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:40:43.336 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:41:20.542 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33984 10 6452 1 2025-10-21 06:36:47.561 00:06:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:42:20.902 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57238 12 6556 1 2025-10-21 06:43:21.310 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41328 10 6452 1 2025-10-21 06:44:21.728 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60088 10 6452 1 2025-10-21 06:45:22.134 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:35088 10 6452 1 2025-10-21 06:45:43.824 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:45:43.629 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:45:43.413 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:45:43.741 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:45:43.542 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:46:22.581 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41292 10 6452 1 2025-10-21 06:41:47.567 00:06:00.302 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:47:22.941 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:34344 10 6452 1 2025-10-21 06:48:23.313 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34400 10 6452 1 2025-10-21 06:43:47.564 00:06:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:49:23.713 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:41080 10 6452 1 2025-10-21 06:50:24.107 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36712 10 6452 1 2025-10-21 06:50:43.379 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:50:43.285 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:50:43.531 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:50:43.380 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:50:43.613 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:51:24.512 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46756 10 6452 1 2025-10-21 06:52:24.917 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45818 12 6556 1 2025-10-21 06:53:25.334 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49634 10 6452 1 2025-10-21 06:48:47.568 00:06:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:54:25.733 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56744 10 6452 1 2025-10-21 06:55:26.138 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44092 10 6452 1 2025-10-21 06:55:43.445 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:55:43.456 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:55:43.310 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:55:43.362 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:55:43.456 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:50:47.565 00:06:00.307 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:56:26.544 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38448 10 6452 1 2025-10-21 06:57:26.956 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44794 10 6452 1 2025-10-21 06:58:27.319 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58012 10 6452 1 Summary: total flows: 137, total bytes: 428946, total packets: 1030, avg bps: 895, avg pps: 0, avg bpp: 416 Time window: 2025-10-21 05:54:47 - 2025-10-21 06:58:37 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0033s User: 0.0022s Wall: 0.0033s flows/second: 41705.6 Runtime: 0.0033s