Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 20:59:04.755 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57234 10 6661 1 2025-10-24 20:54:49.446 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 21:00:05.155 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56574 10 6661 1 2025-10-24 21:01:05.559 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38286 10 6661 1 2025-10-24 21:02:05.968 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35658 10 6661 1 2025-10-24 21:02:27.352 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:02:27.414 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:02:27.351 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:02:27.570 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:02:27.434 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:03:06.392 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43040 10 6661 1 2025-10-24 20:58:49.450 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 21:04:06.797 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41620 10 6661 1 2025-10-24 21:05:07.201 00:00:20.895 TCP 1.101.0.1:3000 -> 23.104.0.1:37356 13 14158 1 2025-10-24 21:06:18.170 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:51094 10 6661 1 2025-10-24 21:01:49.450 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 21:07:27.622 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:07:27.602 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:07:27.669 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:07:18.571 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56160 10 6661 1 2025-10-24 21:07:27.720 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:07:27.752 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:08:18.976 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33194 10 6661 1 2025-10-24 21:09:19.390 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46552 10 6661 1 2025-10-24 21:10:19.800 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:41858 10 6661 1 2025-10-24 21:05:49.473 00:06:00.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 21:11:20.176 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54460 10 6661 1 2025-10-24 21:12:20.580 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34212 10 6661 1 2025-10-24 21:12:27.408 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:12:27.433 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:12:27.612 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:12:27.526 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:12:27.696 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:13:20.986 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45814 10 6661 1 2025-10-24 21:08:49.453 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 21:14:21.390 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59602 10 6661 1 2025-10-24 21:15:21.753 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:42138 10 6661 1 2025-10-24 21:16:22.184 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49862 10 6661 1 2025-10-24 21:17:27.785 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:17:27.774 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:17:27.747 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:17:27.702 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:17:27.866 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:17:22.580 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47114 10 6661 1 2025-10-24 21:12:49.455 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 21:18:22.950 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:45458 10 6661 1 2025-10-24 21:19:23.428 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36144 10 6661 1 2025-10-24 21:20:23.831 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56936 10 6661 1 2025-10-24 21:15:49.455 00:06:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 21:21:24.230 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35884 10 6661 1 2025-10-24 21:22:28.656 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:22:28.572 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:22:28.426 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:22:28.573 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:22:28.648 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:22:24.593 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59220 10 6661 1 2025-10-24 21:23:25.001 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58124 10 6661 1 2025-10-24 21:24:25.404 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60030 11 6713 1 2025-10-24 21:19:49.457 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 21:25:25.818 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54330 10 6661 1 2025-10-24 21:26:26.186 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39718 10 6661 1 2025-10-24 21:27:28.141 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:27:27.877 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:27:28.147 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:27:28.033 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:27:28.230 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:27:26.549 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48994 10 6661 1 2025-10-24 21:22:49.456 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 21:28:26.954 00:00:10.784 TCP 1.101.0.1:3000 -> 23.104.0.1:55290 10 6661 1 2025-10-24 21:29:27.789 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60986 10 6661 1 2025-10-24 21:30:28.194 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:44930 12 10375 1 2025-10-24 21:31:28.686 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50648 10 6452 1 2025-10-24 21:26:49.460 00:06:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 21:32:28.248 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:32:28.267 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:32:28.130 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:32:28.165 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:32:28.160 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:32:29.114 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33312 10 6452 1 2025-10-24 21:33:29.515 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52380 10 6452 1 2025-10-24 21:34:29.922 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41680 10 6452 1 2025-10-24 21:29:49.458 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 21:35:30.330 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:56726 10 6452 1 2025-10-24 21:36:30.711 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50104 10 6452 1 2025-10-24 21:37:28.001 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:37:28.044 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:37:28.119 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:37:28.267 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:37:28.201 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:37:31.116 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41690 10 6452 1 2025-10-24 21:38:31.521 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59854 10 6452 1 2025-10-24 21:33:49.462 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 21:39:31.933 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40574 10 6452 1 2025-10-24 21:40:32.340 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42948 10 6452 1 2025-10-24 21:41:32.749 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48064 10 6452 1 2025-10-24 21:36:49.459 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 21:42:28.391 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:42:28.105 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:42:28.125 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:42:28.307 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:42:28.247 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:42:33.151 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36878 10 6452 1 2025-10-24 21:43:33.552 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37744 10 6452 1 2025-10-24 21:44:33.955 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49604 10 6452 1 2025-10-24 21:45:34.366 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:46270 12 10375 1 2025-10-24 21:40:49.463 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 21:46:34.843 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:34812 10 6452 1 2025-10-24 21:47:28.366 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:47:28.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:47:28.302 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:47:28.283 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:47:28.287 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:47:35.264 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45900 10 6452 1 2025-10-24 21:48:35.671 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46212 10 6452 1 2025-10-24 21:43:49.461 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 21:49:36.102 00:00:10.522 TCP 1.101.0.1:3000 -> 23.104.0.1:57194 10 6452 1 2025-10-24 21:50:36.663 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:43290 12 10584 1 2025-10-24 21:51:37.111 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41918 10 6661 1 2025-10-24 21:52:28.563 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:52:28.615 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:52:28.572 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:52:28.478 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:52:28.613 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:52:37.475 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42350 10 6661 1 2025-10-24 21:47:49.465 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 21:53:37.842 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:41632 10 6661 1 2025-10-24 21:54:38.269 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55020 10 6661 1 2025-10-24 21:50:49.462 00:06:00.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 21:55:38.669 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60894 10 6661 1 2025-10-24 21:56:39.112 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58486 10 6661 1 2025-10-24 21:57:29.078 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 21:57:29.089 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 21:57:28.711 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:57:28.994 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 21:57:28.946 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 21:57:39.525 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56768 10 6661 1 2025-10-24 21:58:39.888 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:56432 10 6661 1 Summary: total flows: 137, total bytes: 444555, total packets: 1028, avg bps: 925, avg pps: 0, avg bpp: 432 Time window: 2025-10-24 20:54:49 - 2025-10-24 21:58:50 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0062s User: 0.0000s Wall: 0.0019s flows/second: 71576.9 Runtime: 0.0019s