Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 02:59:04.183 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55280 12 6556 1 2025-10-30 02:54:52.107 00:06:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 02:59:59.283 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 02:59:58.878 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 02:59:58.914 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 02:59:59.130 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 02:59:59.212 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:00:04.591 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54766 10 6452 1 2025-10-30 02:55:52.104 00:06:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 03:01:05.009 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50224 10 6452 1 2025-10-30 03:02:05.391 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:34936 10 6452 1 2025-10-30 03:03:05.791 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60642 10 6452 1 2025-10-30 03:04:06.200 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33056 10 6452 1 2025-10-30 03:04:59.125 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:04:59.115 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 03:04:58.888 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:04:59.044 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:04:59.013 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 03:05:06.602 00:00:10.828 TCP 1.101.0.1:3000 -> 23.104.0.1:52374 10 6452 1 2025-10-30 03:06:07.469 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33650 10 6452 1 2025-10-30 03:01:52.107 00:06:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 03:07:07.826 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36114 10 6452 1 2025-10-30 03:02:52.105 00:06:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 03:08:08.188 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50336 10 6452 1 2025-10-30 03:09:08.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39810 10 6452 1 2025-10-30 03:09:59.300 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:09:59.323 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 03:09:59.343 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:09:59.217 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:09:59.529 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 03:10:08.996 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60382 10 6452 1 2025-10-30 03:11:09.400 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49308 10 6452 1 2025-10-30 03:12:09.794 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:53824 11 6504 1 2025-10-30 03:13:10.252 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47136 10 6452 1 2025-10-30 03:08:52.109 00:06:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 03:14:10.655 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34718 10 6452 1 2025-10-30 03:09:52.106 00:06:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 03:14:59.378 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:14:59.200 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 03:14:59.029 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:14:59.295 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:14:59.306 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 03:15:11.065 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40486 10 6452 1 2025-10-30 03:16:11.469 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38114 10 6452 1 2025-10-30 03:17:11.867 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49866 10 6452 1 2025-10-30 03:18:12.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58488 10 6452 1 2025-10-30 03:19:12.683 00:00:22.214 TCP 1.101.0.1:3000 -> 23.104.0.1:52538 10 6452 1 2025-10-30 03:19:59.702 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:19:59.614 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 03:19:59.720 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:19:59.619 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:19:59.880 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 03:20:24.936 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:56300 10 6452 1 2025-10-30 03:15:52.113 00:06:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 03:21:25.366 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45684 10 6452 1 2025-10-30 03:16:52.110 00:06:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 03:22:25.771 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52588 10 6452 1 2025-10-30 03:23:26.183 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47470 10 6452 1 2025-10-30 03:24:26.583 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51928 10 6452 1 2025-10-30 03:24:59.666 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:24:59.672 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 03:24:59.314 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:24:59.580 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:24:59.407 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 03:25:26.982 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:54342 10 6452 1 2025-10-30 03:26:27.350 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55550 10 6452 1 2025-10-30 03:27:27.770 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46894 10 6452 1 2025-10-30 03:22:52.114 00:06:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 03:28:28.142 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32974 10 6452 1 2025-10-30 03:23:52.113 00:06:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 03:29:28.552 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60794 10 6452 1 2025-10-30 03:29:59.742 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 03:29:59.545 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:29:59.674 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:29:59.746 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 03:29:59.756 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:30:28.949 00:00:10.789 TCP 1.101.0.1:3000 -> 23.104.0.1:41528 10 6452 1 2025-10-30 03:31:29.779 00:00:11.871 TCP 1.101.0.1:3000 -> 23.104.0.1:33216 10 6452 1 2025-10-30 03:32:31.686 00:00:11.054 TCP 1.101.0.1:3000 -> 23.104.0.1:55286 10 6452 1 2025-10-30 03:33:32.778 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:46716 12 10375 1 2025-10-30 03:34:33.217 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53670 10 6452 1 2025-10-30 03:29:52.116 00:06:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 03:34:59.943 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:34:59.861 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:34:59.796 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 03:34:59.745 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 03:34:59.473 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:35:33.618 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56570 10 6452 1 2025-10-30 03:30:52.114 00:06:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 03:36:34.028 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37660 10 6452 1 2025-10-30 03:37:34.436 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51132 10 6452 1 2025-10-30 03:38:34.837 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:50814 10 6452 1 2025-10-30 03:39:35.270 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45744 10 6452 1 2025-10-30 03:39:59.774 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 03:39:59.774 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:39:59.771 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:39:59.679 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 03:39:59.855 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:40:35.680 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52504 10 6452 1 2025-10-30 03:41:36.066 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50740 10 6452 1 2025-10-30 03:36:52.119 00:06:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 03:42:36.436 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52608 10 6452 1 2025-10-30 03:37:52.116 00:06:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 03:43:36.837 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:59012 10 6452 1 2025-10-30 03:44:37.251 00:00:10.501 TCP 1.101.0.1:3000 -> 23.104.0.1:39430 10 6452 1 2025-10-30 03:45:00.034 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:44:59.955 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 03:44:59.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:44:59.952 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:44:59.945 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 03:45:37.787 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:40788 10 6452 1 2025-10-30 03:46:38.216 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:56040 10 6452 1 2025-10-30 03:47:38.671 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49816 10 6452 1 2025-10-30 03:48:39.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40626 10 6452 1 2025-10-30 03:43:52.123 00:06:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 03:49:39.521 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37416 10 6452 1 2025-10-30 03:50:00.062 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 03:49:59.781 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:49:59.833 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:50:00.127 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 03:44:52.121 00:06:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 03:49:59.916 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:50:39.890 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56378 12 6556 1 2025-10-30 03:51:40.311 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58512 10 6452 1 2025-10-30 03:52:40.717 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51448 10 6452 1 2025-10-30 03:53:41.099 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34618 10 6452 1 2025-10-30 03:54:41.503 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44008 10 6452 1 2025-10-30 03:55:00.160 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 03:55:00.078 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 03:54:59.790 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:55:00.077 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 03:55:00.079 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 03:55:41.913 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53692 10 6452 1 2025-10-30 03:50:52.127 00:06:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 03:56:42.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34416 10 6452 1 2025-10-30 03:51:52.125 00:06:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 03:57:42.722 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58768 10 6452 1 Summary: total flows: 137, total bytes: 415469, total packets: 1029, avg bps: 879, avg pps: 0, avg bpp: 403 Time window: 2025-10-30 02:54:52 - 2025-10-30 03:57:53 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0047s User: 0.0019s Wall: 0.0019s flows/second: 71836.4 Runtime: 0.0019s