Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 16:59:24.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41308 10 6452 1 2025-10-04 17:00:24.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39182 10 6452 1 2025-10-04 16:56:39.166 00:04:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 17:01:24.932 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:37294 10 6452 1 2025-10-04 16:57:39.162 00:04:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 17:02:25.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44684 10 6452 1 2025-10-04 17:02:44.694 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:02:44.709 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:02:44.783 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:02:44.739 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:02:44.612 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:03:25.757 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:45538 12 10369 1 2025-10-04 17:04:26.236 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52672 10 6452 1 2025-10-04 17:05:26.636 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:44202 10 6452 1 2025-10-04 17:01:39.166 00:04:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 17:06:27.129 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60466 10 6452 1 2025-10-04 17:02:39.163 00:04:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 17:07:27.493 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57446 10 6452 1 2025-10-04 17:07:44.624 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:07:44.926 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:07:44.786 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:07:44.733 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:07:44.868 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:08:27.858 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:41186 10 6452 1 2025-10-04 17:09:28.231 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33848 10 6452 1 2025-10-04 17:06:39.166 00:04:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 17:10:28.634 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60346 10 6452 1 2025-10-04 17:11:28.993 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 10 6452 1 2025-10-04 17:12:29.358 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39098 10 6452 1 2025-10-04 17:12:44.673 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:12:44.780 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:12:44.623 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:12:44.673 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:07:39.164 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 17:12:44.756 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:13:29.766 00:00:10.668 TCP 1.101.0.1:3000 -> 23.104.0.1:41558 10 6452 1 2025-10-04 17:14:30.475 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:41336 10 6452 1 2025-10-04 17:11:39.169 00:04:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 17:15:30.837 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:55872 10 6452 1 2025-10-04 17:16:31.258 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33514 10 6452 1 2025-10-04 17:17:31.671 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44554 10 6452 1 2025-10-04 17:17:45.298 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:17:45.264 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:17:45.266 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:17:45.008 00:00:00.049 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:17:45.380 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:14:39.167 00:04:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 17:18:32.120 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46998 10 6452 1 2025-10-04 17:19:32.515 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58168 10 6452 1 2025-10-04 17:16:39.170 00:04:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 17:20:32.929 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:34652 10 6452 1 2025-10-04 17:21:33.372 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57500 10 6452 1 2025-10-04 17:22:44.953 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:22:33.734 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34826 10 6452 1 2025-10-04 17:22:45.235 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:22:44.994 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:22:45.153 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:22:45.096 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:19:39.168 00:04:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 17:23:34.144 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48846 10 6452 1 2025-10-04 17:24:34.548 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52730 10 6452 1 2025-10-04 17:25:34.950 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59846 10 6452 1 2025-10-04 17:21:39.170 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 17:26:35.362 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35676 10 6452 1 2025-10-04 17:27:45.313 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:27:45.432 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:27:45.379 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:27:45.386 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:27:35.762 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:49316 10 6452 1 2025-10-04 17:27:45.230 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:24:39.170 00:04:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 17:28:36.185 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41130 10 6452 1 2025-10-04 17:29:36.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52326 10 6452 1 2025-10-04 17:30:36.995 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42594 10 6452 1 2025-10-04 17:31:37.409 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48780 10 6452 1 2025-10-04 17:28:39.172 00:04:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 17:32:45.323 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:32:45.240 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:32:37.775 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55734 10 6452 1 2025-10-04 17:32:45.318 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:32:45.321 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:32:45.245 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:29:39.169 00:04:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 17:33:38.180 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49086 10 6452 1 2025-10-04 17:34:38.583 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54500 10 6452 1 2025-10-04 17:35:39.035 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41766 11 6504 1 2025-10-04 17:36:39.454 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33682 10 6452 1 2025-10-04 17:33:39.172 00:04:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 17:37:45.479 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:37:45.513 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:37:45.162 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:37:45.398 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:37:45.304 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:37:39.855 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:54616 10 6452 1 2025-10-04 17:34:39.174 00:04:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 17:38:40.278 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:43332 11 6504 1 2025-10-04 17:39:40.739 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51392 10 6452 1 2025-10-04 17:40:41.142 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39426 10 6452 1 2025-10-04 17:41:41.545 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44224 10 6452 1 2025-10-04 17:38:39.175 00:04:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 17:42:45.440 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:42:45.525 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:42:45.536 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:42:45.446 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:42:45.529 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:42:41.953 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50600 10 6452 1 2025-10-04 17:43:42.358 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43022 10 6452 1 2025-10-04 17:39:39.174 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 17:44:42.759 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:47948 10 6452 1 2025-10-04 17:45:43.131 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34590 10 6452 1 2025-10-04 17:46:43.503 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55064 10 6452 1 2025-10-04 17:43:39.176 00:04:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 17:47:45.818 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:47:45.846 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:47:45.926 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:47:45.659 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:47:45.736 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:47:43.913 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54120 10 6452 1 2025-10-04 17:48:44.274 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34388 10 6452 1 2025-10-04 17:49:44.633 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57328 10 6452 1 2025-10-04 17:46:39.175 00:04:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 17:50:45.061 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:45596 10 6452 1 2025-10-04 17:51:45.435 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58764 10 6452 1 2025-10-04 17:48:39.179 00:04:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 17:52:45.798 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:52:45.473 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:52:45.660 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:52:45.836 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:52:45.744 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:52:45.796 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51284 10 6452 1 2025-10-04 17:53:46.201 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35870 10 6452 1 2025-10-04 17:54:46.600 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35684 10 6452 1 2025-10-04 17:51:39.177 00:04:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 17:55:46.958 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44420 10 6452 1 2025-10-04 17:56:47.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53910 10 6452 1 2025-10-04 17:53:39.178 00:04:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 17:57:45.813 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 17:57:45.634 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 17:57:45.563 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:57:45.736 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 17:57:45.818 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 17:57:47.766 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:49692 10 6452 1 Summary: total flows: 142, total bytes: 414692, total packets: 1016, avg bps: 901, avg pps: 0, avg bpp: 408 Time window: 2025-10-04 16:56:39 - 2025-10-04 17:57:58 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0018s User: 0.0026s Wall: 0.0015s flows/second: 93912.2 Runtime: 0.0015s