Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 10:58:42.517 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52094 10 6452 1 2025-10-06 10:59:42.920 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45076 10 6452 1 2025-10-06 11:00:43.286 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56954 10 6452 1 2025-10-06 11:01:43.689 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51888 10 6452 1 2025-10-06 10:57:40.001 00:06:00.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 11:02:44.065 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51714 10 6452 1 2025-10-06 11:03:35.274 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:03:35.254 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:03:35.300 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:03:35.097 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:03:35.190 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 10:58:40.003 00:06:00.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 11:03:44.463 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53974 10 6452 1 2025-10-06 11:04:44.857 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56944 10 6452 1 2025-10-06 11:05:45.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45576 11 6492 1 2025-10-06 11:06:45.680 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54592 10 6452 1 2025-10-06 11:07:46.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44306 10 6452 1 2025-10-06 11:08:35.429 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:08:35.475 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:08:35.475 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:08:35.406 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:08:35.347 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:08:46.510 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38742 10 6452 1 2025-10-06 11:04:40.001 00:06:00.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 11:09:46.872 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54002 10 6452 1 2025-10-06 11:05:40.029 00:06:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 11:10:47.278 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33438 10 6452 1 2025-10-06 11:11:47.679 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58168 10 6452 1 2025-10-06 11:12:48.111 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60970 10 6452 1 2025-10-06 11:13:35.380 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:13:35.470 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:13:35.391 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:13:35.476 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:13:35.560 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:13:48.509 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44416 10 6452 1 2025-10-06 11:14:48.914 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34262 10 6452 1 2025-10-06 11:15:49.318 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54824 10 6452 1 2025-10-06 11:11:40.035 00:06:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 11:16:49.721 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35352 10 6452 1 2025-10-06 11:12:40.039 00:06:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 11:17:50.130 00:00:10.525 TCP 1.101.0.1:3000 -> 23.104.0.1:43400 11 6504 1 2025-10-06 11:18:35.631 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:18:35.590 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:18:35.389 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:18:35.423 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:18:35.547 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:18:50.691 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33736 10 6452 1 2025-10-06 11:19:51.067 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46650 10 6452 1 2025-10-06 11:20:51.479 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39236 10 6452 1 2025-10-06 11:21:51.887 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:48834 12 6556 1 2025-10-06 11:22:52.316 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58902 10 6452 1 2025-10-06 11:23:35.638 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:23:35.837 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:23:35.664 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:23:35.642 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:23:35.727 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:18:40.039 00:06:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 11:23:52.717 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46208 10 6452 1 2025-10-06 11:19:40.042 00:06:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 11:24:53.129 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56502 10 6452 1 2025-10-06 11:25:53.535 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60652 10 6452 1 2025-10-06 11:26:53.938 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44648 10 6452 1 2025-10-06 11:27:54.361 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55728 10 6452 1 2025-10-06 11:28:35.892 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:28:35.865 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:28:35.569 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:28:35.807 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:28:35.890 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:28:54.724 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54930 10 6452 1 2025-10-06 11:29:55.140 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36188 12 6556 1 2025-10-06 11:25:40.044 00:06:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 11:30:55.570 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40526 10 6452 1 2025-10-06 11:26:40.047 00:06:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 11:31:55.972 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39984 10 6452 1 2025-10-06 11:32:56.378 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52512 10 6452 1 2025-10-06 11:33:36.126 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:33:35.708 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:33:35.812 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:33:36.127 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:33:36.209 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:33:56.787 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59842 10 6452 1 2025-10-06 11:34:57.153 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41638 10 6452 1 2025-10-06 11:35:57.553 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48774 10 6452 1 2025-10-06 11:36:57.955 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:55738 10 6452 1 2025-10-06 11:32:40.056 00:06:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 11:37:58.368 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50368 10 6452 1 2025-10-06 11:38:35.886 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:38:35.804 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:38:36.078 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:38:35.941 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:38:35.804 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:33:40.061 00:06:00.378 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 11:38:58.764 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44520 10 6452 1 2025-10-06 11:39:59.180 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35390 10 6452 1 2025-10-06 11:40:59.587 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:44704 10 6452 1 2025-10-06 11:41:59.996 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33486 10 6452 1 2025-10-06 11:43:00.398 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:44812 10 6452 1 2025-10-06 11:43:36.134 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:43:36.184 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:43:35.822 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:43:36.087 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:43:36.169 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:44:00.822 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58340 10 6452 1 2025-10-06 11:39:40.059 00:06:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 11:45:01.232 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35916 10 6452 1 2025-10-06 11:40:40.061 00:06:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 11:46:01.630 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49970 10 6452 1 2025-10-06 11:47:02.037 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58534 10 6452 1 2025-10-06 11:48:02.445 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33558 10 6452 1 2025-10-06 11:48:36.300 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:48:35.851 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:48:35.843 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:48:36.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:48:36.223 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:49:02.805 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:38316 10 6452 1 2025-10-06 11:50:03.183 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60094 10 6452 1 2025-10-06 11:51:03.590 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:55782 10 6452 1 2025-10-06 11:46:40.061 00:06:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 11:52:03.960 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47586 10 6452 1 2025-10-06 11:47:40.064 00:06:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 11:53:04.361 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59668 10 6452 1 2025-10-06 11:53:36.350 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:53:36.308 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:53:35.956 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:53:35.985 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:53:36.266 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:54:04.739 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40306 10 6452 1 2025-10-06 11:55:05.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36286 10 6452 1 2025-10-06 11:56:05.558 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57290 10 6452 1 2025-10-06 11:57:05.968 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35872 10 6452 1 2025-10-06 11:58:06.397 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60214 10 6452 1 2025-10-06 11:58:36.289 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 11:58:36.293 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 11:58:36.328 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:58:36.174 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 11:58:36.257 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 11:53:40.061 00:06:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 137, total bytes: 417177, total packets: 1024, avg bps: 897, avg pps: 0, avg bpp: 407 Time window: 2025-10-06 10:57:40 - 2025-10-06 11:59:40 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0031s User: 0.0021s Wall: 0.0020s flows/second: 69406.9 Runtime: 0.0020s