Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 20:58:46.834 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:47210 10 6452 1 2025-10-12 20:59:47.258 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33284 10 6452 1 2025-10-12 21:00:47.661 00:00:10.608 TCP 1.101.0.1:3000 -> 23.104.0.1:46858 10 6452 1 2025-10-12 21:01:40.751 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 20:56:43.299 00:06:00.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 21:01:40.545 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:01:40.672 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:01:40.702 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:01:40.786 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 20:56:43.298 00:06:00.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 21:01:48.306 00:00:10.740 TCP 1.101.0.1:3000 -> 23.104.0.1:51132 10 6452 1 2025-10-12 21:02:49.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55016 10 6452 1 2025-10-12 21:03:49.505 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38734 10 6452 1 2025-10-12 21:04:49.912 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48230 10 6452 1 2025-10-12 21:05:50.313 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46634 10 6452 1 2025-10-12 21:06:40.755 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 21:06:40.568 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:06:40.618 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:06:40.828 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:06:40.912 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 21:06:50.680 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47472 10 6452 1 2025-10-12 21:07:51.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44746 10 6452 1 2025-10-12 21:03:43.300 00:06:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 21:03:43.299 00:06:00.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 21:08:51.510 00:00:10.530 TCP 1.101.0.1:3000 -> 23.104.0.1:35550 10 6452 1 2025-10-12 21:09:52.107 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57956 10 6452 1 2025-10-12 21:10:52.467 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:32830 10 6452 1 2025-10-12 21:11:40.729 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 21:11:40.828 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:11:40.412 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:11:40.745 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:11:40.827 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 21:11:52.888 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:43100 10 6452 1 2025-10-12 21:12:53.313 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51326 10 6452 1 2025-10-12 21:13:53.738 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48160 10 6452 1 2025-10-12 21:14:54.150 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44624 10 6452 1 2025-10-12 21:10:43.299 00:06:00.445 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 21:10:43.303 00:06:00.440 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 21:15:54.557 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:37498 12 10375 1 2025-10-12 21:16:40.785 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:16:40.655 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:16:40.870 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:16:40.788 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 21:16:40.953 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 21:16:55.033 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38716 10 6452 1 2025-10-12 21:17:55.437 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50286 10 6452 1 2025-10-12 21:18:55.839 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:48592 10 6452 1 2025-10-12 21:19:56.267 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40754 10 6452 1 2025-10-12 21:20:56.679 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48740 10 6452 1 2025-10-12 21:21:40.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 21:21:40.796 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:21:40.823 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:21:40.954 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:21:41.036 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 21:21:57.110 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37302 10 6452 1 2025-10-12 21:17:43.302 00:06:00.446 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 21:17:43.305 00:06:00.441 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 21:22:57.514 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38038 10 6452 1 2025-10-12 21:23:57.928 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:42618 10 6452 1 2025-10-12 21:24:58.352 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43342 10 6452 1 2025-10-12 21:25:58.712 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59356 10 6452 1 2025-10-12 21:26:40.904 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 21:26:41.067 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:26:40.848 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:26:41.106 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:26:41.191 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 21:26:59.119 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49660 10 6452 1 2025-10-12 21:27:59.522 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44888 10 6452 1 2025-10-12 21:28:59.925 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:58794 10 6452 1 2025-10-12 21:24:43.305 00:06:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 21:24:43.306 00:06:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 21:30:00.358 00:00:10.929 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 10 6452 1 2025-10-12 21:31:01.326 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53888 10 6452 1 2025-10-12 21:31:41.360 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 21:31:41.327 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 21:31:41.134 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:31:41.059 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:31:41.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:32:01.730 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35832 10 6452 1 2025-10-12 21:33:02.133 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40702 10 6452 1 2025-10-12 21:34:02.549 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42168 10 6452 1 2025-10-12 21:35:02.913 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59416 10 6452 1 2025-10-12 21:36:03.330 00:00:10.664 TCP 1.101.0.1:3000 -> 23.104.0.1:51760 10 6452 1 2025-10-12 21:36:41.106 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 21:31:43.307 00:06:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 21:36:41.147 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 21:31:43.310 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 21:36:41.215 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:36:40.943 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:36:41.024 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:37:04.035 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40342 10 6452 1 2025-10-12 21:38:04.441 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40468 10 6452 1 2025-10-12 21:39:04.844 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:52302 10 6452 1 2025-10-12 21:40:05.228 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57298 10 6452 1 2025-10-12 21:41:05.597 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42910 10 6452 1 2025-10-12 21:41:41.345 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 21:41:41.443 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:41:41.352 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:41:41.167 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:41:41.249 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 21:42:06.021 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53854 10 6452 1 2025-10-12 21:43:06.380 00:00:11.014 TCP 1.101.0.1:3000 -> 23.104.0.1:40558 10 6452 1 2025-10-12 21:38:43.311 00:06:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 21:38:43.308 00:06:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 21:44:07.435 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42194 10 6452 1 2025-10-12 21:45:07.843 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33602 10 6452 1 2025-10-12 21:46:08.249 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:47728 12 10369 1 2025-10-12 21:46:41.408 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 21:46:41.405 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:46:41.179 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:46:41.521 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:46:41.604 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 21:47:08.726 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54180 10 6452 1 2025-10-12 21:48:09.134 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46222 10 6452 1 2025-10-12 21:49:09.541 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41680 10 6452 1 2025-10-12 21:50:09.942 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50644 10 6452 1 2025-10-12 21:45:43.311 00:06:00.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 21:45:43.311 00:06:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 21:51:10.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40576 10 6452 1 2025-10-12 21:51:41.343 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:51:41.506 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:51:41.437 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 21:51:41.437 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:51:41.588 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 21:52:10.761 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:40364 10 6452 1 2025-10-12 21:53:11.155 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47052 10 6452 1 2025-10-12 21:54:11.570 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49926 10 6452 1 2025-10-12 21:55:11.977 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:48826 10 6452 1 2025-10-12 21:56:12.357 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40098 10 6452 1 2025-10-12 21:56:41.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 21:56:41.480 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 21:56:41.661 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 21:56:41.414 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:56:41.670 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 21:57:12.760 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51294 10 6452 1 2025-10-12 21:52:43.313 00:06:00.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 21:52:43.315 00:06:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 21:58:13.178 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50804 10 6452 1 Summary: total flows: 138, total bytes: 425578, total packets: 1036, avg bps: 915, avg pps: 0, avg bpp: 410 Time window: 2025-10-12 20:56:43 - 2025-10-12 21:58:43 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0043s User: 0.0009s Wall: 0.0018s flows/second: 77485.1 Runtime: 0.0018s