Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 06:59:14.356 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56308 10 6452 1 2025-10-14 07:00:14.762 00:00:11.191 TCP 1.101.0.1:3000 -> 23.104.0.1:59496 10 6452 1 2025-10-14 07:01:15.997 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47298 10 6452 1 2025-10-14 07:02:21.491 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:02:21.542 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:02:21.485 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:02:21.547 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:02:21.630 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:02:16.395 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36958 10 6452 1 2025-10-14 07:03:16.796 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57088 10 6452 1 2025-10-14 06:59:43.946 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 06:59:43.943 00:05:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 07:04:17.196 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50830 10 6452 1 2025-10-14 07:05:17.606 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38246 10 6452 1 2025-10-14 07:06:18.010 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43816 10 6452 1 2025-10-14 07:07:21.784 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:07:21.713 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:07:21.500 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:07:21.789 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:07:21.871 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:07:18.405 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50270 10 6452 1 2025-10-14 07:08:18.803 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55198 10 6452 1 2025-10-14 07:09:19.211 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35158 10 6452 1 2025-10-14 07:05:43.947 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 07:05:43.947 00:05:00.477 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 07:10:19.615 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43976 10 6452 1 2025-10-14 07:11:20.023 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34556 10 6452 1 2025-10-14 07:12:21.723 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:12:21.637 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:12:21.698 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:12:21.391 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:12:21.640 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:12:20.424 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54208 10 6452 1 2025-10-14 07:13:20.820 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48258 10 6452 1 2025-10-14 07:14:21.249 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42012 10 6452 1 2025-10-14 07:15:21.652 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42372 10 6452 1 2025-10-14 07:11:43.950 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 07:11:43.948 00:05:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 07:16:22.069 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50954 10 6452 1 2025-10-14 07:17:21.961 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:17:21.498 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:17:21.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:17:21.547 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:17:21.869 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:17:22.477 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44528 12 6556 1 2025-10-14 07:18:22.896 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53430 10 6452 1 2025-10-14 07:19:23.308 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44134 10 6452 1 2025-10-14 07:20:23.709 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49550 10 6452 1 2025-10-14 07:21:24.124 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33388 10 6452 1 2025-10-14 07:17:43.962 00:05:00.462 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 07:17:43.960 00:05:00.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 07:22:21.988 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:22:21.948 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:22:21.902 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:22:21.848 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:22:21.931 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:22:24.528 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53938 10 6452 1 2025-10-14 07:23:24.893 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:49536 10 6452 1 2025-10-14 07:24:25.265 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53406 10 6452 1 2025-10-14 07:25:25.682 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:41060 10 6452 1 2025-10-14 07:26:26.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58864 10 6452 1 2025-10-14 07:27:22.054 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:27:21.809 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:27:21.979 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:27:21.655 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:27:21.972 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:27:26.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35872 10 6452 1 2025-10-14 07:23:43.952 00:05:00.474 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 07:23:43.950 00:05:00.479 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 07:28:26.920 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53704 10 6452 1 2025-10-14 07:29:27.338 00:00:10.503 TCP 1.101.0.1:3000 -> 23.104.0.1:41298 10 6452 1 2025-10-14 07:30:27.876 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55014 10 6452 1 2025-10-14 07:31:28.283 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32802 10 6452 1 2025-10-14 07:32:21.972 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:32:22.174 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:32:21.732 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:32:22.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:32:22.301 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:32:28.682 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34100 10 6452 1 2025-10-14 07:33:29.110 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38974 10 6452 1 2025-10-14 07:29:43.952 00:05:00.475 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 07:29:43.950 00:05:00.480 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 07:34:29.470 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60524 10 6452 1 2025-10-14 07:35:29.874 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51292 10 6452 1 2025-10-14 07:36:30.279 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52366 10 6452 1 2025-10-14 07:37:21.986 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:37:21.988 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:37:22.259 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:37:22.174 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:37:22.257 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:37:30.695 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:51898 10 6452 1 2025-10-14 07:38:31.087 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60498 10 6452 1 2025-10-14 07:35:43.953 00:05:00.475 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 07:39:31.485 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50304 10 6452 1 2025-10-14 07:35:43.951 00:05:00.480 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 07:40:31.890 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:44556 10 6452 1 2025-10-14 07:41:32.270 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:38818 12 10375 1 2025-10-14 07:42:22.297 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:42:22.153 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:42:22.150 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:42:22.222 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:42:22.214 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:42:32.710 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55910 10 6452 1 2025-10-14 07:43:33.117 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:32794 10 6452 1 2025-10-14 07:44:33.485 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58762 10 6452 1 2025-10-14 07:45:33.894 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53882 12 6556 1 2025-10-14 07:41:43.955 00:05:00.476 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 07:41:43.958 00:05:00.471 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 07:46:34.312 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56154 10 6452 1 2025-10-14 07:47:22.459 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:47:22.481 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:47:22.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:47:22.322 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:47:22.374 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:47:34.716 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39970 10 6452 1 2025-10-14 07:48:35.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44698 10 6452 1 2025-10-14 07:49:35.512 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53608 10 6452 1 2025-10-14 07:50:35.937 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:37794 10 6452 1 2025-10-14 07:47:43.959 00:05:00.475 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 07:47:43.956 00:05:00.481 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 07:51:36.366 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38586 12 6556 1 2025-10-14 07:52:22.284 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:52:22.524 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:52:22.352 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:52:22.451 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:52:22.606 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:52:36.769 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44292 10 6452 1 2025-10-14 07:53:37.182 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35160 10 6452 1 2025-10-14 07:54:37.545 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35894 10 6452 1 2025-10-14 07:55:37.958 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50000 10 6452 1 2025-10-14 07:56:38.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41060 10 6452 1 2025-10-14 07:57:22.926 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 07:57:23.077 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 07:57:22.955 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:57:22.925 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 07:57:23.010 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 07:53:43.959 00:05:00.474 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 07:57:38.720 00:00:11.073 TCP 1.101.0.1:3000 -> 23.104.0.1:54866 10 6452 1 2025-10-14 07:53:43.957 00:05:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 414783, total packets: 1018, avg bps: 929, avg pps: 0, avg bpp: 407 Time window: 2025-10-14 06:59:14 - 2025-10-14 07:58:44 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0045s User: 0.0011s Wall: 0.0023s flows/second: 60147.3 Runtime: 0.0023s