Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 21:58:53.386 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37908 10 6452 1 2025-10-15 21:59:53.752 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45400 10 6452 1 2025-10-15 22:00:54.156 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44272 10 6452 1 2025-10-15 21:57:44.779 00:05:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 22:01:54.518 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46660 12 6556 1 2025-10-15 22:03:08.429 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:03:08.420 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:03:08.326 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:02:54.929 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:48720 10 6452 1 2025-10-15 22:03:08.281 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:03:08.511 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:59:44.777 00:05:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 22:03:55.366 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49764 10 6452 1 2025-10-15 22:04:55.768 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:41248 10 6452 1 2025-10-15 22:05:56.191 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59632 10 6452 1 2025-10-15 22:06:56.596 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52898 10 6452 1 2025-10-15 22:03:44.782 00:05:00.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 22:08:08.332 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:08:08.422 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:08:08.368 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:07:56.958 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37702 10 6452 1 2025-10-15 22:08:08.340 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:08:08.424 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 22:08:57.377 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40530 10 6452 1 2025-10-15 22:05:44.780 00:05:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 22:09:57.743 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59504 10 6452 1 2025-10-15 22:10:58.115 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52030 10 6452 1 2025-10-15 22:11:58.515 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55852 10 6452 1 2025-10-15 22:13:08.724 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 22:13:08.587 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:13:08.581 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:12:58.920 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52290 10 6452 1 2025-10-15 22:13:08.545 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:13:08.641 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:09:44.784 00:05:00.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 22:13:59.340 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43046 10 6452 1 2025-10-15 22:14:59.749 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37980 10 6452 1 2025-10-15 22:11:44.783 00:05:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 22:16:00.168 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43582 10 6452 1 2025-10-15 22:17:00.570 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58776 10 6452 1 2025-10-15 22:18:08.537 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:18:08.535 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:18:08.576 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:18:08.759 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:18:08.844 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 22:18:00.975 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51776 10 6452 1 2025-10-15 22:19:01.384 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:42674 10 6452 1 2025-10-15 22:15:44.785 00:05:00.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 22:20:01.761 00:00:11.060 TCP 1.101.0.1:3000 -> 23.104.0.1:54846 10 6452 1 2025-10-15 22:21:02.863 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40036 10 6452 1 2025-10-15 22:17:44.781 00:05:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 22:22:03.288 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41618 10 6452 1 2025-10-15 22:23:08.895 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 22:23:08.732 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:23:09.044 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:23:08.705 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:23:08.812 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:23:03.686 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36108 10 6452 1 2025-10-15 22:24:04.137 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56778 10 6452 1 2025-10-15 22:25:04.543 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34594 10 6452 1 2025-10-15 22:21:44.785 00:05:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 22:26:04.948 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:49580 10 6452 1 2025-10-15 22:27:05.325 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42180 10 6452 1 2025-10-15 22:23:44.783 00:05:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 22:28:08.885 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:28:08.604 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:28:08.683 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:28:08.696 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:28:08.789 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 22:28:05.730 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46096 10 6452 1 2025-10-15 22:29:06.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33050 10 6452 1 2025-10-15 22:30:06.552 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58452 10 6452 1 2025-10-15 22:31:06.915 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41036 10 6452 1 2025-10-15 22:27:44.786 00:05:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 22:32:07.320 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:55014 12 10369 1 2025-10-15 22:33:09.012 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:33:08.899 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:33:09.039 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:33:09.012 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:33:09.121 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 22:33:07.795 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43802 10 6452 1 2025-10-15 22:29:44.784 00:05:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 22:34:08.153 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55946 10 6452 1 2025-10-15 22:35:08.566 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33842 10 6452 1 2025-10-15 22:36:08.968 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36950 10 6452 1 2025-10-15 22:37:09.365 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:46258 10 6452 1 2025-10-15 22:33:44.795 00:05:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 22:38:09.234 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:38:09.239 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:38:09.233 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:38:09.305 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:38:09.316 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 22:38:09.762 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:52834 10 6452 1 2025-10-15 22:39:10.133 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50514 10 6452 1 2025-10-15 22:35:44.792 00:05:00.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 22:40:10.542 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41980 10 6452 1 2025-10-15 22:41:10.953 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44450 10 6452 1 2025-10-15 22:42:11.389 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50708 10 6452 1 2025-10-15 22:43:09.194 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:43:09.304 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:43:09.209 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:43:09.415 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:43:09.498 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 22:43:11.798 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33752 10 6452 1 2025-10-15 22:39:44.795 00:05:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 22:44:12.206 00:00:10.795 TCP 1.101.0.1:3000 -> 23.104.0.1:60514 10 6452 1 2025-10-15 22:45:13.041 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56360 10 6452 1 2025-10-15 22:41:44.795 00:05:00.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 22:46:13.445 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41398 10 6452 1 2025-10-15 22:47:13.852 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33822 10 6452 1 2025-10-15 22:48:09.598 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 22:48:09.461 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:48:09.391 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:48:09.515 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:48:09.370 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:48:14.271 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50142 10 6452 1 2025-10-15 22:49:14.677 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43212 10 6452 1 2025-10-15 22:45:44.798 00:05:00.430 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 22:50:15.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59294 10 6452 1 2025-10-15 22:51:15.515 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55242 10 6452 1 2025-10-15 22:47:44.794 00:05:00.436 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 22:52:15.922 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:58916 10 6452 1 2025-10-15 22:53:09.379 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:53:09.385 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:53:09.454 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:53:09.542 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:53:09.624 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 22:53:16.302 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44392 12 6556 1 2025-10-15 22:54:16.707 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57474 10 6452 1 2025-10-15 22:55:17.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42728 10 6452 1 2025-10-15 22:51:44.798 00:05:00.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 22:56:17.518 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:40292 10 6452 1 2025-10-15 22:57:17.951 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59650 10 6452 1 2025-10-15 22:53:44.796 00:05:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 22:58:09.464 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 22:58:09.539 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:58:09.460 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 22:58:09.529 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 22:58:09.543 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 22:58:18.359 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38034 10 6452 1 Summary: total flows: 140, total bytes: 421125, total packets: 1026, avg bps: 920, avg pps: 0, avg bpp: 410 Time window: 2025-10-15 21:57:44 - 2025-10-15 22:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0031s User: 0.0031s Wall: 0.0021s flows/second: 65881.6 Runtime: 0.0021s