Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 06:59:19.314 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56208 10 6452 1 2025-10-17 07:00:19.714 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56728 10 6452 1 2025-10-17 07:01:20.135 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51388 10 6452 1 2025-10-17 07:02:20.540 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53658 10 6452 1 2025-10-17 07:03:20.944 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53870 10 6452 1 2025-10-17 07:03:48.183 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 07:03:48.209 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:03:47.869 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:03:48.012 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:03:48.101 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:04:21.356 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48844 10 6452 1 2025-10-17 06:59:45.533 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 07:05:21.756 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41888 10 6452 1 2025-10-17 07:00:45.530 00:06:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 07:06:22.179 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54246 10 6452 1 2025-10-17 07:07:22.583 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47698 10 6452 1 2025-10-17 07:08:22.985 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51124 10 6452 1 2025-10-17 07:08:48.341 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 07:08:48.265 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:08:48.170 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:08:48.284 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:08:48.257 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:09:23.387 00:00:10.862 TCP 1.101.0.1:3000 -> 23.104.0.1:39830 10 6452 1 2025-10-17 07:10:24.293 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53724 10 6452 1 2025-10-17 07:11:24.691 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44140 10 6452 1 2025-10-17 07:06:45.535 00:06:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 07:12:25.110 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:38694 10 6452 1 2025-10-17 07:07:45.531 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 07:13:25.494 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54616 10 6452 1 2025-10-17 07:13:48.410 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 07:13:48.245 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:13:48.387 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:13:48.154 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:13:48.327 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:14:25.906 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49804 12 6556 1 2025-10-17 07:15:26.318 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47998 10 6452 1 2025-10-17 07:16:26.715 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60752 10 6452 1 2025-10-17 07:17:27.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49162 10 6452 1 2025-10-17 07:18:27.511 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36176 10 6452 1 2025-10-17 07:18:48.407 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 07:18:48.320 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:13:45.535 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 07:18:48.427 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:18:48.356 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:18:48.325 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:19:27.870 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44434 10 6452 1 2025-10-17 07:14:45.532 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 07:20:28.283 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34148 10 6452 1 2025-10-17 07:21:28.648 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46108 10 6452 1 2025-10-17 07:22:29.068 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:49716 12 10375 1 2025-10-17 07:23:29.546 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-10-17 07:23:48.532 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 07:23:48.611 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:23:48.608 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:23:48.574 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:23:48.448 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:24:29.918 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:44696 10 6452 1 2025-10-17 07:25:30.279 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57174 10 6452 1 2025-10-17 07:20:45.535 00:06:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 07:26:30.644 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35754 10 6452 1 2025-10-17 07:21:45.534 00:06:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 07:27:31.055 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:34358 12 10369 1 2025-10-17 07:28:31.537 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46400 10 6452 1 2025-10-17 07:28:48.833 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:28:48.780 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:28:48.778 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:28:48.738 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:28:48.916 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 07:29:31.935 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41338 10 6452 1 2025-10-17 07:30:32.358 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34844 10 6452 1 2025-10-17 07:31:32.758 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41320 10 6452 1 2025-10-17 07:32:33.172 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54716 10 6452 1 2025-10-17 07:27:45.543 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 07:33:33.574 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47368 10 6452 1 2025-10-17 07:33:48.846 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 07:28:45.535 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 07:33:48.585 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:33:48.573 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:33:48.674 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:33:48.764 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:34:33.983 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36222 10 6452 1 2025-10-17 07:35:34.397 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40282 10 6452 1 2025-10-17 07:36:34.800 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:56422 10 6452 1 2025-10-17 07:37:35.185 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38076 10 6452 1 2025-10-17 07:38:48.907 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 07:38:48.973 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:38:48.696 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:38:35.545 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51842 10 6452 1 2025-10-17 07:38:48.884 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:38:48.825 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:34:45.539 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 07:39:35.908 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57222 10 6452 1 2025-10-17 07:40:36.316 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42238 10 6452 1 2025-10-17 07:35:45.537 00:06:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 07:41:36.679 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50080 10 6452 1 2025-10-17 07:42:37.110 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46322 10 6452 1 2025-10-17 07:43:49.013 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 07:43:48.649 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:43:37.470 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49230 10 6452 1 2025-10-17 07:43:48.769 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:43:48.765 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:43:48.929 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:44:37.875 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49978 10 6452 1 2025-10-17 07:45:38.277 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47332 10 6452 1 2025-10-17 07:46:38.679 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41556 10 6452 1 2025-10-17 07:41:45.541 00:06:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 07:47:39.066 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45818 10 6452 1 2025-10-17 07:42:45.539 00:06:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 07:48:49.186 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:48:49.180 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:48:48.880 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:48:48.859 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:48:39.474 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35928 10 6452 1 2025-10-17 07:48:48.942 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 07:49:39.835 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:60578 10 6452 1 2025-10-17 07:50:40.221 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53200 10 6452 1 2025-10-17 07:51:40.626 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46926 10 6452 1 2025-10-17 07:52:41.027 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41546 10 6452 1 2025-10-17 07:53:49.126 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:48:45.543 00:06:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 07:53:49.125 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:53:48.918 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:53:49.195 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:53:49.278 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 07:53:41.384 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35520 10 6452 1 2025-10-17 07:49:45.541 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 07:54:41.789 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50668 10 6452 1 2025-10-17 07:55:42.218 00:00:10.425 TCP 1.101.0.1:3000 -> 23.104.0.1:36604 11 6504 1 2025-10-17 07:56:42.682 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:43644 10 6452 1 2025-10-17 07:57:43.041 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34158 10 6452 1 2025-10-17 07:58:49.281 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 07:58:49.386 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 07:58:49.103 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:58:49.272 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 07:58:49.354 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 135, total bytes: 417560, total packets: 1001, avg bps: 935, avg pps: 0, avg bpp: 417 Time window: 2025-10-17 06:59:19 - 2025-10-17 07:58:49 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0036s User: 0.0009s Wall: 0.0027s flows/second: 50524.8 Runtime: 0.0027s