Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 15:59:00.384 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39406 10 6452 1 2025-10-02 16:00:00.743 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33422 10 6452 1 2025-10-02 15:55:38.124 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 16:01:01.112 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42060 10 6452 1 2025-10-02 16:01:45.781 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:01:45.831 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:01:45.842 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:01:45.916 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:01:45.981 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:02:01.518 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60660 10 6452 1 2025-10-02 16:03:01.917 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55248 10 6452 1 2025-10-02 16:04:02.319 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57762 10 6452 1 2025-10-02 15:59:38.124 00:06:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 16:05:02.725 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59526 10 6452 1 2025-10-02 16:06:03.137 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41980 10 6452 1 2025-10-02 16:06:45.806 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:06:45.731 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:06:45.821 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:06:45.724 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:06:45.722 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:07:03.544 00:00:10.525 TCP 1.101.0.1:3000 -> 23.104.0.1:56824 10 6452 1 2025-10-02 16:02:38.126 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 16:08:04.120 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60970 10 6452 1 2025-10-02 16:09:04.522 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41010 10 6452 1 2025-10-02 16:10:04.920 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:46308 10 6452 1 2025-10-02 16:11:05.279 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46732 10 6452 1 2025-10-02 16:06:38.124 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 16:11:45.914 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:11:45.724 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:11:45.929 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:11:45.927 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:11:46.013 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:12:05.681 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39608 10 6452 1 2025-10-02 16:13:06.101 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52212 10 6452 1 2025-10-02 16:14:06.466 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52814 10 6452 1 2025-10-02 16:09:38.128 00:06:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 16:15:06.851 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:50216 10 6452 1 2025-10-02 16:16:07.277 00:00:10.825 TCP 1.101.0.1:3000 -> 23.104.0.1:55438 10 6452 1 2025-10-02 16:16:45.927 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:16:46.112 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:16:45.989 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:16:46.154 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:16:46.011 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:17:08.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42590 10 6452 1 2025-10-02 16:18:08.523 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60470 10 6452 1 2025-10-02 16:13:38.127 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 16:19:08.936 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43270 10 6452 1 2025-10-02 16:20:09.350 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37130 10 6452 1 2025-10-02 16:21:09.749 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60424 10 6452 1 2025-10-02 16:16:38.129 00:06:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 16:21:46.206 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:21:46.000 00:00:00.085 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:21:46.139 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:21:46.124 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:21:46.169 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:22:10.152 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56356 10 6452 1 2025-10-02 16:23:10.511 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47622 10 6452 1 2025-10-02 16:24:10.868 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57126 10 6452 1 2025-10-02 16:25:11.272 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57702 10 6452 1 2025-10-02 16:20:38.126 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 16:26:11.630 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44860 10 6452 1 2025-10-02 16:26:45.939 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:26:46.339 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:26:46.196 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:26:46.256 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:26:46.199 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:27:12.026 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60168 10 6452 1 2025-10-02 16:28:12.428 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42554 10 6452 1 2025-10-02 16:23:38.131 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 16:29:12.787 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49276 10 6452 1 2025-10-02 16:30:13.149 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33024 10 6452 1 2025-10-02 16:31:13.562 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48308 10 6452 1 2025-10-02 16:31:46.185 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:31:46.237 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:31:46.136 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:31:46.102 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:31:46.226 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:32:13.926 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45480 10 6452 1 2025-10-02 16:27:38.130 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 16:33:14.339 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47068 10 6452 1 2025-10-02 16:34:14.740 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34554 10 6452 1 2025-10-02 16:35:15.146 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45472 10 6452 1 2025-10-02 16:30:38.131 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 16:36:15.547 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57376 10 6452 1 2025-10-02 16:36:46.485 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:36:46.413 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:36:46.261 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:36:46.402 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:36:46.230 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:37:15.953 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44858 10 6452 1 2025-10-02 16:38:16.364 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48466 10 6452 1 2025-10-02 16:39:16.766 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32848 10 6452 1 2025-10-02 16:34:38.131 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 16:40:17.172 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51966 10 6452 1 2025-10-02 16:41:17.572 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39256 10 6452 1 2025-10-02 16:41:46.722 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:41:46.772 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:41:46.597 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:41:46.638 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:41:46.777 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:42:17.936 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:34364 10 6452 1 2025-10-02 16:37:38.135 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 16:43:18.336 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39244 10 6452 1 2025-10-02 16:44:18.696 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55470 10 6452 1 2025-10-02 16:45:19.067 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41680 10 6452 1 2025-10-02 16:46:19.495 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50584 10 6452 1 2025-10-02 16:41:38.134 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 16:46:46.754 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:46:46.540 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:46:46.495 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:46:46.672 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:46:46.616 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:47:19.901 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52194 10 6452 1 2025-10-02 16:48:20.311 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35612 10 6452 1 2025-10-02 16:49:20.730 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54460 10 6452 1 2025-10-02 16:44:38.135 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 16:50:21.107 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35844 10 6452 1 2025-10-02 16:51:21.470 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39828 10 6452 1 2025-10-02 16:51:46.428 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:51:46.452 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:51:46.516 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:51:46.595 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:51:46.599 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:52:21.826 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54936 10 6452 1 2025-10-02 16:53:22.230 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48138 10 6452 1 2025-10-02 16:48:38.134 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-02 16:54:22.634 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47626 10 6452 1 2025-10-02 16:55:23.065 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57994 10 6452 1 2025-10-02 16:56:23.470 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54308 10 6452 1 2025-10-02 16:51:38.137 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-02 16:56:46.854 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 16:56:46.899 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 16:56:46.751 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:56:46.773 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 16:56:46.773 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 16:57:23.879 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52398 10 6452 1 2025-10-02 16:58:24.284 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45388 10 6452 1 Summary: total flows: 137, total bytes: 416877, total packets: 1018, avg bps: 883, avg pps: 0, avg bpp: 409 Time window: 2025-10-02 15:55:38 - 2025-10-02 16:58:34 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0010s User: 0.0040s Wall: 0.0021s flows/second: 65394.3 Runtime: 0.0021s