Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 03:59:06.110 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33288 10 6452 1 2025-10-11 04:00:06.514 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32990 10 6452 1 2025-10-11 03:55:42.408 00:06:00.414 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 04:00:51.230 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:00:51.011 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:00:51.241 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:00:51.148 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:00:51.228 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:01:06.917 00:00:10.462 TCP 1.101.0.1:3000 -> 23.104.0.1:49830 12 10375 1 2025-10-11 04:02:07.423 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55048 10 6452 1 2025-10-11 04:03:07.858 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41638 10 6452 1 2025-10-11 04:04:08.284 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52262 10 6452 1 2025-10-11 04:05:08.701 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54842 10 6452 1 2025-10-11 04:00:42.412 00:06:00.409 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 04:05:51.383 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:05:51.297 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:05:51.215 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:05:51.300 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:05:51.246 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:06:09.129 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45840 10 6452 1 2025-10-11 04:07:09.541 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33586 10 6452 1 2025-10-11 04:02:42.410 00:06:00.414 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 04:08:09.944 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43012 10 6452 1 2025-10-11 04:09:10.361 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52262 10 6452 1 2025-10-11 04:10:10.763 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:44708 10 6452 1 2025-10-11 04:10:51.661 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:10:51.630 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:10:51.532 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:10:51.578 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:10:51.516 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:11:11.133 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41414 10 6452 1 2025-10-11 04:12:11.498 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34338 10 6452 1 2025-10-11 04:07:42.414 00:06:00.409 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 04:13:11.898 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:47920 10 6452 1 2025-10-11 04:14:12.275 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33058 10 6452 1 2025-10-11 04:09:42.410 00:06:00.414 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 04:15:12.680 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 10 6452 1 2025-10-11 04:15:51.535 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:15:51.558 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:15:51.432 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:15:51.508 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:15:51.516 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:16:13.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52996 12 6556 1 2025-10-11 04:17:13.513 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:57212 10 6452 1 2025-10-11 04:18:13.925 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50930 10 6452 1 2025-10-11 04:19:14.338 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34750 10 6452 1 2025-10-11 04:14:42.412 00:06:00.411 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 04:20:14.739 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43786 10 6452 1 2025-10-11 04:20:51.632 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:20:51.358 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:20:51.461 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:20:51.551 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:20:51.553 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:21:15.150 00:00:16.714 TCP 1.101.0.1:3000 -> 23.104.0.1:49350 10 6452 1 2025-10-11 04:16:42.411 00:06:00.416 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 04:22:21.906 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38992 12 6556 1 2025-10-11 04:23:22.313 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33700 10 6452 1 2025-10-11 04:24:22.714 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47018 10 6452 1 2025-10-11 04:25:23.119 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59162 10 6452 1 2025-10-11 04:25:51.682 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:25:51.509 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:25:51.357 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:25:51.685 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:25:51.440 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:26:23.528 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49918 10 6452 1 2025-10-11 04:21:42.414 00:06:00.412 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 04:27:23.888 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51338 10 6452 1 2025-10-11 04:28:24.304 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38956 10 6452 1 2025-10-11 04:23:42.412 00:06:00.417 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 04:29:24.714 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57346 10 6452 1 2025-10-11 04:30:25.105 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46130 10 6452 1 2025-10-11 04:30:51.927 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:30:51.752 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:30:52.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:30:52.339 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:30:52.300 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:31:25.513 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47574 10 6452 1 2025-10-11 04:32:25.882 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50746 12 6556 1 2025-10-11 04:33:26.299 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34504 10 6452 1 2025-10-11 04:28:42.425 00:06:00.402 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 04:34:26.703 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:35984 10 6452 1 2025-10-11 04:35:27.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59118 10 6452 1 2025-10-11 04:30:42.423 00:06:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 04:35:52.071 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:35:51.940 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:35:51.911 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:35:51.989 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:35:51.818 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:36:27.512 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47788 10 6452 1 2025-10-11 04:37:27.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51090 10 6452 1 2025-10-11 04:38:28.320 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58140 10 6452 1 2025-10-11 04:39:28.715 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34264 10 6452 1 2025-10-11 04:40:29.106 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56956 10 6452 1 2025-10-11 04:35:42.426 00:06:00.402 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 04:40:52.040 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:40:51.965 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:40:51.802 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:40:51.958 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:40:51.903 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:41:29.510 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33036 10 6452 1 2025-10-11 04:42:29.886 00:00:10.914 TCP 1.101.0.1:3000 -> 23.104.0.1:53814 10 6452 1 2025-10-11 04:37:42.423 00:06:00.408 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 04:43:30.855 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43602 10 6452 1 2025-10-11 04:44:31.273 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40450 10 6452 1 2025-10-11 04:45:31.675 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:59748 10 6452 1 2025-10-11 04:45:52.113 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:45:52.091 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:45:52.066 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:45:52.153 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:45:52.149 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:46:32.050 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47844 10 6452 1 2025-10-11 04:47:32.461 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43184 10 6452 1 2025-10-11 04:42:42.428 00:06:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 04:48:32.867 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50758 10 6452 1 2025-10-11 04:49:33.275 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38474 10 6452 1 2025-10-11 04:44:42.425 00:06:00.408 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 04:50:33.700 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51342 10 6452 1 2025-10-11 04:50:52.186 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:50:52.254 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:50:52.127 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:50:52.103 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:50:52.334 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:51:34.113 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38812 10 6452 1 2025-10-11 04:52:34.476 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47764 10 6452 1 2025-10-11 04:53:34.881 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38618 10 6452 1 2025-10-11 04:54:35.283 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33762 10 6452 1 2025-10-11 04:49:42.432 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 04:55:35.687 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36184 10 6452 1 2025-10-11 04:55:52.473 00:00:00.016 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 04:55:52.523 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 04:55:52.406 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:55:52.378 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 04:55:52.368 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 04:51:42.430 00:06:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 04:56:36.059 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-10-11 04:57:36.477 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49266 10 6452 1 2025-10-11 04:58:36.878 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54150 10 6452 1 Summary: total flows: 137, total bytes: 421112, total packets: 1026, avg bps: 890, avg pps: 0, avg bpp: 410 Time window: 2025-10-11 03:55:42 - 2025-10-11 04:58:47 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0036s User: 0.0018s Wall: 0.0016s flows/second: 85305.8 Runtime: 0.0016s