Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 10:59:25.141 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:51810 11 6504 1 2025-10-12 11:00:25.601 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57910 10 6452 1 2025-10-12 11:01:28.504 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:01:28.615 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:01:28.568 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:01:28.568 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:01:28.651 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:01:26.011 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37368 10 6452 1 2025-10-12 11:02:26.403 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58736 10 6452 1 2025-10-12 11:03:26.812 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48858 10 6452 1 2025-10-12 11:04:27.183 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33086 10 6452 1 2025-10-12 10:59:43.003 00:06:00.484 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 11:05:27.546 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39036 10 6452 1 2025-10-12 11:00:43.001 00:06:00.489 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 11:06:29.147 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:06:28.910 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:06:28.832 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:06:29.064 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:06:28.915 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:06:27.952 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:33386 10 6452 1 2025-10-12 11:07:28.376 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58422 10 6452 1 2025-10-12 11:08:28.809 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52258 10 6452 1 2025-10-12 11:09:29.214 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:42086 10 6452 1 2025-10-12 11:10:29.607 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45016 10 6452 1 2025-10-12 11:11:28.809 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:11:28.734 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:11:28.446 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:11:28.727 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:11:28.786 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:11:29.968 00:00:10.721 TCP 1.101.0.1:3000 -> 23.104.0.1:34838 10 6452 1 2025-10-12 11:06:43.039 00:06:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 11:12:30.718 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:38702 10 6452 1 2025-10-12 11:07:43.035 00:06:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 11:13:31.141 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33926 10 6452 1 2025-10-12 11:14:31.545 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47172 10 6452 1 2025-10-12 11:15:31.948 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49998 10 6452 1 2025-10-12 11:16:28.969 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:16:28.789 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:16:28.775 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:16:28.888 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:16:28.998 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:16:32.362 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57244 10 6452 1 2025-10-12 11:17:32.768 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50844 10 6452 1 2025-10-12 11:18:33.177 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41250 10 6452 1 2025-10-12 11:13:43.039 00:06:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 11:14:43.037 00:06:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 11:19:33.577 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:60544 11 6504 1 2025-10-12 11:20:34.033 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43772 10 6452 1 2025-10-12 11:21:28.686 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:21:28.970 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:21:28.699 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:21:28.603 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:21:28.897 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:21:34.442 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34916 10 6452 1 2025-10-12 11:22:34.864 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58590 10 6452 1 2025-10-12 11:23:35.279 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52074 10 6452 1 2025-10-12 11:24:35.685 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47370 10 6452 1 2025-10-12 11:20:43.049 00:06:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 11:25:36.041 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36488 10 6452 1 2025-10-12 11:26:29.080 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:26:28.707 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:26:29.004 00:00:00.049 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:26:28.954 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:26:29.085 00:00:00.050 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:21:43.047 00:06:00.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 11:26:36.446 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60004 10 6452 1 2025-10-12 11:27:36.850 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56096 10 6452 1 2025-10-12 11:28:37.267 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44216 10 6452 1 2025-10-12 11:29:37.678 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53484 10 6452 1 2025-10-12 11:30:38.101 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37968 10 6452 1 2025-10-12 11:31:29.199 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:31:29.189 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:31:28.983 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:31:29.116 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:31:28.991 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:31:38.476 00:00:10.866 TCP 1.101.0.1:3000 -> 23.104.0.1:35964 10 6452 1 2025-10-12 11:27:43.052 00:06:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 11:32:39.382 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60000 10 6452 1 2025-10-12 11:28:43.051 00:06:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 11:33:39.789 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35272 10 6452 1 2025-10-12 11:34:40.196 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45582 10 6452 1 2025-10-12 11:35:40.600 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59998 10 6452 1 2025-10-12 11:36:29.398 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:36:29.262 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:36:29.468 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:36:29.315 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:36:29.196 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:36:41.004 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58448 10 6452 1 2025-10-12 11:37:41.365 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35100 10 6452 1 2025-10-12 11:38:41.728 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34814 10 6452 1 2025-10-12 11:34:43.054 00:06:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 11:39:42.133 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36024 10 6452 1 2025-10-12 11:35:43.052 00:06:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 11:40:42.545 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55658 10 6452 1 2025-10-12 11:41:29.526 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:41:29.347 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:41:29.490 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:41:29.444 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:41:29.350 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:41:42.946 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45536 10 6452 1 2025-10-12 11:42:43.362 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42052 10 6452 1 2025-10-12 11:43:43.768 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37838 10 6452 1 2025-10-12 11:44:44.141 00:00:10.565 TCP 1.101.0.1:3000 -> 23.104.0.1:57856 10 6452 1 2025-10-12 11:45:44.745 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:32994 10 6452 1 2025-10-12 11:46:29.597 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:46:29.510 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:46:29.291 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:46:29.514 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:46:29.426 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:41:43.061 00:06:00.441 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 11:46:45.114 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:53976 10 6452 1 2025-10-12 11:42:43.056 00:06:00.446 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 11:47:45.510 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34366 10 6452 1 2025-10-12 11:48:45.877 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33984 10 6452 1 2025-10-12 11:49:46.282 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51744 10 6452 1 2025-10-12 11:50:46.690 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36266 10 6452 1 2025-10-12 11:51:29.520 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:51:29.543 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:51:29.475 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:51:29.439 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:51:29.555 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:51:47.110 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50784 10 6452 1 2025-10-12 11:52:47.516 00:00:10.689 TCP 1.101.0.1:3000 -> 23.104.0.1:56354 10 6452 1 2025-10-12 11:48:43.061 00:06:00.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 11:53:48.251 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47026 10 6452 1 2025-10-12 11:49:43.058 00:06:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 11:54:48.614 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54348 10 6452 1 2025-10-12 11:55:49.028 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60210 10 6452 1 2025-10-12 11:56:29.730 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 11:56:29.602 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:56:29.690 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 11:56:29.340 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 11:56:29.775 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 11:56:49.391 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35136 10 6452 1 2025-10-12 11:57:49.797 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:51998 10 6452 1 Summary: total flows: 135, total bytes: 409668, total packets: 996, avg bps: 932, avg pps: 0, avg bpp: 411 Time window: 2025-10-12 10:59:25 - 2025-10-12 11:58:00 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0034s User: 0.0017s Wall: 0.0020s flows/second: 65917.5 Runtime: 0.0021s