Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 18:58:47.187 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59564 10 6452 1 2025-10-12 18:59:47.594 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56448 10 6452 1 2025-10-12 18:55:43.265 00:06:00.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 19:00:48.003 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:37658 10 6452 1 2025-10-12 19:01:38.096 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:01:37.991 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:01:38.102 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:01:38.101 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:01:38.185 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 18:56:43.262 00:06:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 19:01:48.437 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49052 10 6452 1 2025-10-12 19:02:48.847 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:50036 10 6452 1 2025-10-12 19:03:49.227 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60910 10 6452 1 2025-10-12 19:04:49.630 00:00:11.035 TCP 1.101.0.1:3000 -> 23.104.0.1:39870 10 6452 1 2025-10-12 19:05:50.704 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39846 10 6452 1 2025-10-12 19:06:38.416 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 19:06:38.572 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:06:38.273 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:06:38.334 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:06:38.574 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:06:51.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52196 10 6452 1 2025-10-12 19:02:43.266 00:06:00.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 19:07:51.518 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60092 10 6452 1 2025-10-12 19:03:43.264 00:06:00.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 19:08:51.924 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40726 10 6452 1 2025-10-12 19:09:52.345 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53174 12 6556 1 2025-10-12 19:10:52.751 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:42480 10 6452 1 2025-10-12 19:11:38.688 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 19:11:38.284 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:11:38.370 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:11:38.604 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:11:38.602 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:11:53.181 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58056 10 6452 1 2025-10-12 19:12:53.578 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47068 10 6452 1 2025-10-12 19:13:53.982 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35876 10 6452 1 2025-10-12 19:09:43.268 00:06:00.428 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 19:14:54.344 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51472 10 6452 1 2025-10-12 19:10:43.266 00:06:00.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 19:15:54.708 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46410 10 6452 1 2025-10-12 19:16:38.447 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 19:16:38.485 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:16:38.318 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:16:38.364 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:16:38.531 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:16:55.116 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33698 10 6452 1 2025-10-12 19:17:55.518 00:00:19.032 TCP 1.101.0.1:3000 -> 23.104.0.1:45670 10 6452 1 2025-10-12 19:19:04.588 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47696 10 6452 1 2025-10-12 19:20:04.990 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43218 10 6452 1 2025-10-12 19:21:05.399 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:51708 12 10369 1 2025-10-12 19:21:38.515 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 19:21:38.608 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:21:38.453 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:21:38.434 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:21:38.573 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:16:43.270 00:06:00.430 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 19:22:05.879 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59552 10 6452 1 2025-10-12 19:17:43.267 00:06:00.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 19:23:06.283 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42248 10 6452 1 2025-10-12 19:24:06.688 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58984 10 6452 1 2025-10-12 19:25:07.053 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38988 10 6452 1 2025-10-12 19:26:07.461 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44518 10 6452 1 2025-10-12 19:26:38.825 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 19:26:38.610 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:26:38.376 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:26:38.743 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:26:38.526 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:27:07.864 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56484 10 6452 1 2025-10-12 19:28:08.275 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34296 10 6452 1 2025-10-12 19:23:43.273 00:06:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 19:29:08.677 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60136 10 6452 1 2025-10-12 19:24:43.267 00:06:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 19:30:09.109 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39938 10 6452 1 2025-10-12 19:31:09.516 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:50200 12 10375 1 2025-10-12 19:31:38.994 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 19:31:38.893 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:31:38.727 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:31:38.911 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:31:38.840 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:32:09.996 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40100 10 6452 1 2025-10-12 19:33:10.400 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57084 10 6452 1 2025-10-12 19:34:10.860 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:34138 10 6452 1 2025-10-12 19:35:11.234 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41532 10 6452 1 2025-10-12 19:30:43.270 00:06:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 19:36:11.589 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39746 10 6452 1 2025-10-12 19:36:38.895 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 19:36:38.803 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:36:38.764 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:36:38.812 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:36:38.876 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:31:43.268 00:06:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 19:37:11.994 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54460 10 6452 1 2025-10-12 19:38:12.407 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54724 10 6452 1 2025-10-12 19:39:12.812 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33050 10 6452 1 2025-10-12 19:40:13.223 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42492 10 6452 1 2025-10-12 19:41:13.632 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46464 10 6452 1 2025-10-12 19:41:38.891 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 19:41:38.812 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:41:38.814 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:41:38.809 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:41:38.810 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:42:14.030 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60506 10 6452 1 2025-10-12 19:37:43.272 00:06:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 19:43:14.435 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44074 10 6452 1 2025-10-12 19:38:43.269 00:06:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 19:44:14.838 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:43262 10 6452 1 2025-10-12 19:45:15.260 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36586 10 6452 1 2025-10-12 19:46:15.668 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:34754 11 6504 1 2025-10-12 19:46:38.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:46:38.975 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:46:39.156 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:46:39.144 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:46:39.240 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 19:47:16.129 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60412 10 6452 1 2025-10-12 19:48:16.533 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49398 10 6452 1 2025-10-12 19:49:16.900 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46752 10 6452 1 2025-10-12 19:44:43.273 00:06:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 19:50:17.314 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58112 10 6452 1 2025-10-12 19:45:43.273 00:06:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 19:51:17.675 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55042 10 6452 1 2025-10-12 19:51:39.158 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:51:38.949 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:51:39.099 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:51:38.908 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:51:39.183 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 19:52:18.105 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33736 10 6452 1 2025-10-12 19:53:18.503 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34716 10 6452 1 2025-10-12 19:54:18.910 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57100 10 6452 1 2025-10-12 19:55:19.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47030 10 6452 1 2025-10-12 19:56:19.726 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48060 10 6452 1 2025-10-12 19:56:39.297 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 19:56:39.371 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 19:56:39.079 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:56:39.214 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 19:56:39.214 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 19:51:43.274 00:06:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 19:57:20.135 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35532 10 6452 1 2025-10-12 19:52:43.273 00:06:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 19:58:20.541 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59752 10 6452 1 Summary: total flows: 138, total bytes: 425734, total packets: 1039, avg bps: 900, avg pps: 0, avg bpp: 409 Time window: 2025-10-12 18:55:43 - 2025-10-12 19:58:43 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0036s User: 0.0009s Wall: 0.0022s flows/second: 62730.5 Runtime: 0.0022s