Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 00:58:57.468 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50574 10 6452 1 2025-10-15 00:59:57.869 00:00:10.547 TCP 1.101.0.1:3000 -> 23.104.0.1:35656 10 6452 1 2025-10-15 00:55:44.333 00:06:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 01:00:58.454 00:00:10.779 TCP 1.101.0.1:3000 -> 23.104.0.1:39598 10 6452 1 2025-10-15 01:01:59.272 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37484 10 6452 1 2025-10-15 01:02:43.369 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:02:43.212 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:02:42.933 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:02:43.287 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:02:43.099 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:02:59.673 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44274 10 6452 1 2025-10-15 00:58:44.336 00:06:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 01:04:00.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52824 10 6452 1 2025-10-15 01:05:00.518 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43362 10 6452 1 2025-10-15 01:06:00.938 00:00:10.457 TCP 1.101.0.1:3000 -> 23.104.0.1:46298 12 10369 1 2025-10-15 01:07:01.435 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45896 10 6452 1 2025-10-15 01:02:44.334 00:06:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 01:07:43.723 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:07:43.610 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:07:43.175 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:07:43.641 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:07:43.392 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:08:01.802 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55944 10 6452 1 2025-10-15 01:09:02.211 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36340 10 6452 1 2025-10-15 01:10:02.620 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56692 10 6452 1 2025-10-15 01:05:44.339 00:06:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 01:11:03.023 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38754 10 6452 1 2025-10-15 01:12:03.385 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52072 10 6452 1 2025-10-15 01:12:43.504 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:12:43.394 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:12:43.194 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:12:43.285 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:12:43.277 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:13:03.793 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39582 10 6452 1 2025-10-15 01:14:04.203 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:52932 10 6452 1 2025-10-15 01:09:44.335 00:06:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 01:15:04.634 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36562 10 6452 1 2025-10-15 01:16:04.995 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:45008 10 6452 1 2025-10-15 01:17:05.410 00:00:10.693 TCP 1.101.0.1:3000 -> 23.104.0.1:56992 10 6452 1 2025-10-15 01:17:43.543 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:17:43.470 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:17:43.220 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:17:43.462 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:17:43.292 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:12:44.339 00:06:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 01:18:06.143 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53746 10 6452 1 2025-10-15 01:19:06.546 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45964 10 6452 1 2025-10-15 01:20:06.953 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49730 10 6452 1 2025-10-15 01:21:07.358 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37716 10 6452 1 2025-10-15 01:16:44.337 00:06:00.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 01:22:07.761 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44490 10 6452 1 2025-10-15 01:22:43.941 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:22:43.483 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:22:43.197 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:22:43.859 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:22:43.765 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:23:08.185 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34358 10 6452 1 2025-10-15 01:24:08.597 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39332 10 6452 1 2025-10-15 01:19:44.341 00:06:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 01:25:09.001 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43162 10 6452 1 2025-10-15 01:26:09.409 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43940 10 6452 1 2025-10-15 01:27:09.814 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36116 10 6452 1 2025-10-15 01:27:43.665 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:27:43.610 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:27:43.730 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:27:43.670 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:27:43.814 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:28:10.220 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47198 10 6452 1 2025-10-15 01:23:44.338 00:06:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 01:29:10.630 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43908 10 6452 1 2025-10-15 01:30:11.001 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53692 10 6452 1 2025-10-15 01:31:11.404 00:00:11.026 TCP 1.101.0.1:3000 -> 23.104.0.1:59564 10 6452 1 2025-10-15 01:26:44.341 00:06:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 01:32:12.456 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59640 10 6452 1 2025-10-15 01:32:43.668 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:32:43.777 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:32:43.589 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:32:43.759 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:32:43.670 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:33:12.858 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56796 10 6452 1 2025-10-15 01:34:13.276 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56224 10 6452 1 2025-10-15 01:35:13.678 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47096 10 6452 1 2025-10-15 01:30:44.339 00:06:00.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 01:36:14.102 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:44126 12 10375 1 2025-10-15 01:37:14.580 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33142 10 6452 1 2025-10-15 01:37:43.946 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:37:43.863 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:37:43.571 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:37:43.863 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:37:43.773 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:38:14.987 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35608 10 6452 1 2025-10-15 01:33:44.342 00:06:00.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 01:39:15.395 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35650 10 6452 1 2025-10-15 01:40:15.756 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:56408 10 6452 1 2025-10-15 01:41:16.181 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50524 10 6452 1 2025-10-15 01:42:16.584 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37346 10 6452 1 2025-10-15 01:37:44.345 00:06:00.460 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 01:42:43.876 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:42:44.009 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:42:43.945 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:42:43.793 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:42:43.959 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:43:16.989 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38700 10 6452 1 2025-10-15 01:44:17.390 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 10 6452 1 2025-10-15 01:45:17.793 00:00:10.586 TCP 1.101.0.1:3000 -> 23.104.0.1:39512 10 6452 1 2025-10-15 01:40:44.348 00:06:00.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 01:46:18.415 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:55804 12 10375 1 2025-10-15 01:47:18.892 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34832 10 6452 1 2025-10-15 01:47:44.064 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:47:44.152 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:47:44.121 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:47:43.982 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:47:44.100 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:48:19.312 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50414 10 6452 1 2025-10-15 01:49:19.724 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33696 10 6452 1 2025-10-15 01:44:44.345 00:06:00.460 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 01:50:20.135 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59642 10 6452 1 2025-10-15 01:51:20.540 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49978 10 6452 1 2025-10-15 01:52:20.942 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6452 1 2025-10-15 01:52:44.023 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:52:44.038 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:52:43.944 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:52:43.940 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:52:43.938 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:47:44.349 00:06:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 01:53:21.321 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40688 10 6452 1 2025-10-15 01:54:21.721 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59918 10 6452 1 2025-10-15 01:55:22.134 00:00:11.080 TCP 1.101.0.1:3000 -> 23.104.0.1:54376 10 6452 1 2025-10-15 01:56:23.257 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36740 10 6452 1 2025-10-15 01:51:44.347 00:06:00.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 01:57:23.657 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47548 10 6452 1 2025-10-15 01:57:44.111 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:57:44.257 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 01:57:44.260 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 01:57:43.975 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 01:57:44.194 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 01:58:24.069 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59452 10 6452 1 Summary: total flows: 137, total bytes: 428640, total packets: 1024, avg bps: 909, avg pps: 0, avg bpp: 418 Time window: 2025-10-15 00:55:44 - 2025-10-15 01:58:34 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0046s User: 0.0012s Wall: 0.0020s flows/second: 70186.8 Runtime: 0.0020s