Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 03:59:13.285 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37786 10 6452 1 2025-10-15 04:00:13.648 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49854 10 6452 1 2025-10-15 04:01:14.056 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53694 10 6452 1 2025-10-15 04:02:14.458 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44936 10 6452 1 2025-10-15 03:57:44.400 00:06:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 04:02:46.900 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:02:46.860 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:02:46.727 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:02:46.817 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:02:46.756 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:03:14.860 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40034 10 6452 1 2025-10-15 04:04:15.276 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33808 10 6452 1 2025-10-15 04:05:15.637 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48204 10 6452 1 2025-10-15 04:00:44.404 00:06:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 04:06:16.039 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58232 10 6452 1 2025-10-15 04:07:16.441 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35918 10 6452 1 2025-10-15 04:07:46.897 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:07:46.927 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:07:46.831 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:07:46.814 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:07:46.751 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:08:16.846 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:32796 10 6452 1 2025-10-15 04:09:17.223 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46116 10 6452 1 2025-10-15 04:04:44.402 00:06:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 04:10:17.623 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43870 10 6452 1 2025-10-15 04:11:18.034 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52680 10 6452 1 2025-10-15 04:12:18.395 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56528 10 6452 1 2025-10-15 04:07:44.406 00:06:00.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 04:12:46.767 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:12:46.777 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:12:46.938 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:12:46.991 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:12:47.022 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:13:18.803 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38498 10 6452 1 2025-10-15 04:14:19.174 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38282 10 6452 1 2025-10-15 04:15:19.576 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60612 10 6452 1 2025-10-15 04:16:19.980 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59104 10 6452 1 2025-10-15 04:11:44.404 00:06:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 04:17:20.405 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45730 10 6452 1 2025-10-15 04:17:46.970 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:17:47.004 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:17:47.069 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:17:46.976 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:17:47.153 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:18:20.803 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:32860 10 6452 1 2025-10-15 04:19:21.222 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58780 10 6452 1 2025-10-15 04:14:44.407 00:06:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 04:20:21.626 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37000 10 6452 1 2025-10-15 04:21:22.041 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60606 10 6452 1 2025-10-15 04:22:22.405 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33320 10 6452 1 2025-10-15 04:22:47.319 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:22:47.150 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:22:47.193 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:22:47.236 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:22:47.383 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:23:22.811 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42492 10 6452 1 2025-10-15 04:18:44.406 00:06:00.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 04:24:23.224 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50476 10 6452 1 2025-10-15 04:25:23.628 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54170 10 6452 1 2025-10-15 04:26:24.033 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57370 10 6452 1 2025-10-15 04:21:44.410 00:06:00.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 04:27:24.451 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47254 10 6452 1 2025-10-15 04:27:47.074 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:27:47.181 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:27:47.167 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:27:47.164 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:27:47.250 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:28:24.853 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46790 10 6452 1 2025-10-15 04:29:25.274 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54534 10 6452 1 2025-10-15 04:30:25.638 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51748 10 6452 1 2025-10-15 04:25:44.409 00:06:00.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 04:31:26.043 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37934 10 6452 1 2025-10-15 04:32:26.446 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35770 10 6452 1 2025-10-15 04:32:47.592 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:32:47.569 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:32:47.305 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:32:47.510 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:32:47.530 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:33:26.851 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:48272 10 6452 1 2025-10-15 04:28:44.412 00:06:00.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 04:34:27.271 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47042 10 6452 1 2025-10-15 04:35:27.677 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48946 10 6452 1 2025-10-15 04:36:28.108 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:60426 12 10369 1 2025-10-15 04:37:28.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33576 10 6452 1 2025-10-15 04:32:44.411 00:06:00.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 04:37:47.422 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:37:47.468 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:37:47.277 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:37:47.339 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:37:47.339 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:38:28.993 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35388 10 6452 1 2025-10-15 04:39:29.357 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58604 10 6452 1 2025-10-15 04:40:29.756 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52310 10 6452 1 2025-10-15 04:35:44.414 00:06:00.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 04:41:30.168 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53354 10 6452 1 2025-10-15 04:42:30.577 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38720 10 6452 1 2025-10-15 04:42:47.724 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:42:47.546 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:42:47.460 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:42:47.640 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:42:47.643 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:43:30.979 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59894 10 6452 1 2025-10-15 04:44:31.386 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42864 10 6452 1 2025-10-15 04:39:44.412 00:06:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 04:45:31.804 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42644 10 6452 1 2025-10-15 04:46:32.206 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:60220 12 10375 1 2025-10-15 04:47:32.645 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54816 10 6452 1 2025-10-15 04:42:44.415 00:06:00.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 04:47:47.664 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:47:47.594 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:47:47.582 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:47:47.582 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:47:47.466 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:48:33.060 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:51438 10 6452 1 2025-10-15 04:49:33.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34494 10 6452 1 2025-10-15 04:50:33.922 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49988 10 6452 1 2025-10-15 04:51:34.289 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57068 10 6452 1 2025-10-15 04:46:44.414 00:06:00.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 04:52:34.657 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54088 10 6452 1 2025-10-15 04:52:47.732 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:52:47.709 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:52:47.804 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:52:47.564 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:52:47.886 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:53:35.023 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35390 10 6452 1 2025-10-15 04:49:44.416 00:06:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-15 04:54:35.396 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55910 10 6452 1 2025-10-15 04:55:35.763 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39524 10 6452 1 2025-10-15 04:56:36.175 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:54320 12 10371 1 2025-10-15 04:57:48.084 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 04:57:47.939 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:57:36.671 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37918 10 6452 1 2025-10-15 04:57:48.079 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 04:57:48.085 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 04:57:48.162 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 04:53:44.416 00:06:00.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-15 04:58:37.103 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49344 10 6452 1 Summary: total flows: 137, total bytes: 428636, total packets: 1024, avg bps: 921, avg pps: 0, avg bpp: 418 Time window: 2025-10-15 03:57:44 - 2025-10-15 04:59:44 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0038s User: 0.0019s Wall: 0.0023s flows/second: 59924.9 Runtime: 0.0023s