Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 07:59:04.528 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46308 10 6452 1 2025-10-18 07:59:18.268 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 07:59:18.194 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 07:59:17.894 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 07:59:18.186 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 07:59:18.238 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:00:04.932 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47348 10 6452 1 2025-10-18 08:01:05.345 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57638 10 6452 1 2025-10-18 07:56:46.122 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:02:05.705 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53458 10 6452 1 2025-10-18 08:03:06.093 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59822 10 6452 1 2025-10-18 08:04:18.177 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:04:18.182 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:04:06.455 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41898 10 6452 1 2025-10-18 08:04:18.089 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:04:17.944 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:04:18.171 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 07:59:46.119 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:05:06.867 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41342 10 6452 1 2025-10-18 08:06:07.237 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45276 10 6452 1 2025-10-18 08:07:07.649 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37580 10 6452 1 2025-10-18 08:08:08.069 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33122 10 6452 1 2025-10-18 08:03:46.123 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:09:18.506 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:09:18.358 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:09:08.470 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:42394 10 6452 1 2025-10-18 08:09:18.278 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:09:18.513 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:09:18.363 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:10:08.903 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41106 12 6556 1 2025-10-18 08:11:09.318 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35424 10 6452 1 2025-10-18 08:06:46.120 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:12:09.723 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58428 10 6452 1 2025-10-18 08:13:10.119 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49716 10 6452 1 2025-10-18 08:14:18.468 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:14:18.233 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:14:18.557 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:14:10.483 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36118 10 6452 1 2025-10-18 08:14:18.404 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:14:18.640 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:15:10.889 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:48944 10 6452 1 2025-10-18 08:10:46.129 00:06:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:16:11.319 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44690 10 6452 1 2025-10-18 08:17:11.725 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:44646 10 6452 1 2025-10-18 08:18:12.107 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37142 10 6452 1 2025-10-18 08:13:46.127 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:19:18.626 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:19:18.588 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:19:18.140 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:19:18.544 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:19:18.587 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:19:12.513 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37994 10 6452 1 2025-10-18 08:20:12.872 00:00:10.543 TCP 1.101.0.1:3000 -> 23.104.0.1:54174 10 6452 1 2025-10-18 08:21:13.456 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49982 10 6452 1 2025-10-18 08:22:13.852 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:57766 10 6452 1 2025-10-18 08:17:46.131 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:23:14.235 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46398 10 6452 1 2025-10-18 08:24:18.681 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:24:18.600 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:24:18.669 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:24:18.599 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:24:18.495 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:24:14.636 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35634 10 6452 1 2025-10-18 08:25:14.996 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37964 10 6452 1 2025-10-18 08:20:46.128 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:26:15.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60468 10 6452 1 2025-10-18 08:27:15.802 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:35236 10 6452 1 2025-10-18 08:28:16.190 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 12 10375 1 2025-10-18 08:29:18.941 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:29:18.816 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:29:18.384 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:29:18.857 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:29:18.576 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:29:16.664 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59054 10 6452 1 2025-10-18 08:24:46.130 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:30:17.101 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55238 10 6452 1 2025-10-18 08:31:17.516 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46202 10 6452 1 2025-10-18 08:32:17.925 00:00:18.476 TCP 1.101.0.1:3000 -> 23.104.0.1:44556 10 6452 1 2025-10-18 08:27:46.129 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:33:26.514 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 10 6452 1 2025-10-18 08:34:18.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:34:18.839 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:34:18.692 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:34:18.670 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:34:18.911 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:34:26.874 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33876 10 6452 1 2025-10-18 08:35:27.282 00:00:11.028 TCP 1.101.0.1:3000 -> 23.104.0.1:55162 10 6452 1 2025-10-18 08:36:28.351 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56146 10 6452 1 2025-10-18 08:31:46.137 00:06:00.278 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:37:28.757 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41522 10 6452 1 2025-10-18 08:38:29.161 00:00:15.880 TCP 1.101.0.1:3000 -> 23.104.0.1:55694 10 6452 1 2025-10-18 08:39:19.048 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:39:18.864 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:39:18.863 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:39:18.965 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:39:18.866 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:39:35.110 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32818 12 6556 1 2025-10-18 08:34:46.136 00:06:00.282 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:40:35.506 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52752 10 6452 1 2025-10-18 08:41:35.907 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42900 12 6556 1 2025-10-18 08:42:36.319 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:41150 12 10369 1 2025-10-18 08:43:36.797 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41288 10 6452 1 2025-10-18 08:38:46.140 00:06:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:44:19.108 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:44:18.920 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:44:18.857 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:44:19.105 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:44:18.940 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:44:37.201 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57280 10 6452 1 2025-10-18 08:45:37.606 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42730 10 6452 1 2025-10-18 08:46:38.018 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55026 10 6452 1 2025-10-18 08:41:46.136 00:06:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:47:38.420 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40464 10 6452 1 2025-10-18 08:48:38.822 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45888 10 6452 1 2025-10-18 08:49:19.199 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:49:19.235 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:49:19.342 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:49:18.990 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:49:19.426 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:49:39.228 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55326 10 6452 1 2025-10-18 08:50:39.630 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57744 10 6452 1 2025-10-18 08:45:46.140 00:06:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:51:40.035 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36940 10 6452 1 2025-10-18 08:52:40.437 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36274 10 6452 1 2025-10-18 08:48:46.139 00:06:00.285 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:53:40.796 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52748 10 6452 1 2025-10-18 08:54:19.311 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:54:19.314 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:54:19.237 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:54:19.229 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:54:19.388 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:54:41.205 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58284 10 6452 1 2025-10-18 08:55:41.613 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49182 10 6452 1 2025-10-18 08:56:42.018 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49542 10 6452 1 2025-10-18 08:52:46.143 00:06:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:57:42.413 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37476 10 6452 1 Summary: total flows: 136, total bytes: 418577, total packets: 1018, avg bps: 900, avg pps: 0, avg bpp: 411 Time window: 2025-10-18 07:56:46 - 2025-10-18 08:58:46 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0019s User: 0.0028s Wall: 0.0027s flows/second: 51320.3 Runtime: 0.0027s