Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 15:58:44.099 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:42216 10 6452 1 2025-10-18 15:59:27.903 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 15:59:27.696 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 15:59:27.439 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 15:59:27.820 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 15:59:27.767 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 15:59:44.470 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45488 10 6452 1 2025-10-18 15:55:46.272 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 16:00:44.887 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57748 12 6556 1 2025-10-18 16:01:45.305 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36076 10 6452 1 2025-10-18 16:02:45.708 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50008 10 6452 1 2025-10-18 16:03:46.111 00:00:10.943 TCP 1.101.0.1:3000 -> 23.104.0.1:60394 10 6452 1 2025-10-18 16:04:28.292 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 16:04:27.994 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:04:27.817 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:04:28.210 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:04:28.115 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 15:59:46.277 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 16:04:47.110 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37434 10 6452 1 2025-10-18 16:05:47.510 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41784 10 6452 1 2025-10-18 16:06:47.915 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56826 10 6452 1 2025-10-18 16:02:46.276 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 16:07:48.326 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37984 10 6452 1 2025-10-18 16:08:48.730 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36072 10 6452 1 2025-10-18 16:09:28.144 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:09:27.868 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:09:28.148 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:09:28.010 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 16:09:28.230 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 16:09:49.133 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42172 10 6452 1 2025-10-18 16:10:49.530 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39020 10 6452 1 2025-10-18 16:06:46.282 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 16:11:49.898 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48186 12 6556 1 2025-10-18 16:12:50.311 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45178 10 6452 1 2025-10-18 16:13:50.716 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:60164 10 6452 1 2025-10-18 16:14:27.986 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:14:27.753 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:14:28.128 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:14:28.077 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 16:14:28.211 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 16:09:46.280 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 16:14:51.147 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33064 10 6452 1 2025-10-18 16:15:51.551 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59746 10 6452 1 2025-10-18 16:16:51.956 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42230 10 6452 1 2025-10-18 16:17:52.316 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49820 10 6452 1 2025-10-18 16:13:46.283 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 16:18:52.721 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57910 10 6452 1 2025-10-18 16:19:28.334 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 16:19:28.189 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:19:28.186 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:19:28.251 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:19:28.120 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 16:19:53.138 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33330 10 6452 1 2025-10-18 16:20:53.543 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39904 10 6452 1 2025-10-18 16:16:46.282 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 16:21:53.952 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44200 10 6452 1 2025-10-18 16:22:54.359 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57074 10 6452 1 2025-10-18 16:23:54.765 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35560 10 6452 1 2025-10-18 16:24:28.181 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:24:27.965 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:24:28.187 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:24:28.091 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 16:24:28.270 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 16:24:55.178 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56612 10 6452 1 2025-10-18 16:20:46.288 00:06:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 16:25:55.580 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43954 10 6452 1 2025-10-18 16:26:55.944 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39094 10 6452 1 2025-10-18 16:27:56.373 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56094 10 6452 1 2025-10-18 16:23:46.288 00:06:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 16:28:56.777 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40612 10 6452 1 2025-10-18 16:29:28.766 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:29:28.533 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:29:28.591 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:29:28.489 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 16:29:28.674 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 16:29:57.196 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44864 10 6452 1 2025-10-18 16:30:57.607 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56718 10 6452 1 2025-10-18 16:31:58.021 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:42046 10 6452 1 2025-10-18 16:27:46.293 00:06:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 16:32:58.383 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45466 10 6452 1 2025-10-18 16:33:58.745 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46984 10 6452 1 2025-10-18 16:34:28.444 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:34:28.253 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:34:28.447 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:34:28.512 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 16:34:28.530 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 16:34:59.171 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42122 10 6452 1 2025-10-18 16:30:46.289 00:06:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 16:35:59.573 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52566 10 6452 1 2025-10-18 16:36:59.974 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56010 10 6452 1 2025-10-18 16:38:00.381 00:00:11.157 TCP 1.101.0.1:3000 -> 23.104.0.1:44520 10 6452 1 2025-10-18 16:39:01.575 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:57150 11 6504 1 2025-10-18 16:39:28.570 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 16:39:28.488 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:39:28.616 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 16:39:28.643 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:39:28.307 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:34:46.299 00:06:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 16:40:02.036 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40764 10 6452 1 2025-10-18 16:41:02.440 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58304 10 6452 1 2025-10-18 16:42:02.847 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:44784 10 6452 1 2025-10-18 16:37:46.296 00:06:00.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 16:43:03.278 00:00:14.117 TCP 1.101.0.1:3000 -> 23.104.0.1:59420 10 6452 1 2025-10-18 16:44:07.439 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54000 10 6452 1 2025-10-18 16:44:28.824 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:44:28.646 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:44:28.541 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:44:28.755 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 16:44:28.623 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 16:45:07.845 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:40236 10 6452 1 2025-10-18 16:46:08.275 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52514 10 6452 1 2025-10-18 16:41:46.301 00:06:00.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 16:47:08.684 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49472 10 6452 1 2025-10-18 16:48:09.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44058 10 6452 1 2025-10-18 16:49:09.518 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36072 10 6452 1 2025-10-18 16:49:29.051 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:49:28.520 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:49:29.048 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:49:28.939 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 16:49:29.130 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 16:44:46.299 00:06:00.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 16:50:09.920 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34162 10 6452 1 2025-10-18 16:51:10.322 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53584 10 6452 1 2025-10-18 16:52:10.722 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57406 10 6452 1 2025-10-18 16:53:11.110 00:00:11.098 TCP 1.101.0.1:3000 -> 23.104.0.1:40790 10 6452 1 2025-10-18 16:48:46.303 00:06:00.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 16:54:29.016 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 16:54:12.244 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49324 10 6452 1 2025-10-18 16:54:28.832 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 16:54:28.571 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:54:28.931 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 16:54:28.838 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 16:55:12.652 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 10 6452 1 2025-10-18 16:56:13.062 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52986 10 6452 1 2025-10-18 16:51:46.301 00:06:00.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 16:57:13.472 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44612 10 6452 1 2025-10-18 16:58:13.873 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48378 10 6452 1 Summary: total flows: 137, total bytes: 417137, total packets: 1023, avg bps: 888, avg pps: 0, avg bpp: 407 Time window: 2025-10-18 15:55:46 - 2025-10-18 16:58:24 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0026s User: 0.0018s Wall: 0.0020s flows/second: 68131.3 Runtime: 0.0020s