Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 10:59:12.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34718 10 6452 1 2025-10-24 11:00:12.540 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52552 10 6452 1 2025-10-24 11:01:12.945 00:00:10.641 TCP 1.101.0.1:3000 -> 23.104.0.1:51404 10 6452 1 2025-10-24 10:56:49.230 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 11:02:15.397 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:02:15.510 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:02:15.401 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:02:15.314 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:02:15.315 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:02:13.623 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60524 10 6452 1 2025-10-24 11:03:14.041 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37678 10 6452 1 2025-10-24 11:04:14.437 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:60092 10 6452 1 2025-10-24 10:59:49.229 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 11:05:14.822 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43678 10 6452 1 2025-10-24 11:06:15.228 00:00:16.116 TCP 1.101.0.1:3000 -> 23.104.0.1:39332 10 6452 1 2025-10-24 11:07:15.494 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:07:15.652 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:07:15.418 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:07:15.492 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:07:15.500 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:07:21.400 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39392 10 6452 1 2025-10-24 11:08:21.800 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56042 10 6452 1 2025-10-24 11:03:49.233 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 11:09:22.208 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58348 10 6452 1 2025-10-24 11:10:22.612 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55608 10 6452 1 2025-10-24 11:11:23.015 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46492 10 6452 1 2025-10-24 11:06:49.232 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 11:12:15.608 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:12:15.527 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:12:15.263 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:12:15.525 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:12:15.525 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:12:23.383 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51496 10 6452 1 2025-10-24 11:13:23.794 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37272 10 6452 1 2025-10-24 11:14:24.201 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39938 10 6452 1 2025-10-24 11:15:24.599 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37712 10 6452 1 2025-10-24 11:10:49.235 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 11:16:24.957 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55822 10 6452 1 2025-10-24 11:17:15.872 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:17:15.765 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:17:15.477 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:17:15.790 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:17:15.909 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:17:25.363 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:51578 10 6452 1 2025-10-24 11:18:25.793 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43136 10 6452 1 2025-10-24 11:13:49.231 00:06:00.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 11:19:26.198 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35690 10 6452 1 2025-10-24 11:20:26.603 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33032 10 6452 1 2025-10-24 11:21:27.007 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35480 10 6452 1 2025-10-24 11:22:15.601 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:22:15.828 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:22:15.964 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:22:15.914 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:22:16.047 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:22:27.406 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54904 10 6452 1 2025-10-24 11:17:49.233 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 11:23:27.804 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:33280 10 6452 1 2025-10-24 11:24:28.183 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34928 10 6452 1 2025-10-24 11:25:28.545 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46034 10 6452 1 2025-10-24 11:20:49.233 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 11:26:28.960 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34578 10 6452 1 2025-10-24 11:27:15.886 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:27:15.847 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:27:15.899 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:27:15.938 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:27:15.981 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:27:29.363 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34864 10 6452 1 2025-10-24 11:28:29.729 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53002 10 6452 1 2025-10-24 11:29:30.131 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47822 10 6452 1 2025-10-24 11:24:49.238 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 11:30:30.536 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42906 10 6452 1 2025-10-24 11:31:30.948 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40682 10 6452 1 2025-10-24 11:32:15.865 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:32:16.253 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:32:16.115 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:32:16.171 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:32:15.990 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:32:31.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35232 10 6452 1 2025-10-24 11:27:49.242 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 11:33:31.754 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47966 10 6452 1 2025-10-24 11:34:32.181 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45668 10 6452 1 2025-10-24 11:35:32.591 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:59558 12 10369 1 2025-10-24 11:36:33.031 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34350 10 6452 1 2025-10-24 11:31:49.245 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 11:37:16.337 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:37:16.169 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:37:16.184 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:37:16.291 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:37:16.421 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:37:33.432 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39014 10 6452 1 2025-10-24 11:38:33.839 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:55632 10 6452 1 2025-10-24 11:39:34.267 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47714 10 6452 1 2025-10-24 11:34:49.245 00:06:00.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 11:40:34.674 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54440 10 6452 1 2025-10-24 11:41:35.104 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42412 10 6452 1 2025-10-24 11:42:15.892 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:42:16.392 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:42:16.399 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:42:16.339 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:42:16.482 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:42:35.507 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46218 10 6452 1 2025-10-24 11:43:35.882 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:55520 10 6452 1 2025-10-24 11:38:49.247 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 11:44:36.261 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43356 10 6452 1 2025-10-24 11:45:36.619 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56986 10 6452 1 2025-10-24 11:41:49.246 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 11:46:37.027 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51804 10 6452 1 2025-10-24 11:47:16.393 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:47:16.307 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:47:16.396 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:47:16.291 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:47:16.480 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:47:37.427 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58058 10 6452 1 2025-10-24 11:48:37.832 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:44582 10 6452 1 2025-10-24 11:49:38.276 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40944 10 6452 1 2025-10-24 11:50:38.673 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:32808 10 6452 1 2025-10-24 11:45:49.250 00:06:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 11:51:39.103 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54376 10 6452 1 2025-10-24 11:52:16.451 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:52:16.494 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:52:16.451 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:52:16.464 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:52:16.534 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:52:39.508 00:00:10.498 TCP 1.101.0.1:3000 -> 23.104.0.1:47164 10 6452 1 2025-10-24 11:53:40.040 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40772 10 6452 1 2025-10-24 11:48:49.248 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 11:54:40.442 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54136 10 6452 1 2025-10-24 11:55:40.844 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:39806 10 6452 1 2025-10-24 11:56:41.275 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46336 10 6452 1 2025-10-24 11:57:16.672 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:57:16.352 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:57:16.588 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:57:16.590 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:57:16.552 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:52:49.254 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 11:57:41.683 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49092 10 6452 1 Summary: total flows: 136, total bytes: 414342, total packets: 1010, avg bps: 890, avg pps: 0, avg bpp: 410 Time window: 2025-10-24 10:56:49 - 2025-10-24 11:58:49 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0046s User: 0.0009s Wall: 0.0017s flows/second: 77799.4 Runtime: 0.0018s