Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 03:58:42.016 00:00:10.472 TCP 1.101.0.1:3000 -> 23.104.0.1:32976 10 6452 1 2025-10-26 03:59:42.530 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42216 10 6452 1 2025-10-26 04:00:42.933 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34112 10 6452 1 2025-10-26 03:57:50.194 00:04:00.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 03:57:50.198 00:04:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 04:01:43.343 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44936 10 6452 1 2025-10-26 04:02:43.755 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45600 10 6452 1 2025-10-26 04:03:04.831 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:03:04.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:03:04.807 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:03:04.750 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:03:04.830 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:02:50.194 00:01:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-26 04:03:44.154 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40638 10 6452 1 2025-10-26 04:04:44.560 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52220 10 6452 1 2025-10-26 04:05:44.967 00:00:10.998 TCP 1.101.0.1:3000 -> 23.104.0.1:47572 10 6452 1 2025-10-26 04:02:50.196 00:04:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 04:06:46.006 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34466 10 6452 1 2025-10-26 04:07:46.405 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50896 10 6452 1 2025-10-26 04:08:05.051 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:08:05.043 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:08:04.826 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:08:05.232 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:08:05.134 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:04:50.195 00:04:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 04:08:46.771 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33030 10 6452 1 2025-10-26 04:09:47.186 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33634 10 6452 1 2025-10-26 04:10:47.548 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58528 10 6452 1 2025-10-26 04:07:50.197 00:04:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 04:11:47.910 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40012 10 6452 1 2025-10-26 04:13:05.454 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:12:48.322 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38344 10 6452 1 2025-10-26 04:13:05.050 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:13:04.874 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:13:05.372 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:13:04.808 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:09:50.197 00:04:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 04:13:48.727 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60040 10 6452 1 2025-10-26 04:14:49.134 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58768 10 6452 1 2025-10-26 04:15:49.534 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46304 10 6452 1 2025-10-26 04:12:50.203 00:04:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 04:16:49.946 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35548 10 6452 1 2025-10-26 04:17:50.369 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37182 10 6452 1 2025-10-26 04:18:05.227 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:18:05.149 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:18:04.908 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:18:05.145 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:18:05.082 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:14:50.198 00:04:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 04:18:50.776 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60994 10 6452 1 2025-10-26 04:19:51.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54058 10 6452 1 2025-10-26 04:20:51.549 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32960 10 6452 1 2025-10-26 04:17:50.201 00:04:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 04:21:51.948 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37680 10 6452 1 2025-10-26 04:23:05.301 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:23:05.313 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:23:04.983 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:22:52.364 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32924 10 6452 1 2025-10-26 04:23:05.219 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:23:05.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:19:50.201 00:04:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 04:22:50.205 00:01:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 04:23:52.763 00:00:10.801 TCP 1.101.0.1:3000 -> 23.104.0.1:55842 10 6452 1 2025-10-26 04:24:53.603 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56188 10 6452 1 2025-10-26 04:25:53.970 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48352 10 6452 1 2025-10-26 04:26:54.389 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35344 10 6452 1 2025-10-26 04:28:05.399 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:28:05.247 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:28:05.283 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:28:05.317 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:28:05.322 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:27:54.790 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:56504 10 6452 1 2025-10-26 04:24:50.204 00:04:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 04:24:50.203 00:04:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 04:28:55.196 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39214 10 6452 1 2025-10-26 04:29:55.607 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32814 10 6452 1 2025-10-26 04:30:56.008 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46468 10 6452 1 2025-10-26 04:31:56.412 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54122 10 6452 1 2025-10-26 04:33:05.542 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:33:05.392 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:33:05.445 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:33:05.628 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:33:05.528 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:32:56.822 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43954 10 6452 1 2025-10-26 04:29:50.204 00:04:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 04:29:50.207 00:04:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 04:33:57.226 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60910 10 6452 1 2025-10-26 04:34:57.633 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52626 10 6452 1 2025-10-26 04:35:58.037 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60808 10 6452 1 2025-10-26 04:36:58.448 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 10 6452 1 2025-10-26 04:38:05.525 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:38:05.645 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:38:05.455 00:00:00.015 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:38:05.525 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:38:05.539 00:00:00.015 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:37:58.813 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55370 10 6452 1 2025-10-26 04:34:50.206 00:04:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 04:38:59.215 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40918 10 6452 1 2025-10-26 04:34:50.204 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 04:39:59.613 00:00:10.827 TCP 1.101.0.1:3000 -> 23.104.0.1:36562 10 6452 1 2025-10-26 04:41:00.477 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49350 10 6452 1 2025-10-26 04:42:00.875 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57608 10 6452 1 2025-10-26 04:43:05.734 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:43:05.871 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:43:05.739 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:43:05.651 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:43:05.677 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:43:01.242 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34254 10 6452 1 2025-10-26 04:39:50.207 00:04:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 04:44:01.653 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55500 10 6452 1 2025-10-26 04:45:02.057 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49284 10 6452 1 2025-10-26 04:41:50.204 00:04:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 04:46:02.458 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44552 10 6452 1 2025-10-26 04:47:02.855 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:58004 10 6452 1 2025-10-26 04:48:05.769 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:48:05.539 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:48:05.702 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:48:05.760 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:48:05.785 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:48:03.275 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57906 10 6452 1 2025-10-26 04:44:50.210 00:04:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 04:49:03.677 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45740 10 6452 1 2025-10-26 04:50:04.101 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33242 10 6452 1 2025-10-26 04:46:50.205 00:04:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 04:51:04.504 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33990 10 6452 1 2025-10-26 04:52:04.921 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47396 10 6452 1 2025-10-26 04:53:05.857 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:53:05.787 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:53:05.916 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:53:05.775 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:53:06.012 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:53:05.320 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44478 10 6452 1 2025-10-26 04:49:50.210 00:04:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 04:54:05.720 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58694 10 6452 1 2025-10-26 04:55:06.140 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:44290 10 6452 1 2025-10-26 04:51:50.207 00:04:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 04:54:50.211 00:01:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 04:56:06.518 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59312 10 6452 1 2025-10-26 04:57:06.930 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53132 10 6452 1 2025-10-26 04:58:05.777 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 04:58:05.790 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 04:58:05.521 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:58:05.695 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 04:58:05.877 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 04:58:07.355 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51558 10 6452 1 Summary: total flows: 145, total bytes: 416754, total packets: 1016, avg bps: 919, avg pps: 0, avg bpp: 410 Time window: 2025-10-26 03:57:50 - 2025-10-26 04:58:17 Total flows processed: 145, passed: 145, Blocks skipped: 0, Bytes read: 15144 Sys: 0.0019s User: 0.0028s Wall: 0.0020s flows/second: 72905.1 Runtime: 0.0020s