Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 17:59:25.885 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36304 10 6452 1 2025-10-26 18:00:26.256 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36424 10 6452 1 2025-10-26 17:55:50.511 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 18:01:26.661 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33214 10 6452 1 2025-10-26 18:02:27.094 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56274 10 6452 1 2025-10-26 17:57:50.513 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 18:03:21.853 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 18:03:21.771 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:03:21.516 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:03:21.794 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:03:21.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:03:27.498 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45726 10 6452 1 2025-10-26 18:04:27.905 00:00:10.555 TCP 1.101.0.1:3000 -> 23.104.0.1:43326 10 6452 1 2025-10-26 18:05:28.497 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46438 10 6452 1 2025-10-26 18:06:28.902 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56342 12 6556 1 2025-10-26 18:07:29.311 00:00:11.223 TCP 1.101.0.1:3000 -> 23.104.0.1:54922 10 6452 1 2025-10-26 18:02:50.513 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 18:08:21.838 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 18:08:21.756 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:08:21.759 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:08:21.832 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:08:21.651 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:08:30.572 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39940 10 6452 1 2025-10-26 18:09:30.974 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46822 10 6452 1 2025-10-26 18:04:50.516 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 18:10:31.393 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:57052 10 6452 1 2025-10-26 18:11:31.792 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38490 10 6452 1 2025-10-26 18:12:32.200 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42966 10 6452 1 2025-10-26 18:13:22.402 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:13:22.865 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:13:22.230 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:13:22.762 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:13:22.844 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 18:13:32.594 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57108 10 6452 1 2025-10-26 18:14:33.001 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57110 10 6452 1 2025-10-26 18:09:50.515 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 18:15:33.407 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41544 10 6452 1 2025-10-26 18:16:33.804 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44170 10 6452 1 2025-10-26 18:11:50.521 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 18:17:34.208 00:00:11.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42132 10 6452 1 2025-10-26 18:18:22.127 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 18:18:21.953 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:18:21.946 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:18:22.056 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:18:22.044 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:18:35.612 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35114 10 6452 1 2025-10-26 18:19:36.018 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:56702 10 6452 1 2025-10-26 18:20:36.373 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37410 10 6452 1 2025-10-26 18:21:36.784 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54622 10 6452 1 2025-10-26 18:16:50.518 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 18:22:37.187 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33944 10 6452 1 2025-10-26 18:23:22.058 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:23:21.995 00:00:00.053 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:23:22.165 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:23:22.108 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:23:22.247 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 18:23:37.584 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39770 10 6452 1 2025-10-26 18:18:50.523 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 18:24:37.985 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47958 10 6452 1 2025-10-26 18:25:38.431 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:32998 10 6452 1 2025-10-26 18:26:38.858 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37102 10 6452 1 2025-10-26 18:27:39.270 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:57656 10 6452 1 2025-10-26 18:28:22.180 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:28:22.180 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:28:21.977 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:28:22.165 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:28:22.248 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 18:28:39.694 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58412 10 6452 1 2025-10-26 18:23:50.520 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 18:29:40.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51576 10 6452 1 2025-10-26 18:25:50.523 00:06:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 18:30:40.516 00:00:10.724 TCP 1.101.0.1:3000 -> 23.104.0.1:36802 10 6452 1 2025-10-26 18:31:41.284 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48528 10 6452 1 2025-10-26 18:32:41.688 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56388 10 6452 1 2025-10-26 18:33:22.341 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 18:33:22.257 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:33:22.248 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:33:22.376 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:33:22.282 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:33:42.117 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39070 10 6452 1 2025-10-26 18:34:42.480 00:00:12.300 TCP 1.101.0.1:3000 -> 23.104.0.1:55042 10 6452 1 2025-10-26 18:30:50.525 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 18:35:44.823 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57234 10 6452 1 2025-10-26 18:36:45.229 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33672 10 6452 1 2025-10-26 18:32:50.527 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 18:37:45.628 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54180 10 6452 1 2025-10-26 18:38:22.459 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 18:38:22.410 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:38:22.473 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:38:22.390 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:38:22.377 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:38:46.032 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33766 10 6452 1 2025-10-26 18:39:46.435 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46810 10 6452 1 2025-10-26 18:40:46.840 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:45282 10 6452 1 2025-10-26 18:41:47.262 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56116 10 6452 1 2025-10-26 18:37:50.525 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 18:42:47.622 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51012 10 6452 1 2025-10-26 18:43:22.498 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 18:43:22.517 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:43:22.350 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:43:22.143 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:43:22.415 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:43:48.032 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:45074 12 6556 1 2025-10-26 18:39:50.527 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 18:44:48.431 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41360 10 6452 1 2025-10-26 18:45:48.835 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53682 10 6452 1 2025-10-26 18:46:49.258 00:00:10.777 TCP 1.101.0.1:3000 -> 23.104.0.1:60870 10 6452 1 2025-10-26 18:47:50.098 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 10 6452 1 2025-10-26 18:48:22.573 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:48:22.578 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:48:22.367 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:48:22.356 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:48:22.439 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 18:48:50.513 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:52536 11 6504 1 2025-10-26 18:44:50.527 00:06:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 18:49:50.974 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37882 10 6452 1 2025-10-26 18:50:51.348 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49936 10 6452 1 2025-10-26 18:46:50.530 00:06:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 18:51:51.751 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:54722 10 6452 1 2025-10-26 18:52:52.171 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39630 10 6452 1 2025-10-26 18:53:22.551 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:53:22.779 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:53:22.702 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:53:22.564 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:53:22.632 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 18:53:52.534 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46448 10 6452 1 2025-10-26 18:54:52.935 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51550 10 6452 1 2025-10-26 18:55:53.361 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47442 10 6452 1 2025-10-26 18:51:50.528 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 18:56:53.772 00:00:10.763 TCP 1.101.0.1:3000 -> 23.104.0.1:43910 10 6452 1 2025-10-26 18:57:54.568 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46722 10 6452 1 2025-10-26 18:58:22.831 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 18:58:22.871 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:58:22.773 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:58:22.828 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 18:58:22.910 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 136, total bytes: 410685, total packets: 1013, avg bps: 875, avg pps: 0, avg bpp: 405 Time window: 2025-10-26 17:55:50 - 2025-10-26 18:58:22 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0058s User: 0.0000s Wall: 0.0020s flows/second: 68933.6 Runtime: 0.0020s