Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 00:58:51.435 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42036 10 6452 1 2025-10-27 00:59:51.845 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:44076 10 6452 1 2025-10-27 00:55:50.663 00:06:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-27 01:00:52.273 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33546 10 6452 1 2025-10-27 01:01:52.675 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43864 10 6452 1 2025-10-27 00:57:50.667 00:06:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-27 01:02:53.114 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45800 10 6452 1 2025-10-27 01:03:29.834 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:03:30.156 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:03:30.094 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:03:30.018 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:03:30.099 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:03:53.473 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42930 10 6452 1 2025-10-27 01:04:53.873 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:32938 10 6452 1 2025-10-27 01:05:54.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32886 10 6452 1 2025-10-27 01:06:54.685 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34080 10 6452 1 2025-10-27 01:02:50.666 00:06:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-27 01:07:55.054 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52474 10 6452 1 2025-10-27 01:08:29.860 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:08:30.215 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:08:29.988 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:08:30.110 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:08:30.297 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:08:55.418 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35854 10 6452 1 2025-10-27 01:04:50.670 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-27 01:09:55.827 00:00:10.732 TCP 1.101.0.1:3000 -> 23.104.0.1:60284 10 6452 1 2025-10-27 01:10:56.594 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53878 10 6452 1 2025-10-27 01:11:56.997 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34464 10 6452 1 2025-10-27 01:12:57.405 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54104 10 6452 1 2025-10-27 01:13:30.550 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:13:30.499 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:13:30.367 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:13:30.421 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:13:30.504 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:13:57.811 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:49010 10 6452 1 2025-10-27 01:09:50.670 00:06:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-27 01:14:58.214 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37398 10 6452 1 2025-10-27 01:15:58.615 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57260 10 6452 1 2025-10-27 01:11:50.674 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-27 01:16:59.020 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35812 10 6452 1 2025-10-27 01:17:59.420 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44958 10 6452 1 2025-10-27 01:18:30.336 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:18:30.268 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:18:30.188 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:18:30.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:18:30.348 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:18:59.826 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50004 10 6452 1 2025-10-27 01:20:00.191 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:59292 10 6452 1 2025-10-27 01:21:00.561 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38970 10 6452 1 2025-10-27 01:16:50.670 00:06:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-27 01:22:00.974 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47562 10 6452 1 2025-10-27 01:23:01.387 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49460 10 6452 1 2025-10-27 01:23:30.676 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:23:30.635 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:23:30.628 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:23:30.325 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:23:30.593 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:18:50.675 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-27 01:24:01.787 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:33180 10 6452 1 2025-10-27 01:25:02.217 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55256 10 6452 1 2025-10-27 01:26:02.628 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36454 10 6452 1 2025-10-27 01:27:03.039 00:00:10.681 TCP 1.101.0.1:3000 -> 23.104.0.1:56294 10 6452 1 2025-10-27 01:28:03.758 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47090 10 6452 1 2025-10-27 01:28:30.610 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:28:30.632 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:28:30.734 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:28:30.611 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:28:30.526 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:23:50.673 00:06:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-27 01:29:04.185 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45738 10 6452 1 2025-10-27 01:30:04.591 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40672 10 6452 1 2025-10-27 01:25:50.675 00:06:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-27 01:31:04.991 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40652 10 6452 1 2025-10-27 01:32:05.398 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48160 10 6452 1 2025-10-27 01:33:05.801 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:47948 10 6452 1 2025-10-27 01:33:30.787 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:33:30.692 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:33:30.741 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:33:30.514 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:33:30.596 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:34:06.178 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33756 10 6452 1 2025-10-27 01:35:06.576 00:00:10.819 TCP 1.101.0.1:3000 -> 23.104.0.1:59286 10 6452 1 2025-10-27 01:30:50.676 00:06:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-27 01:36:07.425 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36530 10 6452 1 2025-10-27 01:37:07.828 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:52060 12 6556 1 2025-10-27 01:32:50.678 00:06:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-27 01:38:08.262 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35544 10 6452 1 2025-10-27 01:38:30.809 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:38:30.690 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:38:30.787 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:38:30.688 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:38:30.772 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:39:08.666 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35604 10 6452 1 2025-10-27 01:40:09.090 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47624 10 6452 1 2025-10-27 01:41:09.491 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49262 10 6452 1 2025-10-27 01:42:09.898 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:55728 10 6452 1 2025-10-27 01:37:50.676 00:06:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-27 01:43:10.317 00:00:10.516 TCP 1.101.0.1:3000 -> 23.104.0.1:39038 10 6452 1 2025-10-27 01:43:30.763 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:43:30.970 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:43:30.970 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:43:31.084 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:43:30.846 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:44:10.875 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54684 10 6452 1 2025-10-27 01:39:50.679 00:06:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-27 01:45:11.285 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50792 10 6452 1 2025-10-27 01:46:11.648 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49488 10 6452 1 2025-10-27 01:47:12.057 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45720 10 6452 1 2025-10-27 01:48:12.460 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56118 10 6452 1 2025-10-27 01:48:31.072 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:48:31.083 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:48:30.810 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:48:30.741 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:48:30.990 00:00:00.048 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:49:12.865 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57292 10 6452 1 2025-10-27 01:44:50.678 00:06:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-27 01:50:13.234 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58372 10 6452 1 2025-10-27 01:51:13.637 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53350 10 6452 1 2025-10-27 01:46:50.680 00:06:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-27 01:52:14.057 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60244 10 6452 1 2025-10-27 01:53:14.414 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59106 10 6452 1 2025-10-27 01:53:30.935 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:53:31.223 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:53:30.945 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:53:30.664 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:53:30.851 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:54:14.776 00:00:10.541 TCP 1.101.0.1:3000 -> 23.104.0.1:53590 10 6452 1 2025-10-27 01:55:15.355 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34014 10 6452 1 2025-10-27 01:56:15.762 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58884 10 6452 1 2025-10-27 01:51:50.683 00:06:00.282 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-27 01:57:16.178 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53536 10 6452 1 2025-10-27 01:58:16.582 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53520 10 6452 1 2025-10-27 01:58:32.308 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 01:58:32.161 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 01:58:32.250 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 01:58:31.959 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 01:58:32.225 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 137, total bytes: 416981, total packets: 1020, avg bps: 886, avg pps: 0, avg bpp: 408 Time window: 2025-10-27 00:55:50 - 2025-10-27 01:58:32 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0034s User: 0.0011s Wall: 0.0019s flows/second: 72488.9 Runtime: 0.0019s