Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 15:58:47.584 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50738 10 6452 1 2025-10-27 15:59:47.988 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56098 10 6452 1 2025-10-27 15:56:50.941 00:05:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 16:00:48.399 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51608 10 6452 1 2025-10-27 16:01:48.797 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56808 10 6452 1 2025-10-27 16:02:49.208 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54944 10 6452 1 2025-10-27 16:03:48.294 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:03:48.327 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:03:48.051 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:03:48.276 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:03:48.359 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 15:59:50.941 00:05:00.386 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 16:03:49.620 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58894 10 6452 1 2025-10-27 16:04:50.026 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37848 12 6556 1 2025-10-27 16:05:50.423 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50976 10 6452 1 2025-10-27 16:02:50.944 00:05:00.381 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 16:06:50.827 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35096 10 6452 1 2025-10-27 16:07:51.229 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45134 10 6452 1 2025-10-27 16:08:48.279 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:08:48.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:08:48.163 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:08:48.312 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:08:48.396 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 16:08:51.631 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43984 10 6452 1 2025-10-27 16:05:50.942 00:05:00.386 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 16:09:51.996 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46710 10 6452 1 2025-10-27 16:10:52.404 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41392 10 6452 1 2025-10-27 16:11:52.817 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:39936 10 6452 1 2025-10-27 16:08:50.945 00:05:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 16:12:53.332 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34594 10 6452 1 2025-10-27 16:13:48.388 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:13:48.341 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:13:48.181 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:13:48.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:13:48.426 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 16:13:53.741 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47628 10 6452 1 2025-10-27 16:14:54.149 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58056 10 6452 1 2025-10-27 16:11:50.944 00:05:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 16:15:54.552 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51376 10 6452 1 2025-10-27 16:16:54.954 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:58900 12 10375 1 2025-10-27 16:17:55.442 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38946 10 6452 1 2025-10-27 16:18:48.650 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:18:48.480 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:18:48.508 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:18:48.327 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:18:48.409 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 16:14:50.946 00:05:00.381 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 16:18:55.844 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45700 10 6452 1 2025-10-27 16:19:56.262 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37772 10 6452 1 2025-10-27 16:20:56.659 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56454 10 6452 1 2025-10-27 16:17:50.946 00:05:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 16:21:57.023 00:00:10.432 TCP 1.101.0.1:3000 -> 23.104.0.1:57964 12 10375 1 2025-10-27 16:22:57.502 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41048 10 6452 1 2025-10-27 16:23:48.510 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 16:23:48.685 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:23:48.632 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:23:48.428 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:23:48.688 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:23:57.909 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46584 10 6452 1 2025-10-27 16:20:50.948 00:05:00.381 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 16:24:58.313 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41218 10 6452 1 2025-10-27 16:25:58.720 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 10 6452 1 2025-10-27 16:26:59.099 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 10 6452 1 2025-10-27 16:23:50.945 00:05:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 16:27:59.503 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43758 10 6452 1 2025-10-27 16:28:48.794 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:28:48.753 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:28:49.072 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:28:48.875 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:28:49.156 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 16:28:59.908 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58630 10 6452 1 2025-10-27 16:30:00.316 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:58888 10 6452 1 2025-10-27 16:26:50.949 00:05:00.381 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 16:31:00.741 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55372 10 6452 1 2025-10-27 16:32:01.153 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46324 10 6452 1 2025-10-27 16:33:01.518 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39050 10 6452 1 2025-10-27 16:33:48.924 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:33:48.820 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:33:48.660 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:33:48.822 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:33:48.903 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 16:29:50.947 00:05:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 16:34:01.918 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50084 10 6452 1 2025-10-27 16:35:02.328 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35066 10 6452 1 2025-10-27 16:36:02.744 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51990 10 6452 1 2025-10-27 16:32:50.949 00:05:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 16:37:03.157 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:42458 10 6452 1 2025-10-27 16:38:03.544 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47478 10 6452 1 2025-10-27 16:38:48.979 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 16:38:49.008 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:38:49.066 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:38:49.069 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:38:48.896 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:39:03.954 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42018 10 6452 1 2025-10-27 16:35:50.947 00:05:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 16:40:04.365 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43298 10 6452 1 2025-10-27 16:41:04.776 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:56046 10 6452 1 2025-10-27 16:42:05.151 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55762 10 6452 1 2025-10-27 16:38:50.950 00:05:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 16:43:05.551 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47254 10 6452 1 2025-10-27 16:43:49.054 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:43:48.827 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:43:48.761 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:43:48.901 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:43:48.845 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 16:44:05.951 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56620 10 6452 1 2025-10-27 16:45:06.370 00:00:10.579 TCP 1.101.0.1:3000 -> 23.104.0.1:50168 10 6452 1 2025-10-27 16:41:50.949 00:05:00.386 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 16:46:06.987 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36214 10 6452 1 2025-10-27 16:47:07.391 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41988 10 6452 1 2025-10-27 16:48:07.798 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39542 10 6452 1 2025-10-27 16:48:48.890 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:48:49.213 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:48:49.258 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:48:49.350 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:48:49.434 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 16:44:50.951 00:05:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 16:49:08.196 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37682 10 6452 1 2025-10-27 16:50:08.592 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33448 10 6452 1 2025-10-27 16:51:08.996 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43972 10 6452 1 2025-10-27 16:47:50.949 00:05:00.386 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 16:52:09.403 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34136 10 6452 1 2025-10-27 16:53:09.805 00:00:11.697 TCP 1.101.0.1:3000 -> 23.104.0.1:36836 10 6452 1 2025-10-27 16:53:49.317 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 16:53:49.238 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:53:49.104 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:53:48.711 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:53:49.234 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:54:11.542 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38910 10 6452 1 2025-10-27 16:50:50.953 00:05:00.381 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 16:55:11.941 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45590 10 6452 1 2025-10-27 16:56:12.308 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58030 10 6452 1 2025-10-27 16:57:12.713 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48632 10 6452 1 2025-10-27 16:53:50.951 00:05:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 16:58:13.117 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50504 10 6452 1 2025-10-27 16:58:48.939 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 16:58:49.295 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 16:58:49.072 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:58:49.236 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 16:58:49.318 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 140, total bytes: 424950, total packets: 1026, avg bps: 913, avg pps: 0, avg bpp: 414 Time window: 2025-10-27 15:56:50 - 2025-10-27 16:58:51 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0040s User: 0.0016s Wall: 0.0016s flows/second: 89745.2 Runtime: 0.0016s