Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 15:58:51.375 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:57234 10 6452 1 2025-10-31 15:55:52.925 00:05:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 15:59:51.745 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41722 10 6452 1 2025-10-31 16:00:43.497 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:00:43.584 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:00:43.527 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:00:43.703 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:00:43.786 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:00:52.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39654 10 6452 1 2025-10-31 15:57:52.937 00:05:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:01:52.518 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33196 10 6452 1 2025-10-31 16:02:52.884 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45722 10 6452 1 2025-10-31 16:03:53.304 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:54344 10 6452 1 2025-10-31 16:04:53.679 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41402 10 6452 1 2025-10-31 16:05:43.623 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:05:43.736 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:05:43.692 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:05:43.647 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:05:43.707 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:01:52.935 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:05:54.037 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46430 10 6452 1 2025-10-31 16:06:54.440 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49060 10 6452 1 2025-10-31 16:03:52.937 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:07:54.804 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:45700 10 6452 1 2025-10-31 16:08:55.223 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34728 10 6452 1 2025-10-31 16:09:55.628 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40750 10 6452 1 2025-10-31 16:10:43.795 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:10:43.795 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:10:43.606 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:10:43.749 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:10:43.834 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:10:56.037 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50970 10 6452 1 2025-10-31 16:07:52.937 00:05:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:11:56.401 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41256 10 6452 1 2025-10-31 16:12:56.801 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47012 10 6452 1 2025-10-31 16:09:52.940 00:05:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:13:57.201 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:59474 14 10479 1 2025-10-31 16:14:57.695 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56682 10 6452 1 2025-10-31 16:15:43.926 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:15:43.963 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:15:43.999 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:15:43.571 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:15:43.843 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:15:58.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37146 10 6452 1 2025-10-31 16:16:58.515 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43196 10 6452 1 2025-10-31 16:13:52.939 00:05:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:17:58.916 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32782 10 6452 1 2025-10-31 16:18:59.317 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56954 10 6452 1 2025-10-31 16:15:52.944 00:05:00.381 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:19:59.687 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46096 10 6452 1 2025-10-31 16:20:44.035 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:20:43.952 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:20:43.952 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:20:43.882 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:20:43.642 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:21:00.112 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36258 10 6452 1 2025-10-31 16:22:00.477 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40620 10 6452 1 2025-10-31 16:23:00.885 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:41222 12 6556 1 2025-10-31 16:19:52.944 00:05:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:24:01.317 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55906 10 6452 1 2025-10-31 16:25:01.718 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41772 10 6452 1 2025-10-31 16:25:43.961 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:25:44.060 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:25:43.678 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:25:44.073 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:25:44.154 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:21:52.948 00:05:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:26:02.127 00:00:18.262 TCP 1.101.0.1:3000 -> 23.104.0.1:59840 10 6452 1 2025-10-31 16:27:10.438 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33888 10 6452 1 2025-10-31 16:28:10.840 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60066 10 6452 1 2025-10-31 16:29:11.261 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:32862 10 6452 1 2025-10-31 16:25:52.946 00:05:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:30:11.622 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57612 10 6452 1 2025-10-31 16:30:44.371 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:30:44.303 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:30:44.178 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:30:44.408 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:30:44.492 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:31:11.989 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33156 10 6452 1 2025-10-31 16:27:52.949 00:05:00.378 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:32:12.391 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58950 10 6452 1 2025-10-31 16:33:12.808 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-10-31 16:34:13.218 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37614 10 6452 1 2025-10-31 16:35:13.582 00:00:11.294 TCP 1.101.0.1:3000 -> 23.104.0.1:47450 10 6452 1 2025-10-31 16:35:44.224 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:35:44.347 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:35:44.263 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:35:44.294 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:35:44.377 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:31:52.949 00:05:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:36:14.903 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50860 10 6452 1 2025-10-31 16:37:15.274 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52802 10 6452 1 2025-10-31 16:33:52.951 00:05:00.377 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:38:15.676 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55582 10 6452 1 2025-10-31 16:39:16.096 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40152 10 6452 1 2025-10-31 16:40:16.463 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47554 10 6452 1 2025-10-31 16:40:44.909 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:40:44.534 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:40:44.747 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:40:44.269 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:40:44.827 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:41:16.827 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36690 10 6452 1 2025-10-31 16:37:52.951 00:05:00.381 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:42:17.231 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47426 10 6452 1 2025-10-31 16:43:17.636 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56012 10 6452 1 2025-10-31 16:39:52.954 00:05:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:44:18.062 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40000 10 6452 1 2025-10-31 16:45:18.480 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48610 10 6452 1 2025-10-31 16:45:44.498 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:45:44.445 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:45:44.429 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:45:44.428 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:45:44.512 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:46:18.887 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:47416 10 6452 1 2025-10-31 16:47:19.310 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47692 10 6452 1 2025-10-31 16:43:52.953 00:05:00.380 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:48:19.718 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46268 10 6452 1 2025-10-31 16:49:20.130 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44070 10 6452 1 2025-10-31 16:45:52.955 00:05:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:50:20.538 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35094 10 6452 1 2025-10-31 16:50:44.543 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:50:44.545 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:50:44.452 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:50:44.550 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:50:44.626 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:51:20.908 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56752 10 6452 1 2025-10-31 16:52:21.314 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37918 10 6452 1 2025-10-31 16:53:21.727 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44532 10 6452 1 2025-10-31 16:49:52.955 00:05:00.379 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:54:22.135 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:59134 12 10369 1 2025-10-31 16:55:22.614 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36696 10 6452 1 2025-10-31 16:55:44.607 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:55:44.744 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:55:44.732 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:55:44.833 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:55:44.523 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:51:52.973 00:05:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:56:23.017 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56014 10 6452 1 2025-10-31 16:57:23.415 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46668 10 6452 1 2025-10-31 16:58:23.813 00:00:10.676 TCP 1.101.0.1:3000 -> 23.104.0.1:43560 10 6452 1 Summary: total flows: 140, total bytes: 425048, total packets: 1028, avg bps: 903, avg pps: 0, avg bpp: 413 Time window: 2025-10-31 15:55:52 - 2025-10-31 16:58:34 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0036s User: 0.0027s Wall: 0.0016s flows/second: 87550.7 Runtime: 0.0016s