Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 14:58:46.523 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34114 10 6452 1 2025-10-15 14:55:44.636 00:05:00.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 14:59:46.889 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:54808 10 6452 1 2025-10-15 15:00:47.271 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57858 10 6452 1 2025-10-15 15:01:47.674 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56136 10 6452 1 2025-10-15 15:03:00.023 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:02:48.096 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57924 10 6452 1 2025-10-15 15:02:59.870 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:02:59.840 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:02:59.938 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:02:59.888 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:03:48.493 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38530 10 6452 1 2025-10-15 15:00:44.638 00:05:00.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 15:04:48.857 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40898 10 6452 1 2025-10-15 15:01:44.636 00:05:00.467 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 15:05:49.276 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46114 10 6452 1 2025-10-15 15:06:49.692 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:54540 10 6452 1 2025-10-15 15:08:00.447 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:08:00.097 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:08:00.333 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:07:50.069 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43318 10 6452 1 2025-10-15 15:08:00.364 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:08:00.371 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:08:50.431 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54408 10 6452 1 2025-10-15 15:09:50.836 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:54648 10 6452 1 2025-10-15 15:06:44.641 00:05:00.460 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 15:10:51.265 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56820 10 6452 1 2025-10-15 15:07:44.639 00:05:00.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 15:11:51.628 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37816 10 6452 1 2025-10-15 15:13:00.259 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:12:59.998 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:13:00.177 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:13:00.310 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:13:00.178 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:12:52.036 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48216 10 6452 1 2025-10-15 15:13:52.445 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53246 10 6452 1 2025-10-15 15:14:52.861 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:36128 10 6452 1 2025-10-15 15:15:53.285 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45172 10 6452 1 2025-10-15 15:12:44.644 00:05:00.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 15:16:53.687 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37456 10 6452 1 2025-10-15 15:13:44.640 00:05:00.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 15:18:00.197 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:18:00.311 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:18:00.032 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:18:00.113 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:18:00.317 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:17:54.110 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49824 10 6452 1 2025-10-15 15:18:54.481 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59380 10 6452 1 2025-10-15 15:19:54.841 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:39164 10 6452 1 2025-10-15 15:20:55.262 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54808 10 6452 1 2025-10-15 15:21:55.673 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51716 10 6452 1 2025-10-15 15:18:44.643 00:05:00.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 15:23:00.471 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:23:00.389 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:23:00.394 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:23:00.388 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:23:00.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:22:56.037 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34078 10 6452 1 2025-10-15 15:19:44.641 00:05:00.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 15:23:56.436 00:00:10.625 TCP 1.101.0.1:3000 -> 23.104.0.1:33904 10 6452 1 2025-10-15 15:24:57.111 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59736 10 6452 1 2025-10-15 15:25:57.475 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32804 10 6452 1 2025-10-15 15:26:57.884 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47954 12 6556 1 2025-10-15 15:28:00.454 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:28:00.406 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:28:00.551 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:28:00.380 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:28:00.635 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:27:58.310 00:00:11.068 TCP 1.101.0.1:3000 -> 23.104.0.1:49582 10 6452 1 2025-10-15 15:24:44.648 00:05:00.458 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 15:28:59.416 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44410 10 6452 1 2025-10-15 15:25:44.646 00:05:00.463 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 15:29:59.778 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46550 10 6452 1 2025-10-15 15:31:00.139 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40250 10 6452 1 2025-10-15 15:32:00.503 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46674 10 6452 1 2025-10-15 15:33:00.555 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:33:00.637 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:33:00.587 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:33:00.473 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:33:00.554 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:33:00.909 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35364 12 6556 1 2025-10-15 15:34:01.319 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57826 10 6452 1 2025-10-15 15:30:44.654 00:05:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 15:35:01.682 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49042 10 6452 1 2025-10-15 15:31:44.651 00:05:00.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 15:36:02.106 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41388 10 6452 1 2025-10-15 15:37:02.507 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32890 10 6452 1 2025-10-15 15:38:00.729 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:38:00.525 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:38:00.722 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:38:00.596 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:38:00.803 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:38:02.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58432 10 6452 1 2025-10-15 15:39:03.309 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39560 10 6452 1 2025-10-15 15:40:03.726 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:55444 10 6452 1 2025-10-15 15:36:44.656 00:05:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 15:41:04.144 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58544 10 6452 1 2025-10-15 15:37:44.653 00:05:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 15:42:04.548 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35538 10 6452 1 2025-10-15 15:43:00.821 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:43:00.772 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:43:01.101 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:43:01.083 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:43:01.184 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:43:04.947 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39244 10 6452 1 2025-10-15 15:44:05.363 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45944 10 6452 1 2025-10-15 15:45:05.791 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45982 10 6452 1 2025-10-15 15:46:06.212 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:44844 10 6452 1 2025-10-15 15:42:44.659 00:05:00.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 15:47:06.636 00:00:11.059 TCP 1.101.0.1:3000 -> 23.104.0.1:44410 10 6452 1 2025-10-15 15:43:44.656 00:05:00.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 15:48:00.794 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:48:00.748 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:48:00.899 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:48:00.855 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:48:00.982 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:48:07.744 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38262 10 6452 1 2025-10-15 15:49:08.150 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42036 10 6452 1 2025-10-15 15:50:08.550 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37226 10 6452 1 2025-10-15 15:51:08.958 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37276 10 6452 1 2025-10-15 15:52:09.363 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:44942 10 6452 1 2025-10-15 15:48:44.659 00:05:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 15:53:00.891 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:53:00.760 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:53:00.966 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:53:00.902 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:53:01.047 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:53:09.739 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33724 10 6452 1 2025-10-15 15:49:44.658 00:05:00.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 15:54:10.138 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55588 10 6452 1 2025-10-15 15:55:10.543 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41854 10 6452 1 2025-10-15 15:56:10.943 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:43820 10 6452 1 2025-10-15 15:57:11.323 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36316 10 6452 1 2025-10-15 15:58:00.837 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:58:01.268 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 15:58:01.046 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 15:58:01.186 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 15:58:01.124 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 15:58:11.729 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53836 12 6556 1 2025-10-15 15:54:44.662 00:05:00.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 Summary: total flows: 140, total bytes: 417312, total packets: 1026, avg bps: 869, avg pps: 0, avg bpp: 406 Time window: 2025-10-15 14:55:44 - 2025-10-15 15:59:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0027s User: 0.0018s Wall: 0.0113s flows/second: 12383.8 Runtime: 0.0113s