Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 10:59:20.378 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59422 10 6661 1 2025-10-23 11:00:20.739 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:47244 12 10375 1 2025-10-23 11:01:21.223 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58206 10 6452 1 2025-10-23 11:01:46.425 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:01:46.342 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:01:46.236 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:01:46.342 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:01:46.342 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:02:21.626 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52196 10 6452 1 2025-10-23 11:03:21.993 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35168 10 6452 1 2025-10-23 11:04:22.391 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50398 10 6452 1 2025-10-23 10:59:48.649 00:06:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 11:05:22.802 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52572 10 6452 1 2025-10-23 11:00:48.652 00:06:00.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 11:06:23.210 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36018 10 6452 1 2025-10-23 11:06:46.059 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:06:46.302 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:06:46.176 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:06:46.178 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:06:46.259 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:07:23.625 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47746 10 6452 1 2025-10-23 11:08:24.033 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38914 10 6452 1 2025-10-23 11:09:24.434 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59618 10 6452 1 2025-10-23 11:10:24.839 00:00:10.465 TCP 1.101.0.1:3000 -> 23.104.0.1:49672 12 10584 1 2025-10-23 11:11:25.340 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53560 10 6661 1 2025-10-23 11:06:48.654 00:06:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 11:11:46.667 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:11:46.266 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:11:46.584 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:11:46.577 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:11:46.575 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:12:25.766 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35180 10 6661 1 2025-10-23 11:07:48.659 00:06:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 11:13:26.176 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56200 10 6661 1 2025-10-23 11:14:26.588 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56848 10 6661 1 2025-10-23 11:15:26.991 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59508 10 6661 1 2025-10-23 11:16:27.399 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:39644 10 6661 1 2025-10-23 11:16:46.566 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:16:46.507 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:16:46.433 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:16:46.326 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:16:46.591 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:17:27.755 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38212 10 6661 1 2025-10-23 11:18:28.169 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41902 10 6661 1 2025-10-23 11:13:48.659 00:06:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 11:19:28.574 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55962 10 6661 1 2025-10-23 11:14:48.663 00:06:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 11:20:28.981 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43558 10 6661 1 2025-10-23 11:21:29.346 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56574 10 6661 1 2025-10-23 11:21:46.753 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:21:46.706 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:21:46.816 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:21:46.855 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:21:46.898 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:22:29.748 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40624 10 6661 1 2025-10-23 11:23:30.148 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41390 10 6661 1 2025-10-23 11:24:30.550 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39522 10 6661 1 2025-10-23 11:25:30.957 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35988 10 6661 1 2025-10-23 11:20:48.660 00:06:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 11:26:31.327 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:46252 10 6661 1 2025-10-23 11:21:48.665 00:06:00.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 11:26:47.111 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:26:46.834 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:26:46.909 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:26:47.108 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:26:46.992 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:27:31.726 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39276 10 6661 1 2025-10-23 11:28:32.132 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57324 10 6661 1 2025-10-23 11:29:32.537 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33152 10 6661 1 2025-10-23 11:30:32.908 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33748 10 6661 1 2025-10-23 11:31:33.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43394 10 6661 1 2025-10-23 11:31:46.957 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:31:46.841 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:31:46.875 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:31:46.685 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:31:46.916 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:32:33.687 00:00:10.857 TCP 1.101.0.1:3000 -> 23.104.0.1:47226 10 6661 1 2025-10-23 11:27:48.664 00:06:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 11:33:34.583 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42668 10 6661 1 2025-10-23 11:28:48.670 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 11:34:34.988 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58176 10 6661 1 2025-10-23 11:35:35.396 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47864 10 6661 1 2025-10-23 11:36:35.807 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36570 10 6661 1 2025-10-23 11:36:47.046 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:36:46.891 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:36:46.984 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:36:46.989 00:00:00.052 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:36:47.068 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:37:36.221 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39754 10 6661 1 2025-10-23 11:38:36.619 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49444 10 6661 1 2025-10-23 11:34:48.665 00:06:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 11:39:37.027 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51216 10 6661 1 2025-10-23 11:40:37.437 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48680 10 6661 1 2025-10-23 11:35:48.669 00:06:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 11:41:47.098 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:41:46.817 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:41:37.842 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:60012 10 6661 1 2025-10-23 11:41:47.093 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:41:47.224 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:41:47.176 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:42:38.283 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48512 10 6661 1 2025-10-23 11:43:38.702 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48870 10 6661 1 2025-10-23 11:44:39.111 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52842 10 6661 1 2025-10-23 11:45:39.523 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 10 6661 1 2025-10-23 11:46:46.868 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:46:47.168 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:46:47.095 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:46:46.992 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:46:39.928 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:35420 10 6661 1 2025-10-23 11:41:48.667 00:06:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 11:46:47.179 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:42:48.670 00:06:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 11:47:40.352 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35090 10 6661 1 2025-10-23 11:48:40.711 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40980 10 6661 1 2025-10-23 11:49:41.118 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58816 10 6661 1 2025-10-23 11:50:41.518 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59400 10 6661 1 2025-10-23 11:51:47.093 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:51:47.011 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:51:47.301 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:51:46.996 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:51:47.316 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:51:41.929 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:34192 10 6661 1 2025-10-23 11:48:48.670 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 11:52:42.356 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36916 10 6661 1 2025-10-23 11:49:48.672 00:05:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 11:53:42.753 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44914 10 6661 1 2025-10-23 11:54:43.181 00:00:10.760 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 10 6661 1 2025-10-23 11:55:43.972 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59862 10 6661 1 2025-10-23 11:56:47.495 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 11:56:47.410 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 11:56:46.957 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:56:47.412 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 11:56:47.407 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 11:56:44.383 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43932 10 6661 1 2025-10-23 11:57:44.783 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46496 10 6661 1 2025-10-23 11:54:48.677 00:05:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 136, total bytes: 428143, total packets: 1006, avg bps: 943, avg pps: 0, avg bpp: 425 Time window: 2025-10-23 10:59:20 - 2025-10-23 11:59:49 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0039s User: 0.0019s Wall: 0.0020s flows/second: 66732.0 Runtime: 0.0021s