Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 18:59:40.728 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49834 10 6452 1 2025-10-25 19:00:41.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33140 10 6452 1 2025-10-25 18:57:49.965 00:05:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:01:41.538 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52388 10 6452 1 2025-10-25 19:02:54.265 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:02:53.869 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:02:54.274 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:02:54.109 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:02:41.940 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33956 10 6452 1 2025-10-25 18:58:49.962 00:05:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:02:54.356 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:03:42.358 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 10 6452 1 2025-10-25 19:04:42.723 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58090 10 6452 1 2025-10-25 19:05:43.138 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38236 10 6452 1 2025-10-25 19:06:43.501 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33782 10 6452 1 2025-10-25 19:07:54.001 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:07:53.944 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:07:54.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:07:54.108 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:07:43.905 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57418 10 6452 1 2025-10-25 19:03:49.966 00:05:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:07:54.357 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:04:49.963 00:05:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:08:44.312 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59454 10 6452 1 2025-10-25 19:09:44.723 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:58102 10 6452 1 2025-10-25 19:10:45.145 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:60192 12 10369 1 2025-10-25 19:11:45.618 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52084 10 6452 1 2025-10-25 19:12:54.262 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:12:54.192 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:12:54.252 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:12:54.266 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:12:54.335 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:12:46.023 00:00:11.091 TCP 1.101.0.1:3000 -> 23.104.0.1:49576 10 6452 1 2025-10-25 19:09:49.967 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:13:47.151 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:36336 10 6452 1 2025-10-25 19:10:49.963 00:05:00.275 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:14:47.550 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39852 10 6452 1 2025-10-25 19:15:47.953 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:60222 10 6452 1 2025-10-25 19:16:48.326 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46202 10 6452 1 2025-10-25 19:17:54.468 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:17:54.378 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:17:54.198 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:17:54.384 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:17:54.376 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:17:48.728 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:56310 10 6452 1 2025-10-25 19:18:49.111 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40666 10 6452 1 2025-10-25 19:15:49.968 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:19:49.513 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39296 10 6452 1 2025-10-25 19:16:49.965 00:05:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:20:49.915 00:00:10.572 TCP 1.101.0.1:3000 -> 23.104.0.1:57774 11 6504 1 2025-10-25 19:21:50.523 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43696 10 6452 1 2025-10-25 19:22:54.415 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:22:54.433 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:22:54.531 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:22:54.417 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:22:54.613 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:22:50.928 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:51352 10 6452 1 2025-10-25 19:23:51.353 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34376 10 6452 1 2025-10-25 19:24:51.759 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43104 10 6452 1 2025-10-25 19:21:49.968 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:25:52.174 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45080 10 6452 1 2025-10-25 19:22:49.967 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:26:52.577 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53006 10 6452 1 2025-10-25 19:27:54.618 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:27:54.581 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:27:54.575 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:27:54.507 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:27:54.658 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:27:52.987 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47872 10 6452 1 2025-10-25 19:28:53.354 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57710 10 6452 1 2025-10-25 19:29:53.754 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52590 10 6452 1 2025-10-25 19:30:54.154 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49688 10 6452 1 2025-10-25 19:27:49.971 00:05:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:31:54.554 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50410 10 6452 1 2025-10-25 19:28:49.969 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:32:54.543 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:32:54.657 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:32:54.460 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:32:54.462 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:32:54.450 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:32:54.921 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:50246 10 6452 1 2025-10-25 19:33:55.301 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49572 10 6452 1 2025-10-25 19:34:55.698 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53924 10 6452 1 2025-10-25 19:35:56.134 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:46966 10 6452 1 2025-10-25 19:36:56.594 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52894 10 6452 1 2025-10-25 19:37:54.823 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:33:49.972 00:05:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:37:54.744 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:37:54.833 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:37:54.740 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:37:54.794 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:37:57.002 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44158 10 6452 1 2025-10-25 19:34:49.970 00:05:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:38:57.398 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60146 10 6452 1 2025-10-25 19:39:57.765 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36194 10 6452 1 2025-10-25 19:40:58.173 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34682 10 6452 1 2025-10-25 19:41:58.576 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60218 10 6452 1 2025-10-25 19:42:54.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:42:54.619 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:42:54.936 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:42:54.872 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:42:55.019 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:42:58.980 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35894 10 6452 1 2025-10-25 19:39:49.976 00:05:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:43:59.383 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54040 10 6452 1 2025-10-25 19:40:49.973 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:44:59.783 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48938 10 6452 1 2025-10-25 19:46:00.184 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60582 10 6452 1 2025-10-25 19:47:00.583 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54494 10 6452 1 2025-10-25 19:47:55.145 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:47:54.925 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:47:54.694 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:47:55.062 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:47:54.929 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:48:00.988 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:35644 10 6452 1 2025-10-25 19:49:01.407 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52028 10 6452 1 2025-10-25 19:45:49.979 00:05:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:50:01.819 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50546 10 6452 1 2025-10-25 19:46:49.977 00:05:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:51:02.219 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34490 10 6452 1 2025-10-25 19:52:02.622 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:39668 10 6452 1 2025-10-25 19:52:55.359 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:52:55.191 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:52:55.284 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:52:55.231 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:52:55.367 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:53:02.998 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39252 10 6452 1 2025-10-25 19:54:03.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46470 10 6452 1 2025-10-25 19:55:03.763 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60620 10 6452 1 2025-10-25 19:51:49.980 00:05:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:56:04.174 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50158 10 6452 1 2025-10-25 19:52:49.978 00:05:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:57:04.530 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52602 10 6452 1 2025-10-25 19:57:55.217 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:57:55.154 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:57:55.078 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:57:55.136 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:57:55.218 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:58:04.936 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:59418 10 6452 1 Summary: total flows: 139, total bytes: 414517, total packets: 1013, avg bps: 914, avg pps: 0, avg bpp: 409 Time window: 2025-10-25 18:57:49 - 2025-10-25 19:58:15 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0029s User: 0.0019s Wall: 0.0018s flows/second: 78004.9 Runtime: 0.0018s