Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 10:59:29.182 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51190 10 6452 1 2025-10-27 11:00:29.586 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37844 10 6452 1 2025-10-27 11:01:29.951 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38730 10 6452 1 2025-10-27 10:57:50.858 00:05:00.361 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 11:02:30.366 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40498 10 6452 1 2025-10-27 10:58:50.861 00:05:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 11:03:42.296 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 11:03:42.161 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:03:41.909 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:03:42.215 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:03:42.161 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:03:30.773 00:00:10.666 TCP 1.101.0.1:3000 -> 23.104.0.1:34128 10 6452 1 2025-10-27 11:04:31.474 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43262 10 6452 1 2025-10-27 11:05:31.871 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53774 10 6452 1 2025-10-27 11:06:32.279 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38792 10 6452 1 2025-10-27 11:07:32.685 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46696 10 6452 1 2025-10-27 11:03:50.859 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 11:08:42.719 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 11:08:42.677 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:08:33.114 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44634 10 6452 1 2025-10-27 11:08:42.369 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:08:42.636 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:08:42.616 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:04:50.861 00:05:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 11:09:33.527 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44246 10 6452 1 2025-10-27 11:10:33.929 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43282 10 6452 1 2025-10-27 11:11:34.343 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54734 10 6452 1 2025-10-27 11:12:34.750 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55190 10 6452 1 2025-10-27 11:13:42.445 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 11:13:42.297 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:13:35.158 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35684 10 6452 1 2025-10-27 11:13:42.330 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:13:42.362 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:13:42.547 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:09:50.860 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 11:14:35.556 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48892 10 6452 1 2025-10-27 11:10:50.862 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 11:15:35.960 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44580 10 6452 1 2025-10-27 11:16:36.366 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:56460 12 10369 1 2025-10-27 11:17:36.841 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45002 10 6452 1 2025-10-27 11:18:42.463 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:18:42.428 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:18:42.277 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:18:42.272 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:18:42.360 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 11:18:37.264 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52826 10 6452 1 2025-10-27 11:19:37.643 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41492 10 6452 1 2025-10-27 11:15:50.861 00:05:00.365 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 11:20:38.057 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55792 10 6452 1 2025-10-27 11:16:50.863 00:05:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 11:21:38.461 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46692 10 6452 1 2025-10-27 11:22:38.865 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55322 10 6452 1 2025-10-27 11:23:42.740 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 11:23:42.453 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:23:42.428 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:23:42.657 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:23:42.446 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:23:39.275 00:00:11.441 TCP 1.101.0.1:3000 -> 23.104.0.1:35878 10 6452 1 2025-10-27 11:24:40.755 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:52250 10 6452 1 2025-10-27 11:21:50.862 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 11:25:41.176 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58508 10 6452 1 2025-10-27 11:26:41.576 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33986 10 6452 1 2025-10-27 11:22:50.865 00:05:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 11:27:41.979 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:43424 10 6452 1 2025-10-27 11:28:42.889 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 11:28:43.102 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:28:42.729 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:28:42.806 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:28:43.195 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:28:42.404 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49860 10 6452 1 2025-10-27 11:29:42.812 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39802 10 6452 1 2025-10-27 11:30:43.230 00:00:10.958 TCP 1.101.0.1:3000 -> 23.104.0.1:44756 10 6452 1 2025-10-27 11:27:50.863 00:05:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 11:31:44.269 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-10-27 11:32:44.637 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51888 10 6452 1 2025-10-27 11:28:50.867 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 11:33:42.824 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 11:33:42.640 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:33:42.647 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:33:42.742 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:33:42.743 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:33:45.053 00:00:10.523 TCP 1.101.0.1:3000 -> 23.104.0.1:45992 10 6452 1 2025-10-27 11:34:45.613 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53738 10 6452 1 2025-10-27 11:35:46.023 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42362 10 6452 1 2025-10-27 11:36:46.436 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42018 10 6452 1 2025-10-27 11:33:50.865 00:05:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 11:37:46.834 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:59718 10 6452 1 2025-10-27 11:38:42.853 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:38:42.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:38:42.853 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:38:42.902 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:38:42.937 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 11:34:50.867 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 11:38:47.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58634 10 6452 1 2025-10-27 11:39:47.597 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42292 10 6452 1 2025-10-27 11:40:47.958 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47228 10 6452 1 2025-10-27 11:41:48.328 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:56844 10 6452 1 2025-10-27 11:42:48.714 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60842 10 6452 1 2025-10-27 11:43:43.056 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 11:43:42.971 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:43:43.004 00:00:00.034 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:43:42.975 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:43:42.983 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:39:50.866 00:05:00.365 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 11:43:49.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55856 10 6452 1 2025-10-27 11:40:50.870 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 11:44:49.544 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57264 10 6452 1 2025-10-27 11:45:49.946 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56566 10 6452 1 2025-10-27 11:46:50.358 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:38508 12 10375 1 2025-10-27 11:47:50.843 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39508 10 6452 1 2025-10-27 11:48:42.901 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:48:42.839 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:48:42.989 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:48:42.982 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:48:43.072 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 11:48:51.250 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49970 10 6452 1 2025-10-27 11:45:50.870 00:05:00.361 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 11:49:51.656 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56240 10 6452 1 2025-10-27 11:46:50.872 00:05:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 11:50:52.065 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37478 10 6452 1 2025-10-27 11:51:52.475 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56740 10 6452 1 2025-10-27 11:52:52.876 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52368 10 6452 1 2025-10-27 11:53:43.203 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 11:53:43.023 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:53:42.901 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:53:43.120 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:53:42.969 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:53:53.298 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45480 10 6452 1 2025-10-27 11:54:53.696 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45876 10 6452 1 2025-10-27 11:51:50.870 00:05:00.365 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 11:55:54.065 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57572 10 6452 1 2025-10-27 11:52:50.874 00:05:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 11:56:54.425 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58988 10 6452 1 2025-10-27 11:57:54.834 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:48428 10 6452 1 2025-10-27 11:58:43.331 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 11:58:43.203 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:58:43.233 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 11:58:43.110 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 11:58:43.315 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 139, total bytes: 418388, total packets: 1014, avg bps: 916, avg pps: 0, avg bpp: 412 Time window: 2025-10-27 10:57:50 - 2025-10-27 11:58:43 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0038s User: 0.0015s Wall: 0.0024s flows/second: 58599.7 Runtime: 0.0024s