Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 16:59:13.479 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38044 10 6452 1 2025-10-27 17:00:13.838 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57994 10 6452 1 2025-10-27 17:01:14.256 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39930 10 6452 1 2025-10-27 16:57:50.952 00:05:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 17:02:14.623 00:00:10.689 TCP 1.101.0.1:3000 -> 23.104.0.1:42700 10 6452 1 2025-10-27 16:58:50.954 00:05:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 17:03:15.352 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34992 10 6452 1 2025-10-27 17:03:49.529 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:03:49.403 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:03:49.398 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:03:49.433 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:03:49.612 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:04:15.752 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56128 10 6452 1 2025-10-27 17:05:16.155 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48004 10 6452 1 2025-10-27 17:06:16.565 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44410 10 6452 1 2025-10-27 17:07:16.967 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50484 10 6452 1 2025-10-27 17:03:50.952 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 17:08:17.370 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42748 10 6452 1 2025-10-27 17:08:49.546 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:08:49.371 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:08:49.447 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:08:49.623 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:08:49.530 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:04:50.954 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 17:09:17.733 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48526 10 6452 1 2025-10-27 17:10:18.139 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:57232 10 6452 1 2025-10-27 17:11:18.503 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60916 10 6452 1 2025-10-27 17:12:18.917 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39908 10 6452 1 2025-10-27 17:13:19.321 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39336 10 6452 1 2025-10-27 17:13:49.748 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:13:49.669 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:13:49.750 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:13:49.665 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:13:49.812 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:09:50.954 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 17:14:19.728 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42852 12 6556 1 2025-10-27 17:10:50.956 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 17:15:20.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51846 10 6452 1 2025-10-27 17:16:20.546 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55258 10 6452 1 2025-10-27 17:17:20.951 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40890 10 6452 1 2025-10-27 17:18:21.313 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42714 10 6452 1 2025-10-27 17:18:49.860 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:18:49.781 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:18:49.548 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:18:49.778 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:18:49.971 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:19:21.718 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46374 10 6452 1 2025-10-27 17:15:50.956 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 17:20:22.121 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38118 10 6452 1 2025-10-27 17:16:50.958 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 17:21:22.526 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:33592 12 10375 1 2025-10-27 17:22:22.956 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49354 10 6452 1 2025-10-27 17:23:23.368 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43464 10 6452 1 2025-10-27 17:23:49.912 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:23:49.832 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:23:49.656 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:23:49.828 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:23:49.754 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:24:23.771 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59652 10 6452 1 2025-10-27 17:25:24.183 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57522 10 6452 1 2025-10-27 17:21:50.956 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 17:26:24.581 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46778 10 6452 1 2025-10-27 17:22:50.959 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 17:27:24.979 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46984 10 6452 1 2025-10-27 17:28:25.388 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42792 10 6452 1 2025-10-27 17:28:49.936 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:28:50.312 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:28:50.198 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:28:49.852 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:28:50.181 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:29:25.789 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39902 10 6452 1 2025-10-27 17:30:26.193 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36652 10 6452 1 2025-10-27 17:31:26.593 00:00:24.218 TCP 1.101.0.1:3000 -> 23.104.0.1:33256 12 10375 1 2025-10-27 17:27:50.959 00:05:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 17:32:40.853 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:49502 10 6452 1 2025-10-27 17:28:50.961 00:05:00.388 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 17:33:50.099 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:33:50.116 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:33:50.090 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:33:49.958 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:33:50.172 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:33:41.279 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44044 10 6452 1 2025-10-27 17:34:41.681 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37332 10 6452 1 2025-10-27 17:35:42.111 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49048 10 6452 1 2025-10-27 17:36:42.517 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:41818 12 10369 1 2025-10-27 17:37:42.993 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51300 10 6452 1 2025-10-27 17:33:50.963 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 17:38:50.275 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:38:50.082 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:38:50.199 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:38:50.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:38:50.283 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:38:43.401 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49650 10 6452 1 2025-10-27 17:34:50.964 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 17:39:43.801 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50898 10 6452 1 2025-10-27 17:40:44.207 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49652 10 6452 1 2025-10-27 17:41:44.610 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33760 10 6452 1 2025-10-27 17:42:44.972 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50914 10 6452 1 2025-10-27 17:43:50.125 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:43:49.924 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:43:50.252 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:43:50.129 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:43:50.336 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:43:45.389 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34790 10 6452 1 2025-10-27 17:39:50.963 00:05:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 17:40:50.966 00:05:00.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 17:44:45.754 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:33766 10 6452 1 2025-10-27 17:45:46.193 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39242 10 6452 1 2025-10-27 17:46:46.601 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49184 10 6452 1 2025-10-27 17:47:47.006 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49560 10 6452 1 2025-10-27 17:48:50.289 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:48:50.296 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:48:50.147 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:48:50.285 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:48:50.229 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:48:47.368 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38704 10 6452 1 2025-10-27 17:45:50.965 00:05:00.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 17:49:47.733 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 10 6452 1 2025-10-27 17:46:50.967 00:05:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 17:50:48.141 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50082 10 6452 1 2025-10-27 17:51:48.565 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49256 10 6452 1 2025-10-27 17:52:48.985 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52004 10 6452 1 2025-10-27 17:53:50.587 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:53:50.438 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:53:50.295 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:53:50.504 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:53:50.653 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:53:49.391 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39066 10 6452 1 2025-10-27 17:54:49.791 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34852 10 6452 1 2025-10-27 17:51:50.965 00:05:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 17:55:50.194 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:50458 10 6452 1 2025-10-27 17:52:50.968 00:05:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 17:56:50.591 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36192 10 6452 1 2025-10-27 17:57:50.997 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47364 10 6452 1 2025-10-27 17:58:50.572 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:58:50.457 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:58:50.503 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:58:50.491 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:58:50.492 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 422415, total packets: 1018, avg bps: 923, avg pps: 0, avg bpp: 414 Time window: 2025-10-27 16:57:50 - 2025-10-27 17:58:50 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0013s Wall: 0.0024s flows/second: 57416.6 Runtime: 0.0024s