Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 20:58:45.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59640 10 6452 1 2025-10-28 20:59:22.989 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:59:22.748 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:59:23.059 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:59:22.947 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:59:23.141 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:59:45.582 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59004 10 6452 1 2025-10-28 21:00:45.985 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52014 10 6452 1 2025-10-28 20:56:51.521 00:06:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:01:46.391 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53300 10 6452 1 2025-10-28 20:57:51.525 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:02:46.753 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46618 10 6452 1 2025-10-28 21:03:47.163 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56268 10 6452 1 2025-10-28 21:04:23.458 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:04:23.316 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:04:22.824 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:04:23.376 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:04:23.188 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:04:47.570 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:49086 10 6452 1 2025-10-28 21:05:47.998 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34922 10 6452 1 2025-10-28 21:06:48.365 00:00:14.204 TCP 1.101.0.1:3000 -> 23.104.0.1:53212 10 6452 1 2025-10-28 21:07:52.660 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50366 10 6452 1 2025-10-28 21:03:51.523 00:06:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:08:53.068 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49588 10 6452 1 2025-10-28 21:09:23.245 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:09:23.149 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:09:23.186 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:09:23.248 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:09:23.268 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:04:51.526 00:06:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:09:53.471 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34750 10 6452 1 2025-10-28 21:10:53.873 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59624 10 6452 1 2025-10-28 21:11:54.292 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56258 10 6452 1 2025-10-28 21:12:54.660 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-10-28 21:13:55.088 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43438 10 6452 1 2025-10-28 21:14:23.347 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:14:23.314 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:14:22.996 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:14:23.266 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:14:23.122 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:14:55.489 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37536 10 6452 1 2025-10-28 21:10:51.528 00:06:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:15:55.895 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:41846 10 6452 1 2025-10-28 21:11:51.530 00:06:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:16:56.322 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33950 10 6452 1 2025-10-28 21:17:56.728 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-10-28 21:18:57.139 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41950 10 6452 1 2025-10-28 21:19:23.229 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:19:23.423 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:19:23.168 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:19:23.148 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:19:23.364 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:19:57.544 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48878 10 6452 1 2025-10-28 21:20:57.954 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33160 10 6452 1 2025-10-28 21:21:58.364 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44060 10 6452 1 2025-10-28 21:17:51.529 00:06:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:22:58.765 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55374 10 6452 1 2025-10-28 21:18:51.532 00:06:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:23:59.184 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56560 10 6452 1 2025-10-28 21:24:23.409 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:24:23.426 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:24:23.552 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:24:23.555 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:24:23.635 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:24:59.546 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36176 10 6452 1 2025-10-28 21:25:59.945 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36610 10 6452 1 2025-10-28 21:27:00.359 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43458 10 6452 1 2025-10-28 21:28:00.721 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37424 10 6452 1 2025-10-28 21:29:01.108 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38270 10 6452 1 2025-10-28 21:29:23.733 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:29:23.653 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:29:23.565 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:29:23.822 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:29:23.458 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:24:51.531 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:30:01.509 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42554 10 6452 1 2025-10-28 21:25:51.534 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:31:01.910 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44274 10 6452 1 2025-10-28 21:32:02.276 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57760 10 6452 1 2025-10-28 21:33:02.640 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45582 10 6452 1 2025-10-28 21:34:03.065 00:00:10.659 TCP 1.101.0.1:3000 -> 23.104.0.1:46258 10 6452 1 2025-10-28 21:34:23.670 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:34:23.711 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:34:23.409 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:34:23.412 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:34:23.492 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:35:03.778 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50038 10 6452 1 2025-10-28 21:36:04.146 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39220 10 6452 1 2025-10-28 21:31:51.539 00:06:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:37:04.553 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59680 10 6452 1 2025-10-28 21:32:51.540 00:06:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:38:04.959 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45308 10 6452 1 2025-10-28 21:39:05.368 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:43666 11 6504 1 2025-10-28 21:39:23.711 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:39:23.682 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:39:23.835 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:39:23.794 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:39:23.917 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:40:05.827 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33732 10 6452 1 2025-10-28 21:41:06.231 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47192 10 6452 1 2025-10-28 21:42:06.593 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54520 10 6452 1 2025-10-28 21:43:06.996 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56476 10 6452 1 2025-10-28 21:38:51.542 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:44:07.407 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51652 10 6452 1 2025-10-28 21:44:24.749 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:44:24.797 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:44:24.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:44:24.666 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:44:24.718 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:39:51.544 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:45:07.809 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54360 10 6452 1 2025-10-28 21:46:08.222 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45064 10 6452 1 2025-10-28 21:47:08.628 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:43466 10 6452 1 2025-10-28 21:48:08.985 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42086 10 6452 1 2025-10-28 21:49:09.405 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60206 10 6452 1 2025-10-28 21:49:23.891 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:49:23.811 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:49:23.987 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:49:23.810 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:49:23.831 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:50:09.806 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53800 10 6452 1 2025-10-28 21:45:51.544 00:06:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:51:10.210 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46414 10 6452 1 2025-10-28 21:46:51.546 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:52:10.621 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34404 10 6452 1 2025-10-28 21:53:11.027 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40134 10 6452 1 2025-10-28 21:54:24.283 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:54:23.901 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:54:23.788 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:54:24.200 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:54:24.064 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:54:11.386 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2025-10-28 21:55:11.789 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52208 10 6452 1 2025-10-28 21:56:12.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54788 10 6452 1 2025-10-28 21:57:12.591 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33868 10 6452 1 2025-10-28 21:52:51.546 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:58:12.990 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59022 10 6452 1 Summary: total flows: 137, total bytes: 416929, total packets: 1019, avg bps: 896, avg pps: 0, avg bpp: 409 Time window: 2025-10-28 20:56:51 - 2025-10-28 21:58:51 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0058s User: 0.0000s Wall: 0.0022s flows/second: 63486.9 Runtime: 0.0022s