Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 23:59:20.498 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42796 10 6661 1 2025-10-14 00:00:20.906 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47680 10 6661 1 2025-10-14 00:01:21.314 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51312 10 6661 1 2025-10-14 00:02:13.165 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:02:13.201 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:02:12.908 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:02:13.162 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:02:13.245 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:02:21.725 00:00:10.527 TCP 1.101.0.1:3000 -> 23.104.0.1:59402 10 6661 1 2025-10-14 00:03:22.287 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57642 10 6661 1 2025-10-13 23:59:43.803 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 23:59:43.802 00:05:00.479 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 00:04:22.652 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57874 10 6661 1 2025-10-14 00:05:23.063 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49396 10 6661 1 2025-10-14 00:06:23.468 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:45176 10 6661 1 2025-10-14 00:07:13.306 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:07:13.109 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:07:13.097 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:07:12.758 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:07:13.223 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:07:23.823 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48172 10 6661 1 2025-10-14 00:08:24.193 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34498 10 6661 1 2025-10-14 00:09:24.591 00:00:10.771 TCP 1.101.0.1:3000 -> 23.104.0.1:41806 10 6661 1 2025-10-14 00:05:43.803 00:05:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 00:05:43.805 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 00:10:25.404 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55242 10 6661 1 2025-10-14 00:11:25.810 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43776 10 6661 1 2025-10-14 00:12:13.173 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:12:13.291 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:12:13.379 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:12:13.151 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:12:13.092 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:12:26.224 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53022 10 6661 1 2025-10-14 00:13:26.628 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38580 10 6661 1 2025-10-14 00:14:27.033 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34098 10 6661 1 2025-10-14 00:15:27.435 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:40194 10 6661 1 2025-10-14 00:11:43.806 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 00:11:43.803 00:05:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 00:16:27.833 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52648 10 6661 1 2025-10-14 00:17:13.303 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:17:13.364 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:17:13.364 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:17:13.179 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:17:13.385 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:17:28.257 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39504 10 6661 1 2025-10-14 00:18:28.660 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33022 10 6661 1 2025-10-14 00:19:29.094 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35608 10 6661 1 2025-10-14 00:20:29.497 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52038 10 6661 1 2025-10-14 00:17:43.805 00:05:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 00:21:29.858 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:57294 10 6661 1 2025-10-14 00:17:43.808 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 00:22:13.144 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:22:13.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:22:13.400 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:22:13.440 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:22:13.522 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:22:30.279 00:00:10.538 TCP 1.101.0.1:3000 -> 23.104.0.1:60622 10 6661 1 2025-10-14 00:23:30.848 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41054 10 6661 1 2025-10-14 00:24:31.243 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50880 10 6661 1 2025-10-14 00:25:31.650 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44144 10 6661 1 2025-10-14 00:26:32.058 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39716 10 6661 1 2025-10-14 00:27:13.758 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:27:13.677 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:27:13.428 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:27:13.545 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:27:13.675 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:27:32.424 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34254 10 6661 1 2025-10-14 00:23:43.810 00:05:00.472 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 00:23:43.807 00:05:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 00:28:32.827 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33844 10 6661 1 2025-10-14 00:29:33.228 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44148 10 6661 1 2025-10-14 00:30:33.625 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41470 10 6661 1 2025-10-14 00:31:34.030 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52476 10 6661 1 2025-10-14 00:32:13.810 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:32:13.778 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:32:13.604 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:32:13.745 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:32:13.827 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:32:34.430 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38812 10 6661 1 2025-10-14 00:29:43.808 00:05:00.477 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 00:29:43.810 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 00:33:34.832 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45270 10 6661 1 2025-10-14 00:34:35.247 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44268 10 6661 1 2025-10-14 00:35:35.664 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60332 10 6661 1 2025-10-14 00:36:36.067 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40768 10 6661 1 2025-10-14 00:37:13.562 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:37:13.749 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:37:13.565 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:37:13.814 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:37:13.896 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:37:36.423 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42466 10 6661 1 2025-10-14 00:38:36.830 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48660 10 6661 1 2025-10-14 00:35:43.812 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 00:35:43.809 00:05:00.477 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 00:39:37.236 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41168 10 6661 1 2025-10-14 00:40:37.637 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60296 12 6765 1 2025-10-14 00:41:38.055 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40718 10 6661 1 2025-10-14 00:42:13.921 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:42:13.923 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:42:13.927 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:42:13.923 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:42:13.839 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:42:38.461 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52602 10 6661 1 2025-10-14 00:43:38.867 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41124 10 6661 1 2025-10-14 00:44:39.276 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51774 10 6661 1 2025-10-14 00:41:43.810 00:05:00.477 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 00:41:43.812 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 00:45:39.681 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45276 10 6661 1 2025-10-14 00:46:40.110 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55060 10 6661 1 2025-10-14 00:47:13.796 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:47:14.116 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:47:14.200 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:47:13.893 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:47:13.976 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:47:40.516 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60750 10 6661 1 2025-10-14 00:48:40.879 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43722 10 6661 1 2025-10-14 00:49:41.240 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52164 10 6661 1 2025-10-14 00:50:41.638 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46024 10 6661 1 2025-10-14 00:47:43.811 00:05:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 00:47:43.813 00:05:00.472 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 00:51:42.001 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:38744 10 6661 1 2025-10-14 00:52:13.851 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:52:13.853 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:52:13.850 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:52:13.858 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:52:13.940 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:52:42.432 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53088 10 6661 1 2025-10-14 00:53:42.834 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59202 10 6661 1 2025-10-14 00:54:43.240 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41492 10 6661 1 2025-10-14 00:55:43.647 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34432 10 6661 1 2025-10-14 00:56:44.054 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33332 10 6661 1 2025-10-14 00:57:13.918 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 00:57:14.131 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 00:57:13.940 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:57:13.922 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 00:57:14.005 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 00:53:43.813 00:05:00.477 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 00:53:43.814 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 00:57:44.462 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46924 10 6661 1 Summary: total flows: 139, total bytes: 422983, total packets: 1012, avg bps: 949, avg pps: 0, avg bpp: 417 Time window: 2025-10-13 23:59:20 - 2025-10-14 00:58:44 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0032s User: 0.0011s Wall: 0.0020s flows/second: 68267.9 Runtime: 0.0021s