Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 21:59:14.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55948 10 6452 1 2025-10-20 22:00:14.587 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46438 10 6452 1 2025-10-20 22:00:33.157 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:00:33.074 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:00:33.258 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:00:33.251 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:00:33.138 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:01:14.995 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57980 10 6452 1 2025-10-20 22:02:15.399 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56804 10 6452 1 2025-10-20 22:03:15.809 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:37576 11 6504 1 2025-10-20 22:04:16.269 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43184 10 6452 1 2025-10-20 21:59:47.385 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 21:59:47.383 00:06:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 22:05:33.005 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:05:16.670 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43578 10 6452 1 2025-10-20 22:05:33.012 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:05:32.995 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:05:32.928 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:05:32.921 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:06:17.098 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44828 10 6452 1 2025-10-20 22:07:17.506 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50010 10 6452 1 2025-10-20 22:08:17.919 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42592 10 6452 1 2025-10-20 22:09:18.320 00:00:10.484 TCP 1.101.0.1:3000 -> 23.104.0.1:40604 10 6452 1 2025-10-20 22:10:18.844 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:49436 10 6452 1 2025-10-20 22:10:33.578 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:10:33.625 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:10:33.389 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:10:33.505 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:10:33.588 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:11:19.230 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39078 10 6452 1 2025-10-20 22:06:47.386 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 22:06:47.385 00:06:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 22:12:19.592 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56762 10 6452 1 2025-10-20 22:13:20.000 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:50100 10 6452 1 2025-10-20 22:14:20.396 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34682 10 6452 1 2025-10-20 22:15:32.874 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:15:32.965 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:15:20.801 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:58594 10 6452 1 2025-10-20 22:15:32.775 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:15:33.072 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:15:33.048 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:16:21.196 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34984 10 6452 1 2025-10-20 22:17:21.625 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53560 10 6452 1 2025-10-20 22:18:22.031 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60388 10 6452 1 2025-10-20 22:13:47.389 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 22:13:47.392 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 22:19:22.430 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32946 10 6452 1 2025-10-20 22:20:33.979 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:20:33.719 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:20:33.896 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:20:33.985 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:20:22.840 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:42304 10 6452 1 2025-10-20 22:20:34.067 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:21:23.258 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57174 10 6452 1 2025-10-20 22:22:23.628 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42314 10 6452 1 2025-10-20 22:23:24.038 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60524 10 6452 1 2025-10-20 22:24:24.448 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38452 10 6452 1 2025-10-20 22:25:33.316 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:25:33.320 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:25:33.180 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:25:33.404 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:25:33.487 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:25:24.849 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:58254 10 6452 1 2025-10-20 22:20:47.392 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 22:20:47.394 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 22:26:25.281 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46988 10 6452 1 2025-10-20 22:27:25.643 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:33568 11 6504 1 2025-10-20 22:28:26.114 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45028 10 6452 1 2025-10-20 22:29:26.513 00:00:10.431 TCP 1.101.0.1:3000 -> 23.104.0.1:48264 10 6452 1 2025-10-20 22:30:33.376 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:30:33.375 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:30:33.246 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:30:33.461 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:30:33.544 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:30:26.983 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56080 10 6452 1 2025-10-20 22:31:27.347 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38928 10 6452 1 2025-10-20 22:32:27.749 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46498 10 6452 1 2025-10-20 22:27:47.395 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 22:27:47.397 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 22:33:28.148 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39888 10 6452 1 2025-10-20 22:34:28.556 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53176 10 6452 1 2025-10-20 22:35:33.692 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:35:33.438 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:35:33.502 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:35:33.440 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:35:33.610 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:35:28.917 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39454 10 6452 1 2025-10-20 22:36:29.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54986 10 6452 1 2025-10-20 22:37:29.734 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52208 10 6452 1 2025-10-20 22:38:30.106 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39866 10 6452 1 2025-10-20 22:39:30.509 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34436 10 6452 1 2025-10-20 22:34:47.395 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 22:34:47.398 00:06:00.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 22:40:33.585 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:40:33.659 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:40:33.285 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:40:33.581 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:40:33.665 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:40:30.915 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49302 10 6452 1 2025-10-20 22:41:31.325 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44966 10 6452 1 2025-10-20 22:42:31.732 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57666 10 6452 1 2025-10-20 22:43:32.141 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50036 10 6452 1 2025-10-20 22:44:32.548 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59980 10 6452 1 2025-10-20 22:45:34.301 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:45:34.197 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:45:34.159 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:45:34.195 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:45:34.277 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:45:32.957 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56776 10 6452 1 2025-10-20 22:46:33.384 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:50994 10 6452 1 2025-10-20 22:41:47.399 00:06:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 22:41:47.409 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 22:47:33.767 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:55352 10 6452 1 2025-10-20 22:48:34.148 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38238 10 6452 1 2025-10-20 22:49:34.524 00:00:13.924 TCP 1.101.0.1:3000 -> 23.104.0.1:56286 10 6452 1 2025-10-20 22:50:33.781 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:50:33.700 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:50:33.671 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:50:33.701 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:50:33.786 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:50:38.494 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33174 10 6452 1 2025-10-20 22:51:38.894 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:33612 12 6556 1 2025-10-20 22:52:39.312 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47642 10 6452 1 2025-10-20 22:48:47.402 00:06:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 22:48:47.400 00:06:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 22:53:39.715 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 10 6452 1 2025-10-20 22:54:40.136 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49866 10 6452 1 2025-10-20 22:55:33.887 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 22:55:33.977 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 22:55:33.873 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 22:55:33.801 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:55:33.804 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 22:55:40.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41570 10 6452 1 2025-10-20 22:56:40.940 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42764 10 6452 1 2025-10-20 22:57:41.348 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57800 12 6556 1 Summary: total flows: 135, total bytes: 409876, total packets: 1000, avg bps: 932, avg pps: 0, avg bpp: 409 Time window: 2025-10-20 21:59:14 - 2025-10-20 22:57:51 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0049s User: 0.0012s Wall: 0.0028s flows/second: 48474.5 Runtime: 0.0028s