Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 11:59:07.909 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42766 10 6452 1 2025-10-01 12:00:08.279 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34632 10 6452 1 2025-10-01 12:01:12.523 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:01:12.390 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:01:12.200 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:01:12.439 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:01:12.395 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:01:08.677 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59866 10 6452 1 2025-10-01 12:02:09.105 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50156 10 6452 1 2025-10-01 12:03:09.511 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42726 10 6452 1 2025-10-01 12:04:09.915 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52890 10 6452 1 2025-10-01 11:59:37.562 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 12:05:10.320 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60596 10 6452 1 2025-10-01 12:00:37.563 00:06:00.196 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 12:06:12.237 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:06:12.125 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:06:12.252 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:06:12.153 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:06:12.152 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:06:10.723 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39270 10 6452 1 2025-10-01 12:07:11.131 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34496 10 6452 1 2025-10-01 12:08:11.491 00:00:10.714 TCP 1.101.0.1:3000 -> 23.104.0.1:45462 10 6452 1 2025-10-01 12:09:12.245 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35530 10 6452 1 2025-10-01 12:10:12.650 00:00:10.499 TCP 1.101.0.1:3000 -> 23.104.0.1:54570 10 6452 1 2025-10-01 12:11:12.356 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:11:12.319 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:11:12.299 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:11:12.274 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:11:12.272 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:11:13.200 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:45536 10 6452 1 2025-10-01 12:06:37.565 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 12:12:13.563 00:00:11.131 TCP 1.101.0.1:3000 -> 23.104.0.1:56254 10 6452 1 2025-10-01 12:07:37.568 00:06:00.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 12:13:14.731 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37440 10 6452 1 2025-10-01 12:14:15.154 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60478 10 6452 1 2025-10-01 12:15:15.561 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58762 10 6452 1 2025-10-01 12:16:12.557 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:16:12.227 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:16:12.111 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:16:12.473 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:16:12.430 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:16:15.922 00:00:10.585 TCP 1.101.0.1:3000 -> 23.104.0.1:32774 10 6452 1 2025-10-01 12:17:16.554 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58572 10 6452 1 2025-10-01 12:18:16.960 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:39206 10 6452 1 2025-10-01 12:13:37.567 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 12:19:17.396 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53790 10 6452 1 2025-10-01 12:14:37.570 00:06:00.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 12:20:17.796 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55256 10 6452 1 2025-10-01 12:21:12.312 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:21:12.569 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:21:12.473 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:21:12.229 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:21:12.437 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:21:18.206 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44188 10 6452 1 2025-10-01 12:22:18.610 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55338 10 6452 1 2025-10-01 12:23:19.021 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58908 10 6452 1 2025-10-01 12:24:19.427 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49404 10 6452 1 2025-10-01 12:25:19.833 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49642 10 6452 1 2025-10-01 12:20:37.573 00:06:00.192 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 12:26:12.591 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:26:12.502 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:26:12.330 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:26:12.508 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:26:12.640 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:26:20.235 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57200 10 6452 1 2025-10-01 12:21:37.575 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 12:27:20.649 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35304 10 6452 1 2025-10-01 12:28:21.058 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:59376 10 6452 1 2025-10-01 12:29:21.518 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37404 10 6452 1 2025-10-01 12:30:21.917 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50314 10 6452 1 2025-10-01 12:31:12.814 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:31:12.754 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:31:12.648 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:31:12.732 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:31:12.582 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:31:22.332 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41600 10 6452 1 2025-10-01 12:32:22.728 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51094 10 6452 1 2025-10-01 12:27:37.572 00:06:00.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 12:33:23.142 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55090 10 6452 1 2025-10-01 12:28:37.576 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 12:34:23.545 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57704 10 6452 1 2025-10-01 12:35:23.950 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46952 10 6452 1 2025-10-01 12:36:12.798 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:36:12.539 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:36:12.805 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:36:12.799 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:36:12.888 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:36:24.356 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54246 10 6452 1 2025-10-01 12:37:24.756 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:59528 10 6452 1 2025-10-01 12:38:25.184 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34836 10 6452 1 2025-10-01 12:39:25.585 00:00:10.886 TCP 1.101.0.1:3000 -> 23.104.0.1:51692 10 6452 1 2025-10-01 12:34:37.574 00:06:00.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 12:40:26.510 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42722 10 6452 1 2025-10-01 12:35:37.578 00:06:00.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 12:41:12.857 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:41:12.779 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:41:12.704 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:41:12.775 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:41:12.673 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:41:26.911 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37838 11 6492 1 2025-10-01 12:42:27.283 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58438 10 6452 1 2025-10-01 12:43:27.700 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33788 10 6452 1 2025-10-01 12:44:28.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38668 10 6452 1 2025-10-01 12:45:28.511 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48272 10 6452 1 2025-10-01 12:46:13.201 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:46:12.774 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:46:13.120 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:46:13.099 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:46:13.112 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:46:28.872 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37702 10 6452 1 2025-10-01 12:41:37.575 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 12:47:29.287 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33938 10 6452 1 2025-10-01 12:42:37.577 00:06:00.198 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 12:48:29.689 00:00:10.462 TCP 1.101.0.1:3000 -> 23.104.0.1:54418 12 10375 1 2025-10-01 12:49:30.192 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43850 10 6452 1 2025-10-01 12:50:30.592 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33336 10 6452 1 2025-10-01 12:51:13.039 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:51:13.072 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:51:13.128 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:51:13.210 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:51:13.211 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:51:30.955 00:00:11.096 TCP 1.101.0.1:3000 -> 23.104.0.1:59504 10 6452 1 2025-10-01 12:52:32.115 00:00:11.199 TCP 1.101.0.1:3000 -> 23.104.0.1:48800 10 6452 1 2025-10-01 12:48:37.575 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 12:53:33.355 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47462 10 6452 1 2025-10-01 12:49:37.579 00:06:00.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 12:54:33.756 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47350 10 6452 1 2025-10-01 12:55:34.153 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42316 10 6452 1 2025-10-01 12:56:13.663 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 12:56:13.635 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 12:56:13.538 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:56:13.580 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 12:56:13.582 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 12:56:34.566 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55712 10 6452 1 2025-10-01 12:57:34.970 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:33518 10 6452 1 2025-10-01 12:58:35.393 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57318 10 6452 1 Summary: total flows: 136, total bytes: 419979, total packets: 1007, avg bps: 939, avg pps: 0, avg bpp: 417 Time window: 2025-10-01 11:59:07 - 2025-10-01 12:58:45 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0023s User: 0.0023s Wall: 0.0018s flows/second: 76056.7 Runtime: 0.0018s