Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 22:58:42.437 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47402 10 6452 1 2025-10-07 22:59:18.346 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 22:59:18.086 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 22:59:18.536 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 22:59:18.537 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 22:59:18.620 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 22:59:42.846 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:56816 10 6452 1 2025-10-07 23:00:43.235 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41882 10 6452 1 2025-10-07 22:57:40.876 00:05:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 22:57:40.873 00:05:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:01:43.633 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42124 10 6452 1 2025-10-07 23:02:44.045 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47758 10 6452 1 2025-10-07 23:03:44.444 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59760 10 6452 1 2025-10-07 23:04:18.624 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:04:18.578 00:00:00.020 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:04:18.760 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:04:18.725 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:04:18.843 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:04:44.853 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53596 10 6452 1 2025-10-07 23:05:45.275 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48804 10 6452 1 2025-10-07 23:06:45.677 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40048 10 6452 1 2025-10-07 23:03:40.875 00:05:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:03:40.879 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:07:46.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46146 10 6452 1 2025-10-07 23:08:46.517 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44690 10 6452 1 2025-10-07 23:09:18.796 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:09:18.701 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:09:18.792 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:09:18.652 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:09:18.875 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:09:46.919 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56244 10 6452 1 2025-10-07 23:10:47.320 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44160 10 6452 1 2025-10-07 23:11:47.722 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48164 10 6452 1 2025-10-07 23:12:48.135 00:00:10.836 TCP 1.101.0.1:3000 -> 23.104.0.1:52258 10 6452 1 2025-10-07 23:09:40.880 00:05:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:09:40.877 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:13:49.008 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43596 10 6452 1 2025-10-07 23:14:18.769 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:14:18.711 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:14:18.602 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:14:18.686 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:14:18.899 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:14:49.408 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:35050 12 10369 1 2025-10-07 23:15:49.891 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47820 10 6452 1 2025-10-07 23:16:50.312 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55564 10 6452 1 2025-10-07 23:17:50.718 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:39442 10 6452 1 2025-10-07 23:18:51.117 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44232 10 6452 1 2025-10-07 23:19:18.774 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:19:18.702 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:19:19.219 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:19:18.867 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:19:19.302 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:15:40.883 00:05:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:15:40.885 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:19:51.483 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38476 10 6452 1 2025-10-07 23:20:51.892 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:38084 10 6452 1 2025-10-07 23:21:52.331 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57846 10 6452 1 2025-10-07 23:22:52.735 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40418 10 6452 1 2025-10-07 23:23:53.144 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52450 10 6452 1 2025-10-07 23:24:19.117 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:24:18.913 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:24:18.738 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:24:19.034 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:24:18.966 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:24:53.551 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55016 10 6452 1 2025-10-07 23:21:40.884 00:05:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:21:40.886 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:25:53.954 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51958 10 6452 1 2025-10-07 23:26:54.318 00:00:10.626 TCP 1.101.0.1:3000 -> 23.104.0.1:38612 10 6452 1 2025-10-07 23:27:54.985 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56540 10 6452 1 2025-10-07 23:28:55.394 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57368 10 6452 1 2025-10-07 23:29:19.208 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:29:19.179 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:29:19.182 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:29:19.125 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:29:18.952 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:29:55.817 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43650 10 6452 1 2025-10-07 23:30:56.236 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34654 10 6452 1 2025-10-07 23:27:40.887 00:05:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:27:40.885 00:05:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:31:56.647 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59050 10 6452 1 2025-10-07 23:32:57.059 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60280 10 6452 1 2025-10-07 23:33:57.465 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37244 10 6452 1 2025-10-07 23:34:19.239 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:34:19.288 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:34:19.244 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:34:19.496 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:34:19.328 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:34:57.866 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:45066 10 6452 1 2025-10-07 23:35:58.241 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42590 10 6452 1 2025-10-07 23:36:58.640 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51546 10 6452 1 2025-10-07 23:33:40.890 00:05:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:33:40.892 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:37:59.039 00:00:10.909 TCP 1.101.0.1:3000 -> 23.104.0.1:33790 10 6452 1 2025-10-07 23:38:59.986 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37218 10 6452 1 2025-10-07 23:39:19.615 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:39:19.643 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:39:19.069 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:39:19.532 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:39:19.677 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:40:00.401 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53594 10 6452 1 2025-10-07 23:41:00.804 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46800 10 6452 1 2025-10-07 23:42:01.206 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58470 10 6452 1 2025-10-07 23:43:01.610 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44572 10 6452 1 2025-10-07 23:39:40.891 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:39:40.887 00:05:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:44:19.455 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:44:02.012 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48610 10 6452 1 2025-10-07 23:44:19.374 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:44:19.198 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:44:19.373 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:44:19.453 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:45:02.415 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47104 10 6452 1 2025-10-07 23:46:02.824 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49654 10 6452 1 2025-10-07 23:47:03.234 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38554 10 6452 1 2025-10-07 23:48:03.643 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54650 10 6452 1 2025-10-07 23:49:04.107 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43828 10 6452 1 2025-10-07 23:49:19.502 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:49:19.420 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:49:19.444 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:49:19.417 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:49:19.420 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:45:40.889 00:05:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:45:40.891 00:05:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:50:04.515 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48082 10 6452 1 2025-10-07 23:51:04.931 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:36422 10 6452 1 2025-10-07 23:52:05.357 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40836 10 6452 1 2025-10-07 23:53:05.762 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 10 6452 1 2025-10-07 23:54:06.168 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:54884 10 6452 1 2025-10-07 23:54:19.543 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:54:19.318 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:54:19.390 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:54:19.385 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:54:19.473 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:55:06.537 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36718 10 6452 1 2025-10-07 23:51:40.890 00:05:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:51:40.894 00:05:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:56:06.939 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:41662 10 6452 1 2025-10-07 23:57:07.306 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59356 10 6452 1 2025-10-07 23:58:07.710 00:00:10.956 TCP 1.101.0.1:3000 -> 23.104.0.1:56480 10 6452 1 Summary: total flows: 140, total bytes: 420917, total packets: 1022, avg bps: 925, avg pps: 0, avg bpp: 411 Time window: 2025-10-07 22:57:40 - 2025-10-07 23:58:18 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0010s Wall: 0.0013s flows/second: 110584.3 Runtime: 0.0013s