Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 03:59:10.794 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:32884 10 6452 1 2025-10-23 04:00:11.151 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58408 10 6452 1 2025-10-23 04:01:11.552 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:32800 11 6504 1 2025-10-23 04:01:37.819 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:01:37.652 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:01:37.869 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:01:37.931 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:01:37.951 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:02:12.023 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50498 10 6452 1 2025-10-23 04:03:12.423 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36628 10 6452 1 2025-10-23 04:04:12.825 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46544 10 6452 1 2025-10-23 03:59:48.522 00:06:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 04:05:13.234 00:00:11.047 TCP 1.101.0.1:3000 -> 23.104.0.1:45922 10 6452 1 2025-10-23 04:00:48.526 00:06:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 04:06:14.321 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47534 10 6452 1 2025-10-23 04:06:37.862 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:06:37.926 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:06:37.803 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:06:37.674 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:06:37.887 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:07:14.723 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40408 10 6452 1 2025-10-23 04:08:15.141 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39650 10 6452 1 2025-10-23 04:09:15.552 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37954 10 6452 1 2025-10-23 04:10:15.950 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54090 10 6452 1 2025-10-23 04:11:16.320 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55140 10 6452 1 2025-10-23 04:11:38.426 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:11:38.230 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:11:38.378 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:11:38.343 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:11:38.357 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:06:48.524 00:06:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 04:12:16.683 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49736 10 6452 1 2025-10-23 04:07:48.526 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 04:13:17.111 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48206 10 6452 1 2025-10-23 04:14:17.477 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60864 10 6452 1 2025-10-23 04:15:17.880 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49484 10 6452 1 2025-10-23 04:16:18.250 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54518 10 6452 1 2025-10-23 04:16:38.264 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:16:38.072 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:16:38.050 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:16:38.183 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:16:38.382 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:17:18.660 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:32778 10 6452 1 2025-10-23 04:18:19.092 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51916 10 6452 1 2025-10-23 04:13:48.526 00:06:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 04:19:19.492 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40508 10 6452 1 2025-10-23 04:14:48.529 00:06:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 04:20:19.898 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46228 12 6556 1 2025-10-23 04:21:20.308 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53184 10 6452 1 2025-10-23 04:21:38.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:21:37.991 00:00:00.051 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:21:38.148 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:21:38.004 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:21:38.231 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:22:20.735 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51404 10 6452 1 2025-10-23 04:23:21.109 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56328 10 6452 1 2025-10-23 04:24:21.467 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42008 10 6452 1 2025-10-23 04:25:21.863 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34862 10 6452 1 2025-10-23 04:20:48.528 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 04:26:22.283 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60596 10 6452 1 2025-10-23 04:26:38.361 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:26:38.203 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:26:37.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:26:38.279 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:26:38.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:21:48.530 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 04:27:22.684 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36142 10 6452 1 2025-10-23 04:28:23.051 00:00:10.715 TCP 1.101.0.1:3000 -> 23.104.0.1:49036 10 6452 1 2025-10-23 04:29:23.809 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45836 10 6452 1 2025-10-23 04:30:24.209 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34300 10 6452 1 2025-10-23 04:31:24.610 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48114 10 6452 1 2025-10-23 04:31:38.435 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:31:38.519 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:31:38.461 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:31:38.353 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:31:38.237 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:32:25.022 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52444 10 6452 1 2025-10-23 04:27:48.529 00:06:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 04:33:25.419 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45900 10 6452 1 2025-10-23 04:28:48.531 00:06:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 04:34:25.817 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54680 10 6452 1 2025-10-23 04:35:26.222 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:48202 10 6452 1 2025-10-23 04:36:39.013 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:36:38.744 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:36:38.599 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:36:38.929 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:36:38.747 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:36:26.596 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58772 10 6452 1 2025-10-23 04:37:27.005 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46088 10 6452 1 2025-10-23 04:38:27.365 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47062 10 6452 1 2025-10-23 04:39:27.761 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42634 10 6452 1 2025-10-23 04:34:48.530 00:06:00.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 04:40:28.170 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35484 10 6452 1 2025-10-23 04:35:48.534 00:06:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 04:41:38.723 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:41:28.533 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41366 10 6452 1 2025-10-23 04:41:38.633 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:41:38.419 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:41:38.641 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:41:38.567 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:42:28.934 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41784 10 6452 1 2025-10-23 04:43:29.347 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57334 10 6452 1 2025-10-23 04:44:29.754 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40266 10 6452 1 2025-10-23 04:45:30.157 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49084 10 6452 1 2025-10-23 04:46:38.833 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:46:38.604 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:46:38.394 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:46:38.750 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:46:38.974 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:46:30.567 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52224 10 6452 1 2025-10-23 04:41:48.532 00:06:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 04:47:30.969 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55874 10 6452 1 2025-10-23 04:42:48.534 00:06:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 04:48:31.375 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36008 10 6452 1 2025-10-23 04:49:31.776 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47062 10 6452 1 2025-10-23 04:50:32.190 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:55084 10 6452 1 2025-10-23 04:51:38.764 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:51:38.905 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:51:38.851 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:51:38.932 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:51:38.934 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:51:32.585 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51724 10 6452 1 2025-10-23 04:52:32.985 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44214 10 6452 1 2025-10-23 04:53:33.348 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47908 10 6452 1 2025-10-23 04:48:48.536 00:06:00.321 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-23 04:54:33.762 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34134 10 6452 1 2025-10-23 04:49:48.539 00:06:00.316 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-23 04:55:34.179 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51350 10 6452 1 2025-10-23 04:56:38.798 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:56:38.855 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 04:56:38.859 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 04:56:38.756 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 04:56:38.937 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 04:56:34.581 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48746 10 6452 1 2025-10-23 04:57:34.948 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49818 10 6452 1 2025-10-23 04:58:35.330 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:38634 10 6452 1 Summary: total flows: 136, total bytes: 416172, total packets: 1007, avg bps: 931, avg pps: 0, avg bpp: 413 Time window: 2025-10-23 03:59:10 - 2025-10-23 04:58:45 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0048s User: 0.0000s Wall: 0.0025s flows/second: 55241.7 Runtime: 0.0025s