Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 15:58:51.375 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:57234 10 6452 1 2025-10-31 15:59:51.745 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41722 10 6452 1 2025-10-31 16:00:43.785 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:00:43.496 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:00:43.527 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:00:43.703 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:00:43.583 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:00:52.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39654 10 6452 1 2025-10-31 16:01:52.519 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33196 10 6452 1 2025-10-31 16:02:52.885 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45722 10 6452 1 2025-10-31 15:59:52.937 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 15:59:52.934 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:03:53.303 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:54344 10 6452 1 2025-10-31 16:04:53.679 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41402 10 6452 1 2025-10-31 16:05:43.706 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:05:43.735 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:05:43.646 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:05:43.622 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:05:43.691 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:05:54.036 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46430 10 6452 1 2025-10-31 16:06:54.440 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49060 10 6452 1 2025-10-31 16:07:54.804 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:45700 10 6452 1 2025-10-31 16:08:55.223 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34728 10 6452 1 2025-10-31 16:05:52.936 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:05:52.940 00:05:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:09:55.629 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40750 10 6452 1 2025-10-31 16:10:43.796 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:10:43.607 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:10:43.750 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:10:43.796 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:10:43.833 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:10:56.037 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50970 10 6452 1 2025-10-31 16:11:56.402 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41256 10 6452 1 2025-10-31 16:12:56.802 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47012 10 6452 1 2025-10-31 16:13:57.201 00:00:10.457 TCP 1.101.0.1:3000 -> 23.104.0.1:59474 14 10479 1 2025-10-31 16:14:57.694 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56682 10 6452 1 2025-10-31 16:15:43.962 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:15:43.570 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:15:43.843 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:15:43.998 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:15:43.926 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:11:52.938 00:05:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:11:52.940 00:05:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:15:58.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37146 10 6452 1 2025-10-31 16:16:58.515 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43196 10 6452 1 2025-10-31 16:17:58.917 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32782 10 6452 1 2025-10-31 16:18:59.317 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56954 10 6452 1 2025-10-31 16:19:59.685 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46096 10 6452 1 2025-10-31 16:20:43.951 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:20:43.641 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:20:43.951 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:20:43.881 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:20:44.033 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:21:00.113 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36258 10 6452 1 2025-10-31 16:17:52.946 00:05:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:17:52.944 00:05:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:22:00.480 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40620 10 6452 1 2025-10-31 16:23:00.885 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:41222 12 6556 1 2025-10-31 16:24:01.317 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55906 10 6452 1 2025-10-31 16:25:01.717 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41772 10 6452 1 2025-10-31 16:25:43.959 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:25:43.676 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:25:44.072 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:25:44.058 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:25:44.155 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:26:02.127 00:00:18.263 TCP 1.101.0.1:3000 -> 23.104.0.1:59840 10 6452 1 2025-10-31 16:27:10.439 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33888 10 6452 1 2025-10-31 16:23:52.946 00:05:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:23:52.949 00:05:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:28:10.841 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60066 10 6452 1 2025-10-31 16:29:11.260 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:32862 10 6452 1 2025-10-31 16:30:11.622 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57612 10 6452 1 2025-10-31 16:30:44.491 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:30:44.372 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:30:44.179 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:30:44.409 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:30:44.304 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:31:11.989 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33156 10 6452 1 2025-10-31 16:32:12.392 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58950 10 6452 1 2025-10-31 16:33:12.809 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-10-31 16:29:52.949 00:05:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:29:52.947 00:05:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:34:13.218 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37614 10 6452 1 2025-10-31 16:35:13.584 00:00:11.294 TCP 1.101.0.1:3000 -> 23.104.0.1:47450 10 6452 1 2025-10-31 16:35:44.224 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:35:44.263 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:35:44.293 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:35:44.346 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:35:44.376 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:36:14.902 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50860 10 6452 1 2025-10-31 16:37:15.274 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52802 10 6452 1 2025-10-31 16:38:15.676 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55582 10 6452 1 2025-10-31 16:39:16.097 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40152 10 6452 1 2025-10-31 16:35:52.953 00:05:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:35:52.952 00:05:00.381 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:40:16.462 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47554 10 6452 1 2025-10-31 16:40:44.909 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:40:44.533 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:40:44.268 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:40:44.827 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:40:44.747 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:41:16.828 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36690 10 6452 1 2025-10-31 16:42:17.232 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47426 10 6452 1 2025-10-31 16:43:17.635 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56012 10 6452 1 2025-10-31 16:44:18.062 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40000 10 6452 1 2025-10-31 16:45:18.480 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48610 10 6452 1 2025-10-31 16:45:44.429 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:45:44.446 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:45:44.430 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:45:44.499 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:45:44.513 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:41:52.953 00:05:00.381 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:41:52.955 00:05:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:46:18.886 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:47416 10 6452 1 2025-10-31 16:47:19.311 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47692 10 6452 1 2025-10-31 16:48:19.718 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46268 10 6452 1 2025-10-31 16:49:20.131 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44070 10 6452 1 2025-10-31 16:50:20.539 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35094 10 6452 1 2025-10-31 16:50:44.545 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:50:44.550 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:50:44.543 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:50:44.452 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:50:44.628 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:51:20.908 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56752 10 6452 1 2025-10-31 16:47:52.956 00:05:00.375 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:47:52.955 00:05:00.379 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:52:21.313 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37918 10 6452 1 2025-10-31 16:53:21.727 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44532 10 6452 1 2025-10-31 16:54:22.136 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:59134 12 10369 1 2025-10-31 16:55:22.616 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36696 10 6452 1 2025-10-31 16:55:44.745 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 16:55:44.834 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:55:44.525 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 16:55:44.734 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 16:55:44.606 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 16:56:23.017 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56014 10 6452 1 2025-10-31 16:57:23.415 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46668 10 6452 1 2025-10-31 16:53:52.974 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 16:53:52.972 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 16:58:23.813 00:00:10.676 TCP 1.101.0.1:3000 -> 23.104.0.1:43560 10 6452 1 Summary: total flows: 140, total bytes: 425048, total packets: 1028, avg bps: 944, avg pps: 0, avg bpp: 413 Time window: 2025-10-31 15:58:51 - 2025-10-31 16:58:53 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0036s User: 0.0018s Wall: 0.0026s flows/second: 53743.6 Runtime: 0.0026s