Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 03:59:40.895 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55524 10 6452 1 2025-11-01 04:00:41.309 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35460 11 6492 1 2025-11-01 04:00:57.935 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:00:57.984 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:00:57.923 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:00:57.890 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:00:58.018 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:01:41.710 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37608 10 6452 1 2025-11-01 04:02:42.114 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38468 10 6452 1 2025-11-01 04:03:42.481 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60656 10 6452 1 2025-11-01 03:58:53.379 00:06:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 03:59:53.381 00:06:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 04:04:42.888 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:34158 10 6452 1 2025-11-01 04:05:43.320 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45516 10 6452 1 2025-11-01 04:05:58.167 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:05:57.795 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:05:57.910 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:05:58.258 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:05:57.992 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:06:43.722 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38278 10 6452 1 2025-11-01 04:07:44.145 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42518 10 6452 1 2025-11-01 04:08:44.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33210 10 6452 1 2025-11-01 04:09:44.951 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40264 10 6452 1 2025-11-01 04:10:45.364 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:60172 10 6452 1 2025-11-01 04:10:59.294 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:10:58.651 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:10:59.148 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:10:59.293 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:05:53.381 00:06:00.254 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 04:10:59.231 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:06:53.387 00:06:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 04:11:45.737 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44702 10 6452 1 2025-11-01 04:12:46.147 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49726 10 6452 1 2025-11-01 04:13:46.551 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:46280 12 10375 1 2025-11-01 04:14:47.035 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42310 10 6452 1 2025-11-01 04:15:58.349 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:15:58.248 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:15:58.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:15:58.222 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:15:47.433 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43808 10 6452 1 2025-11-01 04:15:58.426 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:16:47.840 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:37034 10 6452 1 2025-11-01 04:12:53.383 00:06:00.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 04:17:48.226 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43294 10 6452 1 2025-11-01 04:13:53.386 00:06:00.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 04:18:48.637 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:34992 10 6452 1 2025-11-01 04:19:48.994 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36142 10 6452 1 2025-11-01 04:20:59.233 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:20:59.154 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:20:58.453 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:20:59.150 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:20:59.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:20:49.401 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46624 10 6452 1 2025-11-01 04:21:49.766 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49606 10 6452 1 2025-11-01 04:22:50.182 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35954 10 6452 1 2025-11-01 04:23:50.604 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42222 10 6452 1 2025-11-01 04:19:53.387 00:06:00.252 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 04:24:50.970 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51572 10 6452 1 2025-11-01 04:20:53.390 00:06:00.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 04:25:58.575 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:25:58.575 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:25:58.647 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:25:58.601 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:25:58.659 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:25:51.376 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47514 10 6452 1 2025-11-01 04:26:51.737 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39330 10 6452 1 2025-11-01 04:27:52.145 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58932 10 6452 1 2025-11-01 04:28:52.503 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-11-01 04:29:52.903 00:00:14.013 TCP 1.101.0.1:3000 -> 23.104.0.1:57670 10 6452 1 2025-11-01 04:30:58.840 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:30:58.555 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:30:58.463 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:30:58.757 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:30:58.893 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:30:56.976 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33592 10 6452 1 2025-11-01 04:26:53.389 00:06:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 04:31:57.386 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56788 10 6452 1 2025-11-01 04:27:53.394 00:06:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 04:32:57.747 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43490 10 6452 1 2025-11-01 04:33:58.153 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41800 10 6452 1 2025-11-01 04:34:58.561 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43294 10 6452 1 2025-11-01 04:35:58.792 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:35:58.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:35:58.793 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:35:58.612 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:35:58.876 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:35:58.959 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45654 10 6452 1 2025-11-01 04:36:59.362 00:00:11.812 TCP 1.101.0.1:3000 -> 23.104.0.1:39510 10 6452 1 2025-11-01 04:38:01.218 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43340 10 6452 1 2025-11-01 04:33:53.391 00:06:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 04:39:01.622 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46768 12 6556 1 2025-11-01 04:34:53.393 00:06:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 04:40:02.030 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58422 10 6452 1 2025-11-01 04:40:58.844 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:40:58.613 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:40:58.729 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:40:58.723 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:40:58.811 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:41:02.435 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39006 10 6452 1 2025-11-01 04:42:02.841 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:45430 10 6452 1 2025-11-01 04:43:03.328 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35000 10 6452 1 2025-11-01 04:44:03.733 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52786 10 6452 1 2025-11-01 04:45:04.138 00:00:10.719 TCP 1.101.0.1:3000 -> 23.104.0.1:59604 10 6452 1 2025-11-01 04:40:53.398 00:06:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 04:45:59.067 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:45:59.094 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:45:58.865 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:45:58.972 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:45:58.971 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:46:04.891 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:53102 10 6452 1 2025-11-01 04:41:53.394 00:06:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 04:47:05.319 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35208 10 6452 1 2025-11-01 04:48:05.725 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60712 10 6452 1 2025-11-01 04:49:06.133 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41008 10 6452 1 2025-11-01 04:50:06.534 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53420 10 6452 1 2025-11-01 04:50:58.906 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:50:59.153 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:50:58.936 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:50:58.823 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:50:58.946 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:51:06.940 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47934 10 6452 1 2025-11-01 04:52:07.349 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36212 10 6452 1 2025-11-01 04:47:53.400 00:06:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 04:53:07.758 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:44922 12 6556 1 2025-11-01 04:48:53.402 00:06:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 04:54:08.192 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58646 10 6452 1 2025-11-01 04:55:08.600 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59298 10 6452 1 2025-11-01 04:55:59.709 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 04:55:59.455 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:55:59.709 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 04:55:59.578 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 04:55:59.793 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 04:56:09.042 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53432 10 6452 1 2025-11-01 04:57:09.448 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44962 10 6452 1 2025-11-01 04:58:09.811 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42120 10 6452 1 Summary: total flows: 135, total bytes: 413735, total packets: 1001, avg bps: 927, avg pps: 0, avg bpp: 413 Time window: 2025-11-01 03:58:53 - 2025-11-01 04:58:20 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0035s User: 0.0018s Wall: 0.0020s flows/second: 69094.7 Runtime: 0.0020s