Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 16:59:03.661 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48250 10 6452 1 2025-09-08 16:54:26.511 00:06:00.122 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 17:00:13.842 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:00:04.093 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56248 10 6452 1 2025-09-08 17:00:14.167 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:00:13.771 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:00:13.841 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:00:13.924 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:01:04.496 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56856 10 6452 1 2025-09-08 17:02:04.896 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39878 10 6452 1 2025-09-08 17:03:05.306 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54174 10 6452 1 2025-09-08 17:04:05.705 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41246 10 6452 1 2025-09-08 17:05:14.179 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:05:14.045 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:05:13.849 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:05:13.601 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:05:14.095 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:05:06.114 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43366 10 6452 1 2025-09-08 17:00:26.516 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 17:06:06.518 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54298 10 6452 1 2025-09-08 17:01:26.515 00:06:00.120 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 17:07:06.920 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47512 10 6452 1 2025-09-08 17:08:07.286 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41124 10 6452 1 2025-09-08 17:09:07.692 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58270 10 6452 1 2025-09-08 17:10:13.953 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:10:13.877 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:10:13.774 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:10:13.833 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:10:13.869 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:10:08.109 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60452 10 6452 1 2025-09-08 17:11:08.476 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33848 10 6452 1 2025-09-08 17:12:08.881 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57720 10 6452 1 2025-09-08 17:07:26.519 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 17:13:09.285 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52160 10 6452 1 2025-09-08 17:08:26.516 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 17:14:09.688 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51072 10 6452 1 2025-09-08 17:15:14.145 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:15:14.060 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:15:14.205 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:15:14.079 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:15:14.063 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:15:10.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57482 10 6452 1 2025-09-08 17:16:10.510 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60574 10 6452 1 2025-09-08 17:17:10.905 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41018 10 6452 1 2025-09-08 17:18:11.267 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58674 10 6452 1 2025-09-08 17:19:11.675 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46684 10 6452 1 2025-09-08 17:14:26.523 00:06:00.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 17:20:14.460 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:20:14.309 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:20:14.154 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:20:14.339 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:20:14.378 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:20:12.111 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:33418 10 6452 1 2025-09-08 17:15:26.522 00:06:00.117 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 17:21:12.500 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49178 10 6452 1 2025-09-08 17:22:12.883 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:41182 10 6452 1 2025-09-08 17:23:13.307 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:43124 10 6452 1 2025-09-08 17:24:13.680 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33700 10 6452 1 2025-09-08 17:25:14.357 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:25:14.215 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:25:14.261 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:25:14.360 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:25:14.443 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:25:14.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41374 10 6452 1 2025-09-08 17:26:14.509 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58124 10 6452 1 2025-09-08 17:21:26.524 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 17:22:26.522 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 17:27:14.867 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49324 10 6452 1 2025-09-08 17:28:15.277 00:00:10.829 TCP 1.101.0.1:3000 -> 23.104.0.1:60222 10 6452 1 2025-09-08 17:29:16.143 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44398 10 6452 1 2025-09-08 17:30:14.362 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:30:14.439 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:30:14.495 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:30:14.312 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:30:14.280 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:30:16.551 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50492 10 6452 1 2025-09-08 17:31:16.954 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56252 10 6452 1 2025-09-08 17:32:17.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44336 10 6452 1 2025-09-08 17:28:26.527 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 17:33:17.759 00:00:10.460 TCP 1.101.0.1:3000 -> 23.104.0.1:46046 12 10365 1 2025-09-08 17:29:26.526 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 17:34:18.258 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42670 10 6452 1 2025-09-08 17:35:14.516 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:35:14.438 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:35:14.456 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:35:14.433 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:35:14.515 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:35:18.659 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50078 10 6452 1 2025-09-08 17:36:19.066 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43108 10 6452 1 2025-09-08 17:37:19.466 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39808 10 6452 1 2025-09-08 17:38:19.874 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37928 10 6452 1 2025-09-08 17:39:20.280 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42162 10 6452 1 2025-09-08 17:40:14.792 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:40:14.781 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:40:14.535 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:40:14.668 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:40:14.708 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:35:26.529 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 17:40:20.689 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41878 10 6452 1 2025-09-08 17:36:26.526 00:06:00.122 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 17:41:21.116 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:56090 10 6452 1 2025-09-08 17:42:21.492 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45914 10 6452 1 2025-09-08 17:43:21.855 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44654 10 6452 1 2025-09-08 17:44:22.259 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55570 10 6452 1 2025-09-08 17:45:14.808 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:45:14.668 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:45:14.672 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:45:14.698 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:45:14.727 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:45:22.666 00:00:10.580 TCP 1.101.0.1:3000 -> 23.104.0.1:50108 10 6452 1 2025-09-08 17:46:23.285 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43306 10 6452 1 2025-09-08 17:42:26.530 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 17:47:23.647 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32776 10 6452 1 2025-09-08 17:43:26.527 00:06:00.123 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 17:48:24.070 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37478 10 6452 1 2025-09-08 17:49:24.433 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55372 10 6452 1 2025-09-08 17:50:14.826 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:50:14.872 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:50:14.790 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:50:14.769 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:50:14.743 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:50:24.841 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:33734 10 6452 1 2025-09-08 17:51:25.301 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47910 10 6452 1 2025-09-08 17:52:25.682 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34976 10 6452 1 2025-09-08 17:53:26.117 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:43796 12 10367 1 2025-09-08 17:49:26.531 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 17:54:26.610 00:00:10.827 TCP 1.101.0.1:3000 -> 23.104.0.1:58296 10 6452 1 2025-09-08 17:55:14.823 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 17:55:14.829 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 17:55:14.812 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:55:14.821 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 17:55:14.905 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 17:50:26.530 00:06:00.122 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 17:55:27.478 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46320 10 6452 1 2025-09-08 17:56:27.878 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53316 10 6452 1 2025-09-08 17:57:28.281 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58216 10 6452 1 2025-09-08 17:58:28.695 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59524 10 6452 1 Summary: total flows: 137, total bytes: 424705, total packets: 1022, avg bps: 881, avg pps: 0, avg bpp: 415 Time window: 2025-09-08 16:54:26 - 2025-09-08 17:58:39 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0021s User: 0.0021s Wall: 0.0023s flows/second: 59257.5 Runtime: 0.0023s