Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 19:59:18.317 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42336 10 6452 1 2025-09-08 20:00:17.526 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:00:17.529 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:00:17.453 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:00:17.167 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:00:17.443 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:00:18.680 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38842 10 6452 1 2025-09-08 19:55:26.569 00:06:00.129 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 19:56:26.566 00:06:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 20:01:19.107 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48652 10 6452 1 2025-09-08 20:02:19.511 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57154 10 6452 1 2025-09-08 20:03:19.917 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44386 10 6452 1 2025-09-08 20:04:20.323 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48062 10 6452 1 2025-09-08 20:05:17.517 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:05:17.357 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:05:17.512 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:05:17.269 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:05:17.434 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:05:20.733 00:00:10.778 TCP 1.101.0.1:3000 -> 23.104.0.1:49896 10 6452 1 2025-09-08 20:06:21.553 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53544 10 6452 1 2025-09-08 20:02:26.571 00:06:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 20:07:21.960 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35608 10 6452 1 2025-09-08 20:03:26.569 00:06:00.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 20:08:22.363 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36962 10 6452 1 2025-09-08 20:09:22.722 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40798 10 6452 1 2025-09-08 20:10:17.770 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:10:18.096 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:10:17.575 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:10:17.883 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:10:17.966 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:10:23.137 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49756 10 6452 1 2025-09-08 20:11:23.540 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50912 10 6452 1 2025-09-08 20:12:23.942 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:39118 10 6452 1 2025-09-08 20:13:24.358 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:59984 12 10367 1 2025-09-08 20:09:26.574 00:06:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 20:14:24.837 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:57714 10 6452 1 2025-09-08 20:15:18.047 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:15:17.845 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:15:17.769 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:15:17.637 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:15:17.965 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:10:26.571 00:06:00.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 20:15:25.263 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43184 10 6452 1 2025-09-08 20:16:25.679 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52196 10 6452 1 2025-09-08 20:17:26.111 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60428 10 6452 1 2025-09-08 20:18:26.514 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53268 10 6452 1 2025-09-08 20:19:26.909 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45450 12 6556 1 2025-09-08 20:20:17.859 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:20:17.675 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:20:17.884 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:20:17.955 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:20:18.037 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:20:27.318 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47080 10 6452 1 2025-09-08 20:16:26.574 00:06:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 20:21:27.714 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59884 10 6452 1 2025-09-08 20:17:26.573 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 20:22:28.139 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51494 10 6452 1 2025-09-08 20:23:28.548 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53350 10 6452 1 2025-09-08 20:24:28.953 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36972 10 6452 1 2025-09-08 20:25:17.806 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:25:17.817 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:25:17.847 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:25:17.894 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:25:17.978 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:25:29.373 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47474 10 6452 1 2025-09-08 20:26:29.730 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58214 10 6452 1 2025-09-08 20:27:30.117 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57920 10 6452 1 2025-09-08 20:23:26.577 00:06:00.128 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 20:28:30.482 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55292 10 6452 1 2025-09-08 20:24:26.575 00:06:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 20:29:30.892 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:50160 12 6556 1 2025-09-08 20:30:18.014 00:00:00.019 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:30:17.919 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:30:18.051 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:30:17.934 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:30:18.155 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:30:31.316 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55524 10 6452 1 2025-09-08 20:31:31.679 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48422 10 6452 1 2025-09-08 20:32:32.103 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52080 10 6452 1 2025-09-08 20:33:32.509 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50792 10 6452 1 2025-09-08 20:34:32.913 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53602 10 6452 1 2025-09-08 20:35:17.931 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:35:18.278 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:35:17.961 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:35:18.192 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:35:18.274 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:30:26.578 00:06:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 20:35:33.312 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53600 10 6452 1 2025-09-08 20:31:26.576 00:06:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 20:36:33.716 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:34868 11 6504 1 2025-09-08 20:37:34.144 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56778 10 6452 1 2025-09-08 20:38:34.547 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:55150 12 10367 1 2025-09-08 20:39:35.026 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36092 10 6452 1 2025-09-08 20:40:18.333 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:40:18.177 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:40:18.178 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:40:18.121 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:40:18.249 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:40:35.429 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41860 10 6452 1 2025-09-08 20:41:35.833 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:48036 10 6452 1 2025-09-08 20:37:26.584 00:06:00.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 20:42:36.254 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44626 10 6452 1 2025-09-08 20:38:26.582 00:06:00.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 20:43:36.657 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:57596 12 10367 1 2025-09-08 20:44:37.120 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37520 10 6452 1 2025-09-08 20:45:18.296 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:45:18.339 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:45:18.154 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:45:18.113 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:45:18.194 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:45:37.525 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47064 10 6452 1 2025-09-08 20:46:37.930 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:47864 10 6452 1 2025-09-08 20:47:38.354 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38610 10 6452 1 2025-09-08 20:48:38.766 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:55512 10 6452 1 2025-09-08 20:44:26.587 00:06:00.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 20:49:39.182 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38200 10 6452 1 2025-09-08 20:50:18.400 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:50:18.554 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:50:18.164 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:50:18.329 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:50:18.412 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:45:26.584 00:06:00.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 20:50:39.546 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39024 10 6452 1 2025-09-08 20:51:39.948 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45760 10 6452 1 2025-09-08 20:52:40.358 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48286 10 6452 1 2025-09-08 20:53:40.764 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:34376 10 6452 1 2025-09-08 20:54:41.133 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:41906 10 6452 1 2025-09-08 20:55:18.513 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 20:55:18.406 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 20:55:18.153 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:55:18.453 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 20:55:18.536 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 20:55:41.517 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38884 10 6452 1 2025-09-08 20:51:26.590 00:06:00.118 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 20:56:41.922 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:38382 10 6452 1 2025-09-08 20:52:26.587 00:06:00.124 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 20:57:42.370 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35248 10 6452 1 Summary: total flows: 137, total bytes: 423291, total packets: 1033, avg bps: 895, avg pps: 0, avg bpp: 409 Time window: 2025-09-08 19:55:26 - 2025-09-08 20:58:26 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0023s User: 0.0023s Wall: 0.0020s flows/second: 67419.9 Runtime: 0.0021s