Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 13:59:29.974 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 13:59:24.279 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56850 10 6452 1 2025-09-17 13:59:30.131 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 13:59:30.246 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 13:54:30.944 00:06:00.052 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 13:59:30.197 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 13:59:30.213 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:00:24.689 00:00:10.652 TCP 1.101.0.1:3000 -> 23.104.0.1:48988 10 6452 1 2025-09-17 14:01:25.384 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56646 10 6452 1 2025-09-17 13:58:30.942 00:05:00.060 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-17 14:02:25.788 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53000 10 6452 1 2025-09-17 14:03:26.154 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45786 10 6452 1 2025-09-17 14:04:30.361 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:04:30.279 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:04:30.280 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 14:04:30.228 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 14:04:30.203 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:04:26.565 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33568 10 6452 1 2025-09-17 14:05:26.929 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39626 10 6452 1 2025-09-17 14:01:30.943 00:06:00.055 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 14:06:27.351 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41378 10 6452 1 2025-09-17 14:07:27.713 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55282 10 6452 1 2025-09-17 14:04:30.942 00:05:00.060 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-17 14:08:28.119 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40152 10 6452 1 2025-09-17 14:09:30.325 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 14:09:29.978 00:00:00.052 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 14:09:30.222 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:09:30.282 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:09:30.367 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:09:28.526 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38562 10 6452 1 2025-09-17 14:10:28.931 00:00:10.472 TCP 1.101.0.1:3000 -> 23.104.0.1:55800 12 10367 1 2025-09-17 14:11:29.443 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58898 10 6452 1 2025-09-17 14:08:30.945 00:05:00.055 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-17 14:12:29.851 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:35862 10 6452 1 2025-09-17 14:13:30.277 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58800 10 6452 1 2025-09-17 14:14:30.519 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 14:14:30.351 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 14:14:30.301 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:14:30.428 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:10:30.944 00:05:00.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-17 14:14:30.510 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:14:30.677 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42358 10 6452 1 2025-09-17 14:15:31.106 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47626 10 6452 1 2025-09-17 14:16:31.506 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56392 10 6452 1 2025-09-17 14:17:31.912 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43768 12 6556 1 2025-09-17 14:14:30.948 00:05:00.052 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-17 14:18:32.319 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53110 10 6452 1 2025-09-17 14:19:30.657 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:19:30.658 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 14:19:30.650 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 14:19:30.803 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:19:30.738 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:19:32.720 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41476 10 6452 1 2025-09-17 14:16:30.946 00:05:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-17 14:20:33.131 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:39026 12 10367 1 2025-09-17 14:21:33.608 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43680 10 6452 1 2025-09-17 14:22:34.008 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52044 10 6452 1 2025-09-17 14:23:34.414 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:60984 10 6452 1 2025-09-17 14:24:30.646 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 14:20:30.951 00:05:00.076 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-17 14:24:30.707 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 14:24:30.510 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:24:30.565 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:24:30.654 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:24:34.777 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40580 10 6452 1 2025-09-17 14:25:35.185 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43258 10 6452 1 2025-09-17 14:22:30.949 00:05:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-17 14:26:35.590 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45656 10 6452 1 2025-09-17 14:27:35.994 00:00:10.933 TCP 1.101.0.1:3000 -> 23.104.0.1:53702 10 6452 1 2025-09-17 14:28:36.961 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38170 10 6452 1 2025-09-17 14:29:30.741 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:29:30.663 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 14:29:30.719 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 14:29:30.691 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:29:30.659 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:29:37.368 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55614 10 6452 1 2025-09-17 14:26:30.953 00:05:00.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-17 14:30:37.733 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53246 10 6452 1 2025-09-17 14:31:38.144 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39052 10 6452 1 2025-09-17 14:28:30.951 00:05:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-17 14:32:38.554 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40144 10 6452 1 2025-09-17 14:33:38.919 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56306 10 6452 1 2025-09-17 14:34:31.154 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:34:31.078 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 14:34:30.831 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 14:34:30.671 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:34:31.070 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:34:39.316 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54568 10 6452 1 2025-09-17 14:35:39.720 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47382 10 6452 1 2025-09-17 14:32:30.954 00:05:00.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-17 14:36:40.129 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53498 10 6452 1 2025-09-17 14:37:40.533 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34012 10 6452 1 2025-09-17 14:34:30.952 00:05:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-17 14:38:40.936 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:58066 10 6452 1 2025-09-17 14:39:30.920 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:39:30.839 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:39:30.603 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 14:39:30.837 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 14:39:30.936 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:39:41.352 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43662 10 6452 1 2025-09-17 14:40:41.712 00:00:10.739 TCP 1.101.0.1:3000 -> 23.104.0.1:45378 10 6452 1 2025-09-17 14:41:42.507 00:00:14.973 TCP 1.101.0.1:3000 -> 23.104.0.1:51918 10 6452 1 2025-09-17 14:38:30.955 00:05:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-17 14:42:47.527 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34688 10 6452 1 2025-09-17 14:43:47.927 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:43534 10 6452 1 2025-09-17 14:44:31.000 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 14:44:31.154 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 14:44:30.888 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:44:30.997 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:44:31.081 00:00:00.039 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:40:30.953 00:05:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-17 14:44:48.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37942 10 6452 1 2025-09-17 14:45:48.753 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55556 10 6452 1 2025-09-17 14:46:49.152 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43812 10 6452 1 2025-09-17 14:47:49.556 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57922 10 6452 1 2025-09-17 14:44:30.957 00:05:00.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-17 14:48:49.960 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39552 10 6452 1 2025-09-17 14:49:31.444 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 14:49:31.231 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 14:49:31.475 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:49:31.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:49:31.613 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:49:50.361 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 10 6452 1 2025-09-17 14:46:30.954 00:05:00.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-17 14:50:50.769 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47126 10 6452 1 2025-09-17 14:51:51.139 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51420 10 6452 1 2025-09-17 14:52:51.548 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:60026 10 6452 1 2025-09-17 14:53:51.908 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37696 10 6452 1 2025-09-17 14:54:31.168 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 14:50:30.957 00:05:00.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-17 14:54:31.225 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 14:54:30.774 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:54:31.223 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 14:54:31.306 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 14:54:52.315 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37144 10 6452 1 2025-09-17 14:55:52.714 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36626 10 6452 1 2025-09-17 14:52:30.955 00:05:00.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-17 14:56:53.117 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43012 10 6452 1 2025-09-17 14:57:53.517 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47512 10 6452 1 Summary: total flows: 139, total bytes: 418728, total packets: 1020, avg bps: 878, avg pps: 0, avg bpp: 410 Time window: 2025-09-17 13:54:30 - 2025-09-17 14:58:03 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0043s User: 0.0009s Wall: 0.0018s flows/second: 76370.0 Runtime: 0.0018s