Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-19 10:59:19.315 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43818 10 6452 1 2025-09-19 11:00:24.450 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:00:24.368 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:00:24.359 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:00:24.376 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:00:24.166 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:00:19.687 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46712 10 6452 1 2025-09-19 11:01:20.111 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:37962 12 10365 1 2025-09-19 11:02:20.595 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47058 10 6452 1 2025-09-19 10:57:31.844 00:06:00.062 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 11:03:20.997 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58150 10 6452 1 2025-09-19 11:04:21.402 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38092 10 6452 1 2025-09-19 10:59:31.842 00:06:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 11:05:24.402 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:05:23.925 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:05:24.279 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:05:24.343 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:05:24.361 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:05:21.810 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48060 10 6452 1 2025-09-19 11:06:22.211 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47342 10 6452 1 2025-09-19 11:07:22.615 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46894 10 6452 1 2025-09-19 11:08:23.021 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36726 10 6452 1 2025-09-19 11:09:23.422 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49728 10 6452 1 2025-09-19 11:04:31.845 00:06:00.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 11:10:24.450 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:10:24.486 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:10:24.436 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:10:24.386 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:10:24.368 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:10:23.830 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47512 10 6452 1 2025-09-19 11:11:24.231 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44958 10 6452 1 2025-09-19 11:06:31.844 00:06:00.070 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 11:12:24.635 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40564 10 6452 1 2025-09-19 11:13:25.040 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:52452 10 6452 1 2025-09-19 11:14:25.500 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40086 10 6452 1 2025-09-19 11:15:24.686 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:15:24.851 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:15:24.622 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:15:24.677 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:15:24.761 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:15:25.859 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54458 10 6452 1 2025-09-19 11:11:31.847 00:06:00.071 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 11:16:26.273 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51310 10 6452 1 2025-09-19 11:17:26.683 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:46530 12 6556 1 2025-09-19 11:13:31.843 00:06:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 11:18:27.114 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42590 10 6452 1 2025-09-19 11:19:27.521 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55076 10 6452 1 2025-09-19 11:20:24.634 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:20:24.544 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:20:24.642 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:20:24.637 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:20:24.550 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:20:27.922 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:50462 10 6452 1 2025-09-19 11:21:28.341 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58120 10 6452 1 2025-09-19 11:22:28.763 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:32964 10 6452 1 2025-09-19 11:18:31.847 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 11:23:29.179 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44496 10 6452 1 2025-09-19 11:24:29.588 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52772 10 6452 1 2025-09-19 11:25:24.966 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:25:24.665 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:25:24.885 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:25:24.771 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:25:24.882 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:20:31.846 00:06:00.074 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 11:25:29.947 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55214 10 6452 1 2025-09-19 11:26:30.358 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49356 10 6452 1 2025-09-19 11:27:30.768 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59256 10 6452 1 2025-09-19 11:28:31.172 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37198 10 6452 1 2025-09-19 11:29:31.539 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51538 10 6452 1 2025-09-19 11:30:24.937 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:30:24.780 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:30:24.713 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:30:24.853 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:30:24.989 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:25:31.849 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 11:30:31.907 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39080 10 6452 1 2025-09-19 11:31:32.272 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51550 10 6452 1 2025-09-19 11:27:31.848 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 11:32:32.671 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45302 10 6452 1 2025-09-19 11:33:33.109 00:00:11.454 TCP 1.101.0.1:3000 -> 23.104.0.1:35792 10 6452 1 2025-09-19 11:34:34.600 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56184 10 6452 1 2025-09-19 11:35:24.804 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:35:24.805 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:35:24.887 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:35:25.163 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:35:25.081 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:35:35.015 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:48054 10 6452 1 2025-09-19 11:36:35.414 00:00:10.624 TCP 1.101.0.1:3000 -> 23.104.0.1:60870 10 6452 1 2025-09-19 11:32:31.853 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 11:37:36.103 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52874 10 6452 1 2025-09-19 11:38:36.521 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44252 10 6452 1 2025-09-19 11:34:31.853 00:06:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 11:39:36.932 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:49950 10 6452 1 2025-09-19 11:40:24.707 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:40:25.093 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:40:25.315 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:40:25.324 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:40:25.407 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:40:37.309 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32806 10 6452 1 2025-09-19 11:41:37.713 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35280 10 6452 1 2025-09-19 11:42:38.120 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41066 10 6452 1 2025-09-19 11:43:38.519 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43528 10 6452 1 2025-09-19 11:39:31.855 00:06:00.076 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 11:44:38.925 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:32822 13 6608 1 2025-09-19 11:45:25.334 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:45:25.330 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:45:25.006 00:00:00.049 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:45:25.115 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:45:25.252 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:45:39.358 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51726 10 6452 1 2025-09-19 11:41:31.852 00:06:00.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 11:46:39.764 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55572 10 6452 1 2025-09-19 11:47:40.178 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43198 10 6452 1 2025-09-19 11:48:40.540 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51592 10 6452 1 2025-09-19 11:49:40.947 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52826 10 6452 1 2025-09-19 11:50:25.333 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:50:25.167 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:50:25.348 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:50:25.125 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:50:25.432 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:50:41.358 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43614 10 6452 1 2025-09-19 11:46:31.857 00:06:00.076 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 11:51:41.736 00:00:10.537 TCP 1.101.0.1:3000 -> 23.104.0.1:60858 10 6452 1 2025-09-19 11:52:42.316 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34716 10 6452 1 2025-09-19 11:48:31.855 00:06:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 11:53:42.718 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:43226 10 6452 1 2025-09-19 11:54:43.121 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42952 10 6452 1 2025-09-19 11:55:25.327 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 11:55:25.539 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 11:55:25.280 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:55:25.502 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 11:55:25.585 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 11:55:43.533 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50344 10 6452 1 2025-09-19 11:56:43.950 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58746 10 6452 1 2025-09-19 11:57:44.354 00:00:10.624 TCP 1.101.0.1:3000 -> 23.104.0.1:59092 10 6452 1 2025-09-19 11:53:31.859 00:06:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 136, total bytes: 414598, total packets: 1015, avg bps: 891, avg pps: 0, avg bpp: 408 Time window: 2025-09-19 10:57:31 - 2025-09-19 11:59:31 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0011s User: 0.0034s Wall: 0.0024s flows/second: 55624.1 Runtime: 0.0025s