Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 03:59:14.692 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50162 10 6452 1 2025-09-28 03:59:36.194 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 03:59:36.172 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 03:59:35.916 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 03:59:35.555 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 03:59:36.112 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:00:15.103 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:40822 10 6452 1 2025-09-28 03:55:36.057 00:06:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 04:01:15.466 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59108 10 6452 1 2025-09-28 03:56:36.060 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 04:02:15.828 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59204 10 6452 1 2025-09-28 04:03:16.198 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34240 10 6452 1 2025-09-28 04:04:16.598 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51584 10 6452 1 2025-09-28 04:04:35.841 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 04:04:35.928 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:04:35.770 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:04:35.669 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:04:35.759 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:05:17.003 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50676 10 6452 1 2025-09-28 04:06:17.418 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35628 10 6452 1 2025-09-28 04:07:17.826 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44776 10 6452 1 2025-09-28 04:02:36.060 00:06:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 04:08:18.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51842 10 6452 1 2025-09-28 04:03:36.062 00:06:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 04:09:18.590 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39484 10 6452 1 2025-09-28 04:09:35.675 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:09:36.152 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:09:35.941 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:09:35.958 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:09:36.041 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 04:10:19.000 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42180 10 6452 1 2025-09-28 04:11:19.372 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55274 10 6452 1 2025-09-28 04:12:19.775 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:51132 12 10367 1 2025-09-28 04:13:20.262 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40834 10 6452 1 2025-09-28 04:14:20.662 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41050 10 6452 1 2025-09-28 04:14:35.952 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:14:36.065 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:14:36.079 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:14:36.117 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:14:36.199 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 04:09:36.064 00:06:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 04:15:21.080 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57254 10 6452 1 2025-09-28 04:10:36.067 00:06:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 04:16:21.491 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:38170 11 6504 1 2025-09-28 04:17:21.945 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49298 10 6452 1 2025-09-28 04:18:22.357 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51952 10 6452 1 2025-09-28 04:19:22.762 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59354 10 6452 1 2025-09-28 04:19:36.656 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 04:19:36.574 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:19:36.472 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:19:36.540 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:19:36.380 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:20:23.128 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49156 10 6452 1 2025-09-28 04:21:23.553 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34942 10 6452 1 2025-09-28 04:16:36.064 00:06:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 04:22:23.918 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58040 10 6452 1 2025-09-28 04:17:36.067 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 04:23:24.322 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54630 10 6452 1 2025-09-28 04:24:36.413 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:24:24.731 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47098 10 6452 1 2025-09-28 04:24:36.443 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:24:36.292 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:24:36.162 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:24:36.495 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 04:25:25.135 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41850 10 6452 1 2025-09-28 04:26:25.545 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57064 10 6452 1 2025-09-28 04:27:25.947 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34724 10 6452 1 2025-09-28 04:28:26.359 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50576 10 6452 1 2025-09-28 04:23:36.066 00:06:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 04:29:36.211 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:24:36.068 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 04:29:36.297 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:29:36.100 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:29:26.762 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:44186 10 6452 1 2025-09-28 04:29:36.217 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:29:36.300 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 04:30:27.181 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57510 10 6452 1 2025-09-28 04:31:27.548 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51078 10 6452 1 2025-09-28 04:32:27.949 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40748 10 6452 1 2025-09-28 04:33:28.357 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58386 10 6452 1 2025-09-28 04:34:36.472 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:34:36.468 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:34:36.443 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:34:28.765 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:43596 10 6452 1 2025-09-28 04:34:36.531 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:34:36.613 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 04:35:29.152 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59308 10 6452 1 2025-09-28 04:30:36.068 00:06:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 04:31:36.070 00:06:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 04:36:29.559 00:00:11.078 TCP 1.101.0.1:3000 -> 23.104.0.1:60732 10 6452 1 2025-09-28 04:37:30.678 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36816 10 6452 1 2025-09-28 04:38:31.112 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40200 10 6452 1 2025-09-28 04:39:36.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 04:39:36.642 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:39:36.415 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:39:36.576 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:39:36.690 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:39:31.487 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34014 10 6452 1 2025-09-28 04:40:31.896 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:58216 10 6452 1 2025-09-28 04:41:32.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51636 12 6556 1 2025-09-28 04:37:36.069 00:06:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 04:42:32.682 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44410 10 6452 1 2025-09-28 04:38:36.072 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 04:43:33.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39386 10 6452 1 2025-09-28 04:44:36.728 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 04:44:36.647 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:44:36.559 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:44:36.726 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:44:36.793 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:44:33.511 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34532 10 6452 1 2025-09-28 04:45:33.918 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41688 10 6452 1 2025-09-28 04:46:34.324 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49486 10 6452 1 2025-09-28 04:47:34.723 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58634 10 6452 1 2025-09-28 04:48:35.147 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51118 10 6452 1 2025-09-28 04:49:36.686 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:49:36.575 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:49:36.705 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:49:36.755 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:49:36.839 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 04:44:36.071 00:06:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 04:49:35.509 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:58450 10 6452 1 2025-09-28 04:45:36.074 00:06:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 04:50:35.877 00:00:10.535 TCP 1.101.0.1:3000 -> 23.104.0.1:55908 10 6452 1 2025-09-28 04:51:36.447 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58252 10 6452 1 2025-09-28 04:52:36.843 00:00:10.640 TCP 1.101.0.1:3000 -> 23.104.0.1:50704 10 6452 1 2025-09-28 04:53:37.518 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48544 10 6452 1 2025-09-28 04:54:36.995 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 04:54:36.917 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 04:54:36.970 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 04:54:36.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:54:36.911 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 04:54:37.920 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60896 10 6452 1 2025-09-28 04:55:38.322 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40588 10 6452 1 2025-09-28 04:51:36.072 00:06:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 04:56:38.728 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36874 10 6452 1 2025-09-28 04:52:36.074 00:06:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 04:57:39.135 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33822 10 6452 1 2025-09-28 04:58:39.497 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55924 10 6452 1 Summary: total flows: 138, total bytes: 421809, total packets: 1037, avg bps: 889, avg pps: 0, avg bpp: 406 Time window: 2025-09-28 03:55:36 - 2025-09-28 04:58:49 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0023s User: 0.0011s Wall: 0.0013s flows/second: 105258.0 Runtime: 0.0013s