Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-29 20:59:22.586 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58316 10 6452 1 2025-09-29 20:54:36.756 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 21:00:24.894 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:00:25.237 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:00:24.981 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:00:25.104 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:00:25.187 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:00:22.993 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60504 10 6452 1 2025-09-29 21:01:23.396 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43342 10 6452 1 2025-09-29 21:02:23.754 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:59748 10 6452 1 2025-09-29 21:03:24.172 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36090 10 6452 1 2025-09-29 21:04:24.576 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40546 10 6452 1 2025-09-29 21:05:24.951 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:05:25.166 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:05:25.159 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:05:25.158 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:05:25.241 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:05:24.976 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36920 10 6452 1 2025-09-29 21:00:36.762 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 21:01:36.761 00:06:00.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 21:06:25.377 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:59122 10 6452 1 2025-09-29 21:07:25.731 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 10 6452 1 2025-09-29 21:08:26.140 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49904 10 6452 1 2025-09-29 21:09:26.549 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42134 10 6452 1 2025-09-29 21:10:25.272 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:10:25.384 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:10:25.255 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:10:25.103 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:10:25.188 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:10:26.956 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39644 10 6452 1 2025-09-29 21:11:27.367 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48138 10 6452 1 2025-09-29 21:07:36.766 00:06:00.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 21:12:27.770 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46458 11 6492 1 2025-09-29 21:13:28.183 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58818 10 6452 1 2025-09-29 21:08:36.764 00:06:00.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 21:14:28.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48280 10 6452 1 2025-09-29 21:15:25.327 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:15:25.132 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:15:25.165 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:15:25.229 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:15:25.313 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:15:28.948 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45882 10 6452 1 2025-09-29 21:16:29.363 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39398 10 6452 1 2025-09-29 21:17:29.765 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33876 10 6452 1 2025-09-29 21:18:30.181 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60010 10 6452 1 2025-09-29 21:14:36.773 00:06:00.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 21:19:30.595 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57276 10 6452 1 2025-09-29 21:20:25.700 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:20:25.768 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:20:25.545 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:20:25.637 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:20:25.719 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:15:36.770 00:06:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 21:20:30.967 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45474 10 6452 1 2025-09-29 21:21:31.373 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55854 10 6452 1 2025-09-29 21:22:31.782 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 10 6452 1 2025-09-29 21:23:32.190 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55590 10 6452 1 2025-09-29 21:24:32.593 00:00:10.665 TCP 1.101.0.1:3000 -> 23.104.0.1:54892 10 6452 1 2025-09-29 21:25:25.506 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:25:25.533 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:25:25.533 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:25:25.367 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:25:25.423 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:25:33.296 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 10 6452 1 2025-09-29 21:21:36.775 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 21:26:33.699 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59326 10 6452 1 2025-09-29 21:22:36.771 00:06:00.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 21:27:34.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55590 10 6452 1 2025-09-29 21:28:34.520 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44318 10 6452 1 2025-09-29 21:29:34.883 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:48240 12 6556 1 2025-09-29 21:30:25.612 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:30:25.614 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:30:25.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:30:25.614 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:30:25.696 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:30:35.322 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35254 10 6452 1 2025-09-29 21:31:35.738 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49282 10 6452 1 2025-09-29 21:32:36.156 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47658 10 6452 1 2025-09-29 21:28:36.778 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 21:33:36.558 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33496 10 6452 1 2025-09-29 21:29:36.775 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 21:34:36.916 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45190 10 6452 1 2025-09-29 21:35:25.969 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:35:25.883 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:35:25.779 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:35:25.626 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:35:25.886 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:35:37.277 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34934 10 6452 1 2025-09-29 21:36:37.684 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40256 10 6452 1 2025-09-29 21:37:38.106 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46150 10 6452 1 2025-09-29 21:38:38.510 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52604 10 6452 1 2025-09-29 21:39:38.915 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46642 10 6452 1 2025-09-29 21:40:25.885 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:40:25.800 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:40:25.927 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:40:25.893 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:40:25.803 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:35:36.781 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 21:40:39.324 00:00:11.078 TCP 1.101.0.1:3000 -> 23.104.0.1:47286 10 6452 1 2025-09-29 21:36:36.777 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 21:41:40.447 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58644 10 6452 1 2025-09-29 21:42:40.848 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:36434 12 10375 1 2025-09-29 21:43:41.297 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38592 10 6452 1 2025-09-29 21:44:41.661 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39804 10 6452 1 2025-09-29 21:45:26.080 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:45:26.322 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:45:26.402 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:45:26.309 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:45:26.391 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:45:42.027 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58054 10 6452 1 2025-09-29 21:46:42.432 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37228 10 6452 1 2025-09-29 21:42:36.790 00:06:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 21:47:42.832 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:38082 10 6452 1 2025-09-29 21:43:36.789 00:06:00.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 21:48:43.223 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43722 10 6452 1 2025-09-29 21:49:43.626 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42086 10 6452 1 2025-09-29 21:50:25.963 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:50:26.180 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:50:25.966 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:50:25.938 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:50:25.880 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:50:43.985 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:41726 10 6452 1 2025-09-29 21:51:44.400 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42878 10 6452 1 2025-09-29 21:52:44.806 00:00:10.664 TCP 1.101.0.1:3000 -> 23.104.0.1:59766 12 10367 1 2025-09-29 21:53:45.519 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55590 10 6452 1 2025-09-29 21:49:36.792 00:06:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 21:54:45.885 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51964 10 6452 1 2025-09-29 21:55:25.984 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 21:55:26.120 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 21:55:26.169 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 21:55:25.861 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:55:25.903 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 21:50:36.790 00:06:00.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 21:55:46.313 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43836 10 6452 1 2025-09-29 21:56:46.724 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-09-29 21:57:47.138 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55686 10 6452 1 Summary: total flows: 136, total bytes: 418407, total packets: 1015, avg bps: 880, avg pps: 0, avg bpp: 412 Time window: 2025-09-29 20:54:36 - 2025-09-29 21:57:57 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0024s User: 0.0012s Wall: 0.0021s flows/second: 66243.8 Runtime: 0.0021s