Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 06:58:41.636 00:00:10.845 TCP 1.101.0.1:3000 -> 23.104.0.1:37836 10 6452 1 2025-10-07 06:58:59.289 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 06:58:59.141 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 06:58:59.204 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 06:58:59.206 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 06:58:59.206 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 06:54:40.532 00:06:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 06:59:42.515 00:00:10.554 TCP 1.101.0.1:3000 -> 23.104.0.1:40034 10 6452 1 2025-10-07 06:55:40.535 00:06:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 07:00:43.113 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:48588 10 6452 1 2025-10-07 07:01:43.477 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55848 10 6452 1 2025-10-07 07:02:43.878 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60696 10 6452 1 2025-10-07 07:03:44.295 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41918 10 6452 1 2025-10-07 07:03:59.505 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 07:03:59.233 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 07:03:59.132 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 07:03:59.149 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:03:59.423 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:04:44.709 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43712 10 6452 1 2025-10-07 07:05:45.120 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60114 10 6452 1 2025-10-07 07:01:40.533 00:06:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 07:06:45.524 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55684 10 6452 1 2025-10-07 07:02:40.535 00:06:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 07:07:45.931 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33512 10 6452 1 2025-10-07 07:08:59.570 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 07:08:59.626 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 07:08:59.313 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:08:46.360 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48818 10 6452 1 2025-10-07 07:08:59.575 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:08:59.658 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 07:09:46.767 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:53592 10 6452 1 2025-10-07 07:10:47.141 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49642 10 6452 1 2025-10-07 07:11:47.560 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60546 10 6452 1 2025-10-07 07:12:47.962 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33408 10 6452 1 2025-10-07 07:08:40.533 00:06:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 07:13:59.473 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 07:13:48.361 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59702 10 6452 1 2025-10-07 07:13:59.298 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 07:13:59.390 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:13:59.660 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:13:59.743 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 07:09:40.536 00:06:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 07:14:48.775 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:45364 10 6452 1 2025-10-07 07:15:49.148 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52086 10 6452 1 2025-10-07 07:16:49.552 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54256 10 6452 1 2025-10-07 07:17:49.956 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:50504 10 6452 1 2025-10-07 07:18:59.548 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 07:18:59.465 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:18:59.753 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 07:18:59.642 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 07:18:59.644 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:18:50.328 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47582 10 6452 1 2025-10-07 07:19:50.735 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46858 10 6452 1 2025-10-07 07:15:40.536 00:06:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 07:20:51.155 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36290 10 6452 1 2025-10-07 07:16:40.538 00:06:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 07:21:51.572 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54940 10 6452 1 2025-10-07 07:22:51.976 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40654 10 6452 1 2025-10-07 07:23:59.829 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 07:23:59.747 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:23:59.652 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 07:23:59.747 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 07:23:59.678 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:23:52.389 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52996 10 6452 1 2025-10-07 07:24:52.753 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56966 10 6452 1 2025-10-07 07:25:53.156 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35386 10 6452 1 2025-10-07 07:26:53.568 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52002 10 6452 1 2025-10-07 07:22:40.536 00:06:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 07:27:53.975 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:38858 10 6452 1 2025-10-07 07:23:40.539 00:06:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 07:28:59.852 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 07:28:59.904 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 07:28:59.598 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:28:59.903 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:28:59.985 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 07:28:54.396 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37786 10 6452 1 2025-10-07 07:29:54.765 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:52690 10 6452 1 2025-10-07 07:30:55.192 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48868 10 6452 1 2025-10-07 07:31:55.596 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38108 10 6452 1 2025-10-07 07:32:56.004 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46218 10 6452 1 2025-10-07 07:33:59.767 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 07:33:59.731 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 07:33:59.611 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 07:33:59.463 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:33:59.684 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:33:56.408 00:00:14.548 TCP 1.101.0.1:3000 -> 23.104.0.1:42442 10 6452 1 2025-10-07 07:29:40.539 00:06:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 07:35:00.997 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57404 10 6452 1 2025-10-07 07:30:40.541 00:06:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 07:36:01.399 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 10 6452 1 2025-10-07 07:37:01.802 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48700 10 6452 1 2025-10-07 07:38:02.204 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38482 10 6452 1 2025-10-07 07:38:59.864 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 07:38:59.963 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:39:00.075 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 07:39:00.060 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:39:00.045 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 07:39:02.613 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47458 10 6452 1 2025-10-07 07:40:03.024 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35548 10 6452 1 2025-10-07 07:41:03.426 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50004 10 6452 1 2025-10-07 07:36:40.540 00:06:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 07:42:03.827 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56164 10 6452 1 2025-10-07 07:37:40.543 00:06:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 07:43:04.232 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43288 10 6452 1 2025-10-07 07:44:00.190 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 07:44:00.275 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 07:44:00.272 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:44:00.281 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:44:00.365 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 07:44:04.641 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56888 10 6452 1 2025-10-07 07:45:05.059 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46114 10 6452 1 2025-10-07 07:46:05.466 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59736 10 6452 1 2025-10-07 07:47:05.865 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46244 10 6452 1 2025-10-07 07:48:06.272 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38014 10 6452 1 2025-10-07 07:43:40.541 00:06:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 07:48:59.904 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:49:00.190 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 07:49:00.297 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 07:49:00.274 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:49:00.356 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 07:49:06.679 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36592 10 6452 1 2025-10-07 07:44:40.543 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 07:50:07.120 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:43660 10 6452 1 2025-10-07 07:51:07.586 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47644 10 6452 1 2025-10-07 07:52:07.988 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37936 10 6452 1 2025-10-07 07:53:08.402 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32858 10 6452 1 2025-10-07 07:54:00.384 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 07:54:00.369 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 07:54:00.304 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 07:54:00.003 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:54:00.302 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 07:54:08.806 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43552 10 6452 1 2025-10-07 07:55:09.217 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39602 10 6452 1 2025-10-07 07:50:40.543 00:06:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 07:56:09.620 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33346 10 6452 1 2025-10-07 07:51:40.549 00:06:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 07:57:10.018 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54030 10 6452 1 2025-10-07 07:58:10.419 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40934 10 6452 1 Summary: total flows: 138, total bytes: 417738, total packets: 1032, avg bps: 874, avg pps: 0, avg bpp: 404 Time window: 2025-10-07 06:54:40 - 2025-10-07 07:58:20 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0047s User: 0.0009s Wall: 0.0022s flows/second: 62730.5 Runtime: 0.0022s