Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 02:59:23.992 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47440 10 6452 1 2025-09-20 03:00:24.399 00:00:10.876 TCP 1.101.0.1:3000 -> 23.104.0.1:43530 10 6452 1 2025-09-20 03:00:43.419 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:00:43.268 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:00:43.560 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:00:43.498 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:00:43.643 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:01:25.316 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45126 10 6452 1 2025-09-20 02:56:32.231 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 02:56:32.219 00:06:00.017 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 03:02:25.719 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48592 10 6452 1 2025-09-20 03:03:26.137 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43788 10 6452 1 2025-09-20 03:04:26.558 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39020 10 6452 1 2025-09-20 03:05:26.962 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38704 10 6452 1 2025-09-20 03:05:43.785 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:05:43.945 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:05:43.791 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:05:44.007 00:00:00.045 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:05:43.874 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:06:27.373 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43482 10 6452 1 2025-09-20 03:07:27.779 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60896 10 6452 1 2025-09-20 03:03:32.221 00:06:00.017 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 03:03:32.234 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 03:08:28.190 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36052 10 6452 1 2025-09-20 03:09:28.593 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51502 10 6452 1 2025-09-20 03:10:43.854 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:10:28.957 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54766 10 6452 1 2025-09-20 03:10:43.519 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:10:43.432 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:10:43.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:10:43.782 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:11:29.364 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36976 10 6452 1 2025-09-20 03:12:29.730 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59716 10 6452 1 2025-09-20 03:13:30.140 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58066 10 6452 1 2025-09-20 03:14:30.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48208 10 6452 1 2025-09-20 03:10:32.235 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 03:10:32.221 00:06:00.017 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 03:15:43.937 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:15:43.782 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:15:43.806 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:15:30.944 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58250 10 6452 1 2025-09-20 03:15:43.854 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:15:43.678 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:16:31.346 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50984 10 6452 1 2025-09-20 03:17:31.752 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49632 10 6452 1 2025-09-20 03:18:32.156 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45792 10 6452 1 2025-09-20 03:19:32.557 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42902 10 6452 1 2025-09-20 03:20:44.067 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:20:43.863 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:20:43.769 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:20:32.967 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55740 10 6452 1 2025-09-20 03:20:43.984 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:20:44.093 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:21:33.382 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6452 1 2025-09-20 03:17:32.223 00:06:00.018 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 03:17:32.235 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 03:22:33.747 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42096 10 6452 1 2025-09-20 03:23:34.152 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36442 10 6452 1 2025-09-20 03:24:34.558 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:40396 10 6452 1 2025-09-20 03:25:43.887 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:25:43.989 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:25:43.998 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:25:43.803 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:25:43.911 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:25:34.950 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59388 10 6452 1 2025-09-20 03:26:35.359 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:37594 12 10365 1 2025-09-20 03:27:35.836 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:45016 10 6452 1 2025-09-20 03:28:36.222 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48616 10 6452 1 2025-09-20 03:24:32.237 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 03:24:32.225 00:06:00.020 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 03:29:36.630 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49966 10 6452 1 2025-09-20 03:30:44.337 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:30:44.117 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:30:43.971 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:30:44.256 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:30:43.789 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:30:36.989 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57678 10 6452 1 2025-09-20 03:31:37.394 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:56674 14 10471 1 2025-09-20 03:32:37.878 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41124 10 6452 1 2025-09-20 03:33:38.288 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52674 10 6452 1 2025-09-20 03:34:38.707 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35044 10 6452 1 2025-09-20 03:35:44.131 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:35:44.069 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:35:44.267 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:35:43.913 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:35:44.350 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:35:39.115 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58740 10 6452 1 2025-09-20 03:31:32.242 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 03:31:32.235 00:06:00.014 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 03:36:39.523 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52426 10 6452 1 2025-09-20 03:37:39.936 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:53956 10 6452 1 2025-09-20 03:38:40.314 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43224 10 6452 1 2025-09-20 03:39:40.717 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42366 10 6452 1 2025-09-20 03:40:44.513 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:40:44.622 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:40:44.498 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:40:44.252 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:40:44.580 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:40:41.135 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40904 10 6452 1 2025-09-20 03:41:41.534 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36376 10 6452 1 2025-09-20 03:42:41.904 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40178 12 6556 1 2025-09-20 03:38:32.237 00:06:00.016 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 03:38:32.247 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 03:43:42.324 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39060 10 6452 1 2025-09-20 03:44:42.689 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47708 10 6452 1 2025-09-20 03:45:44.505 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:45:44.309 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:45:44.571 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:45:44.460 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:45:44.654 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:45:43.064 00:00:10.551 TCP 1.101.0.1:3000 -> 23.104.0.1:48960 10 6452 1 2025-09-20 03:46:43.659 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60884 10 6452 1 2025-09-20 03:47:44.069 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33806 10 6452 1 2025-09-20 03:48:44.467 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37056 10 6452 1 2025-09-20 03:49:44.863 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41192 10 6452 1 2025-09-20 03:45:32.237 00:06:00.018 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 03:45:32.250 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 03:50:44.532 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:50:44.447 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:50:44.454 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:50:44.450 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:50:44.435 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:50:45.273 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48440 10 6452 1 2025-09-20 03:51:45.641 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52886 10 6452 1 2025-09-20 03:52:46.049 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57144 10 6452 1 2025-09-20 03:53:46.450 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54720 10 6452 1 2025-09-20 03:54:46.856 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43752 10 6452 1 2025-09-20 03:55:44.672 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 03:55:44.656 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 03:55:44.464 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:55:44.589 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 03:55:44.638 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 03:55:47.271 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46496 10 6452 1 2025-09-20 03:56:47.673 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52450 10 6452 1 2025-09-20 03:52:32.253 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 03:52:32.238 00:06:00.019 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 03:57:48.107 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:43662 10 6452 1 Summary: total flows: 137, total bytes: 416046, total packets: 967, avg bps: 894, avg pps: 0, avg bpp: 430 Time window: 2025-09-20 02:56:32 - 2025-09-20 03:58:32 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0038s User: 0.0008s Wall: 0.0029s flows/second: 47146.3 Runtime: 0.0029s