Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 04:59:24.865 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58118 10 6452 1 2025-09-20 05:00:25.279 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48708 10 6452 1 2025-09-20 04:55:32.269 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 04:55:32.253 00:06:00.021 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 05:00:45.832 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:00:45.751 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:00:45.869 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:00:45.749 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:00:45.846 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:01:25.640 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56500 10 6452 1 2025-09-20 05:02:26.064 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:60148 10 6452 1 2025-09-20 05:03:26.425 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47984 10 6452 1 2025-09-20 05:04:26.829 00:00:20.129 TCP 1.101.0.1:3000 -> 23.104.0.1:42346 10 6452 1 2025-09-20 05:05:45.829 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:05:46.230 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:05:37.025 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50426 10 6452 1 2025-09-20 05:05:46.003 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:05:46.147 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:05:46.089 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:06:37.427 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54430 10 6452 1 2025-09-20 05:02:32.253 00:06:00.023 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 05:02:32.271 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 05:07:37.831 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44848 10 6452 1 2025-09-20 05:08:38.233 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55820 10 6452 1 2025-09-20 05:09:38.650 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42456 10 6452 1 2025-09-20 05:10:45.983 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:10:46.109 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:10:39.060 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43712 10 6452 1 2025-09-20 05:10:46.589 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:10:46.503 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:10:46.671 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:11:39.469 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34978 10 6452 1 2025-09-20 05:12:39.837 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:54666 10 6452 1 2025-09-20 05:13:40.264 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33290 10 6452 1 2025-09-20 05:09:32.274 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 05:09:32.255 00:06:00.022 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 05:14:40.670 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45398 10 6452 1 2025-09-20 05:15:46.080 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:15:46.065 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:15:46.257 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:15:46.175 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:15:46.339 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:15:41.098 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50114 10 6452 1 2025-09-20 05:16:41.505 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:43346 10 6452 1 2025-09-20 05:17:41.929 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:38092 10 6452 1 2025-09-20 05:18:42.305 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40856 10 6452 1 2025-09-20 05:19:42.704 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39776 10 6452 1 2025-09-20 05:20:46.414 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:20:46.176 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:20:46.367 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:20:46.247 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:20:46.450 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:20:43.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54736 10 6452 1 2025-09-20 05:16:32.257 00:06:00.026 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 05:16:32.276 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 05:21:43.524 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44588 10 6452 1 2025-09-20 05:22:43.926 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:49894 10 6452 1 2025-09-20 05:23:44.363 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38896 10 6452 1 2025-09-20 05:24:44.775 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46280 10 6452 1 2025-09-20 05:25:46.570 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:25:46.487 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:25:46.526 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:25:46.183 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:25:46.407 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:25:45.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52638 10 6452 1 2025-09-20 05:26:45.551 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50566 10 6452 1 2025-09-20 05:27:45.952 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50864 10 6452 1 2025-09-20 05:23:32.259 00:06:00.024 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 05:23:32.281 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 05:28:46.363 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44728 10 6452 1 2025-09-20 05:29:46.738 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46758 10 6452 1 2025-09-20 05:30:46.715 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:30:46.580 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:30:46.553 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:30:46.553 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:30:46.635 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:30:47.158 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36918 10 6452 1 2025-09-20 05:31:47.563 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34682 10 6452 1 2025-09-20 05:32:47.965 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:33718 10 6452 1 2025-09-20 05:33:48.344 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40918 10 6452 1 2025-09-20 05:34:48.708 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52754 10 6452 1 2025-09-20 05:30:32.261 00:06:00.023 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 05:30:32.281 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 05:35:47.459 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:35:47.226 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:35:47.288 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:35:47.376 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:35:47.337 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:35:49.116 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47062 10 6452 1 2025-09-20 05:36:49.519 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60722 10 6452 1 2025-09-20 05:37:49.921 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:36542 10 6452 1 2025-09-20 05:38:50.295 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42908 10 6452 1 2025-09-20 05:39:50.696 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58238 10 6452 1 2025-09-20 05:40:46.588 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:40:46.836 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:40:46.511 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:40:46.505 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:40:46.730 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:40:51.111 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36910 10 6452 1 2025-09-20 05:41:51.476 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:47158 10 6452 1 2025-09-20 05:37:32.262 00:06:00.026 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 05:37:32.284 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 05:42:51.838 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:48426 10 6452 1 2025-09-20 05:43:52.265 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46160 10 6452 1 2025-09-20 05:44:52.634 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54280 10 6452 1 2025-09-20 05:45:46.930 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:45:46.731 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:45:46.673 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:45:46.848 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:45:46.792 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:45:53.062 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49790 10 6452 1 2025-09-20 05:46:53.476 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51372 10 6452 1 2025-09-20 05:47:53.886 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56508 10 6452 1 2025-09-20 05:48:54.304 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:44628 10 6452 1 2025-09-20 05:44:32.287 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 9 601 1 2025-09-20 05:44:32.283 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 05:49:54.685 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43352 10 6452 1 2025-09-20 05:50:47.083 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:50:46.953 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:50:46.949 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:50:47.002 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:50:46.762 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:50:55.113 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47256 10 6452 1 2025-09-20 05:51:55.524 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48070 10 6452 1 2025-09-20 05:52:55.933 00:00:14.978 TCP 1.101.0.1:3000 -> 23.104.0.1:55862 10 6452 1 2025-09-20 05:54:00.980 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50732 10 6452 1 2025-09-20 05:55:01.390 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 2025-09-20 05:55:47.147 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 05:55:47.065 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:55:46.983 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 05:55:46.984 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 05:55:47.073 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 05:56:01.800 00:00:10.498 TCP 1.101.0.1:3000 -> 23.104.0.1:40482 13 10419 1 2025-09-20 05:51:32.284 00:06:00.007 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 05:51:32.287 00:06:00.042 TCP 179.21.23.21:38570 -> 179.21.23.23:179 8 549 1 2025-09-20 05:57:02.338 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44732 10 6452 1 2025-09-20 05:58:02.702 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44426 10 6452 1 Summary: total flows: 137, total bytes: 412133, total packets: 965, avg bps: 876, avg pps: 0, avg bpp: 427 Time window: 2025-09-20 04:55:32 - 2025-09-20 05:58:13 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0036s User: 0.0012s Wall: 0.0038s flows/second: 35956.4 Runtime: 0.0038s