Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 12:59:04.716 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 10 6452 1 2025-09-20 13:00:05.156 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50026 10 6452 1 2025-09-20 13:00:55.414 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:00:55.567 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:00:55.603 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:00:55.604 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:00:55.684 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:01:05.563 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46110 10 6452 1 2025-09-20 13:02:05.967 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39260 10 6452 1 2025-09-20 13:03:06.335 00:00:10.816 TCP 1.101.0.1:3000 -> 23.104.0.1:42244 10 6452 1 2025-09-20 12:58:32.414 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 12:58:32.419 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 13:04:07.195 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59818 10 6452 1 2025-09-20 13:05:07.557 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47768 10 6452 1 2025-09-20 13:05:55.656 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:05:55.694 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:05:55.415 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:05:55.572 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:05:55.561 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:06:07.960 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53176 10 6452 1 2025-09-20 13:07:08.363 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:49650 10 6452 1 2025-09-20 13:08:08.766 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54324 10 6452 1 2025-09-20 13:09:09.177 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59880 10 6452 1 2025-09-20 13:10:09.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60698 10 6452 1 2025-09-20 13:05:32.421 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 13:05:32.416 00:06:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:10:55.676 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:10:55.738 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:10:55.756 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:10:55.593 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:10:55.665 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:11:09.991 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58462 10 6452 1 2025-09-20 13:12:10.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55476 10 6452 1 2025-09-20 13:13:10.756 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:58500 10 6452 1 2025-09-20 13:14:11.183 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45786 10 6452 1 2025-09-20 13:15:11.584 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56370 10 6452 1 2025-09-20 13:15:56.227 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:15:56.015 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:15:56.248 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:15:56.144 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:15:56.270 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:16:11.985 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:42480 10 6452 1 2025-09-20 13:17:12.402 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42096 10 6452 1 2025-09-20 13:12:32.417 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:12:32.422 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 653 1 2025-09-20 13:18:12.802 00:00:11.339 TCP 1.101.0.1:3000 -> 23.104.0.1:54676 10 6452 1 2025-09-20 13:19:14.181 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54820 10 6452 1 2025-09-20 13:20:14.585 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60172 10 6452 1 2025-09-20 13:20:55.946 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:20:55.851 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:20:55.552 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:20:55.864 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:20:55.781 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:21:14.984 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55384 10 6452 1 2025-09-20 13:22:15.352 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53832 10 6452 1 2025-09-20 13:23:15.758 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54762 10 6452 1 2025-09-20 13:24:16.130 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35052 10 6452 1 2025-09-20 13:19:32.424 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 13:19:32.421 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:25:16.537 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36610 10 6452 1 2025-09-20 13:25:55.971 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:25:55.963 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:25:56.181 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:25:56.094 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:25:56.099 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:26:16.936 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37766 10 6452 1 2025-09-20 13:27:17.356 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59734 10 6452 1 2025-09-20 13:28:17.761 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51862 10 6452 1 2025-09-20 13:29:18.178 00:00:10.705 TCP 1.101.0.1:3000 -> 23.104.0.1:35434 10 6452 1 2025-09-20 13:30:18.920 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:39454 10 6452 1 2025-09-20 13:30:56.208 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:30:56.316 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:30:56.184 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:30:56.125 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:30:55.984 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:26:32.423 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 13:31:19.290 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38468 10 6452 1 2025-09-20 13:26:32.423 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:32:19.695 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34686 10 6452 1 2025-09-20 13:33:20.117 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49010 11 6492 1 2025-09-20 13:34:20.522 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:33150 11 6504 1 2025-09-20 13:35:20.988 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54304 10 6452 1 2025-09-20 13:35:56.324 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:35:56.059 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:35:56.244 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:35:56.144 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:35:56.325 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:36:21.354 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37324 10 6452 1 2025-09-20 13:37:21.753 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55296 10 6452 1 2025-09-20 13:38:22.155 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38304 10 6452 1 2025-09-20 13:33:32.425 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:33:32.432 00:05:59.996 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 13:39:22.558 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42608 10 6452 1 2025-09-20 13:40:22.961 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49058 10 6452 1 2025-09-20 13:40:56.280 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:40:56.352 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:40:56.286 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:40:56.463 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:40:56.370 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:41:23.371 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:51926 12 10367 1 2025-09-20 13:42:23.809 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:35126 10 6452 1 2025-09-20 13:43:24.183 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38044 10 6452 1 2025-09-20 13:44:24.546 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50348 10 6452 1 2025-09-20 13:40:32.428 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 13:45:24.945 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56916 10 6452 1 2025-09-20 13:40:32.426 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:45:56.422 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:45:56.194 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:45:56.518 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:45:56.523 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:45:56.600 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:46:25.356 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:47542 10 6452 1 2025-09-20 13:47:25.723 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46546 10 6452 1 2025-09-20 13:48:26.129 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41270 10 6452 1 2025-09-20 13:49:26.488 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37074 10 6452 1 2025-09-20 13:50:26.892 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:37612 10 6452 1 2025-09-20 13:50:56.615 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:50:56.581 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:50:56.388 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:50:56.531 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:50:56.462 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:51:27.311 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:45682 12 10365 1 2025-09-20 13:47:32.430 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-09-20 13:47:32.427 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:52:27.794 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42880 10 6452 1 2025-09-20 13:53:28.161 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:45322 10 6452 1 2025-09-20 13:54:28.667 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51944 10 6452 1 2025-09-20 13:55:29.033 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46924 10 6452 1 2025-09-20 13:55:56.788 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:55:56.660 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:55:56.757 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:55:56.754 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:55:56.842 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:56:29.435 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 10 6452 1 2025-09-20 13:57:29.839 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:52870 10 6452 1 2025-09-20 13:58:30.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47598 10 6452 1 Summary: total flows: 136, total bytes: 422740, total packets: 987, avg bps: 937, avg pps: 0, avg bpp: 428 Time window: 2025-09-20 12:58:32 - 2025-09-20 13:58:40 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0031s User: 0.0010s Wall: 0.0024s flows/second: 57145.4 Runtime: 0.0024s