Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 20:58:54.785 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47214 10 6452 1 2025-09-06 20:59:13.768 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 20:59:13.688 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 20:59:13.751 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 20:59:13.471 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 20:59:13.688 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 20:59:55.196 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58298 10 6452 1 2025-09-06 21:00:55.557 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42652 10 6452 1 2025-09-06 21:01:55.955 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42874 10 6452 1 2025-09-06 20:57:25.648 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 21:02:56.368 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52992 10 6452 1 2025-09-06 21:03:56.788 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44584 10 6452 1 2025-09-06 21:04:13.694 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 21:04:13.580 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 21:04:13.531 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:04:13.647 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:04:13.729 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 21:04:57.194 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49278 10 6452 1 2025-09-06 21:00:25.645 00:06:00.122 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 21:05:57.560 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51042 10 6452 1 2025-09-06 21:06:57.959 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41476 10 6452 1 2025-09-06 21:07:58.366 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:35908 10 6452 1 2025-09-06 21:08:58.721 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41160 10 6452 1 2025-09-06 21:09:13.828 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 21:09:13.678 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 21:09:13.682 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 21:09:13.531 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:09:13.746 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:04:25.649 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 21:09:59.109 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52930 10 6452 1 2025-09-06 21:10:59.476 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35516 10 6452 1 2025-09-06 21:11:59.838 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:47548 10 6452 1 2025-09-06 21:07:25.646 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 21:13:00.273 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-09-06 21:14:13.914 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 21:14:13.884 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 21:14:13.762 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 21:14:13.819 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:14:00.676 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35756 10 6452 1 2025-09-06 21:14:13.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:15:01.101 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55394 10 6452 1 2025-09-06 21:16:01.509 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33384 10 6452 1 2025-09-06 21:11:25.651 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 21:17:01.905 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54812 10 6452 1 2025-09-06 21:18:02.273 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51532 10 6452 1 2025-09-06 21:19:13.927 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 21:19:13.918 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 21:19:13.841 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 21:19:13.824 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:19:02.674 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38048 10 6452 1 2025-09-06 21:19:13.845 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:14:25.648 00:06:00.123 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 21:20:03.108 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33272 10 6452 1 2025-09-06 21:21:03.510 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:60068 10 6452 1 2025-09-06 21:22:03.891 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42342 10 6452 1 2025-09-06 21:23:04.296 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38174 10 6452 1 2025-09-06 21:18:25.653 00:06:00.118 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 21:24:14.005 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 21:24:13.926 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 21:24:13.866 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:24:04.657 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33074 10 6452 1 2025-09-06 21:24:13.922 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:24:13.827 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 21:25:05.019 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54262 10 6452 1 2025-09-06 21:26:05.415 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58460 10 6452 1 2025-09-06 21:21:25.649 00:06:00.124 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 21:27:05.822 00:00:10.731 TCP 1.101.0.1:3000 -> 23.104.0.1:32868 10 6452 1 2025-09-06 21:28:06.585 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60212 10 6452 1 2025-09-06 21:29:14.202 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 21:29:14.274 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 21:29:14.245 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 21:29:14.130 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:29:14.121 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:29:06.991 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58526 10 6452 1 2025-09-06 21:30:07.399 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47462 10 6452 1 2025-09-06 21:25:25.657 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 21:31:07.830 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50960 10 6452 1 2025-09-06 21:32:08.230 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39810 10 6452 1 2025-09-06 21:33:08.632 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52112 10 6452 1 2025-09-06 21:28:25.655 00:06:00.120 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 21:34:14.455 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 21:34:14.375 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 21:34:14.494 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 21:34:14.402 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:34:14.373 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:34:09.035 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46902 10 6452 1 2025-09-06 21:35:09.450 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37226 10 6452 1 2025-09-06 21:36:09.814 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50942 10 6452 1 2025-09-06 21:37:10.217 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46228 10 6452 1 2025-09-06 21:32:25.659 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 21:38:10.579 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:55108 12 10367 1 2025-09-06 21:39:14.419 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 21:39:14.371 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 21:39:13.955 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:39:14.414 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:39:14.497 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 21:39:11.062 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52042 10 6452 1 2025-09-06 21:40:11.447 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:43324 11 6504 1 2025-09-06 21:35:25.658 00:06:00.120 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 21:41:11.896 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40706 10 6452 1 2025-09-06 21:42:12.270 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39172 10 6452 1 2025-09-06 21:43:12.681 00:00:10.988 TCP 1.101.0.1:3000 -> 23.104.0.1:38052 10 6452 1 2025-09-06 21:44:14.409 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 21:44:14.486 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 21:44:14.212 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 21:44:14.052 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:44:14.325 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:44:13.711 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38166 10 6452 1 2025-09-06 21:39:25.659 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 21:45:14.123 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47984 10 6452 1 2025-09-06 21:46:14.524 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37348 10 6452 1 2025-09-06 21:47:14.924 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:43862 10 6452 1 2025-09-06 21:42:25.658 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 21:48:15.340 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57862 10 6452 1 2025-09-06 21:49:14.711 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 21:49:14.521 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 21:49:14.666 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 21:49:14.300 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:49:14.628 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:49:15.745 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40560 10 6452 1 2025-09-06 21:50:16.155 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38872 10 6452 1 2025-09-06 21:51:16.520 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50346 10 6452 1 2025-09-06 21:46:25.662 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 21:52:16.923 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:50696 11 6504 1 2025-09-06 21:53:17.409 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39122 12 6556 1 2025-09-06 21:54:14.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 21:54:14.729 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 21:54:14.653 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:54:14.737 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 21:54:14.819 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 21:54:17.824 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44748 10 6452 1 2025-09-06 21:49:25.659 00:06:00.122 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 21:55:18.227 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54716 10 6452 1 2025-09-06 21:56:18.634 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56592 10 6452 1 2025-09-06 21:57:19.041 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33702 10 6452 1 2025-09-06 21:58:19.407 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:57078 12 10367 1 2025-09-06 21:53:25.663 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 137, total bytes: 424915, total packets: 1026, avg bps: 913, avg pps: 0, avg bpp: 414 Time window: 2025-09-06 20:57:25 - 2025-09-06 21:59:25 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0047s User: 0.0000s Wall: 0.0021s flows/second: 64687.6 Runtime: 0.0021s