Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 03:58:42.181 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44306 10 6452 1 2025-09-17 03:59:17.989 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 03:59:17.795 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 03:59:18.124 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 03:59:18.082 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 03:59:18.206 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 03:59:42.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53582 10 6452 1 2025-09-17 04:00:42.989 00:00:10.513 TCP 1.101.0.1:3000 -> 23.104.0.1:53844 10 6452 1 2025-09-17 03:56:30.743 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 04:01:43.543 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41744 10 6452 1 2025-09-17 04:02:43.940 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:38864 10 6452 1 2025-09-17 04:03:44.332 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-09-17 04:04:17.870 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 04:04:18.160 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 04:04:18.056 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:04:18.093 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:04:18.175 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 03:59:30.783 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 04:04:44.738 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:33158 12 10367 1 2025-09-17 04:05:45.242 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51120 10 6452 1 2025-09-17 04:06:45.659 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60040 10 6452 1 2025-09-17 04:07:46.091 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48022 10 6452 1 2025-09-17 04:03:30.745 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 04:08:46.497 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43504 10 6452 1 2025-09-17 04:09:18.427 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 04:09:18.445 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 04:09:18.259 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 04:09:18.446 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:09:18.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:09:46.905 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48538 10 6452 1 2025-09-17 04:10:47.307 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53050 10 6452 1 2025-09-17 04:06:30.784 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 04:11:47.718 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43168 10 6452 1 2025-09-17 04:12:48.140 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40084 10 6452 1 2025-09-17 04:13:48.545 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37688 10 6452 1 2025-09-17 04:14:18.501 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 04:14:18.461 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 04:14:18.340 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 04:14:18.014 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:14:18.418 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:14:48.904 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57244 10 6452 1 2025-09-17 04:10:30.746 00:06:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 04:15:49.314 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37650 10 6452 1 2025-09-17 04:16:49.735 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57222 10 6452 1 2025-09-17 04:17:50.119 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45644 10 6452 1 2025-09-17 04:13:30.785 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 04:18:50.489 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34034 10 6452 1 2025-09-17 04:19:18.479 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 04:19:18.531 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 04:19:18.339 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:19:18.531 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:19:18.613 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 04:19:50.853 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:58446 10 6452 1 2025-09-17 04:20:51.278 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46514 10 6452 1 2025-09-17 04:21:51.642 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57658 12 6556 1 2025-09-17 04:17:30.747 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 04:22:52.055 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53800 10 6452 1 2025-09-17 04:23:52.466 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45762 10 6452 1 2025-09-17 04:24:18.494 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 04:24:18.567 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 04:24:18.589 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:24:18.565 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:24:18.649 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 04:24:52.832 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:39988 10 6452 1 2025-09-17 04:20:30.786 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 04:25:53.264 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50878 10 6452 1 2025-09-17 04:26:53.657 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41178 10 6452 1 2025-09-17 04:27:54.071 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40738 10 6452 1 2025-09-17 04:28:54.475 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57114 12 6556 1 2025-09-17 04:29:18.686 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 04:29:18.754 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 04:29:18.683 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:29:18.757 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:29:18.840 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 04:24:30.752 00:06:00.039 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 04:29:54.874 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55334 10 6452 1 2025-09-17 04:30:55.235 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48154 10 6452 1 2025-09-17 04:31:55.642 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45758 10 6452 1 2025-09-17 04:27:30.788 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 04:32:56.006 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38722 10 6452 1 2025-09-17 04:33:56.408 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:34034 10 6452 1 2025-09-17 04:34:18.624 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:34:18.703 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 04:34:18.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 04:34:18.736 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:34:18.705 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 04:34:56.764 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:54518 10 6452 1 2025-09-17 04:35:57.136 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39726 10 6452 1 2025-09-17 04:31:30.753 00:06:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 04:36:57.500 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34624 10 6452 1 2025-09-17 04:37:57.871 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47010 10 6452 1 2025-09-17 04:38:58.279 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:51872 10 6452 1 2025-09-17 04:39:18.767 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 04:39:18.860 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 04:39:18.682 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 04:39:18.799 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:39:18.685 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:34:30.790 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 04:39:58.666 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33612 10 6452 1 2025-09-17 04:40:59.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43996 10 6452 1 2025-09-17 04:41:59.510 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39828 10 6452 1 2025-09-17 04:42:59.912 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42552 10 6452 1 2025-09-17 04:38:30.753 00:06:00.044 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 04:44:00.322 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43786 10 6452 1 2025-09-17 04:44:19.047 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 04:44:18.966 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 04:44:18.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 04:44:18.917 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:44:18.963 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:45:00.723 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58136 10 6452 1 2025-09-17 04:46:01.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36640 10 6452 1 2025-09-17 04:41:30.794 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 04:47:01.536 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37982 10 6452 1 2025-09-17 04:48:01.940 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43256 10 6452 1 2025-09-17 04:49:19.256 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 04:49:02.359 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50540 10 6452 1 2025-09-17 04:49:18.860 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 04:49:19.075 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 04:49:18.996 00:00:00.035 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:49:19.174 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:50:02.719 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:35526 12 10365 1 2025-09-17 04:45:30.759 00:06:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 04:51:03.208 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:46418 10 6452 1 2025-09-17 04:52:03.572 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49748 10 6452 1 2025-09-17 04:53:03.978 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36614 10 6452 1 2025-09-17 04:48:30.797 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 04:54:04.384 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51140 10 6452 1 2025-09-17 04:54:19.462 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 04:54:19.312 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 04:54:19.438 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 04:54:19.128 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:54:19.379 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 04:55:04.787 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39294 10 6452 1 2025-09-17 04:56:05.190 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35040 10 6452 1 2025-09-17 04:57:05.596 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52212 10 6452 1 2025-09-17 04:52:30.760 00:06:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 04:58:06.002 00:00:10.603 TCP 1.101.0.1:3000 -> 23.104.0.1:54188 10 6452 1 Summary: total flows: 137, total bytes: 422001, total packets: 970, avg bps: 907, avg pps: 0, avg bpp: 435 Time window: 2025-09-17 03:56:30 - 2025-09-17 04:58:30 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0043s User: 0.0011s Wall: 0.0022s flows/second: 61377.9 Runtime: 0.0023s