Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 06:58:56.318 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43922 10 6452 1 2025-09-17 06:59:21.889 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 06:59:21.537 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 06:59:21.728 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 06:59:21.571 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 06:59:21.806 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 06:54:30.798 00:06:00.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 06:59:56.720 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49062 10 6452 1 2025-09-17 07:00:57.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41646 10 6452 1 2025-09-17 07:01:57.515 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41578 10 6452 1 2025-09-17 07:02:57.925 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49436 10 6452 1 2025-09-17 06:58:30.796 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 07:03:58.351 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37990 10 6452 1 2025-09-17 07:04:22.020 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 07:04:21.857 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 07:04:21.775 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 07:04:21.764 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:04:21.938 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:04:58.767 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44840 10 6452 1 2025-09-17 07:05:59.182 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58932 10 6452 1 2025-09-17 07:01:30.799 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 07:06:59.591 00:00:10.943 TCP 1.101.0.1:3000 -> 23.104.0.1:48342 10 6452 1 2025-09-17 07:08:00.578 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35464 10 6452 1 2025-09-17 07:09:00.939 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56526 10 6452 1 2025-09-17 07:09:21.911 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 07:09:21.753 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 07:09:21.753 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 07:09:21.708 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:09:21.828 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:10:01.359 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52032 10 6452 1 2025-09-17 07:05:30.798 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 07:11:01.760 00:00:10.483 TCP 1.101.0.1:3000 -> 23.104.0.1:39340 10 6452 1 2025-09-17 07:12:02.277 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53280 10 6452 1 2025-09-17 07:13:02.691 00:00:10.997 TCP 1.101.0.1:3000 -> 23.104.0.1:43596 12 6556 1 2025-09-17 07:08:30.800 00:06:00.050 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 07:14:03.724 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41634 10 6452 1 2025-09-17 07:14:22.077 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 07:14:22.166 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 07:14:22.104 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:14:22.355 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:14:22.438 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 07:15:04.143 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41594 10 6452 1 2025-09-17 07:16:04.554 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37928 10 6452 1 2025-09-17 07:17:04.915 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57906 10 6452 1 2025-09-17 07:12:30.799 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 07:18:05.324 00:00:10.743 TCP 1.101.0.1:3000 -> 23.104.0.1:46822 10 6452 1 2025-09-17 07:19:06.109 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35516 10 6452 1 2025-09-17 07:19:22.344 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 07:19:22.217 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 07:19:22.236 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:19:22.261 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:19:22.228 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 07:20:06.513 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2025-09-17 07:15:30.802 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 07:21:06.883 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33098 10 6452 1 2025-09-17 07:22:07.295 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48688 10 6452 1 2025-09-17 07:23:07.656 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54420 10 6452 1 2025-09-17 07:24:08.025 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47130 10 6452 1 2025-09-17 07:24:22.160 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 07:24:22.163 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 07:24:21.955 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:24:22.104 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:24:22.186 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 07:19:30.801 00:06:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 07:25:08.425 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45988 10 6452 1 2025-09-17 07:26:08.833 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 10 6452 1 2025-09-17 07:27:09.217 00:00:10.469 TCP 1.101.0.1:3000 -> 23.104.0.1:38402 10 6452 1 2025-09-17 07:22:30.804 00:06:00.050 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 07:28:09.725 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57950 10 6452 1 2025-09-17 07:29:22.277 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 07:29:22.452 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 07:29:22.359 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 07:29:10.133 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33372 10 6452 1 2025-09-17 07:29:22.302 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:29:22.195 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:30:10.533 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35466 10 6452 1 2025-09-17 07:31:10.934 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:37336 10 6452 1 2025-09-17 07:26:30.808 00:06:00.049 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 07:32:11.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35800 10 6452 1 2025-09-17 07:33:11.765 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36374 10 6452 1 2025-09-17 07:34:22.690 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 07:34:12.183 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59006 10 6452 1 2025-09-17 07:34:22.473 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 07:34:22.659 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:34:22.639 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:34:22.723 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 07:29:30.812 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 07:35:12.595 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:56944 10 6452 1 2025-09-17 07:36:12.951 00:00:10.753 TCP 1.101.0.1:3000 -> 23.104.0.1:33034 10 6452 1 2025-09-17 07:37:13.751 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:35810 10 6452 1 2025-09-17 07:38:14.112 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50184 10 6452 1 2025-09-17 07:33:30.810 00:06:00.049 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 07:39:22.650 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 07:39:22.567 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:39:22.497 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 07:39:14.511 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50800 10 6452 1 2025-09-17 07:39:22.626 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 07:39:22.208 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:40:14.922 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44598 10 6452 1 2025-09-17 07:41:15.353 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43690 10 6452 1 2025-09-17 07:36:30.814 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 07:42:15.757 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:33638 10 6452 1 2025-09-17 07:43:16.183 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52902 10 6452 1 2025-09-17 07:44:23.085 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 07:44:22.819 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 07:44:22.773 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:44:22.820 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:44:22.904 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 07:44:16.551 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39158 10 6452 1 2025-09-17 07:45:16.953 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:60514 10 6452 1 2025-09-17 07:40:30.812 00:06:00.048 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 07:46:17.333 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42320 10 6452 1 2025-09-17 07:47:17.737 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41884 10 6452 1 2025-09-17 07:48:18.151 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:50162 10 6452 1 2025-09-17 07:43:30.816 00:06:00.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 07:49:22.764 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 07:49:22.507 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:49:22.636 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:49:22.767 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 07:49:22.718 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 07:49:18.525 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51136 10 6452 1 2025-09-17 07:50:18.930 00:00:10.430 TCP 1.101.0.1:3000 -> 23.104.0.1:52724 10 6452 1 2025-09-17 07:51:19.402 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57850 10 6452 1 2025-09-17 07:47:30.814 00:06:00.050 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 07:52:19.805 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51092 10 6452 1 2025-09-17 07:53:20.210 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:37886 10 6452 1 2025-09-17 07:54:22.854 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 07:54:22.620 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 07:54:22.683 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:54:22.740 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 07:54:22.822 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 07:54:20.573 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37622 10 6452 1 2025-09-17 07:50:30.817 00:06:00.045 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 07:55:20.988 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43306 10 6452 1 2025-09-17 07:56:21.394 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40028 10 6452 1 2025-09-17 07:57:21.800 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:36842 10 6452 1 2025-09-17 07:58:22.181 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58064 10 6452 1 Summary: total flows: 137, total bytes: 416981, total packets: 1020, avg bps: 868, avg pps: 0, avg bpp: 408 Time window: 2025-09-17 06:54:30 - 2025-09-17 07:58:32 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0036s User: 0.0009s Wall: 0.0021s flows/second: 66253.9 Runtime: 0.0021s