Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 18:58:48.730 00:00:10.702 TCP 1.101.0.1:3000 -> 23.104.0.1:33322 10 6452 1 2025-09-17 18:59:36.403 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 18:59:36.206 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 18:59:35.893 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 18:59:36.319 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 18:59:36.203 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 18:59:49.475 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49900 12 6556 1 2025-09-17 19:00:49.878 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58860 10 6452 1 2025-09-17 18:56:31.087 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 19:01:50.295 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34508 10 6452 1 2025-09-17 19:02:50.703 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56598 10 6452 1 2025-09-17 18:58:31.084 00:06:00.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 19:03:51.097 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46574 10 6452 1 2025-09-17 19:04:36.286 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 19:04:36.189 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:04:36.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:04:36.001 00:00:00.042 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 19:04:36.302 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 19:04:51.510 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37344 10 6452 1 2025-09-17 19:05:51.913 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43316 10 6452 1 2025-09-17 19:06:52.320 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51390 10 6452 1 2025-09-17 19:07:52.723 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:43338 10 6452 1 2025-09-17 19:03:31.089 00:06:00.061 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 19:08:53.143 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46192 10 6452 1 2025-09-17 19:09:36.330 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 19:09:36.317 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 19:09:36.033 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 19:09:36.455 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:09:36.247 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:09:53.544 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52268 10 6452 1 2025-09-17 19:05:31.089 00:06:00.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 19:10:53.952 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44856 10 6452 1 2025-09-17 19:11:54.355 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41150 10 6452 1 2025-09-17 19:12:54.755 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36092 10 6452 1 2025-09-17 19:13:55.174 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33270 10 6452 1 2025-09-17 19:14:36.419 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 19:14:36.418 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 19:14:36.479 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:14:36.415 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:14:36.497 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 19:14:55.575 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42258 10 6452 1 2025-09-17 19:10:31.091 00:06:00.061 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 19:15:55.974 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34886 10 6452 1 2025-09-17 19:16:56.386 00:00:10.759 TCP 1.101.0.1:3000 -> 23.104.0.1:55192 10 6452 1 2025-09-17 19:12:31.089 00:06:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 19:17:57.181 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53330 10 6452 1 2025-09-17 19:18:57.544 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39478 10 6452 1 2025-09-17 19:19:36.555 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 19:19:36.327 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:19:36.563 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:19:36.555 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 19:19:36.646 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 19:19:57.906 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33460 10 6452 1 2025-09-17 19:20:58.311 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51028 10 6452 1 2025-09-17 19:21:58.727 00:00:10.996 TCP 1.101.0.1:3000 -> 23.104.0.1:39252 10 6452 1 2025-09-17 19:17:31.092 00:06:00.067 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 19:22:59.774 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41042 10 6452 1 2025-09-17 19:24:00.183 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42596 10 6452 1 2025-09-17 19:24:36.688 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 19:24:36.695 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 19:24:36.580 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:24:36.687 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:19:31.090 00:06:00.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 19:24:36.770 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 19:25:00.585 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36568 10 6452 1 2025-09-17 19:26:00.985 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44440 10 6452 1 2025-09-17 19:27:01.390 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39852 10 6452 1 2025-09-17 19:28:01.798 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40148 10 6452 1 2025-09-17 19:29:02.204 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32788 10 6452 1 2025-09-17 19:24:31.092 00:06:00.069 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 19:29:36.663 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 19:29:36.750 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 19:29:36.502 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:29:36.661 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:29:36.744 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 19:30:02.569 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59596 10 6452 1 2025-09-17 19:31:02.980 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44084 10 6452 1 2025-09-17 19:26:31.091 00:06:00.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 19:32:03.386 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60612 10 6452 1 2025-09-17 19:33:03.798 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53442 10 6452 1 2025-09-17 19:34:04.201 00:00:10.832 TCP 1.101.0.1:3000 -> 23.104.0.1:41470 10 6452 1 2025-09-17 19:34:36.838 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 19:34:37.114 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 19:34:37.159 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:34:36.855 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:34:36.938 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 19:35:05.094 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35686 10 6452 1 2025-09-17 19:36:05.497 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45242 10 6452 1 2025-09-17 19:31:31.095 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 19:37:05.897 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53956 10 6452 1 2025-09-17 19:38:06.309 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58130 10 6452 1 2025-09-17 19:33:31.093 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 19:39:06.720 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37772 10 6452 1 2025-09-17 19:39:37.130 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 19:39:36.778 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 19:39:36.882 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:39:37.089 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:39:37.173 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 19:40:07.127 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:55838 12 10367 1 2025-09-17 19:41:07.602 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:48554 10 6452 1 2025-09-17 19:42:07.992 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47616 10 6452 1 2025-09-17 19:43:08.392 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49894 10 6452 1 2025-09-17 19:38:31.096 00:06:00.071 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 19:44:08.801 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39594 12 6556 1 2025-09-17 19:44:36.915 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 19:44:36.918 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 19:44:36.650 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:44:37.103 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:44:37.185 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 19:45:09.206 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32888 10 6452 1 2025-09-17 19:40:31.094 00:06:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 19:46:09.609 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53104 10 6452 1 2025-09-17 19:47:10.027 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38278 10 6452 1 2025-09-17 19:48:10.442 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39496 10 6452 1 2025-09-17 19:49:10.805 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40712 10 6452 1 2025-09-17 19:49:36.975 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 19:49:36.973 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 19:49:37.249 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:49:36.970 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:49:37.053 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 19:50:11.210 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52388 10 6452 1 2025-09-17 19:45:31.097 00:06:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 19:51:11.617 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40974 10 6452 1 2025-09-17 19:52:11.985 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47932 10 6452 1 2025-09-17 19:47:31.095 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 19:53:12.395 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47086 10 6452 1 2025-09-17 19:54:12.798 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39830 10 6452 1 2025-09-17 19:54:37.379 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 19:54:37.383 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 19:54:37.382 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:54:37.500 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 19:54:37.583 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 19:55:13.201 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41352 10 6452 1 2025-09-17 19:56:13.603 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44778 10 6452 1 2025-09-17 19:57:14.008 00:00:10.612 TCP 1.101.0.1:3000 -> 23.104.0.1:56590 10 6452 1 2025-09-17 19:52:31.098 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 19:58:14.659 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35606 10 6452 1 Summary: total flows: 137, total bytes: 421000, total packets: 1024, avg bps: 905, avg pps: 0, avg bpp: 411 Time window: 2025-09-17 18:56:31 - 2025-09-17 19:58:31 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0029s User: 0.0019s Wall: 0.0017s flows/second: 80978.0 Runtime: 0.0017s