Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 21:59:03.757 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:43960 10 6452 1 2025-09-17 21:59:39.772 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 21:59:39.548 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 21:59:39.724 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 21:59:39.724 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 21:59:39.807 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:00:04.127 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53594 10 6452 1 2025-09-17 22:01:04.524 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52216 10 6452 1 2025-09-17 22:02:04.929 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:54048 10 6452 1 2025-09-17 22:03:05.355 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38002 10 6452 1 2025-09-17 21:58:31.121 00:06:00.083 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:04:05.766 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:36566 10 6452 1 2025-09-17 22:04:39.796 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:04:39.783 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:04:39.752 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:04:39.853 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:04:39.937 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:05:06.142 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39982 10 6452 1 2025-09-17 22:00:31.121 00:06:00.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:06:06.543 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39646 10 6452 1 2025-09-17 22:07:06.948 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46700 10 6452 1 2025-09-17 22:08:07.369 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:37590 10 6452 1 2025-09-17 22:09:07.756 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46940 10 6452 1 2025-09-17 22:09:39.696 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:09:40.252 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:09:40.008 00:00:00.056 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:09:40.371 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:09:40.454 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:10:08.155 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54386 10 6452 1 2025-09-17 22:05:31.125 00:06:00.083 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:11:08.560 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47524 10 6452 1 2025-09-17 22:12:08.965 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42028 10 6452 1 2025-09-17 22:07:31.124 00:06:00.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:13:09.367 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40140 10 6452 1 2025-09-17 22:14:09.776 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:33492 10 6452 1 2025-09-17 22:14:39.973 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:14:39.975 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:14:40.085 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:14:40.172 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:14:40.059 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:15:10.204 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38584 10 6452 1 2025-09-17 22:16:10.606 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42848 10 6452 1 2025-09-17 22:17:10.965 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52342 10 6452 1 2025-09-17 22:12:31.126 00:06:00.084 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:18:11.325 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34336 10 6452 1 2025-09-17 22:19:11.686 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45168 10 6452 1 2025-09-17 22:14:31.124 00:06:00.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:19:40.148 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:19:40.169 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:19:40.003 00:00:00.049 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:19:40.236 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:19:40.086 00:00:00.050 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:20:12.116 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39848 10 6452 1 2025-09-17 22:21:12.477 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39118 10 6452 1 2025-09-17 22:22:12.884 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50762 10 6452 1 2025-09-17 22:23:13.307 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40012 10 6452 1 2025-09-17 22:24:13.713 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39068 10 6452 1 2025-09-17 22:19:31.128 00:06:00.085 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:24:40.234 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:24:40.144 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:24:40.143 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:24:40.205 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:24:40.228 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:25:14.114 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35804 10 6452 1 2025-09-17 22:26:14.524 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59998 10 6452 1 2025-09-17 22:21:31.125 00:06:00.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:27:14.930 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:59630 10 6452 1 2025-09-17 22:28:15.323 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52176 10 6452 1 2025-09-17 22:29:15.725 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:44952 10 6452 1 2025-09-17 22:29:40.334 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:29:40.378 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:29:40.288 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:29:40.271 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:29:40.353 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:30:16.110 00:00:18.131 TCP 1.101.0.1:3000 -> 23.104.0.1:41612 12 10367 1 2025-09-17 22:26:31.131 00:06:00.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:31:24.307 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:35752 10 6452 1 2025-09-17 22:32:24.711 00:00:10.489 TCP 1.101.0.1:3000 -> 23.104.0.1:47974 10 6452 1 2025-09-17 22:28:31.130 00:06:00.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:33:25.239 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36316 10 6452 1 2025-09-17 22:34:25.597 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46428 10 6452 1 2025-09-17 22:34:40.445 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:34:40.454 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:34:40.432 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:34:40.000 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:34:40.359 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:35:25.996 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60586 10 6452 1 2025-09-17 22:36:26.408 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50746 10 6452 1 2025-09-17 22:37:26.811 00:00:11.037 TCP 1.101.0.1:3000 -> 23.104.0.1:56836 10 6452 1 2025-09-17 22:33:31.133 00:06:00.091 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:38:27.887 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52492 12 6556 1 2025-09-17 22:39:28.314 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55518 10 6452 1 2025-09-17 22:39:40.352 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:39:40.543 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:39:40.413 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:39:40.491 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:39:40.626 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:35:31.132 00:06:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:40:28.742 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 10 6452 1 2025-09-17 22:41:29.154 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51988 10 6452 1 2025-09-17 22:42:29.558 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59478 10 6452 1 2025-09-17 22:43:29.962 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53952 10 6452 1 2025-09-17 22:44:40.826 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:44:40.645 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:44:40.380 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:44:40.744 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:44:40.699 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:44:30.379 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2025-09-17 22:40:31.135 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:45:30.779 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53432 10 6452 1 2025-09-17 22:46:31.190 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40952 10 6452 1 2025-09-17 22:42:31.134 00:06:00.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:47:31.592 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56586 10 6452 1 2025-09-17 22:48:31.997 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47114 10 6452 1 2025-09-17 22:49:40.763 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:49:40.877 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:49:32.361 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35222 10 6452 1 2025-09-17 22:49:41.070 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:49:40.878 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:49:40.961 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:50:32.726 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 10 6452 1 2025-09-17 22:51:33.138 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51074 10 6452 1 2025-09-17 22:47:31.136 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:52:33.548 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52308 10 6452 1 2025-09-17 22:53:33.952 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52604 10 6452 1 2025-09-17 22:49:31.136 00:06:00.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:54:40.733 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:54:34.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54778 10 6452 1 2025-09-17 22:54:41.056 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:54:40.510 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:54:40.811 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:54:40.895 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:55:34.770 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:52062 12 10367 1 2025-09-17 22:56:35.215 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48056 10 6452 1 2025-09-17 22:57:35.627 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39678 10 6452 1 2025-09-17 22:58:36.027 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:46688 10 6452 1 Summary: total flows: 136, total bytes: 423950, total packets: 1010, avg bps: 938, avg pps: 0, avg bpp: 419 Time window: 2025-09-17 21:58:31 - 2025-09-17 22:58:46 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0032s User: 0.0008s Wall: 0.0019s flows/second: 72150.9 Runtime: 0.0019s