Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 03:58:46.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50482 10 6452 1 2025-09-18 03:59:46.970 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 03:59:47.001 00:00:00.049 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 03:59:46.887 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 03:59:47.012 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 03:59:46.887 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 03:59:46.589 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35136 10 6452 1 2025-09-18 03:55:31.238 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 04:00:46.991 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:55250 10 6452 1 2025-09-18 04:01:47.361 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47304 10 6452 1 2025-09-18 03:57:31.235 00:06:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 04:02:47.767 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:52938 11 6504 1 2025-09-18 04:03:48.233 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46562 10 6452 1 2025-09-18 04:04:46.966 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 04:04:46.905 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:04:46.947 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:04:46.904 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 04:04:47.029 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 04:04:48.633 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44042 10 6452 1 2025-09-18 04:05:48.998 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47040 10 6452 1 2025-09-18 04:06:49.401 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43256 10 6452 1 2025-09-18 04:02:31.238 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 04:07:49.767 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47350 10 6452 1 2025-09-18 04:08:50.188 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39822 10 6452 1 2025-09-18 04:04:31.239 00:06:00.074 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 04:09:47.701 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 04:09:47.234 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 04:09:47.246 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 04:09:47.322 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:09:47.619 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:09:50.591 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43090 10 6452 1 2025-09-18 04:10:50.957 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:43444 12 10365 1 2025-09-18 04:11:51.397 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53122 10 6452 1 2025-09-18 04:12:51.757 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:48754 10 6452 1 2025-09-18 04:13:52.148 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42816 10 6452 1 2025-09-18 04:09:31.242 00:06:00.069 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 04:14:47.254 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 04:14:47.179 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 04:14:47.257 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 04:14:47.137 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:14:47.171 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:14:52.561 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52086 10 6452 1 2025-09-18 04:15:52.967 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51360 10 6452 1 2025-09-18 04:11:31.240 00:06:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 04:16:53.381 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33144 10 6452 1 2025-09-18 04:17:53.745 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46940 10 6452 1 2025-09-18 04:18:54.151 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46224 10 6452 1 2025-09-18 04:19:47.425 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 04:19:47.342 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 04:19:47.415 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 04:19:47.461 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:19:47.343 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:19:54.556 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55658 10 6452 1 2025-09-18 04:20:54.961 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-09-18 04:16:31.244 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 04:21:55.366 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44068 10 6452 1 2025-09-18 04:22:55.728 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40600 10 6452 1 2025-09-18 04:18:31.243 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 04:23:56.139 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33416 10 6452 1 2025-09-18 04:24:47.614 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 04:24:47.473 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 04:24:47.529 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 04:24:47.436 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:24:47.531 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:24:56.544 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44398 10 6452 1 2025-09-18 04:25:56.947 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:57976 10 6452 1 2025-09-18 04:26:57.326 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58842 10 6452 1 2025-09-18 04:27:57.728 00:00:14.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49046 10 6452 1 2025-09-18 04:23:31.246 00:06:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 04:29:02.121 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44618 10 6452 1 2025-09-18 04:29:47.667 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 04:29:47.336 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 04:29:47.613 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:29:47.623 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:29:47.706 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 04:30:02.527 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51420 10 6452 1 2025-09-18 04:25:31.245 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 04:31:02.899 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:56620 10 6452 1 2025-09-18 04:32:03.342 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37506 10 6452 1 2025-09-18 04:33:03.707 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50356 10 6452 1 2025-09-18 04:34:04.099 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45872 10 6452 1 2025-09-18 04:34:47.731 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 04:34:47.882 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 04:34:47.834 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:34:47.501 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:34:47.584 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 04:35:04.463 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:46746 12 10365 1 2025-09-18 04:30:31.248 00:06:00.071 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 04:36:04.895 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33082 12 6556 1 2025-09-18 04:37:05.314 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57390 10 6452 1 2025-09-18 04:32:31.246 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 04:38:05.725 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53310 10 6452 1 2025-09-18 04:39:06.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58502 10 6452 1 2025-09-18 04:39:47.771 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 04:39:47.752 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 04:39:47.717 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:39:47.753 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:39:47.835 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 04:40:06.513 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54916 10 6452 1 2025-09-18 04:41:06.918 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36488 10 6452 1 2025-09-18 04:42:07.320 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58190 10 6452 1 2025-09-18 04:37:31.256 00:06:00.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 04:43:07.727 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52874 10 6452 1 2025-09-18 04:44:08.138 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42950 10 6452 1 2025-09-18 04:39:31.254 00:06:00.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 04:44:47.682 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 04:44:47.626 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:44:47.689 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:44:47.869 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 04:44:47.771 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 04:45:08.502 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43162 10 6452 1 2025-09-18 04:46:08.902 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38378 10 6452 1 2025-09-18 04:47:09.315 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58542 10 6452 1 2025-09-18 04:48:09.680 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49256 10 6452 1 2025-09-18 04:49:10.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36606 10 6452 1 2025-09-18 04:44:31.264 00:06:00.059 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 04:49:48.067 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 04:49:47.918 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 04:49:48.130 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 04:49:47.653 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:49:47.983 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:50:10.514 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43936 10 6452 1 2025-09-18 04:51:10.926 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50880 10 6452 1 2025-09-18 04:46:31.262 00:06:00.064 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 04:52:11.346 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57790 10 6452 1 2025-09-18 04:53:11.751 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48846 10 6452 1 2025-09-18 04:54:12.157 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46670 10 6452 1 2025-09-18 04:54:48.100 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 04:54:47.872 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 04:54:48.052 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:54:47.866 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 04:54:47.950 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 04:55:12.558 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52508 10 6452 1 2025-09-18 04:56:12.980 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56746 10 6452 1 2025-09-18 04:51:31.265 00:06:00.060 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 04:57:13.398 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35886 10 6452 1 2025-09-18 04:58:13.801 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54006 10 6452 1 2025-09-18 04:53:31.262 00:06:00.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 138, total bytes: 425720, total packets: 1039, avg bps: 886, avg pps: 0, avg bpp: 409 Time window: 2025-09-18 03:55:31 - 2025-09-18 04:59:31 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0017s User: 0.0017s Wall: 0.0015s flows/second: 94392.4 Runtime: 0.0015s