Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 05:58:54.971 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53200 10 6452 1 2025-09-18 05:54:31.290 00:06:00.049 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 05:59:49.353 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 05:59:49.255 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 05:59:49.205 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 05:59:49.270 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 05:59:49.266 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 05:59:55.404 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43968 10 6452 1 2025-09-18 06:00:55.771 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41438 10 6452 1 2025-09-18 05:56:31.287 00:06:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 06:01:56.204 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54150 10 6452 1 2025-09-18 06:02:56.608 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59752 10 6452 1 2025-09-18 06:03:57.017 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37072 10 6452 1 2025-09-18 06:04:49.621 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 06:04:49.306 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:04:49.551 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:04:49.365 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 06:04:49.635 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 06:04:57.430 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38344 10 6452 1 2025-09-18 06:05:57.831 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48372 10 6452 1 2025-09-18 06:01:31.289 00:06:00.055 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 06:06:58.232 00:00:10.910 TCP 1.101.0.1:3000 -> 23.104.0.1:57094 10 6452 1 2025-09-18 06:07:59.185 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45258 10 6452 1 2025-09-18 06:03:31.287 00:06:00.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 06:08:59.546 00:00:10.649 TCP 1.101.0.1:3000 -> 23.104.0.1:59210 10 6452 1 2025-09-18 06:09:49.606 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:09:49.535 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 06:09:49.455 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 06:09:49.554 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:09:49.690 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 06:10:00.237 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35360 10 6452 1 2025-09-18 06:11:00.600 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39016 10 6452 1 2025-09-18 06:12:01.003 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53778 10 6452 1 2025-09-18 06:13:01.404 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36450 10 6452 1 2025-09-18 06:08:31.291 00:06:00.054 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 06:14:01.768 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44978 10 6452 1 2025-09-18 06:14:49.859 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 06:14:49.545 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 06:14:49.640 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 06:14:49.583 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:14:49.776 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:15:02.169 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51232 10 6452 1 2025-09-18 06:10:31.290 00:06:00.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 06:16:02.575 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53168 10 6452 1 2025-09-18 06:17:02.973 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44376 10 6452 1 2025-09-18 06:18:03.377 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51984 10 6452 1 2025-09-18 06:19:03.776 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42998 10 6452 1 2025-09-18 06:19:49.539 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:19:50.141 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 06:19:50.290 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 06:19:50.240 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:19:50.322 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 06:20:04.146 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42148 10 6452 1 2025-09-18 06:15:31.293 00:06:00.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 06:21:04.547 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:49908 12 10367 1 2025-09-18 06:22:05.027 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45038 10 6452 1 2025-09-18 06:17:31.291 00:06:00.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 06:23:05.430 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33486 10 6452 1 2025-09-18 06:24:05.795 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37516 10 6452 1 2025-09-18 06:24:49.566 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 06:24:49.566 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 06:24:49.870 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:24:49.910 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:24:49.993 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 06:25:06.201 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44976 10 6452 1 2025-09-18 06:26:06.563 00:00:10.534 TCP 1.101.0.1:3000 -> 23.104.0.1:39730 10 6452 1 2025-09-18 06:27:07.134 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34608 10 6452 1 2025-09-18 06:22:31.294 00:06:00.059 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 06:28:07.535 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39404 10 6452 1 2025-09-18 06:29:07.933 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:46740 10 6452 1 2025-09-18 06:24:31.296 00:06:00.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 06:29:49.893 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 06:29:49.847 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:29:49.812 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 06:29:50.079 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 06:29:49.997 00:00:00.045 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:30:08.359 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 10 6452 1 2025-09-18 06:31:08.790 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42052 10 6452 1 2025-09-18 06:32:09.188 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38204 10 6452 1 2025-09-18 06:33:09.594 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58760 10 6452 1 2025-09-18 06:34:10.012 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44928 10 6452 1 2025-09-18 06:29:31.298 00:06:00.056 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 06:34:50.220 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 06:34:50.246 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 06:34:50.205 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 06:34:50.078 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:34:50.138 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:35:10.413 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35362 10 6452 1 2025-09-18 06:36:10.818 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37162 10 6452 1 2025-09-18 06:31:31.298 00:06:00.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 06:37:11.215 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42646 10 6452 1 2025-09-18 06:38:11.623 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59402 10 6452 1 2025-09-18 06:39:12.033 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55518 10 6452 1 2025-09-18 06:39:50.961 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 06:39:50.908 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 06:39:50.823 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:39:50.324 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:39:50.408 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 06:40:12.438 00:00:16.589 TCP 1.101.0.1:3000 -> 23.104.0.1:55284 10 6452 1 2025-09-18 06:41:19.095 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50610 10 6452 1 2025-09-18 06:36:31.300 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 06:42:19.502 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39012 10 6452 1 2025-09-18 06:38:31.297 00:06:00.062 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 06:43:19.865 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38924 10 6452 1 2025-09-18 06:44:20.232 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40540 10 6452 1 2025-09-18 06:44:50.284 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 06:44:50.202 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:44:50.368 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 06:44:50.372 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 06:44:50.454 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:45:20.635 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38460 10 6452 1 2025-09-18 06:46:21.041 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60644 10 6452 1 2025-09-18 06:47:21.440 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41182 10 6452 1 2025-09-18 06:48:21.797 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38386 10 6452 1 2025-09-18 06:43:31.302 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 06:49:22.196 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43770 10 6452 1 2025-09-18 06:49:50.358 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 06:49:50.278 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 06:49:50.303 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:49:50.277 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:49:50.347 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 06:45:31.299 00:06:00.062 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 06:50:22.596 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42056 10 6452 1 2025-09-18 06:51:23.007 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47566 10 6452 1 2025-09-18 06:52:23.407 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32936 10 6452 1 2025-09-18 06:53:23.809 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58024 10 6452 1 2025-09-18 06:54:24.217 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50224 10 6452 1 2025-09-18 06:54:50.727 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 06:54:50.642 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 06:54:50.710 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 06:54:50.671 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:54:50.644 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 06:50:31.301 00:06:00.058 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 06:55:24.622 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44774 10 6452 1 2025-09-18 06:56:25.032 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59192 10 6452 1 2025-09-18 06:52:31.299 00:06:00.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 06:57:25.441 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56390 10 6452 1 2025-09-18 06:58:25.860 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60618 10 6452 1 Summary: total flows: 138, total bytes: 421653, total packets: 1034, avg bps: 877, avg pps: 0, avg bpp: 407 Time window: 2025-09-18 05:54:31 - 2025-09-18 06:58:36 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0041s User: 0.0000s Wall: 0.0022s flows/second: 63508.2 Runtime: 0.0022s