Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-19 14:59:02.208 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60806 10 6452 1 2025-09-19 15:00:02.612 00:00:10.789 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6452 1 2025-09-19 15:00:29.147 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:00:29.397 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:00:29.272 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:00:29.123 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:00:29.063 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 14:55:31.917 00:06:00.083 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 15:01:03.431 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:50064 11 6504 1 2025-09-19 14:57:31.916 00:05:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 15:02:03.900 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:54180 11 6504 1 2025-09-19 15:03:04.376 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53730 10 6452 1 2025-09-19 15:04:04.780 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33632 10 6452 1 2025-09-19 15:05:05.192 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:58668 10 6452 1 2025-09-19 15:05:29.273 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:05:29.349 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:05:29.284 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:05:29.274 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:05:29.358 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:06:05.630 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:50088 12 10367 1 2025-09-19 15:02:31.919 00:05:00.083 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 15:07:06.123 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56874 10 6452 1 2025-09-19 15:03:31.915 00:05:00.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 15:08:06.544 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44588 10 6452 1 2025-09-19 15:09:06.906 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40962 12 6556 1 2025-09-19 15:10:07.314 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46794 10 6452 1 2025-09-19 15:10:29.220 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:10:28.937 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:10:29.138 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:10:29.141 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:10:29.350 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:11:07.710 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:52756 10 6452 1 2025-09-19 15:12:08.137 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 10 6452 1 2025-09-19 15:08:31.919 00:05:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 15:13:08.540 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52802 10 6452 1 2025-09-19 15:09:31.917 00:05:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 15:14:08.901 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38964 10 6452 1 2025-09-19 15:15:09.303 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45444 10 6452 1 2025-09-19 15:15:29.466 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:15:29.416 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:15:29.354 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:15:29.300 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:15:29.548 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:16:09.670 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54476 10 6452 1 2025-09-19 15:17:10.095 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40496 10 6452 1 2025-09-19 15:18:10.502 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37050 10 6452 1 2025-09-19 15:14:31.922 00:05:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 15:19:10.904 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55488 12 6556 1 2025-09-19 15:15:31.918 00:05:00.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 15:20:11.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47744 10 6452 1 2025-09-19 15:20:29.725 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:20:29.915 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:20:29.867 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:20:29.572 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:20:29.643 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:21:11.723 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:55520 10 6452 1 2025-09-19 15:22:12.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59842 10 6452 1 2025-09-19 15:23:12.523 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45776 10 6452 1 2025-09-19 15:24:12.922 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44800 10 6452 1 2025-09-19 15:20:31.921 00:05:00.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 15:25:13.341 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35708 10 6452 1 2025-09-19 15:25:29.823 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:25:29.555 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:25:29.637 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:25:29.390 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:25:29.740 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:21:31.920 00:05:00.119 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 15:26:13.742 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34254 10 6452 1 2025-09-19 15:27:14.148 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43080 10 6452 1 2025-09-19 15:28:14.552 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39974 10 6452 1 2025-09-19 15:29:14.953 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:54488 11 6504 1 2025-09-19 15:30:29.637 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:30:29.638 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:30:15.412 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54520 10 6452 1 2025-09-19 15:30:29.802 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:30:29.679 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:30:29.553 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:26:31.924 00:05:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 15:31:15.815 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:46938 10 6452 1 2025-09-19 15:27:31.922 00:05:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 15:32:16.267 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34742 10 6452 1 2025-09-19 15:33:16.639 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34164 10 6452 1 2025-09-19 15:34:17.016 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:49756 10 6452 1 2025-09-19 15:35:29.652 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:35:29.539 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:35:29.744 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:35:29.790 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:35:17.414 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51322 10 6452 1 2025-09-19 15:35:29.872 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:36:17.791 00:00:10.471 TCP 1.101.0.1:3000 -> 23.104.0.1:52480 12 10367 1 2025-09-19 15:32:31.926 00:05:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 15:33:31.923 00:05:00.118 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 15:37:18.300 00:00:23.045 TCP 1.101.0.1:3000 -> 23.104.0.1:46256 10 6452 1 2025-09-19 15:38:31.495 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45686 10 6452 1 2025-09-19 15:39:31.900 00:00:10.732 TCP 1.101.0.1:3000 -> 23.104.0.1:36302 10 6452 1 2025-09-19 15:40:29.848 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:40:29.955 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:40:29.686 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:40:29.641 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:40:29.724 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:40:32.674 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48622 10 6452 1 2025-09-19 15:41:33.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35346 10 6452 1 2025-09-19 15:38:31.933 00:05:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 15:42:33.516 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34604 10 6452 1 2025-09-19 15:39:31.930 00:05:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 15:43:33.916 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38342 10 6452 1 2025-09-19 15:44:34.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41100 10 6452 1 2025-09-19 15:45:29.949 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:45:29.861 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:45:29.943 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:45:30.060 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:45:30.027 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:45:34.719 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:60900 12 10365 1 2025-09-19 15:46:35.198 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33242 10 6452 1 2025-09-19 15:47:35.601 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58086 10 6452 1 2025-09-19 15:44:31.934 00:05:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 15:48:36.006 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50850 10 6452 1 2025-09-19 15:45:31.933 00:05:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 15:49:36.402 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57908 10 6452 1 2025-09-19 15:50:30.152 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:50:29.916 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:50:30.117 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:50:30.116 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:50:30.069 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:50:36.807 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36846 10 6452 1 2025-09-19 15:51:37.212 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46274 10 6452 1 2025-09-19 15:52:37.612 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47422 10 6452 1 2025-09-19 15:53:37.977 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52696 10 6452 1 2025-09-19 15:50:31.935 00:05:00.112 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 15:54:38.374 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37050 10 6452 1 2025-09-19 15:55:30.204 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 15:55:30.126 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 15:55:30.047 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:55:30.244 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 15:55:30.324 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 15:51:31.933 00:05:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 15:55:38.778 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59898 10 6452 1 2025-09-19 15:56:39.183 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52314 10 6452 1 2025-09-19 15:57:39.595 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49248 10 6452 1 Summary: total flows: 139, total bytes: 422778, total packets: 1025, avg bps: 904, avg pps: 0, avg bpp: 412 Time window: 2025-09-19 14:55:31 - 2025-09-19 15:57:49 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0033s User: 0.0022s Wall: 0.0018s flows/second: 78046.6 Runtime: 0.0018s