Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-19 16:59:05.181 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49414 10 6452 1 2025-09-19 17:00:05.588 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47872 10 6452 1 2025-09-19 17:00:31.480 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 16:56:31.963 00:05:00.105 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 17:00:31.621 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:00:31.497 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:00:31.564 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:00:31.647 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:01:05.994 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47718 10 6452 1 2025-09-19 16:57:31.960 00:05:00.110 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 17:02:06.403 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45612 10 6452 1 2025-09-19 17:03:06.782 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38008 10 6452 1 2025-09-19 17:04:07.190 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35776 10 6452 1 2025-09-19 17:05:07.601 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47038 10 6452 1 2025-09-19 17:05:31.712 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 17:05:31.629 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:05:31.641 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:05:31.790 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:05:31.872 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:06:08.010 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:54984 12 10365 1 2025-09-19 17:02:31.964 00:05:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 17:07:08.449 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59754 10 6452 1 2025-09-19 17:03:31.961 00:05:00.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 17:08:08.855 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56194 10 6452 1 2025-09-19 17:09:09.267 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55696 10 6452 1 2025-09-19 17:10:09.665 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42532 10 6452 1 2025-09-19 17:10:31.831 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 17:10:31.787 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:10:31.586 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:10:31.787 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:10:31.871 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:11:10.098 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:34386 12 10367 1 2025-09-19 17:12:10.578 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48688 10 6452 1 2025-09-19 17:08:31.966 00:05:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 17:13:10.980 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50094 10 6452 1 2025-09-19 17:09:31.966 00:05:00.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 17:14:11.390 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55206 10 6452 1 2025-09-19 17:15:11.753 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:55772 10 6452 1 2025-09-19 17:15:31.940 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:15:31.758 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 17:15:31.866 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:15:31.716 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:15:31.857 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:16:12.152 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36884 10 6452 1 2025-09-19 17:17:12.567 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38442 10 6452 1 2025-09-19 17:18:12.977 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50584 10 6452 1 2025-09-19 17:14:31.971 00:05:00.100 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 17:19:13.389 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46976 10 6452 1 2025-09-19 17:15:31.968 00:05:00.105 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 17:20:13.763 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:43234 10 6452 1 2025-09-19 17:20:32.054 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:20:31.940 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 17:20:31.729 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:20:31.965 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:20:32.136 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:21:14.186 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42970 10 6452 1 2025-09-19 17:22:14.604 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:37906 10 6452 1 2025-09-19 17:23:14.974 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60070 10 6452 1 2025-09-19 17:24:15.387 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43546 10 6452 1 2025-09-19 17:20:31.975 00:05:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 17:25:15.753 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45750 12 6556 1 2025-09-19 17:25:32.149 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:21:31.973 00:05:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 17:25:31.905 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 17:25:31.975 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:25:31.834 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:25:32.067 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:26:16.157 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54942 10 6452 1 2025-09-19 17:27:16.533 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48644 10 6452 1 2025-09-19 17:28:16.935 00:00:10.911 TCP 1.101.0.1:3000 -> 23.104.0.1:50650 10 6452 1 2025-09-19 17:29:17.884 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45496 10 6452 1 2025-09-19 17:30:18.282 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48368 10 6452 1 2025-09-19 17:30:32.059 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 17:26:31.975 00:05:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 17:30:32.061 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:30:32.191 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:30:32.114 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:30:32.199 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:31:18.681 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:57578 10 6452 1 2025-09-19 17:27:31.973 00:05:00.103 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 17:32:19.106 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35222 10 6452 1 2025-09-19 17:33:19.515 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45860 10 6452 1 2025-09-19 17:34:19.914 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53556 10 6452 1 2025-09-19 17:35:20.311 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51148 10 6452 1 2025-09-19 17:35:32.137 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:35:31.841 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:35:32.363 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:35:32.316 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 17:35:32.447 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:36:20.716 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43742 10 6452 1 2025-09-19 17:32:31.977 00:05:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 17:33:31.975 00:05:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 17:37:21.119 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50020 10 6452 1 2025-09-19 17:38:21.520 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52578 10 6452 1 2025-09-19 17:39:21.931 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:48120 10 6452 1 2025-09-19 17:40:32.232 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:40:32.309 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 17:40:32.307 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:40:32.112 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:40:22.367 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:44070 10 6452 1 2025-09-19 17:40:32.315 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:41:22.797 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47276 10 6452 1 2025-09-19 17:38:31.978 00:05:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 17:42:23.207 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47302 10 6452 1 2025-09-19 17:39:31.976 00:05:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 17:43:23.570 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:50000 10 6452 1 2025-09-19 17:44:23.964 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45400 10 6452 1 2025-09-19 17:45:32.744 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 17:45:24.371 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44764 10 6452 1 2025-09-19 17:45:32.741 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:45:32.439 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:45:33.154 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:45:33.236 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:46:24.775 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37696 10 6452 1 2025-09-19 17:47:25.182 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39374 10 6452 1 2025-09-19 17:44:31.980 00:05:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 17:48:25.584 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:55224 10 6452 1 2025-09-19 17:45:31.978 00:05:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 17:49:25.947 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35852 10 6452 1 2025-09-19 17:50:32.550 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 17:50:32.446 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:50:32.336 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:50:32.445 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:50:32.528 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:50:26.352 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42344 10 6452 1 2025-09-19 17:51:26.758 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51694 10 6452 1 2025-09-19 17:52:27.182 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40132 10 6452 1 2025-09-19 17:53:27.545 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42864 10 6452 1 2025-09-19 17:50:31.992 00:05:00.086 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-19 17:54:27.950 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43590 10 6452 1 2025-09-19 17:55:32.620 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 17:51:31.991 00:05:00.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-19 17:55:32.536 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 17:55:32.687 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 17:55:32.473 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:55:32.537 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 17:55:28.371 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41744 10 6452 1 2025-09-19 17:56:28.775 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54760 12 6556 1 2025-09-19 17:57:29.189 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60490 12 6556 1 2025-09-19 17:58:29.598 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44152 10 6452 1 Summary: total flows: 140, total bytes: 425140, total packets: 1030, avg bps: 912, avg pps: 0, avg bpp: 412 Time window: 2025-09-19 16:56:31 - 2025-09-19 17:58:39 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0041s User: 0.0014s Wall: 0.0021s flows/second: 65208.5 Runtime: 0.0022s