Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-19 20:58:43.469 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41640 10 6452 1 2025-09-19 20:54:32.085 00:06:00.048 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 20:59:43.871 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39842 10 6452 1 2025-09-19 20:55:32.086 00:06:00.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 21:00:36.205 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:00:36.205 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:00:36.073 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:00:36.193 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:00:36.275 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:00:44.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59614 10 6452 1 2025-09-19 21:01:44.679 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:58402 10 6452 1 2025-09-19 21:02:45.135 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60678 10 6452 1 2025-09-19 21:03:45.510 00:00:10.901 TCP 1.101.0.1:3000 -> 23.104.0.1:44678 10 6452 1 2025-09-19 21:04:46.449 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44290 10 6452 1 2025-09-19 21:05:36.498 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:05:36.499 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:05:36.502 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:05:36.458 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:05:36.541 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:05:46.852 00:00:10.430 TCP 1.101.0.1:3000 -> 23.104.0.1:56714 10 6452 1 2025-09-19 21:01:32.085 00:06:00.049 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 21:06:47.323 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45114 10 6452 1 2025-09-19 21:02:32.088 00:06:00.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 21:07:47.720 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50590 10 6452 1 2025-09-19 21:08:48.142 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37690 10 6452 1 2025-09-19 21:09:48.551 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55216 10 6452 1 2025-09-19 21:10:36.727 00:00:00.039 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:10:36.638 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:10:36.319 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:10:36.429 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:10:36.526 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:10:48.950 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54540 10 6452 1 2025-09-19 21:11:49.359 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51220 10 6452 1 2025-09-19 21:12:49.728 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47588 10 6452 1 2025-09-19 21:08:32.085 00:06:00.049 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 21:13:50.132 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38598 10 6452 1 2025-09-19 21:09:32.088 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 21:14:50.498 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38720 10 6452 1 2025-09-19 21:15:36.933 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:15:36.689 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:15:36.989 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:15:36.987 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:15:37.073 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:15:50.900 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53804 12 6556 1 2025-09-19 21:16:51.316 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43486 10 6452 1 2025-09-19 21:17:51.727 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:33864 10 6452 1 2025-09-19 21:18:52.112 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46944 10 6452 1 2025-09-19 21:19:52.472 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41862 10 6452 1 2025-09-19 21:15:32.088 00:06:00.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 21:20:36.855 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:20:36.877 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:20:36.696 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:20:36.768 00:00:00.015 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:20:36.851 00:00:00.015 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:20:52.869 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36596 10 6452 1 2025-09-19 21:16:32.090 00:06:00.046 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 21:21:53.279 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58576 10 6452 1 2025-09-19 21:22:53.678 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36116 10 6452 1 2025-09-19 21:23:54.038 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60798 10 6452 1 2025-09-19 21:24:54.439 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60842 10 6452 1 2025-09-19 21:25:36.883 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:25:36.887 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:25:36.478 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:25:37.064 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:25:37.147 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:25:54.851 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:50548 10 6452 1 2025-09-19 21:26:55.296 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58002 10 6452 1 2025-09-19 21:22:32.089 00:06:00.050 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 21:27:55.693 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33646 10 6452 1 2025-09-19 21:23:32.091 00:06:00.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 21:28:56.114 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42028 10 6452 1 2025-09-19 21:29:56.517 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55894 10 6452 1 2025-09-19 21:30:36.890 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:30:36.802 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:30:36.626 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:30:36.891 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:30:36.973 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:30:56.968 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:47934 10 6452 1 2025-09-19 21:31:57.424 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49142 10 6452 1 2025-09-19 21:32:57.826 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6452 1 2025-09-19 21:33:58.231 00:00:10.557 TCP 1.101.0.1:3000 -> 23.104.0.1:46192 10 6452 1 2025-09-19 21:29:32.089 00:06:00.052 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 21:34:58.828 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:45946 12 6556 1 2025-09-19 21:30:32.095 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 21:35:37.118 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:35:36.890 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:35:36.912 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:35:36.965 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:35:37.047 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:35:59.274 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42170 10 6452 1 2025-09-19 21:36:59.681 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56230 10 6452 1 2025-09-19 21:38:00.047 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59614 10 6452 1 2025-09-19 21:39:00.445 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38592 10 6452 1 2025-09-19 21:40:00.849 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:43744 10 6452 1 2025-09-19 21:40:37.106 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:40:37.111 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:40:37.014 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:40:37.217 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:40:37.024 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:41:01.230 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43090 10 6452 1 2025-09-19 21:36:32.093 00:06:00.050 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 21:42:01.633 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59476 10 6452 1 2025-09-19 21:37:32.096 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 21:43:01.993 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37728 10 6452 1 2025-09-19 21:44:02.395 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55286 10 6452 1 2025-09-19 21:45:02.807 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51264 10 6452 1 2025-09-19 21:45:37.212 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:45:37.251 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:45:37.152 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:45:37.285 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:45:37.367 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:46:03.205 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:51520 12 10365 1 2025-09-19 21:47:03.680 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40730 10 6452 1 2025-09-19 21:48:04.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53988 10 6452 1 2025-09-19 21:43:32.095 00:06:00.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 21:49:04.513 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:32888 10 6452 1 2025-09-19 21:44:32.097 00:06:00.045 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 21:50:04.877 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:57630 10 6452 1 2025-09-19 21:50:37.428 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:50:37.405 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:50:37.374 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:50:37.346 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:50:37.346 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:51:05.248 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45228 10 6452 1 2025-09-19 21:52:05.656 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37220 10 6452 1 2025-09-19 21:53:06.117 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40364 10 6452 1 2025-09-19 21:54:06.527 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50292 10 6452 1 2025-09-19 21:55:06.928 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34696 10 6452 1 2025-09-19 21:50:32.097 00:06:00.049 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 21:55:37.332 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:55:37.490 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 21:55:37.459 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 21:55:37.294 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 21:55:37.415 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 21:56:07.343 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54126 10 6452 1 2025-09-19 21:51:32.100 00:06:00.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 21:57:07.703 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48642 10 6452 1 2025-09-19 21:58:08.113 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:54302 10 6452 1 Summary: total flows: 138, total bytes: 421859, total packets: 1038, avg bps: 882, avg pps: 0, avg bpp: 406 Time window: 2025-09-19 20:54:32 - 2025-09-19 21:58:18 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0029s User: 0.0020s Wall: 0.0019s flows/second: 74474.3 Runtime: 0.0019s