Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 01:58:58.871 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45580 10 6452 1 2025-09-20 01:59:59.234 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46832 10 6452 1 2025-09-20 01:55:32.183 00:06:00.022 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 02:00:42.379 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:00:42.300 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:00:42.408 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:00:42.053 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:00:42.297 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:00:59.597 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50346 10 6452 1 2025-09-20 01:56:32.202 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 02:02:00.003 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48492 10 6452 1 2025-09-20 02:03:00.402 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53880 10 6452 1 2025-09-20 02:04:00.803 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:60530 10 6452 1 2025-09-20 02:05:01.183 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33450 10 6452 1 2025-09-20 02:05:42.528 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:05:42.438 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:05:42.189 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:05:42.438 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:05:42.521 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:06:01.583 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33304 10 6452 1 2025-09-20 02:07:01.986 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45556 10 6452 1 2025-09-20 02:02:32.185 00:06:00.023 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 02:08:02.389 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48672 10 6452 1 2025-09-20 02:03:32.204 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 02:09:02.759 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58092 10 6452 1 2025-09-20 02:10:03.173 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:53698 10 6452 1 2025-09-20 02:10:42.624 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:10:42.543 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:10:42.434 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:10:42.430 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:10:42.558 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:11:03.587 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56372 10 6452 1 2025-09-20 02:12:03.961 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35614 10 6452 1 2025-09-20 02:13:04.370 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49362 10 6452 1 2025-09-20 02:14:04.778 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46946 10 6452 1 2025-09-20 02:09:32.194 00:06:00.016 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 02:15:05.182 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44402 10 6452 1 2025-09-20 02:10:32.207 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 02:15:43.054 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:15:42.980 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:15:42.828 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:15:42.791 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:15:43.137 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:16:05.582 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57246 10 6452 1 2025-09-20 02:17:05.983 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39958 10 6452 1 2025-09-20 02:18:06.386 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35852 10 6452 1 2025-09-20 02:19:06.791 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38118 10 6452 1 2025-09-20 02:20:07.202 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58016 10 6452 1 2025-09-20 02:20:42.619 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:20:42.844 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:20:42.543 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:20:42.612 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:20:42.696 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:21:07.607 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41830 10 6452 1 2025-09-20 02:16:32.196 00:06:00.016 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 02:22:08.011 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 10 6452 1 2025-09-20 02:17:32.209 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 02:23:08.411 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40216 10 6452 1 2025-09-20 02:24:08.816 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39752 10 6452 1 2025-09-20 02:25:09.182 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32960 10 6452 1 2025-09-20 02:25:42.885 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:25:42.700 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:25:42.815 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:25:42.781 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:25:42.863 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:26:09.585 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39306 10 6452 1 2025-09-20 02:27:09.982 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34694 10 6452 1 2025-09-20 02:28:10.391 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59516 10 6452 1 2025-09-20 02:23:32.199 00:06:00.027 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 02:29:10.790 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:53760 10 6452 1 2025-09-20 02:24:32.210 00:06:00.013 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 02:30:11.151 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54524 10 6452 1 2025-09-20 02:30:43.149 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:30:42.887 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:30:42.899 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:30:42.671 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:30:43.068 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:31:11.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52398 10 6452 1 2025-09-20 02:32:11.926 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:39908 10 6452 1 2025-09-20 02:33:12.356 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60012 10 6452 1 2025-09-20 02:34:12.720 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51954 10 6452 1 2025-09-20 02:35:13.116 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:49752 10 6452 1 2025-09-20 02:30:32.199 00:06:00.027 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 02:35:43.183 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:35:43.283 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:35:43.100 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:35:43.194 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:35:43.101 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:36:13.518 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 10 6452 1 2025-09-20 02:31:32.224 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 02:37:13.936 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:59188 10 6452 1 2025-09-20 02:38:14.371 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33046 10 6452 1 2025-09-20 02:39:14.725 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 10 6452 1 2025-09-20 02:40:15.107 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43428 10 6452 1 2025-09-20 02:40:43.016 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:40:43.139 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:40:43.141 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:40:42.934 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:40:42.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:41:15.473 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51338 12 6556 1 2025-09-20 02:42:15.880 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50320 10 6452 1 2025-09-20 02:37:32.203 00:06:00.027 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 02:43:16.245 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46810 10 6452 1 2025-09-20 02:38:32.225 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 02:44:16.650 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41216 10 6452 1 2025-09-20 02:45:17.069 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57318 10 6452 1 2025-09-20 02:45:43.058 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:45:43.150 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:45:43.179 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:45:43.361 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:45:43.445 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:46:17.437 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60882 10 6452 1 2025-09-20 02:47:17.835 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:36022 10 6452 1 2025-09-20 02:48:18.231 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:44804 10 6452 1 2025-09-20 02:49:18.598 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38542 10 6452 1 2025-09-20 02:44:32.205 00:06:00.028 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 02:50:19.002 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33100 10 6452 1 2025-09-20 02:45:32.228 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 02:50:43.393 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:50:43.244 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:50:43.312 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:50:43.273 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:50:43.312 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:51:19.358 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45768 10 6452 1 2025-09-20 02:52:19.762 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:53600 10 6452 1 2025-09-20 02:53:20.187 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36838 10 6452 1 2025-09-20 02:54:20.552 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38544 10 6452 1 2025-09-20 02:55:20.921 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60794 10 6452 1 2025-09-20 02:55:43.502 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 02:55:43.334 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 02:55:43.245 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 02:55:43.301 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:55:43.419 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 02:51:32.216 00:06:00.017 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 02:56:21.322 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:44690 12 10367 1 2025-09-20 02:52:32.231 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-20 02:57:21.817 00:00:11.733 TCP 1.101.0.1:3000 -> 23.104.0.1:56288 10 6452 1 2025-09-20 02:58:23.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58126 10 6452 1 Summary: total flows: 138, total bytes: 418481, total packets: 973, avg bps: 885, avg pps: 0, avg bpp: 430 Time window: 2025-09-20 01:55:32 - 2025-09-20 02:58:33 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0046s User: 0.0011s Wall: 0.0020s flows/second: 68417.7 Runtime: 0.0020s