Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-21 15:59:24.634 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:59466 11 6504 1 2025-09-21 16:00:25.069 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48322 10 6452 1 2025-09-21 16:01:28.280 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:01:28.283 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:01:28.245 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:01:28.002 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:01:28.361 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:01:25.474 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43018 10 6452 1 2025-09-21 15:57:32.958 00:06:00.038 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-21 16:02:25.882 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50000 12 6556 1 2025-09-21 15:58:32.992 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-21 16:03:26.299 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57406 10 6452 1 2025-09-21 16:04:26.698 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33890 10 6452 1 2025-09-21 16:05:27.109 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60190 10 6452 1 2025-09-21 16:06:28.156 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:06:28.075 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:06:28.177 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:06:27.887 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:06:28.072 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:06:27.518 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41478 10 6452 1 2025-09-21 16:07:27.918 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43990 10 6452 1 2025-09-21 16:08:28.337 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59068 10 6452 1 2025-09-21 16:04:32.960 00:06:00.038 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-21 16:09:28.738 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54298 10 6452 1 2025-09-21 16:05:32.994 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-21 16:10:29.146 00:00:10.670 TCP 1.101.0.1:3000 -> 23.104.0.1:42926 10 6452 1 2025-09-21 16:11:28.236 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:11:28.149 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:11:28.075 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:11:27.829 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:11:28.153 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:11:29.863 00:00:10.852 TCP 1.101.0.1:3000 -> 23.104.0.1:52016 10 6452 1 2025-09-21 16:12:30.755 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:38904 10 6452 1 2025-09-21 16:13:31.181 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57634 10 6452 1 2025-09-21 16:14:31.584 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39468 10 6452 1 2025-09-21 16:15:31.943 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41102 10 6452 1 2025-09-21 16:16:28.343 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:16:28.264 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:16:28.346 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:16:28.187 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:16:28.261 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:11:32.959 00:06:00.039 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-21 16:16:32.350 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:58042 10 6452 1 2025-09-21 16:12:32.995 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-21 16:17:32.747 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46240 10 6452 1 2025-09-21 16:18:33.150 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46206 10 6452 1 2025-09-21 16:19:33.516 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60106 10 6452 1 2025-09-21 16:20:33.940 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54734 10 6452 1 2025-09-21 16:21:28.454 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:21:28.515 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:21:28.421 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:21:28.451 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:21:28.533 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:21:34.350 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51678 10 6452 1 2025-09-21 16:18:32.961 00:05:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-21 16:22:34.749 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51752 10 6452 1 2025-09-21 16:19:32.997 00:05:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 426 1 2025-09-21 16:23:35.153 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46334 10 6452 1 2025-09-21 16:24:35.558 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34382 10 6452 1 2025-09-21 16:25:35.920 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59440 10 6452 1 2025-09-21 16:26:28.806 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:26:28.609 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:26:28.513 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:26:28.633 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:26:28.724 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:26:36.328 00:00:10.546 TCP 1.101.0.1:3000 -> 23.104.0.1:53036 12 6556 1 2025-09-21 16:27:36.938 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53524 12 6556 1 2025-09-21 16:24:32.961 00:05:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-21 16:28:37.363 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 10 6452 1 2025-09-21 16:29:37.726 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50678 10 6452 1 2025-09-21 16:25:33.000 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-21 16:30:38.133 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:55644 10 6452 1 2025-09-21 16:31:29.347 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:31:29.090 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:31:28.881 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:31:28.885 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:31:29.265 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:31:38.500 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38278 10 6452 1 2025-09-21 16:32:38.872 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33748 10 6452 1 2025-09-21 16:33:39.280 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33282 12 6556 1 2025-09-21 16:30:32.965 00:05:00.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-21 16:34:39.690 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51568 10 6452 1 2025-09-21 16:35:40.060 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49222 10 6452 1 2025-09-21 16:36:28.842 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:36:28.590 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:36:28.761 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:36:28.957 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:36:28.760 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:36:40.461 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37008 10 6452 1 2025-09-21 16:32:33.001 00:06:00.034 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 757 1 2025-09-21 16:37:40.871 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38794 10 6452 1 2025-09-21 16:38:41.276 00:00:10.913 TCP 1.101.0.1:3000 -> 23.104.0.1:37694 10 6452 1 2025-09-21 16:39:42.228 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60558 10 6452 1 2025-09-21 16:36:32.965 00:05:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-21 16:40:42.631 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45230 10 6452 1 2025-09-21 16:41:29.137 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:41:28.787 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:41:28.698 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:41:29.149 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:41:29.232 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:41:43.037 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60806 10 6452 1 2025-09-21 16:42:43.445 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:42788 10 6452 1 2025-09-21 16:39:32.968 00:05:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-21 16:43:43.842 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:42052 10 6452 1 2025-09-21 16:44:44.273 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40832 10 6452 1 2025-09-21 16:45:44.685 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57292 10 6452 1 2025-09-21 16:46:28.968 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:46:29.127 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:46:28.913 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:46:28.969 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:46:29.053 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:42:32.966 00:05:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-21 16:46:45.112 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45626 10 6452 1 2025-09-21 16:47:45.524 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36856 10 6452 1 2025-09-21 16:48:45.933 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37514 10 6452 1 2025-09-21 16:45:32.969 00:05:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-21 16:49:46.372 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34842 10 6452 1 2025-09-21 16:50:46.776 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60970 10 6452 1 2025-09-21 16:51:29.188 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:51:29.235 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:51:29.101 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:51:29.046 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:51:29.106 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:51:47.194 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55192 10 6452 1 2025-09-21 16:48:32.968 00:05:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-21 16:52:47.591 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60640 10 6452 1 2025-09-21 16:53:47.992 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53584 10 6452 1 2025-09-21 16:54:48.350 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50920 10 6452 1 2025-09-21 16:51:32.971 00:05:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-21 16:55:48.755 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:42714 10 6452 1 2025-09-21 16:56:29.231 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 16:56:29.294 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 16:56:28.952 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:56:29.342 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 16:56:29.425 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 16:56:49.191 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:41036 12 10367 1 2025-09-21 16:57:49.677 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54510 10 6452 1 2025-09-21 16:54:32.969 00:05:00.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 138, total bytes: 413305, total packets: 989, avg bps: 888, avg pps: 0, avg bpp: 417 Time window: 2025-09-21 15:57:32 - 2025-09-21 16:59:33 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0027s User: 0.0018s Wall: 0.0021s flows/second: 67116.6 Runtime: 0.0021s