Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 21:59:03.756 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:43960 10 6452 1 2025-09-17 21:59:39.806 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 21:59:39.772 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 21:59:39.724 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 21:59:39.724 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 21:59:39.548 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:00:04.127 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53594 10 6452 1 2025-09-17 22:01:04.524 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52216 10 6452 1 2025-09-17 21:56:31.120 00:06:00.083 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:02:04.929 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:54048 10 6452 1 2025-09-17 22:03:05.355 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38002 10 6452 1 2025-09-17 21:58:31.119 00:06:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:04:05.766 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:36566 10 6452 1 2025-09-17 22:04:39.936 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:04:39.795 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:04:39.751 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:04:39.852 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:04:39.782 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:05:06.142 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39982 10 6452 1 2025-09-17 22:06:06.545 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39646 10 6452 1 2025-09-17 22:07:06.947 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46700 10 6452 1 2025-09-17 22:08:07.369 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:37590 10 6452 1 2025-09-17 22:03:31.126 00:06:00.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:09:07.758 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46940 10 6452 1 2025-09-17 22:09:40.453 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:09:40.253 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:09:39.697 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:09:40.372 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:09:40.009 00:00:00.055 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:10:08.156 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54386 10 6452 1 2025-09-17 22:05:31.123 00:06:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:11:08.558 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47524 10 6452 1 2025-09-17 22:12:08.965 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42028 10 6452 1 2025-09-17 22:13:09.368 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40140 10 6452 1 2025-09-17 22:14:09.776 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33492 10 6452 1 2025-09-17 22:14:40.059 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:14:40.086 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:14:40.173 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:14:39.976 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:14:39.974 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:15:10.205 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38584 10 6452 1 2025-09-17 22:10:31.126 00:06:00.084 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:16:10.606 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42848 10 6452 1 2025-09-17 22:17:10.965 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52342 10 6452 1 2025-09-17 22:12:31.124 00:06:00.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:18:11.327 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34336 10 6452 1 2025-09-17 22:19:11.686 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45168 10 6452 1 2025-09-17 22:19:40.236 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:19:40.169 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:19:40.003 00:00:00.049 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:19:40.148 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:19:40.086 00:00:00.050 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:20:12.116 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39848 10 6452 1 2025-09-17 22:21:12.477 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39118 10 6452 1 2025-09-17 22:22:12.884 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50762 10 6452 1 2025-09-17 22:17:31.128 00:06:00.084 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:23:13.307 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40012 10 6452 1 2025-09-17 22:24:13.713 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39068 10 6452 1 2025-09-17 22:19:31.125 00:06:00.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:24:40.143 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:24:40.234 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:24:40.144 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:24:40.205 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:24:40.226 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:25:14.114 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35804 10 6452 1 2025-09-17 22:26:14.523 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59998 10 6452 1 2025-09-17 22:27:14.930 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:59630 10 6452 1 2025-09-17 22:28:15.322 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52176 10 6452 1 2025-09-17 22:29:15.726 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:44952 10 6452 1 2025-09-17 22:24:31.130 00:06:00.083 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:29:40.333 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:29:40.287 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:29:40.270 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:29:40.377 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:29:40.354 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:30:16.110 00:00:18.131 TCP 1.101.0.1:3000 -> 23.104.0.1:41612 12 10367 1 2025-09-17 22:26:31.129 00:06:00.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:31:24.308 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:35752 10 6452 1 2025-09-17 22:32:24.711 00:00:10.489 TCP 1.101.0.1:3000 -> 23.104.0.1:47974 10 6452 1 2025-09-17 22:33:25.239 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:36316 10 6452 1 2025-09-17 22:34:25.598 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46428 10 6452 1 2025-09-17 22:34:40.453 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:34:39.999 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:34:40.358 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:34:40.431 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:34:40.446 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:35:25.996 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60586 10 6452 1 2025-09-17 22:31:31.134 00:06:00.080 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:36:26.407 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50746 10 6452 1 2025-09-17 22:37:26.811 00:00:11.037 TCP 1.101.0.1:3000 -> 23.104.0.1:56836 10 6452 1 2025-09-17 22:33:31.131 00:06:00.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:38:27.888 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52492 12 6556 1 2025-09-17 22:39:40.412 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:39:40.351 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:39:40.542 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:39:40.490 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:39:28.314 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55518 10 6452 1 2025-09-17 22:39:40.626 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:40:28.741 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 10 6452 1 2025-09-17 22:41:29.155 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51988 10 6452 1 2025-09-17 22:42:29.557 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59478 10 6452 1 2025-09-17 22:38:31.133 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:43:29.961 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53952 10 6452 1 2025-09-17 22:44:40.697 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:44:40.378 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:44:40.742 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:44:40.643 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:44:30.378 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2025-09-17 22:44:40.825 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:40:31.131 00:06:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:45:30.781 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53432 10 6452 1 2025-09-17 22:46:31.190 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40952 10 6452 1 2025-09-17 22:47:31.592 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56586 10 6452 1 2025-09-17 22:48:31.996 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47114 10 6452 1 2025-09-17 22:49:40.960 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:49:40.763 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:49:40.877 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:49:40.878 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:49:41.070 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:49:32.361 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35222 10 6452 1 2025-09-17 22:45:31.137 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:50:32.726 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 10 6452 1 2025-09-17 22:51:33.137 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51074 10 6452 1 2025-09-17 22:47:31.134 00:06:00.097 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 22:52:33.547 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52308 10 6452 1 2025-09-17 22:53:33.952 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52604 10 6452 1 2025-09-17 22:54:40.895 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 22:54:40.734 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 22:54:40.511 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:54:40.812 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 22:54:41.057 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 22:54:34.364 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54778 10 6452 1 2025-09-17 22:55:34.771 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:52062 12 10367 1 2025-09-17 22:56:35.214 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48056 10 6452 1 2025-09-17 22:52:31.139 00:06:00.091 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-17 22:57:35.626 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39678 10 6452 1 2025-09-17 22:58:36.027 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:46688 10 6452 1 Summary: total flows: 137, total bytes: 424811, total packets: 1024, avg bps: 909, avg pps: 0, avg bpp: 414 Time window: 2025-09-17 21:56:31 - 2025-09-17 22:58:46 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0033s User: 0.0017s Wall: 0.0018s flows/second: 74898.3 Runtime: 0.0018s