Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 15:58:41.430 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50718 10 6452 1 2025-09-18 15:54:31.458 00:06:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 15:59:41.837 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:42664 10 6452 1 2025-09-18 16:00:01.510 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:00:01.427 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:00:01.286 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:00:01.427 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:00:01.311 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:00:42.265 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45336 10 6452 1 2025-09-18 15:56:31.456 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:01:42.674 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43266 10 6452 1 2025-09-18 16:02:43.039 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36882 10 6452 1 2025-09-18 16:03:43.443 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48306 11 6504 1 2025-09-18 16:04:43.856 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:60952 10 6452 1 2025-09-18 16:05:01.748 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:05:01.602 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:05:01.561 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:05:01.665 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:05:01.777 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:05:44.231 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45152 10 6452 1 2025-09-18 16:01:31.459 00:06:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:06:44.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41058 10 6452 1 2025-09-18 16:07:44.996 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34544 10 6452 1 2025-09-18 16:03:31.463 00:06:00.074 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:08:45.406 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47106 10 6452 1 2025-09-18 16:09:45.817 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43596 10 6452 1 2025-09-18 16:10:01.446 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:10:01.466 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:10:01.692 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:10:01.465 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:10:01.775 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:10:46.220 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:39942 12 10365 1 2025-09-18 16:11:46.673 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35792 10 6452 1 2025-09-18 16:12:47.105 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:53458 10 6452 1 2025-09-18 16:08:31.468 00:06:00.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:13:47.480 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38178 10 6452 1 2025-09-18 16:14:47.892 00:00:10.971 TCP 1.101.0.1:3000 -> 23.104.0.1:35974 10 6452 1 2025-09-18 16:15:01.502 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:15:01.404 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:15:01.289 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:15:01.419 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:15:01.382 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:10:31.466 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:15:48.906 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56156 10 6452 1 2025-09-18 16:16:49.313 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41422 10 6452 1 2025-09-18 16:17:49.730 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46288 10 6452 1 2025-09-18 16:18:50.108 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56986 10 6452 1 2025-09-18 16:20:01.887 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:19:50.471 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44076 10 6452 1 2025-09-18 16:20:01.593 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:20:01.647 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:20:01.803 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:20:01.875 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:15:31.469 00:06:00.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:20:50.829 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:48612 12 10365 1 2025-09-18 16:21:51.334 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6452 1 2025-09-18 16:17:31.467 00:06:00.071 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:22:51.735 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60488 10 6452 1 2025-09-18 16:23:52.138 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60188 10 6452 1 2025-09-18 16:25:01.861 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:25:01.722 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:25:01.918 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:25:02.053 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:24:52.550 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34384 10 6452 1 2025-09-18 16:25:02.002 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:25:52.960 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56434 10 6452 1 2025-09-18 16:26:53.366 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48690 10 6452 1 2025-09-18 16:22:31.472 00:06:00.067 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:27:53.772 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44380 10 6452 1 2025-09-18 16:28:54.182 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57438 10 6452 1 2025-09-18 16:24:31.472 00:06:00.067 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:29:54.582 00:00:10.704 TCP 1.101.0.1:3000 -> 23.104.0.1:48012 10 6452 1 2025-09-18 16:30:02.003 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:30:01.900 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:30:02.004 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:30:02.115 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:30:02.085 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:30:55.320 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47344 10 6452 1 2025-09-18 16:31:55.677 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36858 10 6452 1 2025-09-18 16:32:56.038 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47746 10 6452 1 2025-09-18 16:33:56.435 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33574 10 6452 1 2025-09-18 16:29:31.475 00:06:00.062 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:35:01.899 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:35:02.070 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:35:01.900 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:35:01.986 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:35:01.984 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:34:56.833 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:48304 10 6452 1 2025-09-18 16:35:57.260 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53008 10 6452 1 2025-09-18 16:31:31.476 00:06:00.064 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:36:57.674 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47960 10 6452 1 2025-09-18 16:37:58.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59880 10 6452 1 2025-09-18 16:38:58.513 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 10 6452 1 2025-09-18 16:40:02.359 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:40:02.382 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:40:02.182 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:40:02.277 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:40:02.344 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:39:58.903 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49362 10 6452 1 2025-09-18 16:40:59.308 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55490 10 6452 1 2025-09-18 16:36:31.480 00:06:00.058 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:41:59.764 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57130 10 6452 1 2025-09-18 16:43:00.125 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55416 10 6452 1 2025-09-18 16:38:31.479 00:06:00.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:44:00.530 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44034 10 6452 1 2025-09-18 16:45:02.430 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:45:02.339 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:45:02.328 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:45:02.347 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:45:02.191 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:45:00.891 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44840 12 6556 1 2025-09-18 16:46:01.310 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59402 10 6452 1 2025-09-18 16:47:01.726 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45916 10 6452 1 2025-09-18 16:48:02.135 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55566 10 6452 1 2025-09-18 16:43:31.484 00:06:00.055 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:49:02.532 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37980 10 6452 1 2025-09-18 16:50:02.791 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:50:02.628 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:50:02.634 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:50:02.709 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:50:02.633 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:50:02.933 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:52924 10 6452 1 2025-09-18 16:45:31.485 00:06:00.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:51:03.391 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40272 10 6452 1 2025-09-18 16:52:03.795 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45608 10 6452 1 2025-09-18 16:53:04.206 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54256 10 6452 1 2025-09-18 16:54:04.567 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48684 10 6452 1 2025-09-18 16:55:02.593 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:55:02.431 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:55:02.520 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:55:02.655 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:55:02.603 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:55:04.970 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34706 10 6452 1 2025-09-18 16:50:31.489 00:06:00.052 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:56:05.379 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:60714 12 10367 1 2025-09-18 16:57:05.814 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34154 10 6452 1 2025-09-18 16:52:31.488 00:06:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:58:06.219 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53714 10 6452 1 Summary: total flows: 138, total bytes: 429635, total packets: 1041, avg bps: 895, avg pps: 0, avg bpp: 412 Time window: 2025-09-18 15:54:31 - 2025-09-18 16:58:31 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0038s User: 0.0013s Wall: 0.0021s flows/second: 64729.8 Runtime: 0.0022s