Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-29 15:59:15.891 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35212 12 6556 1 2025-09-29 16:00:19.189 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:00:18.933 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:00:19.112 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:00:19.106 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:00:18.931 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:00:16.306 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60376 10 6452 1 2025-09-29 16:01:16.705 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48026 10 6452 1 2025-09-29 16:02:17.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58006 10 6452 1 2025-09-29 15:57:36.670 00:06:00.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 16:03:17.527 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46240 10 6452 1 2025-09-29 16:04:17.938 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:46458 10 6452 1 2025-09-29 15:59:36.668 00:06:00.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 16:05:19.341 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:05:19.304 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:05:18.901 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:05:19.258 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:05:19.165 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:05:18.383 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40012 10 6452 1 2025-09-29 16:06:18.807 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59748 10 6452 1 2025-09-29 16:07:19.208 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54872 10 6452 1 2025-09-29 16:08:19.614 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39066 10 6452 1 2025-09-29 16:09:20.018 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46826 10 6452 1 2025-09-29 16:04:36.673 00:06:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 16:10:19.482 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:10:19.240 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:10:19.269 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:10:19.399 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:10:19.353 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:10:20.420 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43642 10 6452 1 2025-09-29 16:11:20.831 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39040 10 6452 1 2025-09-29 16:06:36.669 00:06:00.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 16:12:21.236 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32920 10 6452 1 2025-09-29 16:13:21.638 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52290 10 6452 1 2025-09-29 16:14:22.036 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60818 10 6452 1 2025-09-29 16:15:19.481 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:15:19.502 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:15:19.353 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:15:19.398 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:15:19.397 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:15:22.446 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54418 10 6452 1 2025-09-29 16:16:22.844 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40626 10 6452 1 2025-09-29 16:11:36.673 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 16:17:23.256 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41406 10 6452 1 2025-09-29 16:18:23.659 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46240 10 6452 1 2025-09-29 16:13:36.671 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 16:19:24.097 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36522 10 6452 1 2025-09-29 16:20:19.416 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:20:19.440 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:20:19.360 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:20:19.333 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:20:19.435 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:20:24.502 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37802 10 6452 1 2025-09-29 16:21:24.906 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56468 10 6452 1 2025-09-29 16:22:25.307 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49264 10 6452 1 2025-09-29 16:23:25.711 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54080 10 6452 1 2025-09-29 16:18:36.677 00:06:00.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 16:24:26.115 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58292 10 6452 1 2025-09-29 16:25:19.760 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:25:19.784 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:25:19.691 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:25:19.761 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:25:19.774 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:25:26.520 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58894 10 6452 1 2025-09-29 16:20:36.675 00:06:00.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 16:26:26.890 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:48696 10 6452 1 2025-09-29 16:27:27.315 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:47272 12 10375 1 2025-09-29 16:28:27.793 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48434 10 6452 1 2025-09-29 16:29:28.212 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52648 10 6452 1 2025-09-29 16:30:19.705 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:30:19.466 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:30:19.643 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:30:19.622 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:30:19.679 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:30:28.621 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55636 10 6452 1 2025-09-29 16:25:36.678 00:06:00.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 16:31:29.025 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50178 10 6452 1 2025-09-29 16:32:29.431 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60432 10 6452 1 2025-09-29 16:27:36.675 00:06:00.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 16:33:29.842 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:60074 10 6452 1 2025-09-29 16:34:30.269 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36414 10 6452 1 2025-09-29 16:35:19.826 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:35:19.635 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:35:19.685 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:35:19.684 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:35:19.766 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:35:30.677 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46474 10 6452 1 2025-09-29 16:36:31.101 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54976 10 6452 1 2025-09-29 16:32:36.680 00:06:00.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 16:37:31.503 00:00:10.554 TCP 1.101.0.1:3000 -> 23.104.0.1:56226 10 6452 1 2025-09-29 16:38:32.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34656 10 6452 1 2025-09-29 16:34:36.679 00:06:00.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 16:39:32.513 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:45396 10 6452 1 2025-09-29 16:40:20.638 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:40:20.326 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:40:20.465 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:40:20.556 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:40:20.798 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:40:32.889 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:53656 10 6452 1 2025-09-29 16:41:33.270 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49600 10 6452 1 2025-09-29 16:42:33.674 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42290 10 6452 1 2025-09-29 16:43:34.104 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50118 10 6452 1 2025-09-29 16:39:36.683 00:06:00.177 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 16:44:34.462 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49428 10 6452 1 2025-09-29 16:45:19.924 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:45:19.781 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:45:20.052 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:45:19.983 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:45:20.135 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:45:34.865 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41142 10 6452 1 2025-09-29 16:41:36.683 00:06:00.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 16:46:35.284 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:52298 10 6452 1 2025-09-29 16:47:35.645 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48216 10 6452 1 2025-09-29 16:48:36.053 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58936 10 6452 1 2025-09-29 16:49:36.456 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50444 10 6452 1 2025-09-29 16:50:20.085 00:00:00.051 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:50:20.198 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:50:20.005 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:50:19.756 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:50:20.003 00:00:00.050 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:50:36.861 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52236 10 6452 1 2025-09-29 16:46:36.686 00:06:00.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 16:51:37.287 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34504 10 6452 1 2025-09-29 16:52:37.691 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41736 10 6452 1 2025-09-29 16:48:36.685 00:06:00.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 16:53:38.068 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45434 10 6452 1 2025-09-29 16:54:38.475 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50072 10 6452 1 2025-09-29 16:55:20.152 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 16:55:19.986 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:55:20.153 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 16:55:20.070 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 16:55:20.237 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 16:55:38.889 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:52034 10 6452 1 2025-09-29 16:56:39.267 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54408 10 6452 1 2025-09-29 16:57:39.674 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59848 10 6452 1 2025-09-29 16:53:36.690 00:06:00.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 16:58:40.098 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:55452 10 6452 1 Summary: total flows: 137, total bytes: 420904, total packets: 1022, avg bps: 905, avg pps: 0, avg bpp: 411 Time window: 2025-09-29 15:57:36 - 2025-09-29 16:59:36 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0042s User: 0.0010s Wall: 0.0019s flows/second: 72598.8 Runtime: 0.0019s