Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 11:58:57.685 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45462 10 6661 1 2025-09-11 11:59:58.116 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50010 10 6661 1 2025-09-11 12:00:58.475 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57958 10 6661 1 2025-09-11 12:01:34.630 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:01:34.376 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:01:34.379 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:01:34.229 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:01:34.546 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:01:58.879 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48250 10 6661 1 2025-09-11 12:02:59.281 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58614 10 6661 1 2025-09-11 11:58:27.931 00:06:00.050 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 12:03:59.681 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56892 10 6661 1 2025-09-11 11:59:27.928 00:06:00.056 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 12:05:00.067 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58362 10 6661 1 2025-09-11 12:06:00.468 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50978 10 6661 1 2025-09-11 12:06:34.639 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:06:34.641 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:06:34.565 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:06:34.486 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:06:34.568 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:07:00.826 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34758 10 6661 1 2025-09-11 12:08:01.238 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41430 10 6661 1 2025-09-11 12:09:01.646 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60076 10 6661 1 2025-09-11 12:10:02.062 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52174 10 6661 1 2025-09-11 12:05:27.933 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 12:11:02.471 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48326 10 6661 1 2025-09-11 12:06:27.930 00:06:00.058 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 12:11:34.644 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:11:34.721 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:11:34.858 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:11:34.910 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:11:34.940 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:12:02.837 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:60496 10 6661 1 2025-09-11 12:13:03.263 00:00:10.432 TCP 1.101.0.1:3000 -> 23.104.0.1:48302 11 6713 1 2025-09-11 12:14:03.751 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40380 10 6661 1 2025-09-11 12:15:04.127 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35812 10 6661 1 2025-09-11 12:16:04.530 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54674 10 6661 1 2025-09-11 12:16:34.949 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:16:34.808 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:16:34.863 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:16:34.840 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:16:34.865 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:17:04.938 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:46516 10 6661 1 2025-09-11 12:12:27.935 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 12:18:05.360 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53918 10 6661 1 2025-09-11 12:13:27.934 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 12:19:05.775 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51962 10 6661 1 2025-09-11 12:20:06.188 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58904 10 6661 1 2025-09-11 12:21:06.586 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40556 10 6661 1 2025-09-11 12:21:34.816 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:21:34.742 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:21:34.885 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:21:34.611 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:21:34.733 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:22:06.983 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46158 10 6661 1 2025-09-11 12:23:07.343 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36408 10 6661 1 2025-09-11 12:24:07.755 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:57670 12 6765 1 2025-09-11 12:19:27.937 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 12:25:08.195 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44386 10 6661 1 2025-09-11 12:20:27.936 00:06:00.058 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 12:26:08.594 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51470 10 6661 1 2025-09-11 12:26:34.949 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:26:34.953 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:26:34.908 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:26:34.950 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:26:35.032 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:27:08.956 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42426 10 6661 1 2025-09-11 12:28:09.372 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53396 10 6661 1 2025-09-11 12:29:09.771 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36628 10 6661 1 2025-09-11 12:30:10.140 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44512 10 6661 1 2025-09-11 12:31:10.504 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46344 10 6661 1 2025-09-11 12:26:27.940 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 12:31:35.469 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:31:35.388 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:31:35.354 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:31:35.299 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:31:34.982 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:32:10.905 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34366 10 6661 1 2025-09-11 12:27:27.940 00:06:00.058 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 12:33:11.316 00:00:10.824 TCP 1.101.0.1:3000 -> 23.104.0.1:39052 10 6661 1 2025-09-11 12:34:12.176 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42310 10 6661 1 2025-09-11 12:35:12.585 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43306 10 6661 1 2025-09-11 12:36:13.019 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57506 10 6661 1 2025-09-11 12:36:35.512 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:36:35.299 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:36:35.347 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:36:35.495 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:36:35.578 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:37:13.379 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60692 10 6661 1 2025-09-11 12:38:13.740 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39108 10 6661 1 2025-09-11 12:34:27.942 00:05:00.060 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-11 12:33:27.942 00:06:00.055 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 12:39:14.145 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:40068 12 10365 1 2025-09-11 12:40:14.629 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56370 10 6452 1 2025-09-11 12:41:15.026 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53602 10 6452 1 2025-09-11 12:41:35.282 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:41:35.228 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:41:35.151 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:41:35.211 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:41:35.294 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:42:15.390 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59136 10 6452 1 2025-09-11 12:43:15.755 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:39140 12 10367 1 2025-09-11 12:40:27.944 00:05:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-11 12:44:16.229 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55772 10 6452 1 2025-09-11 12:40:27.943 00:05:00.060 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-11 12:45:16.634 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34792 10 6452 1 2025-09-11 12:46:17.057 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55894 10 6452 1 2025-09-11 12:46:35.206 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:46:35.474 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:46:35.311 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:46:35.338 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:46:35.124 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:47:17.464 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47626 10 6452 1 2025-09-11 12:48:17.869 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50626 10 6452 1 2025-09-11 12:49:18.294 00:00:13.995 TCP 1.101.0.1:3000 -> 23.104.0.1:33600 10 6452 1 2025-09-11 12:46:27.946 00:05:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-11 12:46:27.945 00:05:00.061 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-11 12:50:22.329 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-09-11 12:51:22.730 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37734 10 6452 1 2025-09-11 12:51:35.546 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:51:35.623 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:51:35.337 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:51:35.437 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:51:35.522 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:52:23.136 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35342 10 6452 1 2025-09-11 12:53:23.505 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54520 10 6452 1 2025-09-11 12:54:23.910 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55194 10 6452 1 2025-09-11 12:55:24.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57336 10 6452 1 2025-09-11 12:52:27.944 00:05:00.060 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-11 12:52:27.946 00:05:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-11 12:56:35.685 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 12:56:35.712 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 12:56:35.511 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 12:56:35.737 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:56:24.721 00:00:11.063 TCP 1.101.0.1:3000 -> 23.104.0.1:44312 10 6452 1 2025-09-11 12:56:35.602 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 12:57:25.830 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38612 10 6452 1 2025-09-11 12:58:26.237 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40352 10 6452 1 Summary: total flows: 138, total bytes: 433221, total packets: 1025, avg bps: 960, avg pps: 0, avg bpp: 422 Time window: 2025-09-11 11:58:27 - 2025-09-11 12:58:36 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0030s User: 0.0015s Wall: 0.0022s flows/second: 61991.4 Runtime: 0.0022s