Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-21 01:59:30.618 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38128 10 6661 1 2025-09-21 02:00:31.029 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42114 10 6661 1 2025-09-21 02:01:11.373 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:01:11.195 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:01:11.287 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:01:11.155 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:01:11.292 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:01:31.430 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42826 10 6661 1 2025-09-21 01:57:32.678 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 02:02:31.837 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:56152 10 6661 1 2025-09-21 01:58:32.664 00:06:00.019 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 02:03:32.262 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 10 6661 1 2025-09-21 02:04:32.671 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37368 10 6661 1 2025-09-21 02:05:33.115 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35458 10 6661 1 2025-09-21 02:06:11.271 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:06:11.628 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:06:11.148 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:06:11.443 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:06:11.526 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:06:33.483 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:42194 12 10367 1 2025-09-21 02:07:33.961 00:00:10.584 TCP 1.101.0.1:3000 -> 23.104.0.1:46690 10 6452 1 2025-09-21 02:08:34.569 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44342 10 6452 1 2025-09-21 02:04:32.680 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 02:09:34.970 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50302 10 6452 1 2025-09-21 02:05:32.665 00:06:00.021 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 02:10:35.386 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56184 10 6452 1 2025-09-21 02:11:11.693 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:11:11.408 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:11:11.407 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:11:11.277 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:11:11.360 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:11:35.792 00:00:10.989 TCP 1.101.0.1:3000 -> 23.104.0.1:45266 10 6452 1 2025-09-21 02:12:36.827 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42892 10 6452 1 2025-09-21 02:13:37.188 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55792 10 6452 1 2025-09-21 02:14:37.551 00:00:14.509 TCP 1.101.0.1:3000 -> 23.104.0.1:36958 10 6452 1 2025-09-21 02:15:42.116 00:00:10.533 TCP 1.101.0.1:3000 -> 23.104.0.1:55618 10 6452 1 2025-09-21 02:16:11.457 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:16:11.447 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:16:11.579 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:16:11.520 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:16:11.602 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:11:32.684 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 02:16:42.690 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59342 10 6452 1 2025-09-21 02:12:32.667 00:06:00.020 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 02:17:43.115 00:00:10.746 TCP 1.101.0.1:3000 -> 23.104.0.1:47022 10 6452 1 2025-09-21 02:18:43.901 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57212 12 6556 1 2025-09-21 02:19:44.314 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48518 10 6452 1 2025-09-21 02:20:44.714 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51152 10 6452 1 2025-09-21 02:21:11.667 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:21:11.758 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:21:11.515 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:21:11.645 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:21:11.585 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:21:45.120 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40898 10 6452 1 2025-09-21 02:22:45.522 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47650 10 6452 1 2025-09-21 02:18:32.685 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 02:23:45.925 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55750 10 6452 1 2025-09-21 02:19:32.671 00:06:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 02:24:46.296 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60092 10 6452 1 2025-09-21 02:25:46.702 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50304 10 6452 1 2025-09-21 02:26:11.818 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:26:11.878 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:26:11.774 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:26:11.667 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:26:11.734 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:26:47.110 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60570 10 6452 1 2025-09-21 02:27:47.503 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57138 10 6452 1 2025-09-21 02:28:47.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59882 10 6452 1 2025-09-21 02:29:48.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43534 10 6452 1 2025-09-21 02:25:32.688 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 02:30:48.726 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43348 10 6452 1 2025-09-21 02:31:11.858 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:31:11.659 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:31:11.856 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:31:11.935 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:31:11.938 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:26:32.676 00:06:00.016 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 02:31:49.105 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:56746 12 10367 1 2025-09-21 02:32:49.580 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42384 10 6452 1 2025-09-21 02:33:49.940 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43924 10 6452 1 2025-09-21 02:34:50.353 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35830 10 6452 1 2025-09-21 02:35:50.760 00:00:11.022 TCP 1.101.0.1:3000 -> 23.104.0.1:55340 10 6452 1 2025-09-21 02:36:12.012 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:36:11.798 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:36:11.791 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:36:11.542 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:36:11.928 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:36:51.828 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:49904 10 6452 1 2025-09-21 02:32:32.688 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 02:37:52.255 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33398 10 6452 1 2025-09-21 02:33:32.675 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 02:38:52.662 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47346 10 6452 1 2025-09-21 02:39:53.107 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46086 10 6452 1 2025-09-21 02:40:53.516 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54682 10 6452 1 2025-09-21 02:41:12.086 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:41:11.916 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:41:11.909 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:41:11.761 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:41:12.004 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:41:53.886 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:50310 10 6452 1 2025-09-21 02:42:54.269 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35046 10 6452 1 2025-09-21 02:43:54.670 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48374 10 6452 1 2025-09-21 02:39:32.690 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 02:44:55.101 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:54178 10 6452 1 2025-09-21 02:40:32.677 00:06:00.020 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 02:45:55.479 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36036 10 6452 1 2025-09-21 02:46:12.063 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:46:12.235 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:46:12.120 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:46:11.994 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:46:12.317 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:46:55.885 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:60964 10 6452 1 2025-09-21 02:47:56.278 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36772 10 6452 1 2025-09-21 02:48:56.682 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53508 10 6452 1 2025-09-21 02:49:57.059 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39960 10 6452 1 2025-09-21 02:50:57.463 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38304 10 6452 1 2025-09-21 02:51:12.505 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:51:12.271 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:51:12.359 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:51:12.078 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:51:12.421 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:46:32.695 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 02:51:57.867 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58530 10 6452 1 2025-09-21 02:47:32.681 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 02:52:58.239 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37124 10 6452 1 2025-09-21 02:53:58.643 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47150 10 6452 1 2025-09-21 02:54:59.062 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49920 10 6452 1 2025-09-21 02:55:59.466 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43552 10 6452 1 2025-09-21 02:56:12.835 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 02:56:12.754 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:56:12.799 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 02:56:12.747 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 02:56:12.121 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 02:56:59.868 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:49074 12 10365 1 2025-09-21 02:58:00.350 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34362 10 6452 1 2025-09-21 02:53:32.697 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 Summary: total flows: 136, total bytes: 420459, total packets: 953, avg bps: 904, avg pps: 0, avg bpp: 441 Time window: 2025-09-21 01:57:32 - 2025-09-21 02:59:32 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0032s User: 0.0008s Wall: 0.0020s flows/second: 67859.3 Runtime: 0.0020s