Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-22 08:59:32.385 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50634 10 6452 1 2025-09-22 08:55:33.311 00:06:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 09:00:32.791 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46306 10 6452 1 2025-09-22 09:01:33.161 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:38684 10 6452 1 2025-09-22 09:01:48.716 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:01:48.383 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:01:48.294 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:01:48.635 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:01:48.396 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:02:33.532 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50170 10 6452 1 2025-09-22 08:58:33.315 00:06:00.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 09:03:33.937 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:48002 10 6452 1 2025-09-22 09:04:34.304 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55960 10 6452 1 2025-09-22 09:05:34.673 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51136 10 6452 1 2025-09-22 09:06:48.819 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:06:48.483 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:06:48.353 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:06:48.532 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:06:35.038 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44622 10 6452 1 2025-09-22 09:06:48.737 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:02:33.315 00:06:00.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 09:07:35.404 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41040 10 6452 1 2025-09-22 09:08:35.814 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:44708 10 6452 1 2025-09-22 09:09:36.185 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37742 10 6452 1 2025-09-22 09:05:33.318 00:06:00.085 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 09:10:36.592 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42000 10 6452 1 2025-09-22 09:11:48.665 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:11:48.593 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:11:48.753 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:11:36.960 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54500 10 6452 1 2025-09-22 09:11:48.344 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:11:48.582 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:12:37.368 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51940 10 6452 1 2025-09-22 09:13:37.771 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55486 10 6452 1 2025-09-22 09:09:33.317 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 09:14:38.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52540 10 6452 1 2025-09-22 09:15:38.592 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56430 10 6452 1 2025-09-22 09:16:48.864 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:16:39.003 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 10 6452 1 2025-09-22 09:16:48.792 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:16:48.614 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:16:48.782 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:16:48.921 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:12:33.320 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 09:17:39.406 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:51332 10 6452 1 2025-09-22 09:18:39.883 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:40958 10 6452 1 2025-09-22 09:19:40.267 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37970 10 6452 1 2025-09-22 09:20:40.631 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59890 10 6452 1 2025-09-22 09:16:33.318 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 09:21:48.717 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:21:49.115 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:21:48.843 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:21:48.722 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:21:48.805 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:21:41.061 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:55914 10 6452 1 2025-09-22 09:22:41.418 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56818 10 6452 1 2025-09-22 09:23:41.824 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:40432 11 6504 1 2025-09-22 09:19:33.321 00:06:00.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 09:24:42.276 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56868 10 6452 1 2025-09-22 09:25:42.682 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48574 10 6452 1 2025-09-22 09:26:49.161 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:26:49.075 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:26:48.933 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:26:49.134 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:26:49.078 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:26:43.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42238 10 6452 1 2025-09-22 09:27:43.519 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47644 10 6452 1 2025-09-22 09:23:33.318 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 09:28:43.921 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:60790 10 6452 1 2025-09-22 09:29:44.296 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40412 10 6452 1 2025-09-22 09:30:44.666 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56498 10 6452 1 2025-09-22 09:26:33.322 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 09:31:49.358 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:31:49.411 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:31:49.221 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:31:49.352 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:31:49.435 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:31:45.087 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50930 10 6452 1 2025-09-22 09:32:45.488 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54868 10 6452 1 2025-09-22 09:33:45.892 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42902 12 6556 1 2025-09-22 09:34:46.310 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58950 10 6452 1 2025-09-22 09:30:33.320 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 09:35:46.713 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:47482 11 6492 1 2025-09-22 09:36:49.579 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:36:49.501 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:36:49.547 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:36:49.241 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:36:49.497 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:36:47.130 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59202 10 6452 1 2025-09-22 09:37:47.538 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:58578 10 6452 1 2025-09-22 09:33:33.323 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 09:38:47.939 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44032 10 6452 1 2025-09-22 09:39:48.349 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48496 10 6452 1 2025-09-22 09:40:48.733 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60434 10 6452 1 2025-09-22 09:41:49.239 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:41:49.325 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:41:49.249 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:41:49.331 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:41:49.414 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:41:49.145 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54536 10 6452 1 2025-09-22 09:37:33.322 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 09:42:49.550 00:00:10.958 TCP 1.101.0.1:3000 -> 23.104.0.1:55080 10 6452 1 2025-09-22 09:43:50.548 00:00:10.795 TCP 1.101.0.1:3000 -> 23.104.0.1:34236 10 6452 1 2025-09-22 09:44:51.381 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:50760 10 6452 1 2025-09-22 09:40:33.326 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 09:45:51.814 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56950 10 6452 1 2025-09-22 09:46:49.313 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:46:49.323 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:46:49.499 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:46:49.385 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:46:49.230 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:46:52.219 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45752 10 6452 1 2025-09-22 09:47:52.585 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45624 10 6452 1 2025-09-22 09:48:52.989 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56230 10 6452 1 2025-09-22 09:44:33.324 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 09:49:53.395 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52438 10 6452 1 2025-09-22 09:50:53.803 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57478 10 6452 1 2025-09-22 09:51:49.448 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:51:49.677 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:51:49.464 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:51:49.495 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:51:49.365 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:51:54.212 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:54076 10 6452 1 2025-09-22 09:47:33.328 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 09:52:54.674 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52980 10 6452 1 2025-09-22 09:53:55.038 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53078 10 6452 1 2025-09-22 09:54:55.440 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42700 10 6452 1 2025-09-22 09:55:55.841 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:44248 10 6452 1 2025-09-22 09:51:33.326 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 09:56:49.552 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:56:49.878 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 09:56:49.961 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 09:56:50.068 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 09:56:50.062 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 09:56:56.258 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59964 10 6452 1 2025-09-22 09:57:56.663 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57660 10 6452 1 Summary: total flows: 136, total bytes: 410621, total packets: 1012, avg bps: 875, avg pps: 0, avg bpp: 405 Time window: 2025-09-22 08:55:33 - 2025-09-22 09:58:07 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0027s User: 0.0027s Wall: 0.0021s flows/second: 65952.8 Runtime: 0.0021s