Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 19:59:12.779 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50036 10 6452 1 2025-09-02 19:54:23.676 00:06:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:00:13.186 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44144 10 6452 1 2025-09-02 19:55:23.676 00:06:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:01:13.547 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44644 10 6452 1 2025-09-02 20:02:16.798 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:02:16.813 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:02:16.920 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:02:16.594 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:02:17.005 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:02:13.945 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:47526 10 6452 1 2025-09-02 20:03:14.325 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:49386 10 6452 1 2025-09-02 20:04:14.748 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42264 10 6452 1 2025-09-02 20:05:15.120 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39872 10 6452 1 2025-09-02 20:06:15.489 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34116 10 6452 1 2025-09-02 20:01:23.683 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:07:17.530 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:07:17.183 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:07:17.266 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:07:17.328 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:07:17.348 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:02:23.681 00:06:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:07:15.897 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36496 10 6452 1 2025-09-02 20:08:16.315 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59778 10 6452 1 2025-09-02 20:09:16.718 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53060 10 6452 1 2025-09-02 20:10:17.137 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49610 10 6452 1 2025-09-02 20:11:17.536 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38784 10 6452 1 2025-09-02 20:12:17.099 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:12:16.865 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:12:17.092 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:12:17.147 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:12:17.174 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:12:17.938 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:53820 10 6452 1 2025-09-02 20:08:23.685 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:13:18.320 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59534 10 6452 1 2025-09-02 20:09:23.682 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:14:18.737 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37816 10 6452 1 2025-09-02 20:15:19.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39818 10 6452 1 2025-09-02 20:16:19.519 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38436 10 6452 1 2025-09-02 20:17:17.342 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:17:16.983 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:17:17.495 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:17:17.272 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:17:17.580 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:17:19.922 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:59322 10 6452 1 2025-09-02 20:18:20.356 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38604 10 6452 1 2025-09-02 20:19:20.755 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:60336 10 6452 1 2025-09-02 20:15:23.686 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:20:21.185 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57876 10 6452 1 2025-09-02 20:16:23.683 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:21:21.590 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47078 10 6452 1 2025-09-02 20:22:17.328 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:22:17.125 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:22:17.457 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:22:17.687 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:22:17.541 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:22:21.950 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58298 10 6452 1 2025-09-02 20:23:22.368 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54918 10 6452 1 2025-09-02 20:24:22.772 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52686 10 6452 1 2025-09-02 20:25:23.144 00:00:10.890 TCP 1.101.0.1:3000 -> 23.104.0.1:58274 10 6452 1 2025-09-02 20:26:24.101 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59432 10 6452 1 2025-09-02 20:27:17.624 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:27:17.390 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:27:17.550 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:27:17.541 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:27:17.603 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:22:23.688 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:27:24.501 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55636 10 6452 1 2025-09-02 20:23:23.686 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:28:24.934 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47754 10 6452 1 2025-09-02 20:29:25.357 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60566 10 6452 1 2025-09-02 20:30:25.718 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37738 10 6452 1 2025-09-02 20:31:26.110 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:51726 11 6504 1 2025-09-02 20:32:17.508 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:32:17.430 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:32:17.248 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:32:17.425 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:32:17.594 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:32:26.567 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56276 10 6452 1 2025-09-02 20:33:26.940 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:39822 10 6452 1 2025-09-02 20:29:23.692 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:34:27.363 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39158 10 6452 1 2025-09-02 20:30:23.688 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:35:27.725 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49554 10 6452 1 2025-09-02 20:36:28.138 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59084 10 6452 1 2025-09-02 20:37:17.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:37:17.669 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:37:17.642 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:37:17.720 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:37:17.610 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:37:28.518 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 10 6452 1 2025-09-02 20:38:28.958 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:58332 12 10367 1 2025-09-02 20:39:29.444 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44398 10 6452 1 2025-09-02 20:40:29.810 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41682 10 6452 1 2025-09-02 20:36:23.696 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:41:30.214 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45976 10 6452 1 2025-09-02 20:42:17.857 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:42:17.960 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:42:17.817 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:42:17.490 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:42:17.901 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:37:23.696 00:06:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:42:30.613 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33802 10 6452 1 2025-09-02 20:43:31.022 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:53970 12 10367 1 2025-09-02 20:44:31.454 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51654 10 6452 1 2025-09-02 20:45:31.815 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52130 10 6452 1 2025-09-02 20:46:32.218 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35936 10 6452 1 2025-09-02 20:47:17.839 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:47:17.755 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:47:17.691 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:47:17.758 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:47:17.877 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:47:32.583 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34654 10 6452 1 2025-09-02 20:43:23.700 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:48:32.946 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47880 10 6452 1 2025-09-02 20:44:23.697 00:06:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:49:33.364 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57402 10 6452 1 2025-09-02 20:50:33.763 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:58592 10 6452 1 2025-09-02 20:51:34.187 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38730 10 6452 1 2025-09-02 20:52:17.842 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:52:17.533 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:52:17.687 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:52:17.843 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:52:17.769 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:52:34.594 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33894 10 6452 1 2025-09-02 20:53:35.001 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:34940 10 6452 1 2025-09-02 20:54:35.385 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36764 10 6452 1 2025-09-02 20:50:23.702 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:55:35.788 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45250 10 6452 1 2025-09-02 20:51:23.700 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:56:36.196 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 10 6452 1 2025-09-02 20:57:18.146 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:57:18.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:57:17.839 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:57:18.063 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:57:18.186 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:57:36.590 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43998 10 6452 1 2025-09-02 20:58:36.995 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59326 10 6452 1 Summary: total flows: 138, total bytes: 425620, total packets: 1037, avg bps: 881, avg pps: 0, avg bpp: 410 Time window: 2025-09-02 19:54:23 - 2025-09-02 20:58:47 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0015s User: 0.0031s Wall: 0.0022s flows/second: 63244.5 Runtime: 0.0022s