Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 09:59:22.040 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49858 10 6452 1 2025-09-10 10:00:22.445 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45074 10 6452 1 2025-09-10 10:01:03.507 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:01:03.095 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:01:03.508 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:01:03.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:01:03.590 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 09:56:27.364 00:06:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 10:01:22.848 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:34548 10 6452 1 2025-09-10 09:57:27.367 00:06:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 10:02:23.274 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43228 10 6452 1 2025-09-10 10:03:23.677 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57500 10 6452 1 2025-09-10 10:04:24.114 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47990 10 6452 1 2025-09-10 10:05:24.475 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34496 10 6452 1 2025-09-10 10:06:03.454 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:06:03.320 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:06:03.165 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:06:03.181 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:06:03.248 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 10:06:24.878 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33034 10 6452 1 2025-09-10 10:07:25.241 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53888 10 6452 1 2025-09-10 10:03:27.367 00:06:00.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 10:08:25.653 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45512 10 6452 1 2025-09-10 10:04:27.369 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 10:09:26.063 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46964 10 6452 1 2025-09-10 10:10:26.464 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47196 10 6452 1 2025-09-10 10:11:03.470 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 10:11:03.314 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:11:03.040 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:11:03.387 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:11:03.319 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:11:26.875 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58018 10 6452 1 2025-09-10 10:12:27.285 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59520 10 6452 1 2025-09-10 10:13:27.684 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45554 10 6452 1 2025-09-10 10:14:28.120 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48494 10 6452 1 2025-09-10 10:10:27.370 00:06:00.105 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 10:15:28.521 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57362 10 6452 1 2025-09-10 10:16:03.484 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 10:16:03.265 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:16:03.336 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:16:03.401 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:16:03.398 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:11:27.372 00:06:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 10:16:28.924 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:57866 10 6452 1 2025-09-10 10:17:29.310 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42246 10 6452 1 2025-09-10 10:18:29.671 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49362 10 6452 1 2025-09-10 10:19:30.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42398 10 6452 1 2025-09-10 10:20:30.510 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43592 10 6452 1 2025-09-10 10:21:03.367 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 10:21:03.486 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:21:03.501 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:21:03.284 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:21:03.552 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:21:30.874 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60256 10 6452 1 2025-09-10 10:17:27.372 00:06:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 10:22:31.242 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36958 10 6452 1 2025-09-10 10:18:27.377 00:06:00.097 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 10:23:31.648 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43202 10 6452 1 2025-09-10 10:24:32.050 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60270 10 6452 1 2025-09-10 10:25:32.454 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56422 10 6452 1 2025-09-10 10:26:03.868 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:26:03.599 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:26:03.475 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:26:03.658 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:26:03.559 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 10:26:32.855 00:00:10.548 TCP 1.101.0.1:3000 -> 23.104.0.1:40534 10 6452 1 2025-09-10 10:27:33.446 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54356 10 6452 1 2025-09-10 10:28:33.853 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46236 10 6452 1 2025-09-10 10:24:27.375 00:06:00.102 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 10:29:34.273 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44538 10 6452 1 2025-09-10 10:25:27.378 00:06:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 10:30:34.687 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47218 10 6452 1 2025-09-10 10:31:03.996 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 10:31:03.848 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:31:03.740 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:31:03.915 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:31:03.854 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:31:35.119 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39846 10 6452 1 2025-09-10 10:32:35.532 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34284 10 6452 1 2025-09-10 10:33:35.890 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:57846 10 6452 1 2025-09-10 10:34:36.271 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34560 10 6452 1 2025-09-10 10:35:36.678 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38310 10 6452 1 2025-09-10 10:36:03.768 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 10:36:03.698 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:36:03.759 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:36:03.686 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:36:03.804 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:31:27.380 00:06:00.100 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 10:36:37.038 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34428 10 6452 1 2025-09-10 10:32:27.382 00:06:00.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 10:37:37.440 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58264 10 6452 1 2025-09-10 10:38:37.841 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:38850 10 6452 1 2025-09-10 10:39:38.317 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39768 10 6452 1 2025-09-10 10:40:38.719 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:33612 10 6452 1 2025-09-10 10:41:04.214 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:41:03.775 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:41:04.129 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:41:03.897 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:41:04.213 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 10:41:39.173 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38610 10 6452 1 2025-09-10 10:42:39.576 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57834 10 6452 1 2025-09-10 10:38:27.382 00:06:00.103 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 10:43:39.942 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:46986 10 6452 1 2025-09-10 10:39:27.386 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 10:44:40.310 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55238 10 6452 1 2025-09-10 10:45:40.720 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:42914 10 6452 1 2025-09-10 10:46:03.901 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:46:04.163 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:46:04.232 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:46:04.322 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:46:04.316 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 10:46:41.105 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35796 10 6452 1 2025-09-10 10:47:41.466 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47724 10 6452 1 2025-09-10 10:48:41.868 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34048 10 6452 1 2025-09-10 10:49:42.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56582 10 6452 1 2025-09-10 10:45:27.387 00:06:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 10:50:42.682 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58404 10 6452 1 2025-09-10 10:51:04.346 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:51:04.177 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:51:04.402 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:51:04.479 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:51:04.494 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 10:46:27.390 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 10:51:43.117 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50812 10 6452 1 2025-09-10 10:52:43.479 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48342 10 6452 1 2025-09-10 10:53:43.842 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:33062 10 6452 1 2025-09-10 10:54:44.273 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51992 10 6452 1 2025-09-10 10:55:44.697 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40252 10 6452 1 2025-09-10 10:56:04.253 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 10:56:04.191 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:56:04.244 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 10:56:04.413 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 10:56:04.326 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 10:56:45.108 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43096 10 6452 1 2025-09-10 10:52:27.389 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 10:57:45.514 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33118 10 6452 1 2025-09-10 10:53:27.390 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 137, total bytes: 411286, total packets: 1022, avg bps: 870, avg pps: 0, avg bpp: 402 Time window: 2025-09-10 09:56:27 - 2025-09-10 10:59:27 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0019s User: 0.0029s Wall: 0.0018s flows/second: 74693.8 Runtime: 0.0019s