Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 07:59:20.913 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-09-30 08:00:21.315 00:00:10.833 TCP 1.101.0.1:3000 -> 23.104.0.1:53996 10 6452 1 2025-09-30 08:00:38.400 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:00:38.579 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:00:38.601 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:00:38.405 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:00:38.684 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:01:22.191 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36258 10 6452 1 2025-09-30 08:02:22.559 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49730 10 6452 1 2025-09-30 08:03:22.963 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49074 10 6452 1 2025-09-30 08:04:23.326 00:00:17.190 TCP 1.101.0.1:3000 -> 23.104.0.1:32858 10 6452 1 2025-09-30 07:59:37.039 00:06:00.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 08:05:38.773 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:05:38.626 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:05:38.420 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:05:38.690 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:05:38.624 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:05:30.560 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45792 10 6452 1 2025-09-30 08:00:37.040 00:06:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 08:06:30.969 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6452 1 2025-09-30 08:07:31.386 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-09-30 08:08:31.742 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35276 10 6452 1 2025-09-30 08:09:32.144 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52034 10 6452 1 2025-09-30 08:10:38.751 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:10:38.711 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:10:38.835 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:10:38.750 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:10:38.919 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:10:32.552 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:40634 10 6452 1 2025-09-30 08:06:37.042 00:06:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 08:11:32.947 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50162 10 6452 1 2025-09-30 08:07:37.042 00:06:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 08:12:33.319 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44154 10 6452 1 2025-09-30 08:13:33.679 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39182 10 6452 1 2025-09-30 08:14:34.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55362 10 6452 1 2025-09-30 08:15:38.822 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:15:38.741 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:15:38.558 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:15:38.740 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:15:38.740 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:15:34.511 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51084 10 6452 1 2025-09-30 08:16:34.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60748 10 6452 1 2025-09-30 08:17:35.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48520 10 6452 1 2025-09-30 08:13:37.041 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 08:18:35.725 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50150 10 6452 1 2025-09-30 08:14:37.043 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 08:19:36.138 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53608 10 6452 1 2025-09-30 08:20:38.980 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:20:38.832 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:20:38.668 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:20:38.898 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:20:38.949 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:20:36.559 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47716 10 6452 1 2025-09-30 08:21:36.920 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33952 10 6452 1 2025-09-30 08:22:37.338 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37926 10 6452 1 2025-09-30 08:23:37.709 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59276 10 6452 1 2025-09-30 08:24:38.115 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56794 10 6452 1 2025-09-30 08:25:38.767 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:25:38.840 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:25:38.701 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:25:38.701 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:20:37.045 00:06:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 08:25:38.786 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:25:38.474 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:42672 10 6452 1 2025-09-30 08:21:37.046 00:06:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 08:26:38.871 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60020 10 6452 1 2025-09-30 08:27:39.288 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 12 10369 1 2025-09-30 08:28:39.765 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48762 10 6452 1 2025-09-30 08:29:40.176 00:00:11.246 TCP 1.101.0.1:3000 -> 23.104.0.1:44350 10 6452 1 2025-09-30 08:30:38.924 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:30:38.675 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:30:38.944 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:30:38.842 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:30:38.675 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:30:41.466 00:00:11.007 TCP 1.101.0.1:3000 -> 23.104.0.1:44720 10 6452 1 2025-09-30 08:31:42.511 00:00:11.315 TCP 1.101.0.1:3000 -> 23.104.0.1:46164 10 6452 1 2025-09-30 08:27:37.045 00:06:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 08:32:43.863 00:00:10.506 TCP 1.101.0.1:3000 -> 23.104.0.1:34726 10 6452 1 2025-09-30 08:28:37.047 00:06:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 08:33:44.413 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50726 10 6452 1 2025-09-30 08:34:44.775 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47042 10 6452 1 2025-09-30 08:35:38.854 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:35:38.956 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:35:38.915 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:35:38.914 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:35:38.998 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:35:45.193 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50782 10 6452 1 2025-09-30 08:36:45.605 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51134 10 6452 1 2025-09-30 08:37:46.005 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48460 10 6452 1 2025-09-30 08:38:46.409 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:55626 10 6452 1 2025-09-30 08:34:37.048 00:06:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 08:39:46.834 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43006 10 6452 1 2025-09-30 08:40:39.045 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:40:38.940 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:40:38.908 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:40:39.212 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:35:37.050 00:06:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 08:40:38.992 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:40:47.239 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34298 10 6452 1 2025-09-30 08:41:47.654 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45852 10 6452 1 2025-09-30 08:42:48.070 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41104 10 6452 1 2025-09-30 08:43:48.476 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42864 10 6452 1 2025-09-30 08:44:48.879 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38518 10 6452 1 2025-09-30 08:45:39.672 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:45:39.325 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:45:39.310 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:45:39.589 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:45:39.425 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:45:49.283 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35998 10 6452 1 2025-09-30 08:41:37.050 00:06:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 08:46:49.694 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42442 10 6452 1 2025-09-30 08:42:37.051 00:06:00.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 08:47:50.111 00:00:10.526 TCP 1.101.0.1:3000 -> 23.104.0.1:53898 10 6452 1 2025-09-30 08:48:50.673 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54072 10 6452 1 2025-09-30 08:49:51.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60450 10 6452 1 2025-09-30 08:50:39.434 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:50:39.353 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:50:39.353 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:50:39.219 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:50:39.282 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:50:51.520 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37422 10 6452 1 2025-09-30 08:51:51.934 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36736 10 6452 1 2025-09-30 08:52:52.364 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:37100 10 6452 1 2025-09-30 08:48:37.053 00:06:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 08:53:52.736 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46930 10 6452 1 2025-09-30 08:49:37.056 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 08:54:53.141 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33810 10 6452 1 2025-09-30 08:55:39.140 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 08:55:39.258 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:55:39.315 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 08:55:39.316 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 08:55:39.399 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 08:55:53.503 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57974 10 6452 1 2025-09-30 08:56:53.905 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:49668 10 6452 1 2025-09-30 08:57:54.274 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:35488 12 10375 1 Summary: total flows: 135, total bytes: 417404, total packets: 998, avg bps: 947, avg pps: 0, avg bpp: 418 Time window: 2025-09-30 07:59:20 - 2025-09-30 08:58:04 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0026s User: 0.0009s Wall: 0.0013s flows/second: 104239.9 Runtime: 0.0013s