Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-31 13:59:06.982 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37592 10 6452 1 2025-08-31 14:00:07.383 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52964 10 6452 1 2025-08-31 14:01:11.968 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:01:11.885 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:01:11.812 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:01:11.946 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:01:11.886 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:01:07.800 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59644 10 6452 1 2025-08-31 14:02:08.209 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52888 10 6452 1 2025-08-31 14:03:08.578 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57216 10 6452 1 2025-08-31 14:04:08.991 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:52356 10 6452 1 2025-08-31 14:00:22.362 00:06:00.007 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-31 14:05:09.374 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37044 11 6492 1 2025-08-31 14:00:22.362 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 757 1 2025-08-31 14:06:11.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:06:11.806 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:06:11.944 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:06:12.076 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:06:12.159 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:06:09.777 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41444 10 6452 1 2025-08-31 14:07:10.180 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44942 10 6452 1 2025-08-31 14:08:10.581 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44580 10 6452 1 2025-08-31 14:09:10.960 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40364 10 6452 1 2025-08-31 14:10:11.323 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33146 10 6452 1 2025-08-31 14:11:12.057 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:11:11.940 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:11:12.087 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:11:12.176 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:11:12.260 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:11:11.732 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39226 10 6452 1 2025-08-31 14:07:22.367 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-31 14:12:12.144 00:00:10.464 TCP 1.101.0.1:3000 -> 23.104.0.1:44090 10 6452 1 2025-08-31 14:07:22.362 00:06:00.007 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-31 14:13:12.641 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55624 10 6452 1 2025-08-31 14:14:13.062 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48764 10 6452 1 2025-08-31 14:15:13.471 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33048 10 6452 1 2025-08-31 14:16:12.043 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:16:11.964 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:16:12.247 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:16:12.108 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:16:11.960 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:16:13.833 00:00:10.596 TCP 1.101.0.1:3000 -> 23.104.0.1:39264 10 6452 1 2025-08-31 14:17:14.463 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43608 10 6452 1 2025-08-31 14:18:14.880 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56890 10 6452 1 2025-08-31 14:14:22.368 00:06:00.008 TCP 179.21.23.23:179 -> 179.21.23.21:38570 8 549 1 2025-08-31 14:14:22.367 00:06:00.012 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-31 14:19:15.282 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38434 10 6452 1 2025-08-31 14:20:15.687 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60180 10 6452 1 2025-08-31 14:21:12.261 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:21:12.256 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:21:12.124 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:21:12.178 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:21:12.261 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:21:16.119 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58446 10 6452 1 2025-08-31 14:22:16.532 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51424 10 6452 1 2025-08-31 14:23:16.936 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:52098 10 6452 1 2025-08-31 14:24:17.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34664 10 6452 1 2025-08-31 14:25:17.764 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:57270 10 6452 1 2025-08-31 14:26:12.880 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:26:12.484 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:26:12.479 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:26:12.235 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:26:12.796 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:21:22.376 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-31 14:21:22.368 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-31 14:26:18.140 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32968 10 6452 1 2025-08-31 14:27:18.549 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48916 10 6452 1 2025-08-31 14:28:18.948 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:36156 12 10365 1 2025-08-31 14:29:19.393 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40032 10 6452 1 2025-08-31 14:30:19.758 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53788 10 6452 1 2025-08-31 14:31:12.677 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:31:12.564 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:31:12.561 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:31:12.567 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:31:12.650 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:31:20.174 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:54920 11 6504 1 2025-08-31 14:32:20.637 00:00:10.457 TCP 1.101.0.1:3000 -> 23.104.0.1:54996 12 10367 1 2025-08-31 14:28:22.381 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-31 14:28:22.369 00:06:00.016 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-31 14:33:21.137 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42914 10 6452 1 2025-08-31 14:34:21.531 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44034 10 6452 1 2025-08-31 14:35:21.931 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50856 10 6452 1 2025-08-31 14:36:12.617 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:36:12.541 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:36:12.487 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:36:12.485 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:36:12.534 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:36:22.356 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52212 10 6452 1 2025-08-31 14:37:22.761 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51836 10 6452 1 2025-08-31 14:38:23.175 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44510 10 6452 1 2025-08-31 14:39:23.579 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39246 10 6452 1 2025-08-31 14:35:22.372 00:06:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-31 14:35:22.388 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-31 14:40:23.991 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-08-31 14:41:12.816 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:41:12.685 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:41:12.574 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:41:12.811 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:41:12.894 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:41:24.392 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41912 10 6452 1 2025-08-31 14:42:24.763 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35438 10 6452 1 2025-08-31 14:43:25.128 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42050 10 6452 1 2025-08-31 14:44:25.537 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40030 10 6452 1 2025-08-31 14:45:25.949 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33938 10 6452 1 2025-08-31 14:46:12.759 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:46:12.830 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:46:12.768 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:46:12.534 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:46:12.678 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:46:26.362 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54526 10 6452 1 2025-08-31 14:42:22.390 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-31 14:42:22.374 00:06:00.022 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-31 14:47:26.760 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60118 10 6452 1 2025-08-31 14:48:27.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45914 10 6452 1 2025-08-31 14:49:27.586 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35538 10 6452 1 2025-08-31 14:50:27.950 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:40200 10 6452 1 2025-08-31 14:51:12.928 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:51:12.846 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:51:12.969 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:51:12.909 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:51:12.850 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:51:28.396 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39940 10 6452 1 2025-08-31 14:52:28.802 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54022 12 6556 1 2025-08-31 14:53:29.211 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56292 10 6452 1 2025-08-31 14:49:22.394 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-31 14:49:22.380 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-31 14:54:29.578 00:00:10.848 TCP 1.101.0.1:3000 -> 23.104.0.1:38614 10 6452 1 2025-08-31 14:55:30.465 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42668 10 6452 1 2025-08-31 14:56:12.842 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:56:12.948 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-31 14:56:12.821 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-31 14:56:12.822 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-31 14:56:13.032 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-31 14:56:30.831 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:38162 10 6452 1 2025-08-31 14:57:31.217 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60088 10 6452 1 2025-08-31 14:58:31.622 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51340 10 6452 1 Summary: total flows: 136, total bytes: 421440, total packets: 962, avg bps: 943, avg pps: 0, avg bpp: 438 Time window: 2025-08-31 13:59:06 - 2025-08-31 14:58:41 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0018s User: 0.0027s Wall: 0.0023s flows/second: 60070.1 Runtime: 0.0023s