Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 10:59:04.288 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44488 10 6452 1 2025-09-01 11:00:04.689 00:00:10.797 TCP 1.101.0.1:3000 -> 23.104.0.1:45508 10 6452 1 2025-09-01 11:01:05.522 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52606 10 6452 1 2025-09-01 11:01:37.215 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:01:37.104 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:01:36.788 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:01:37.169 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:01:37.253 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:02:05.927 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:47364 10 6452 1 2025-09-01 11:03:06.355 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52236 10 6452 1 2025-09-01 11:04:06.715 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59100 10 6452 1 2025-09-01 11:05:07.137 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37810 10 6452 1 2025-09-01 11:00:22.860 00:06:00.045 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 11:00:22.901 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-01 11:06:07.542 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:43448 10 6452 1 2025-09-01 11:06:37.299 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:06:37.204 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:06:37.298 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:06:37.301 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:06:37.381 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:07:07.935 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:50986 10 6452 1 2025-09-01 11:08:08.377 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38296 10 6452 1 2025-09-01 11:09:08.776 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49318 10 6452 1 2025-09-01 11:10:09.144 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36972 10 6452 1 2025-09-01 11:11:09.554 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33640 10 6452 1 2025-09-01 11:11:37.400 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:11:37.369 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:11:37.611 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:11:37.392 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:11:37.483 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:07:22.907 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 11:07:22.863 00:06:00.050 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 11:12:09.955 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45844 10 6452 1 2025-09-01 11:13:10.362 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:56718 12 10367 1 2025-09-01 11:14:10.849 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:34600 10 6452 1 2025-09-01 11:15:11.279 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40122 10 6452 1 2025-09-01 11:16:11.688 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52128 10 6452 1 2025-09-01 11:16:37.542 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:16:37.546 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:16:37.123 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:16:37.495 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:16:37.576 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:17:12.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55400 10 6452 1 2025-09-01 11:18:12.520 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:42674 12 10367 1 2025-09-01 11:14:22.864 00:06:00.050 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 11:19:13.016 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32920 10 6452 1 2025-09-01 11:14:22.866 00:06:00.046 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 11:20:13.419 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42742 10 6452 1 2025-09-01 11:21:13.783 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33904 10 6452 1 2025-09-01 11:21:37.623 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:21:37.552 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:21:37.388 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:21:37.510 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:21:37.542 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:22:14.188 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35338 10 6452 1 2025-09-01 11:23:14.593 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38894 10 6452 1 2025-09-01 11:24:14.957 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60052 10 6452 1 2025-09-01 11:25:15.329 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43706 10 6452 1 2025-09-01 11:21:22.869 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 11:21:22.866 00:06:00.058 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 11:26:15.736 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32946 10 6452 1 2025-09-01 11:26:37.684 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:26:37.629 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:26:37.633 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:26:37.746 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:26:37.828 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:27:16.143 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:36948 10 6452 1 2025-09-01 11:28:16.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40770 10 6452 1 2025-09-01 11:29:16.941 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39956 10 6452 1 2025-09-01 11:30:17.350 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60108 10 6452 1 2025-09-01 11:31:17.754 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:36520 10 6452 1 2025-09-01 11:31:37.591 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:31:37.821 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:31:37.696 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:31:37.777 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:31:37.509 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:32:18.180 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50780 10 6452 1 2025-09-01 11:28:22.870 00:06:00.056 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 11:28:22.871 00:06:00.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 11:33:18.582 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45196 10 6452 1 2025-09-01 11:34:18.982 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52704 10 6452 1 2025-09-01 11:35:19.398 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44582 10 6452 1 2025-09-01 11:36:19.801 00:00:11.145 TCP 1.101.0.1:3000 -> 23.104.0.1:34650 10 6452 1 2025-09-01 11:36:37.716 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:36:37.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:36:37.681 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:36:37.711 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:36:37.794 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:37:20.991 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44174 10 6452 1 2025-09-01 11:38:21.393 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33190 10 6452 1 2025-09-01 11:39:21.798 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40546 10 6452 1 2025-09-01 11:35:22.870 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 11:35:22.874 00:06:00.052 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 11:40:22.209 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60506 10 6452 1 2025-09-01 11:41:22.615 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56858 10 6452 1 2025-09-01 11:41:38.236 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:41:38.202 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:41:38.278 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:41:38.074 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:41:38.153 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:42:23.018 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:40704 10 6452 1 2025-09-01 11:43:23.416 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:60628 12 10365 1 2025-09-01 11:44:23.903 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41600 12 6556 1 2025-09-01 11:45:24.314 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39622 10 6452 1 2025-09-01 11:46:37.976 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:46:24.678 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39212 10 6452 1 2025-09-01 11:46:38.007 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:46:37.986 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:46:38.078 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:46:38.068 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:42:22.878 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 11:42:22.876 00:06:00.059 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 11:47:25.108 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40606 10 6452 1 2025-09-01 11:48:25.511 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56264 10 6452 1 2025-09-01 11:49:25.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58332 10 6452 1 2025-09-01 11:50:26.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59268 10 6452 1 2025-09-01 11:51:38.328 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:51:26.723 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46196 10 6452 1 2025-09-01 11:51:38.247 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:51:38.252 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:51:38.195 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:51:38.233 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:52:27.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55942 10 6452 1 2025-09-01 11:53:27.513 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60608 10 6452 1 2025-09-01 11:49:22.879 00:06:00.058 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 11:49:22.882 00:06:00.052 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 11:54:27.923 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48764 10 6452 1 2025-09-01 11:55:28.321 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51812 10 6452 1 2025-09-01 11:56:38.372 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 11:56:38.149 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 11:56:38.399 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 11:56:38.060 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:56:38.290 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 11:56:28.722 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42458 10 6452 1 2025-09-01 11:57:29.138 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58154 10 6452 1 2025-09-01 11:58:29.498 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49990 10 6452 1 Summary: total flows: 136, total bytes: 427499, total packets: 1005, avg bps: 956, avg pps: 0, avg bpp: 425 Time window: 2025-09-01 10:59:04 - 2025-09-01 11:58:39 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0021s User: 0.0028s Wall: 0.0023s flows/second: 58421.3 Runtime: 0.0023s