Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 10:54:23.477 00:06:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 10:54:23.473 00:06:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 10:59:29.920 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47896 10 6452 1 2025-09-02 11:00:30.290 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50744 10 6452 1 2025-09-02 11:01:30.715 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43622 10 6452 1 2025-09-02 11:02:06.069 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:02:06.072 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:02:05.983 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:02:05.978 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:02:05.986 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:02:31.118 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42646 10 6452 1 2025-09-02 11:03:31.493 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40012 10 6452 1 2025-09-02 11:04:31.894 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49460 10 6452 1 2025-09-02 11:05:32.311 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:36456 10 6452 1 2025-09-02 11:01:23.481 00:06:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 11:01:23.484 00:06:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 11:06:32.702 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47574 10 6452 1 2025-09-02 11:07:06.544 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:07:06.629 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:07:06.675 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:07:06.588 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:07:06.461 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:07:33.122 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52160 10 6452 1 2025-09-02 11:08:33.524 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:35460 11 6504 1 2025-09-02 11:09:33.980 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40316 10 6452 1 2025-09-02 11:10:34.391 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47458 10 6452 1 2025-09-02 11:11:34.798 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56880 10 6452 1 2025-09-02 11:12:06.050 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:12:06.286 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:12:06.117 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:12:06.227 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:12:06.309 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:12:35.204 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39566 10 6452 1 2025-09-02 11:08:23.485 00:06:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 11:08:23.482 00:06:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 11:13:35.569 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43066 10 6452 1 2025-09-02 11:14:35.972 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:33314 10 6452 1 2025-09-02 11:15:36.349 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54112 10 6452 1 2025-09-02 11:16:36.755 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44630 10 6452 1 2025-09-02 11:17:06.288 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:17:06.205 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:17:06.252 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:17:06.404 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:17:06.488 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:17:37.118 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45300 10 6452 1 2025-09-02 11:18:37.476 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45058 10 6452 1 2025-09-02 11:19:37.876 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59060 10 6452 1 2025-09-02 11:15:23.483 00:06:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 11:15:23.486 00:06:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 11:20:38.293 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38266 10 6452 1 2025-09-02 11:21:38.689 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52848 10 6452 1 2025-09-02 11:22:06.366 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:22:06.374 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:22:06.444 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:22:06.319 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:22:06.283 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:22:39.106 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44992 10 6452 1 2025-09-02 11:23:39.502 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43402 10 6452 1 2025-09-02 11:24:39.908 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56312 10 6452 1 2025-09-02 11:25:40.313 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36944 10 6452 1 2025-09-02 11:26:40.675 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33128 10 6452 1 2025-09-02 11:27:06.894 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:27:06.573 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:27:06.891 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:27:06.717 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:27:06.811 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:22:23.487 00:06:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 11:22:23.490 00:06:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 11:27:41.115 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:35264 10 6452 1 2025-09-02 11:28:41.513 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51916 10 6452 1 2025-09-02 11:29:41.873 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56144 10 6452 1 2025-09-02 11:30:42.281 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60314 10 6452 1 2025-09-02 11:31:42.690 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36500 10 6452 1 2025-09-02 11:32:06.645 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:32:06.763 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:32:06.679 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:32:06.750 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:32:06.834 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:32:43.132 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53326 10 6452 1 2025-09-02 11:33:43.540 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48564 10 6452 1 2025-09-02 11:29:23.488 00:06:00.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 11:29:23.489 00:06:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 11:34:43.948 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:57760 10 6452 1 2025-09-02 11:35:44.408 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50892 10 6452 1 2025-09-02 11:36:44.808 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58984 10 6452 1 2025-09-02 11:37:06.638 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:37:06.774 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:37:06.695 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:37:06.851 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:37:06.856 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:37:45.217 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42588 10 6452 1 2025-09-02 11:38:45.627 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:38826 10 6452 1 2025-09-02 11:39:46.070 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43284 10 6452 1 2025-09-02 11:40:46.474 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43272 10 6452 1 2025-09-02 11:36:23.489 00:06:00.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 11:36:23.492 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 11:41:46.871 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:34770 10 6452 1 2025-09-02 11:42:06.939 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:42:07.009 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:42:06.756 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:42:07.003 00:00:00.049 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:42:07.083 00:00:00.051 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:42:47.368 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:58952 12 10367 1 2025-09-02 11:43:47.849 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46802 10 6452 1 2025-09-02 11:44:48.265 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43026 10 6452 1 2025-09-02 11:45:48.671 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41626 10 6452 1 2025-09-02 11:46:49.031 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40446 10 6452 1 2025-09-02 11:47:07.341 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:47:07.252 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:47:07.215 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:47:07.013 00:00:00.034 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:47:07.259 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:47:49.439 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56912 10 6452 1 2025-09-02 11:43:23.493 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 11:43:23.490 00:06:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 11:48:49.843 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:49844 10 6452 1 2025-09-02 11:49:50.275 00:00:10.651 TCP 1.101.0.1:3000 -> 23.104.0.1:40698 10 6452 1 2025-09-02 11:50:50.959 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38860 10 6452 1 2025-09-02 11:52:07.191 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:51:51.359 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58842 10 6452 1 2025-09-02 11:52:07.108 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:52:07.108 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:52:07.232 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:52:07.109 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:52:51.721 00:00:10.734 TCP 1.101.0.1:3000 -> 23.104.0.1:49248 10 6452 1 2025-09-02 11:53:52.501 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58870 10 6452 1 2025-09-02 11:54:52.874 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49580 10 6452 1 2025-09-02 11:50:23.492 00:06:00.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 11:50:23.493 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 11:55:53.284 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60720 10 6452 1 2025-09-02 11:57:07.144 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:56:53.684 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58600 10 6452 1 2025-09-02 11:57:07.154 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 11:57:07.155 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 11:57:07.123 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:57:07.061 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 11:57:54.108 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33020 10 6452 1 Summary: total flows: 137, total bytes: 415253, total packets: 1025, avg bps: 869, avg pps: 0, avg bpp: 405 Time window: 2025-09-02 10:54:23 - 2025-09-02 11:58:04 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0029s User: 0.0015s Wall: 0.0020s flows/second: 67222.7 Runtime: 0.0021s