Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 15:59:33.760 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:37212 10 6452 1 2025-09-02 15:55:23.578 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 15:55:23.580 00:06:00.203 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 16:00:34.185 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47988 10 6452 1 2025-09-02 16:01:34.588 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58686 10 6452 1 2025-09-02 16:02:12.249 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:02:12.224 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:02:12.110 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:02:12.175 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:02:12.167 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:02:34.995 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45722 10 6452 1 2025-09-02 16:03:35.397 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33690 10 6452 1 2025-09-02 16:04:35.806 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40462 10 6452 1 2025-09-02 16:05:36.208 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52402 10 6452 1 2025-09-02 16:06:36.630 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51078 10 6452 1 2025-09-02 16:07:12.104 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:07:12.133 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:07:12.347 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:07:12.001 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:07:12.023 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:02:23.581 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 16:02:23.579 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 16:07:37.036 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43410 10 6452 1 2025-09-02 16:08:37.440 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53558 10 6452 1 2025-09-02 16:09:37.844 00:00:11.146 TCP 1.101.0.1:3000 -> 23.104.0.1:54420 10 6452 1 2025-09-02 16:10:39.032 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58138 10 6452 1 2025-09-02 16:11:39.438 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35090 10 6452 1 2025-09-02 16:12:12.547 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:12:12.460 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:12:12.238 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:12:11.921 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:12:12.465 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:12:39.846 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:50612 10 6452 1 2025-09-02 16:13:40.239 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59736 10 6452 1 2025-09-02 16:09:23.583 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 16:09:23.580 00:06:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 16:14:40.643 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34522 10 6452 1 2025-09-02 16:15:41.054 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41458 10 6452 1 2025-09-02 16:16:41.418 00:00:10.864 TCP 1.101.0.1:3000 -> 23.104.0.1:39148 10 6452 1 2025-09-02 16:17:12.187 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:17:12.374 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:17:12.412 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:17:12.514 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:17:12.598 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:17:42.326 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:44994 10 6452 1 2025-09-02 16:18:42.725 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39916 10 6452 1 2025-09-02 16:19:43.137 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38236 11 6504 1 2025-09-02 16:20:43.557 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53596 10 6452 1 2025-09-02 16:16:23.582 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 16:16:23.585 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 16:21:43.922 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39322 10 6452 1 2025-09-02 16:22:12.663 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:22:12.612 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:22:12.421 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:22:12.365 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:22:12.581 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:22:44.326 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60174 10 6452 1 2025-09-02 16:23:44.727 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:32966 10 6452 1 2025-09-02 16:24:45.137 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49510 10 6452 1 2025-09-02 16:25:45.540 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45856 10 6452 1 2025-09-02 16:26:45.950 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58990 10 6452 1 2025-09-02 16:27:12.587 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:27:12.365 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:27:12.676 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:27:12.592 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:27:12.758 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:27:46.359 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:48872 10 6452 1 2025-09-02 16:23:23.591 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 16:23:23.588 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 16:28:46.717 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48094 10 6452 1 2025-09-02 16:29:47.138 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46190 10 6452 1 2025-09-02 16:30:47.541 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59872 10 6452 1 2025-09-02 16:31:47.942 00:00:10.911 TCP 1.101.0.1:3000 -> 23.104.0.1:41218 10 6452 1 2025-09-02 16:32:12.491 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:32:12.600 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:32:12.607 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:32:12.634 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:32:12.410 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:32:48.891 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43602 12 6556 1 2025-09-02 16:33:49.307 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48832 10 6452 1 2025-09-02 16:34:49.717 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54602 10 6452 1 2025-09-02 16:30:23.593 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 16:30:23.590 00:06:00.228 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 16:35:50.118 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43652 10 6452 1 2025-09-02 16:36:50.484 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46460 10 6452 1 2025-09-02 16:37:12.832 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:37:12.886 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:37:12.946 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:37:12.538 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:37:12.748 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:37:50.900 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38058 10 6452 1 2025-09-02 16:38:51.312 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42270 10 6452 1 2025-09-02 16:39:51.726 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58662 10 6452 1 2025-09-02 16:40:52.139 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49704 10 6452 1 2025-09-02 16:41:52.500 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39080 10 6452 1 2025-09-02 16:42:13.008 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:42:12.831 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:42:12.836 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:42:12.564 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:42:12.924 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:37:23.591 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 16:37:23.594 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 16:42:52.908 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43516 10 6452 1 2025-09-02 16:43:53.314 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44844 10 6452 1 2025-09-02 16:44:53.716 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46746 10 6452 1 2025-09-02 16:45:54.133 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42712 10 6452 1 2025-09-02 16:46:54.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41778 10 6452 1 2025-09-02 16:47:13.004 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:47:13.101 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:47:12.962 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:47:13.001 00:00:00.048 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:47:13.084 00:00:00.049 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:47:54.947 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 12 10367 1 2025-09-02 16:48:55.396 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47324 10 6452 1 2025-09-02 16:44:23.596 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 16:44:23.593 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 16:49:55.815 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:58156 10 6452 1 2025-09-02 16:50:56.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52608 10 6452 1 2025-09-02 16:51:56.603 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39238 10 6452 1 2025-09-02 16:52:13.409 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:52:13.154 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:52:13.337 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:52:13.233 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:52:13.315 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:52:57.014 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46020 10 6452 1 2025-09-02 16:53:57.423 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38888 10 6452 1 2025-09-02 16:54:57.826 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38360 10 6452 1 2025-09-02 16:55:58.191 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42276 10 6452 1 2025-09-02 16:51:23.600 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 16:51:23.598 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 16:56:58.586 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55484 10 6452 1 2025-09-02 16:57:13.222 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 16:57:13.212 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 16:57:13.152 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 16:57:13.147 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:57:13.140 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 16:57:58.991 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53474 10 6452 1 Summary: total flows: 137, total bytes: 415357, total packets: 1027, avg bps: 882, avg pps: 0, avg bpp: 404 Time window: 2025-09-02 15:55:23 - 2025-09-02 16:58:09 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0034s User: 0.0017s Wall: 0.0020s flows/second: 68026.5 Runtime: 0.0020s