Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 01:58:44.688 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35016 10 6452 1 2025-09-03 01:55:23.782 00:05:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 01:59:45.112 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51864 10 6452 1 2025-09-03 01:56:23.786 00:05:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 02:00:45.523 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44600 10 6452 1 2025-09-03 02:01:45.930 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:39662 13 6608 1 2025-09-03 02:02:24.191 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:02:24.339 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:02:24.187 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:02:24.339 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:02:24.422 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:02:46.372 00:00:11.035 TCP 1.101.0.1:3000 -> 23.104.0.1:43068 10 6452 1 2025-09-03 02:03:47.450 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56922 10 6452 1 2025-09-03 02:04:47.855 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:33860 10 6452 1 2025-09-03 02:01:23.784 00:05:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 02:05:48.279 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49406 10 6452 1 2025-09-03 02:02:23.786 00:05:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 02:06:48.685 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46774 10 6452 1 2025-09-03 02:07:24.143 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:07:24.059 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:07:24.216 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:07:24.060 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:07:24.079 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:07:49.106 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39424 10 6452 1 2025-09-03 02:08:49.503 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58208 10 6452 1 2025-09-03 02:09:49.910 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59160 10 6452 1 2025-09-03 02:10:50.320 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46678 10 6452 1 2025-09-03 02:07:23.785 00:05:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 02:11:50.718 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54988 10 6452 1 2025-09-03 02:12:24.483 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:08:23.788 00:05:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 02:12:24.366 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:12:24.411 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:12:24.065 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:12:24.402 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:12:51.133 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:58214 10 6452 1 2025-09-03 02:13:51.497 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38208 10 6452 1 2025-09-03 02:14:51.914 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49438 10 6452 1 2025-09-03 02:15:52.314 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37230 10 6452 1 2025-09-03 02:16:52.726 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:32950 12 6556 1 2025-09-03 02:17:24.176 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:17:24.585 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:13:23.788 00:05:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 02:17:24.096 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:17:24.354 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:17:24.094 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:17:53.139 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47806 10 6452 1 2025-09-03 02:14:23.791 00:05:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 02:18:53.554 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49218 10 6452 1 2025-09-03 02:19:53.956 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51604 10 6452 1 2025-09-03 02:20:54.366 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33232 10 6452 1 2025-09-03 02:21:54.771 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40568 10 6452 1 2025-09-03 02:22:24.546 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:22:24.367 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:22:24.456 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:22:24.410 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:22:24.463 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:22:55.176 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:47416 12 10367 1 2025-09-03 02:19:23.788 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 02:23:55.657 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36598 10 6452 1 2025-09-03 02:20:23.792 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 02:24:56.074 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:34802 10 6452 1 2025-09-03 02:25:56.504 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55246 10 6452 1 2025-09-03 02:26:56.929 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:55482 10 6452 1 2025-09-03 02:27:24.731 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:27:24.690 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:27:24.563 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:27:24.715 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:27:24.647 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:27:57.371 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:52454 12 10367 1 2025-09-03 02:28:57.848 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:41364 10 6452 1 2025-09-03 02:25:23.791 00:05:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 02:29:58.235 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40058 10 6452 1 2025-09-03 02:26:23.794 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 02:30:58.634 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47194 10 6452 1 2025-09-03 02:31:59.035 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 10 6452 1 2025-09-03 02:32:24.941 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:32:24.745 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:32:24.742 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:32:24.656 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:32:24.859 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:32:59.437 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50766 10 6452 1 2025-09-03 02:33:59.850 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55496 10 6452 1 2025-09-03 02:35:00.276 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58584 10 6452 1 2025-09-03 02:31:23.795 00:05:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 02:36:00.677 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42538 10 6452 1 2025-09-03 02:32:23.796 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 02:37:01.109 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:59114 10 6452 1 2025-09-03 02:37:24.864 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:37:24.788 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:37:24.588 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:37:24.787 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:37:24.870 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:38:01.538 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37310 10 6452 1 2025-09-03 02:39:01.941 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:38084 10 6452 1 2025-09-03 02:40:02.376 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59744 10 6452 1 2025-09-03 02:41:02.748 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34720 10 6452 1 2025-09-03 02:37:23.793 00:05:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 02:42:03.158 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40434 10 6452 1 2025-09-03 02:42:24.894 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:38:23.797 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 02:42:24.867 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:42:24.870 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:42:24.881 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:42:24.812 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:43:03.562 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35136 10 6452 1 2025-09-03 02:44:03.961 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48210 12 6556 1 2025-09-03 02:45:04.362 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36510 10 6452 1 2025-09-03 02:46:04.762 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37618 10 6452 1 2025-09-03 02:47:05.132 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53396 10 6452 1 2025-09-03 02:43:23.795 00:05:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 02:47:24.746 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:47:24.901 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:47:24.983 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:47:25.039 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:47:25.053 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:48:05.540 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59976 10 6452 1 2025-09-03 02:44:23.801 00:05:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 02:49:05.946 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58512 10 6452 1 2025-09-03 02:50:06.357 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53018 10 6452 1 2025-09-03 02:51:06.776 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51484 10 6452 1 2025-09-03 02:52:07.184 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:52592 10 6452 1 2025-09-03 02:52:25.320 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:52:25.490 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:52:25.236 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:52:25.535 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:52:25.236 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:53:07.588 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:47224 12 10365 1 2025-09-03 02:49:23.799 00:05:00.277 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 02:54:08.097 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44512 10 6452 1 2025-09-03 02:50:23.802 00:05:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 02:55:08.497 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52344 10 6452 1 2025-09-03 02:56:08.863 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:38680 10 6452 1 2025-09-03 02:57:09.231 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46466 10 6452 1 2025-09-03 02:57:25.232 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 02:57:25.340 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:57:25.463 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 02:57:25.233 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 02:57:25.544 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 02:58:09.642 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46032 10 6452 1 Summary: total flows: 140, total bytes: 429107, total packets: 1033, avg bps: 909, avg pps: 0, avg bpp: 415 Time window: 2025-09-03 01:55:23 - 2025-09-03 02:58:19 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0027s User: 0.0014s Wall: 0.0021s flows/second: 68192.1 Runtime: 0.0021s