Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 01:58:56.354 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48660 10 6452 1 2025-09-10 01:54:27.152 00:06:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 01:59:56.753 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47028 10 6452 1 2025-09-10 01:55:27.148 00:06:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 02:00:53.731 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:00:53.804 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:00:53.503 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:00:53.734 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:00:53.817 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:00:57.116 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39042 10 6452 1 2025-09-10 02:01:57.482 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53972 10 6452 1 2025-09-10 02:02:57.881 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49718 10 6452 1 2025-09-10 02:03:58.289 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33796 10 6452 1 2025-09-10 02:04:58.719 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:38710 10 6452 1 2025-09-10 02:05:53.682 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:05:53.783 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:05:53.584 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:05:53.626 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:05:53.709 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:05:59.127 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59032 10 6452 1 2025-09-10 02:01:27.159 00:06:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 02:06:59.494 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39184 10 6452 1 2025-09-10 02:02:27.157 00:06:00.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 02:07:59.897 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:48454 10 6452 1 2025-09-10 02:09:00.329 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:37992 12 10367 1 2025-09-10 02:10:00.806 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58470 10 6452 1 2025-09-10 02:10:53.756 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:10:53.578 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:10:53.870 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:10:53.610 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:10:53.672 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:11:01.177 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40358 10 6452 1 2025-09-10 02:12:01.584 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39012 10 6452 1 2025-09-10 02:13:01.986 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47720 10 6452 1 2025-09-10 02:08:27.161 00:06:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 02:14:02.398 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 12 10365 1 2025-09-10 02:09:27.157 00:06:00.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 02:15:02.853 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:37934 10 6452 1 2025-09-10 02:15:53.835 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:15:53.755 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:15:53.828 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:15:53.849 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:15:53.753 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:16:03.232 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:50812 10 6452 1 2025-09-10 02:17:03.600 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60632 10 6452 1 2025-09-10 02:18:04.008 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46138 10 6452 1 2025-09-10 02:19:04.371 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58002 12 6556 1 2025-09-10 02:20:04.777 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42996 10 6452 1 2025-09-10 02:15:27.162 00:06:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 02:20:53.972 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:20:54.077 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:20:53.561 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:20:54.133 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:20:54.214 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:21:05.196 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56578 10 6452 1 2025-09-10 02:16:27.160 00:06:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 02:22:05.597 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55314 10 6452 1 2025-09-10 02:23:05.997 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34638 10 6452 1 2025-09-10 02:24:06.402 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56182 10 6452 1 2025-09-10 02:25:06.809 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50498 10 6452 1 2025-09-10 02:25:54.142 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:25:54.104 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:25:53.985 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:25:54.049 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:25:54.131 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:26:07.215 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53694 10 6452 1 2025-09-10 02:27:07.618 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46110 10 6452 1 2025-09-10 02:22:27.167 00:06:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 02:28:07.983 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39412 10 6452 1 2025-09-10 02:23:27.163 00:06:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 02:29:08.386 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41726 10 6452 1 2025-09-10 02:30:08.789 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59326 10 6452 1 2025-09-10 02:30:54.171 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:30:54.088 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:30:54.084 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:30:54.073 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:30:54.097 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:31:09.198 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53872 10 6452 1 2025-09-10 02:32:09.609 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54616 10 6452 1 2025-09-10 02:33:09.974 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56198 10 6452 1 2025-09-10 02:34:10.384 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42462 10 6452 1 2025-09-10 02:29:27.166 00:06:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 02:35:10.792 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53858 10 6452 1 2025-09-10 02:30:27.165 00:06:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 02:35:54.303 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:35:54.244 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:35:54.219 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:35:53.993 00:00:00.055 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:35:54.222 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:36:11.194 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60864 10 6452 1 2025-09-10 02:37:11.595 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46072 10 6452 1 2025-09-10 02:38:11.998 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56550 10 6452 1 2025-09-10 02:39:12.400 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50808 10 6452 1 2025-09-10 02:40:12.804 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36408 10 6452 1 2025-09-10 02:40:54.439 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:40:54.409 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:40:54.303 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:40:54.298 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:40:54.355 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:41:13.217 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46212 10 6452 1 2025-09-10 02:36:27.169 00:06:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 02:42:13.621 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43650 10 6452 1 2025-09-10 02:37:27.168 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 02:43:14.026 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36140 10 6452 1 2025-09-10 02:44:14.399 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:60402 10 6452 1 2025-09-10 02:45:14.754 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:48030 10 6452 1 2025-09-10 02:45:54.566 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:45:54.467 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:45:54.422 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:45:54.389 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:45:54.473 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:46:15.179 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42832 10 6452 1 2025-09-10 02:47:15.584 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60108 10 6452 1 2025-09-10 02:48:16.029 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:59130 12 10367 1 2025-09-10 02:43:27.172 00:06:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 02:49:16.511 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39442 10 6452 1 2025-09-10 02:44:27.168 00:06:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 02:50:16.921 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:42024 10 6452 1 2025-09-10 02:50:54.610 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:50:54.521 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:50:54.523 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:50:54.567 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:50:54.528 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:51:17.292 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54540 10 6452 1 2025-09-10 02:52:17.695 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42872 10 6452 1 2025-09-10 02:53:18.118 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46416 10 6452 1 2025-09-10 02:54:18.533 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39276 10 6452 1 2025-09-10 02:50:27.171 00:06:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 02:55:18.931 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:40768 10 6452 1 2025-09-10 02:55:54.746 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 02:55:54.765 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 02:55:54.774 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 02:55:54.670 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:55:54.664 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 02:56:19.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49344 10 6452 1 2025-09-10 02:51:27.170 00:06:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 02:57:19.760 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:41904 10 6452 1 2025-09-10 02:58:20.191 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45472 10 6452 1 Summary: total flows: 138, total bytes: 429585, total packets: 1040, avg bps: 894, avg pps: 0, avg bpp: 413 Time window: 2025-09-10 01:54:27 - 2025-09-10 02:58:30 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0040s User: 0.0010s Wall: 0.0019s flows/second: 72180.3 Runtime: 0.0019s