Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 04:59:37.712 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:41012 10 6452 1 2025-09-11 05:00:38.104 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46216 10 6452 1 2025-09-11 05:01:26.194 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:01:26.151 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:01:25.929 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:01:26.193 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:01:26.276 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:01:38.509 00:00:10.496 TCP 1.101.0.1:3000 -> 23.104.0.1:54034 10 6452 1 2025-09-11 05:02:39.054 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:40768 10 6452 1 2025-09-11 04:58:27.775 00:06:00.066 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 05:03:39.441 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59798 10 6452 1 2025-09-11 04:59:27.775 00:06:00.071 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 05:04:39.856 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57916 10 6452 1 2025-09-11 05:05:40.275 00:00:10.472 TCP 1.101.0.1:3000 -> 23.104.0.1:45796 10 6452 1 2025-09-11 05:06:26.303 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:06:26.214 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:06:26.260 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:06:26.070 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:06:26.221 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:06:40.792 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55270 10 6452 1 2025-09-11 05:07:41.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52082 10 6452 1 2025-09-11 05:08:41.589 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42466 10 6452 1 2025-09-11 05:09:41.986 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50166 10 6452 1 2025-09-11 05:05:27.778 00:06:00.067 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 05:10:42.395 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36232 10 6452 1 2025-09-11 05:11:26.485 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:11:26.403 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:11:26.307 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:06:27.776 00:06:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 05:11:26.407 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:11:26.146 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:11:42.759 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60670 10 6452 1 2025-09-11 05:12:43.182 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59106 10 6452 1 2025-09-11 05:13:43.589 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:39850 12 10367 1 2025-09-11 05:14:44.075 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33396 10 6452 1 2025-09-11 05:15:44.475 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:46820 11 6504 1 2025-09-11 05:16:26.925 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:16:26.637 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:16:26.512 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:16:26.497 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:16:27.008 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:16:44.938 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41860 10 6452 1 2025-09-11 05:12:27.779 00:06:00.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 05:17:45.359 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44384 10 6452 1 2025-09-11 05:13:27.778 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 05:18:45.722 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60114 10 6452 1 2025-09-11 05:19:46.136 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35638 10 6452 1 2025-09-11 05:20:46.538 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42620 10 6452 1 2025-09-11 05:21:26.433 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:21:26.353 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:21:26.584 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:21:26.202 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:21:26.352 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:21:46.940 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51248 10 6452 1 2025-09-11 05:22:47.353 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59708 10 6452 1 2025-09-11 05:23:47.764 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:32846 10 6452 1 2025-09-11 05:19:27.781 00:06:00.070 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 05:24:48.189 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51198 10 6452 1 2025-09-11 05:20:27.779 00:06:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 05:25:48.589 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47110 10 6452 1 2025-09-11 05:26:26.517 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:26:26.587 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:26:26.405 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:26:26.617 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:26:26.433 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:26:48.995 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54886 10 6452 1 2025-09-11 05:27:49.408 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44230 10 6452 1 2025-09-11 05:28:49.813 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44666 10 6452 1 2025-09-11 05:29:50.209 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35388 10 6452 1 2025-09-11 05:30:50.614 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59088 10 6452 1 2025-09-11 05:26:27.784 00:06:00.070 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 05:31:26.778 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:31:26.788 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:31:26.572 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:31:26.694 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:31:26.842 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:31:51.020 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35860 10 6452 1 2025-09-11 05:27:27.781 00:06:00.076 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 05:32:51.421 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53382 10 6452 1 2025-09-11 05:33:51.827 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:43024 10 6452 1 2025-09-11 05:34:52.217 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37452 10 6452 1 2025-09-11 05:35:52.624 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50440 10 6452 1 2025-09-11 05:36:26.784 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:36:26.808 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:36:26.915 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:36:26.621 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:36:26.701 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:36:53.037 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:45372 10 6452 1 2025-09-11 05:37:53.414 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44562 10 6452 1 2025-09-11 05:33:27.785 00:06:00.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 05:38:53.780 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55918 10 6452 1 2025-09-11 05:34:27.783 00:06:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 05:39:54.185 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37286 10 6452 1 2025-09-11 05:40:54.590 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54750 10 6452 1 2025-09-11 05:41:27.000 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:41:26.945 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:41:26.612 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:41:26.768 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:41:26.917 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:41:54.953 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42560 10 6452 1 2025-09-11 05:42:55.325 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38724 10 6452 1 2025-09-11 05:43:55.730 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:43162 12 10365 1 2025-09-11 05:44:56.223 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57544 10 6452 1 2025-09-11 05:40:27.791 00:06:00.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 05:45:56.586 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43898 10 6452 1 2025-09-11 05:46:26.962 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:41:27.789 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 05:46:27.004 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:46:26.852 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:46:27.140 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:46:27.222 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:46:57.001 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53674 10 6452 1 2025-09-11 05:47:57.405 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52182 10 6452 1 2025-09-11 05:48:57.775 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33102 10 6452 1 2025-09-11 05:49:58.179 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46680 10 6452 1 2025-09-11 05:50:58.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37238 10 6452 1 2025-09-11 05:51:27.085 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:51:27.085 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:51:26.821 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:51:27.090 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:51:27.172 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:51:58.949 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51296 10 6452 1 2025-09-11 05:47:27.793 00:06:00.067 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 05:52:59.360 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41160 10 6452 1 2025-09-11 05:48:27.792 00:06:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 05:53:59.766 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51270 10 6452 1 2025-09-11 05:55:00.185 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46194 10 6452 1 2025-09-11 05:56:00.589 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50732 10 6452 1 2025-09-11 05:56:27.200 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 05:56:27.213 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 05:56:27.341 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 05:56:27.229 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:56:27.116 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 05:57:00.992 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58446 10 6452 1 2025-09-11 05:58:01.400 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33806 10 6452 1 Summary: total flows: 135, total bytes: 417444, total packets: 999, avg bps: 931, avg pps: 0, avg bpp: 417 Time window: 2025-09-11 04:58:27 - 2025-09-11 05:58:11 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0037s User: 0.0007s Wall: 0.0022s flows/second: 60026.6 Runtime: 0.0023s