Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 09:58:41.519 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38548 10 6452 1 2025-08-09 09:59:41.926 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:56128 10 6452 1 2025-08-09 09:56:10.208 00:04:00.205 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 10:00:31.521 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:00:31.550 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:00:31.284 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:00:31.439 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:00:31.436 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:00:42.348 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:42424 10 6452 1 2025-08-09 09:57:10.207 00:04:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 10:01:42.705 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53060 10 6452 1 2025-08-09 10:02:43.117 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47324 10 6452 1 2025-08-09 10:03:43.524 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:56558 12 10365 1 2025-08-09 10:04:43.998 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38948 10 6452 1 2025-08-09 10:01:10.211 00:04:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 10:05:31.620 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:05:31.568 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:05:31.837 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:05:31.705 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:05:31.923 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:05:44.399 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52552 10 6452 1 2025-08-09 10:02:10.210 00:04:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 10:06:44.801 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49286 10 6452 1 2025-08-09 10:07:45.228 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60974 10 6452 1 2025-08-09 10:08:45.628 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54996 10 6452 1 2025-08-09 10:09:46.037 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56772 10 6452 1 2025-08-09 10:06:10.216 00:04:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 10:10:31.736 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:10:31.802 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:10:31.306 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:10:31.653 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:10:31.814 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:10:46.442 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39110 10 6452 1 2025-08-09 10:07:10.213 00:04:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 10:11:46.856 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48164 10 6452 1 2025-08-09 10:12:47.271 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47960 10 6452 1 2025-08-09 10:13:47.671 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42722 10 6452 1 2025-08-09 10:14:48.106 00:00:10.765 TCP 1.101.0.1:3000 -> 23.104.0.1:54804 10 6452 1 2025-08-09 10:11:10.216 00:04:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 10:15:31.787 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:15:31.831 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:15:31.717 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:15:31.703 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:15:31.830 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:15:48.903 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34158 10 6452 1 2025-08-09 10:12:10.215 00:04:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 10:16:49.307 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60338 10 6452 1 2025-08-09 10:17:49.709 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46804 10 6452 1 2025-08-09 10:18:50.108 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42322 10 6452 1 2025-08-09 10:19:50.524 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46252 10 6452 1 2025-08-09 10:16:10.219 00:04:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 10:20:31.818 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:20:31.750 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:20:31.678 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:20:31.736 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:20:31.744 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:20:50.930 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:37468 10 6452 1 2025-08-09 10:17:10.216 00:04:00.239 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 10:21:51.360 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41586 10 6452 1 2025-08-09 10:22:51.717 00:00:10.754 TCP 1.101.0.1:3000 -> 23.104.0.1:37234 10 6452 1 2025-08-09 10:22:10.218 00:01:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 10:23:52.520 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52798 10 6452 1 2025-08-09 10:24:52.919 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:48546 10 6452 1 2025-08-09 10:21:10.220 00:04:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 10:25:31.694 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:25:31.648 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:25:31.865 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:25:31.695 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:25:31.948 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:25:53.347 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58450 10 6452 1 2025-08-09 10:24:10.219 00:02:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-09 10:26:53.756 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46658 10 6452 1 2025-08-09 10:26:10.222 00:01:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 10:27:54.118 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50574 10 6452 1 2025-08-09 10:27:10.218 00:01:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 10:28:54.523 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42458 10 6452 1 2025-08-09 10:29:54.935 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:55594 10 6452 1 2025-08-09 10:28:10.222 00:02:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-09 10:30:31.739 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:30:31.768 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:30:32.168 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:30:32.114 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:30:32.250 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:30:55.324 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42916 10 6452 1 2025-08-09 10:31:55.684 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56268 10 6452 1 2025-08-09 10:31:10.223 00:01:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 10:32:56.061 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55008 10 6452 1 2025-08-09 10:29:10.219 00:04:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 10:33:56.464 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33790 10 6452 1 2025-08-09 10:34:56.868 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55826 10 6452 1 2025-08-09 10:35:32.046 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:35:31.922 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:35:32.213 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:35:32.169 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:35:32.297 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:35:57.274 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43338 10 6452 1 2025-08-09 10:36:57.679 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35492 10 6452 1 2025-08-09 10:33:10.224 00:04:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 10:37:58.119 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6452 1 2025-08-09 10:34:10.222 00:04:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 10:38:58.520 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58532 10 6452 1 2025-08-09 10:39:58.922 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:51070 10 6452 1 2025-08-09 10:40:32.352 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:40:32.102 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:40:32.229 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:40:32.269 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:40:32.175 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:40:59.356 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59216 10 6452 1 2025-08-09 10:38:10.225 00:04:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 10:41:59.761 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:47058 10 6452 1 2025-08-09 10:43:00.189 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37692 10 6452 1 2025-08-09 10:39:10.223 00:04:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 10:44:00.602 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:45252 10 6452 1 2025-08-09 10:45:01.066 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37550 10 6452 1 2025-08-09 10:45:32.367 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:45:32.326 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:45:32.306 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:45:32.210 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:45:32.389 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:46:01.471 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:57300 10 6452 1 2025-08-09 10:43:10.226 00:04:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 10:47:01.867 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59966 10 6452 1 2025-08-09 10:44:10.223 00:04:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 10:48:02.275 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42124 10 6452 1 2025-08-09 10:49:02.680 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45742 10 6452 1 2025-08-09 10:50:03.109 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57020 10 6452 1 2025-08-09 10:50:32.559 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:50:32.678 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:50:32.441 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:50:32.478 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:50:32.674 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:51:03.476 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55936 10 6452 1 2025-08-09 10:48:10.238 00:04:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 10:52:03.875 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60644 10 6452 1 2025-08-09 10:49:10.236 00:04:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 10:53:04.243 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58852 10 6452 1 2025-08-09 10:54:04.645 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35338 10 6452 1 2025-08-09 10:54:10.235 00:01:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 10:55:05.060 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57886 10 6452 1 2025-08-09 10:55:32.522 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 10:55:32.524 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:55:32.438 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 10:55:32.522 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 10:55:32.521 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 10:56:05.431 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39166 10 6452 1 2025-08-09 10:53:10.238 00:04:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 10:57:05.836 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:35706 10 6452 1 2025-08-09 10:56:10.235 00:02:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-09 10:58:06.283 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34858 10 6452 1 Summary: total flows: 149, total bytes: 421405, total packets: 1030, avg bps: 904, avg pps: 0, avg bpp: 409 Time window: 2025-08-09 09:56:10 - 2025-08-09 10:58:16 Total flows processed: 149, passed: 149, Blocks skipped: 0, Bytes read: 15560 Sys: 0.0017s User: 0.0035s Wall: 0.0023s flows/second: 65323.6 Runtime: 0.0023s