Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 23:58:48.802 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:44976 10 6452 1 2025-09-07 23:59:46.248 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 23:59:46.308 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 23:59:46.224 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 23:59:46.164 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 23:59:46.323 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 23:59:49.175 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43976 10 6452 1 2025-09-08 00:00:49.576 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51108 10 6452 1 2025-09-08 00:01:49.982 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35154 10 6452 1 2025-09-07 23:57:26.185 00:06:00.102 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 00:02:50.390 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45262 10 6452 1 2025-09-07 23:58:26.185 00:06:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 00:03:50.809 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51042 10 6452 1 2025-09-08 00:04:46.163 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:04:46.128 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:04:46.256 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:04:46.350 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 00:04:46.338 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:04:51.223 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57734 10 6452 1 2025-09-08 00:05:51.628 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49856 10 6452 1 2025-09-08 00:06:51.991 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33082 10 6452 1 2025-09-08 00:07:52.392 00:00:10.599 TCP 1.101.0.1:3000 -> 23.104.0.1:35540 10 6452 1 2025-09-08 00:08:53.033 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 10 6452 1 2025-09-08 00:04:26.184 00:06:00.103 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 00:09:45.955 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 00:09:46.265 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:09:46.047 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:09:46.368 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:09:46.451 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:09:53.437 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48316 10 6452 1 2025-09-08 00:05:26.187 00:06:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 00:10:53.841 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34326 10 6452 1 2025-09-08 00:11:54.237 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55610 10 6452 1 2025-09-08 00:12:54.651 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39282 10 6452 1 2025-09-08 00:13:55.014 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:47942 10 6452 1 2025-09-08 00:14:46.202 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:14:46.466 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 00:14:46.363 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:14:45.992 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:14:46.285 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:14:55.376 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46220 10 6452 1 2025-09-08 00:15:55.784 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49924 10 6452 1 2025-09-08 00:11:26.186 00:06:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 00:16:56.189 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45208 10 6452 1 2025-09-08 00:12:26.188 00:06:00.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 00:17:56.603 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52530 10 6452 1 2025-09-08 00:18:57.011 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:44926 10 6452 1 2025-09-08 00:19:46.599 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:19:46.348 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:19:46.378 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:19:46.469 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 00:19:46.460 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:19:57.368 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49530 10 6452 1 2025-09-08 00:20:57.774 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:57656 10 6452 1 2025-09-08 00:21:58.147 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:41700 10 6452 1 2025-09-08 00:22:58.503 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47350 10 6452 1 2025-09-08 00:18:26.186 00:06:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 00:23:58.862 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38680 10 6452 1 2025-09-08 00:19:26.189 00:06:00.105 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 00:24:46.820 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:24:46.834 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:24:46.710 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:24:46.736 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:24:46.737 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 00:24:59.273 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59610 10 6452 1 2025-09-08 00:25:59.641 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53066 10 6452 1 2025-09-08 00:27:00.054 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53188 10 6452 1 2025-09-08 00:28:00.464 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51124 10 6452 1 2025-09-08 00:29:00.861 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:58932 10 6452 1 2025-09-08 00:29:46.532 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:29:46.619 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:29:46.611 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 00:29:46.695 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:29:46.701 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:30:01.283 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36468 10 6452 1 2025-09-08 00:25:26.188 00:06:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 00:31:01.694 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35286 10 6452 1 2025-09-08 00:26:26.190 00:06:00.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 00:32:02.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51528 10 6452 1 2025-09-08 00:33:02.517 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:45448 10 6452 1 2025-09-08 00:34:02.947 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37966 10 6452 1 2025-09-08 00:34:46.668 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:34:46.877 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:34:46.726 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:34:46.584 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:34:46.875 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 00:35:03.359 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44282 10 6452 1 2025-09-08 00:36:03.760 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54186 10 6452 1 2025-09-08 00:37:04.178 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51024 10 6452 1 2025-09-08 00:32:26.192 00:06:00.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 00:38:04.579 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57940 10 6452 1 2025-09-08 00:33:26.194 00:06:00.103 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 00:39:04.953 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44964 10 6452 1 2025-09-08 00:39:46.994 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:39:46.777 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:39:46.806 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:39:46.990 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 00:39:46.890 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:40:05.375 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52454 10 6452 1 2025-09-08 00:41:05.748 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60554 10 6452 1 2025-09-08 00:42:06.158 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53752 10 6452 1 2025-09-08 00:43:06.560 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42544 10 6452 1 2025-09-08 00:44:06.929 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:46624 10 6452 1 2025-09-08 00:39:26.193 00:06:00.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 00:44:47.190 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:44:47.120 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:44:46.901 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:44:47.108 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:44:47.161 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 00:45:07.352 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39990 10 6452 1 2025-09-08 00:40:26.195 00:06:00.104 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 00:46:07.752 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50784 10 6452 1 2025-09-08 00:47:08.156 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47774 10 6452 1 2025-09-08 00:48:08.562 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58784 10 6452 1 2025-09-08 00:49:08.964 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60418 10 6452 1 2025-09-08 00:49:47.086 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:49:46.849 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:49:47.135 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:49:46.864 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 00:49:47.217 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:50:09.334 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58266 10 6452 1 2025-09-08 00:51:09.731 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59162 10 6452 1 2025-09-08 00:46:26.196 00:06:00.109 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 00:52:10.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46272 10 6452 1 2025-09-08 00:47:26.198 00:06:00.104 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 00:53:10.538 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:32928 10 6452 1 2025-09-08 00:54:10.953 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52302 10 6452 1 2025-09-08 00:54:47.353 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:54:47.246 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:54:47.545 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 00:54:46.902 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:54:47.329 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:55:11.362 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54168 10 6452 1 2025-09-08 00:56:11.767 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38342 10 6452 1 2025-09-08 00:57:12.132 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50194 10 6452 1 2025-09-08 00:58:12.531 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59010 10 6452 1 2025-09-08 00:53:26.196 00:06:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 137, total bytes: 416877, total packets: 1018, avg bps: 896, avg pps: 0, avg bpp: 409 Time window: 2025-09-07 23:57:26 - 2025-09-08 00:59:26 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0019s User: 0.0019s Wall: 0.0019s flows/second: 70401.8 Runtime: 0.0020s