Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 00:59:12.938 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:44716 10 6452 1 2025-09-08 00:54:26.201 00:06:00.105 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 00:59:47.226 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 00:59:47.348 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 00:59:47.311 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:59:47.143 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 00:59:47.382 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:00:13.314 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51288 10 6452 1 2025-09-08 01:01:13.691 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35598 10 6452 1 2025-09-08 01:02:14.054 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56654 10 6452 1 2025-09-08 01:03:14.455 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:55770 12 10367 1 2025-09-08 01:04:14.934 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33862 10 6452 1 2025-09-08 01:04:47.228 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 01:04:47.151 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 01:04:47.305 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:04:47.146 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:04:47.147 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:05:15.362 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60020 10 6452 1 2025-09-08 01:00:26.201 00:06:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 01:06:15.767 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47974 10 6452 1 2025-09-08 01:01:26.203 00:06:00.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 01:07:16.181 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39264 10 6452 1 2025-09-08 01:08:16.592 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51954 10 6452 1 2025-09-08 01:09:17.010 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55342 10 6452 1 2025-09-08 01:09:47.454 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 01:09:47.660 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 01:09:47.394 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:09:47.372 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:09:47.357 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:10:17.412 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34124 10 6452 1 2025-09-08 01:11:17.818 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56892 10 6452 1 2025-09-08 01:12:18.232 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56304 10 6452 1 2025-09-08 01:07:26.202 00:06:00.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 01:13:18.641 00:00:10.908 TCP 1.101.0.1:3000 -> 23.104.0.1:55404 12 10365 1 2025-09-08 01:08:26.205 00:06:00.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 01:14:19.591 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:41944 10 6452 1 2025-09-08 01:14:47.216 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:14:47.370 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:14:47.374 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:14:47.476 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 01:14:47.453 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 01:15:19.946 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:37814 10 6452 1 2025-09-08 01:16:20.422 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48226 10 6452 1 2025-09-08 01:17:20.829 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57394 10 6452 1 2025-09-08 01:18:21.230 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51560 10 6452 1 2025-09-08 01:14:26.203 00:06:00.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 01:19:21.637 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32940 10 6452 1 2025-09-08 01:19:47.658 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 01:19:47.365 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:19:47.706 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:19:47.664 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:19:47.789 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 01:15:26.205 00:06:00.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 01:20:22.038 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58868 10 6452 1 2025-09-08 01:21:22.453 00:00:10.751 TCP 1.101.0.1:3000 -> 23.104.0.1:60874 10 6452 1 2025-09-08 01:22:23.246 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58318 10 6452 1 2025-09-08 01:23:23.654 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56688 10 6452 1 2025-09-08 01:24:24.069 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59282 10 6452 1 2025-09-08 01:24:47.704 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 01:24:47.723 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:24:47.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:24:47.868 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:24:47.852 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 01:25:24.474 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:59572 11 6504 1 2025-09-08 01:21:26.204 00:06:00.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 01:26:24.926 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:32846 10 6452 1 2025-09-08 01:22:26.208 00:06:00.107 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 01:27:25.352 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-09-08 01:28:25.718 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45284 10 6452 1 2025-09-08 01:29:26.131 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41460 10 6452 1 2025-09-08 01:29:47.883 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 01:29:47.861 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:29:47.933 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:29:47.678 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:29:48.017 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 01:30:26.539 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56534 10 6452 1 2025-09-08 01:31:26.946 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38200 10 6452 1 2025-09-08 01:32:27.360 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53340 10 6452 1 2025-09-08 01:28:26.207 00:06:00.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 01:33:27.724 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44402 10 6452 1 2025-09-08 01:29:26.209 00:06:00.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 01:34:28.137 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:59250 11 6504 1 2025-09-08 01:34:47.935 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 01:34:47.900 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:34:47.864 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:34:47.988 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:34:47.946 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 01:35:28.599 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45898 10 6452 1 2025-09-08 01:36:29.015 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36566 10 6452 1 2025-09-08 01:37:29.414 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53002 10 6452 1 2025-09-08 01:38:29.816 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57786 10 6452 1 2025-09-08 01:39:30.222 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45630 10 6452 1 2025-09-08 01:39:48.160 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 01:39:47.968 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 01:39:47.910 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:39:48.078 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:39:48.082 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:35:26.207 00:06:00.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 01:40:30.576 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51866 10 6452 1 2025-09-08 01:36:26.210 00:06:00.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 01:41:30.975 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49282 10 6452 1 2025-09-08 01:42:31.395 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45100 10 6452 1 2025-09-08 01:43:31.807 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45442 10 6452 1 2025-09-08 01:44:32.209 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49598 10 6452 1 2025-09-08 01:44:48.178 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 01:44:47.971 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:44:48.008 00:00:00.045 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:44:47.940 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:44:48.089 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 01:45:32.612 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:60210 10 6452 1 2025-09-08 01:46:32.985 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43448 10 6452 1 2025-09-08 01:42:26.210 00:06:00.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 01:47:33.393 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33122 10 6452 1 2025-09-08 01:43:26.212 00:06:00.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 01:48:33.800 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:34064 10 6452 1 2025-09-08 01:49:34.177 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:49698 11 6504 1 2025-09-08 01:49:48.176 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 01:49:48.120 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:49:48.089 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:49:48.293 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:49:48.173 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 01:50:34.633 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58106 10 6452 1 2025-09-08 01:51:35.055 00:00:16.687 TCP 1.101.0.1:3000 -> 23.104.0.1:57492 10 6452 1 2025-09-08 01:52:41.784 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40552 10 6452 1 2025-09-08 01:53:42.197 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45344 10 6452 1 2025-09-08 01:49:26.210 00:06:00.120 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 01:54:48.292 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 01:54:48.344 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:54:48.212 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 01:54:48.317 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 01:54:48.295 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 01:54:42.607 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52304 10 6452 1 2025-09-08 01:50:26.212 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 01:55:43.012 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:35696 10 6452 1 2025-09-08 01:56:43.371 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39376 10 6452 1 2025-09-08 01:57:43.737 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37870 10 6452 1 Summary: total flows: 136, total bytes: 418409, total packets: 1015, avg bps: 879, avg pps: 0, avg bpp: 412 Time window: 2025-09-08 00:54:26 - 2025-09-08 01:57:54 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0042s User: 0.0008s Wall: 0.0021s flows/second: 63699.1 Runtime: 0.0022s