Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 20:59:37.398 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54656 10 6452 1 2025-09-02 21:00:37.802 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:45584 10 6452 1 2025-09-02 20:56:23.704 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:56:23.701 00:06:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 21:01:38.181 00:00:11.057 TCP 1.101.0.1:3000 -> 23.104.0.1:50590 10 6452 1 2025-09-02 21:02:18.455 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:02:18.241 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:02:18.009 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:02:18.091 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:02:18.372 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:02:39.281 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43964 10 6452 1 2025-09-02 21:03:39.640 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42124 10 6452 1 2025-09-02 21:04:40.037 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38390 10 6452 1 2025-09-02 21:05:40.443 00:00:10.499 TCP 1.101.0.1:3000 -> 23.104.0.1:45984 10 6452 1 2025-09-02 21:06:40.998 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60188 10 6452 1 2025-09-02 21:07:17.975 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:07:18.237 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:07:18.179 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:07:18.239 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:07:18.321 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:07:41.403 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39610 10 6452 1 2025-09-02 21:03:23.703 00:06:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 21:03:23.706 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 21:08:41.803 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51868 10 6452 1 2025-09-02 21:09:42.210 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55214 10 6452 1 2025-09-02 21:10:42.571 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34526 10 6452 1 2025-09-02 21:11:42.973 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36478 10 6452 1 2025-09-02 21:12:18.422 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:12:18.184 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:12:18.343 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:12:18.340 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:12:18.340 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:12:43.390 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:44922 12 10367 1 2025-09-02 21:13:43.874 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:32908 10 6452 1 2025-09-02 21:14:44.241 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41518 10 6452 1 2025-09-02 21:10:23.706 00:06:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 21:10:23.710 00:06:00.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 21:15:44.646 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56366 10 6452 1 2025-09-02 21:16:45.056 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45044 10 6452 1 2025-09-02 21:17:18.404 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:17:18.336 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:17:18.333 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:17:18.260 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:17:18.321 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:17:45.420 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52612 10 6452 1 2025-09-02 21:18:45.822 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57968 10 6452 1 2025-09-02 21:19:46.228 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56056 10 6452 1 2025-09-02 21:20:46.629 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60036 10 6452 1 2025-09-02 21:21:47.049 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53264 10 6452 1 2025-09-02 21:22:18.488 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:22:18.756 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:22:18.705 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:22:18.481 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:22:18.406 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:17:23.712 00:06:00.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 21:17:23.715 00:06:00.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 21:22:47.455 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37742 10 6452 1 2025-09-02 21:23:47.860 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:50364 10 6452 1 2025-09-02 21:24:48.233 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35650 10 6452 1 2025-09-02 21:25:48.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42898 10 6452 1 2025-09-02 21:26:49.005 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56410 10 6452 1 2025-09-02 21:27:18.801 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:27:18.778 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:27:18.752 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:27:18.472 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:27:18.719 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:27:49.423 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55506 10 6452 1 2025-09-02 21:28:49.832 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38096 10 6452 1 2025-09-02 21:24:23.715 00:06:00.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 21:24:23.713 00:06:00.199 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 21:29:50.231 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41154 10 6452 1 2025-09-02 21:30:50.594 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53666 10 6452 1 2025-09-02 21:31:50.993 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59942 10 6452 1 2025-09-02 21:32:18.646 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:32:18.746 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:32:18.742 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:32:18.648 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:32:18.564 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:32:51.400 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59198 10 6452 1 2025-09-02 21:33:51.807 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45846 10 6452 1 2025-09-02 21:34:52.210 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33020 10 6452 1 2025-09-02 21:35:52.578 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53788 10 6452 1 2025-09-02 21:31:23.715 00:06:00.199 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 21:31:23.718 00:06:00.193 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 21:36:52.979 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47268 10 6452 1 2025-09-02 21:37:18.722 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:37:18.634 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:37:18.874 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:37:18.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:37:18.641 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:37:53.345 00:00:13.460 TCP 1.101.0.1:3000 -> 23.104.0.1:48466 10 6452 1 2025-09-02 21:38:56.847 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:38318 10 6452 1 2025-09-02 21:39:57.276 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59170 10 6452 1 2025-09-02 21:40:57.643 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38794 10 6452 1 2025-09-02 21:41:58.051 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56928 10 6452 1 2025-09-02 21:42:19.081 00:00:00.052 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:42:19.071 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:42:18.745 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:42:18.787 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:42:18.997 00:00:00.052 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:42:58.454 00:00:10.816 TCP 1.101.0.1:3000 -> 23.104.0.1:46774 10 6452 1 2025-09-02 21:38:23.717 00:06:00.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 21:38:23.716 00:06:00.199 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 21:43:59.314 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35418 10 6452 1 2025-09-02 21:44:59.713 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45052 10 6452 1 2025-09-02 21:46:00.112 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:39350 10 6452 1 2025-09-02 21:47:00.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39166 10 6452 1 2025-09-02 21:47:18.940 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:47:18.857 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:47:19.191 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:47:18.844 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:47:18.889 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:48:00.919 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54560 10 6452 1 2025-09-02 21:49:01.330 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58490 10 6452 1 2025-09-02 21:50:01.731 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45902 10 6452 1 2025-09-02 21:45:23.719 00:06:00.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 21:45:23.718 00:06:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 21:51:02.109 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44268 10 6452 1 2025-09-02 21:52:02.470 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42244 10 6452 1 2025-09-02 21:52:19.148 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:52:19.098 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:52:18.954 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:52:18.895 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:52:18.978 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:53:02.881 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54862 10 6452 1 2025-09-02 21:54:03.243 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53912 10 6452 1 2025-09-02 21:55:03.614 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50370 10 6452 1 2025-09-02 21:56:03.985 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58660 10 6452 1 2025-09-02 21:57:04.393 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33686 10 6452 1 2025-09-02 21:57:19.120 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 21:57:19.242 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 21:57:19.135 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:57:19.002 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 21:57:19.084 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 21:52:23.720 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 21:52:23.717 00:06:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 21:58:04.810 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35784 10 6452 1 Summary: total flows: 137, total bytes: 415201, total packets: 1024, avg bps: 892, avg pps: 0, avg bpp: 405 Time window: 2025-09-02 20:56:23 - 2025-09-02 21:58:23 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0029s User: 0.0010s Wall: 0.0020s flows/second: 68464.2 Runtime: 0.0020s