Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 20:58:44.752 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:43282 10 6452 1 2025-09-03 20:59:45.194 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58736 10 6452 1 2025-09-03 21:00:45.554 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33604 10 6452 1 2025-09-03 20:56:24.152 00:06:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-03 21:01:45.968 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34004 10 6452 1 2025-09-03 21:02:46.977 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:02:47.067 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:02:46.784 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:02:46.688 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:02:46.771 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:02:46.369 00:00:11.106 TCP 1.101.0.1:3000 -> 23.104.0.1:49672 10 6452 1 2025-09-03 20:59:24.157 00:04:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 21:03:47.511 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37548 10 6452 1 2025-09-03 21:04:47.930 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:47032 10 6452 1 2025-09-03 21:05:48.363 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47418 10 6452 1 2025-09-03 21:06:48.763 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36114 10 6452 1 2025-09-03 21:03:24.156 00:04:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 21:07:47.280 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:07:47.105 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:07:47.274 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:07:47.150 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:07:47.197 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:07:49.185 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32800 10 6452 1 2025-09-03 21:04:24.157 00:04:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 21:08:49.585 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59486 10 6452 1 2025-09-03 21:09:49.989 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52344 10 6452 1 2025-09-03 21:10:50.368 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38830 10 6452 1 2025-09-03 21:11:50.790 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54120 10 6452 1 2025-09-03 21:08:24.157 00:04:00.299 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 21:12:47.318 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:12:47.236 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:12:47.344 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:12:47.067 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:12:47.094 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:12:51.194 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58804 10 6452 1 2025-09-03 21:09:24.159 00:04:00.297 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 21:13:51.555 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56644 10 6452 1 2025-09-03 21:14:51.915 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32978 10 6452 1 2025-09-03 21:15:52.277 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56154 10 6452 1 2025-09-03 21:16:52.679 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42960 10 6452 1 2025-09-03 21:13:24.158 00:04:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 21:17:47.439 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:17:47.467 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:17:47.169 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:17:47.362 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:17:47.444 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:17:53.108 00:00:10.609 TCP 1.101.0.1:3000 -> 23.104.0.1:58832 10 6452 1 2025-09-03 21:14:24.161 00:04:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 21:18:53.756 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:58178 10 6452 1 2025-09-03 21:19:54.130 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50968 10 6452 1 2025-09-03 21:20:54.557 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46884 10 6452 1 2025-09-03 21:21:54.929 00:00:11.078 TCP 1.101.0.1:3000 -> 23.104.0.1:36048 10 6452 1 2025-09-03 21:18:24.159 00:04:00.299 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 21:22:47.511 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:22:47.418 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:22:47.526 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:22:47.340 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:22:47.429 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:22:56.068 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50962 10 6452 1 2025-09-03 21:19:24.162 00:04:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 21:23:56.431 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40846 10 6452 1 2025-09-03 21:24:56.838 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:51568 10 6452 1 2025-09-03 21:25:57.265 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57874 10 6452 1 2025-09-03 21:26:57.670 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53834 10 6452 1 2025-09-03 21:23:24.160 00:04:00.299 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 21:27:47.468 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:27:47.638 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:27:47.539 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:27:47.495 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:27:47.386 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:27:58.034 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43122 10 6452 1 2025-09-03 21:28:58.449 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39474 10 6452 1 2025-09-03 21:24:24.162 00:06:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-03 21:29:58.811 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44036 10 6452 1 2025-09-03 21:30:59.219 00:00:10.473 TCP 1.101.0.1:3000 -> 23.104.0.1:53456 10 6452 1 2025-09-03 21:31:59.727 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52604 10 6452 1 2025-09-03 21:32:47.766 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:32:47.562 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:32:47.466 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:32:47.617 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:32:47.682 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:33:00.142 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36024 10 6452 1 2025-09-03 21:28:24.160 00:06:00.300 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-03 21:34:00.558 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41212 10 6452 1 2025-09-03 21:35:00.957 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50188 10 6452 1 2025-09-03 21:31:24.163 00:04:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 21:36:01.364 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59536 10 6452 1 2025-09-03 21:37:01.763 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51928 10 6452 1 2025-09-03 21:37:47.818 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:37:47.476 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:37:47.726 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:37:47.678 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:37:47.736 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:38:02.178 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55390 10 6452 1 2025-09-03 21:39:02.582 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37612 10 6452 1 2025-09-03 21:35:24.163 00:04:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 21:40:02.987 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46806 10 6452 1 2025-09-03 21:36:24.165 00:04:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 21:41:03.401 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54066 10 6452 1 2025-09-03 21:42:03.820 00:00:10.525 TCP 1.101.0.1:3000 -> 23.104.0.1:60750 10 6452 1 2025-09-03 21:42:47.825 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:42:47.739 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:42:47.888 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:42:47.578 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:42:47.743 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:43:04.389 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41946 10 6452 1 2025-09-03 21:44:04.758 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39974 10 6452 1 2025-09-03 21:40:24.163 00:04:00.299 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 21:45:05.119 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49888 10 6452 1 2025-09-03 21:41:24.166 00:04:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 21:46:05.525 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58654 10 6452 1 2025-09-03 21:47:05.932 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:45988 10 6452 1 2025-09-03 21:47:47.943 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:47:47.851 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:47:47.940 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:47:47.931 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:47:48.015 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:48:06.358 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56082 10 6452 1 2025-09-03 21:49:06.757 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:38788 10 6452 1 2025-09-03 21:45:24.164 00:04:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 21:50:07.193 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:39640 10 6452 1 2025-09-03 21:46:24.168 00:04:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 21:51:07.643 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55612 10 6452 1 2025-09-03 21:52:08.054 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:53526 10 6452 1 2025-09-03 21:52:47.997 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:52:47.841 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:52:47.803 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:52:47.923 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:52:48.007 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:53:08.432 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59548 10 6452 1 2025-09-03 21:54:08.850 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58640 10 6452 1 2025-09-03 21:50:24.167 00:04:00.300 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 21:55:09.265 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39976 10 6452 1 2025-09-03 21:51:24.169 00:04:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 21:56:09.629 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59248 10 6452 1 2025-09-03 21:57:10.041 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59134 10 6452 1 2025-09-03 21:57:48.196 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 21:57:48.204 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 21:57:47.987 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 21:57:48.053 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:57:48.113 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 21:58:10.442 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38854 10 6452 1 Summary: total flows: 142, total bytes: 416508, total packets: 1012, avg bps: 896, avg pps: 0, avg bpp: 411 Time window: 2025-09-03 20:56:24 - 2025-09-03 21:58:20 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0024s User: 0.0024s Wall: 0.0026s flows/second: 54656.4 Runtime: 0.0026s