Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 22:59:34.990 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48188 10 6452 1 2025-09-03 23:00:35.396 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47874 10 6452 1 2025-09-03 22:57:24.193 00:04:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 23:01:35.761 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:34260 10 6452 1 2025-09-03 23:02:49.531 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:02:49.342 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:02:49.281 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:02:49.413 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:02:36.131 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50866 10 6452 1 2025-09-03 23:02:49.497 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 22:59:24.191 00:04:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 23:03:36.495 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52796 10 6452 1 2025-09-03 23:04:36.903 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60564 10 6452 1 2025-09-03 23:05:37.270 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41566 10 6452 1 2025-09-03 23:02:24.194 00:04:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 23:06:37.672 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43438 10 6452 1 2025-09-03 23:07:49.551 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 23:07:49.601 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:07:49.539 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:07:49.451 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:07:38.097 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58928 10 6452 1 2025-09-03 23:07:49.470 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:04:24.191 00:04:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 23:08:38.494 00:00:10.539 TCP 1.101.0.1:3000 -> 23.104.0.1:56062 10 6452 1 2025-09-03 23:09:39.103 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:36658 10 6452 1 2025-09-03 23:09:24.192 00:01:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-03 23:10:39.457 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43846 10 6452 1 2025-09-03 23:07:24.194 00:04:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 23:11:39.876 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49758 10 6452 1 2025-09-03 23:12:49.876 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:12:49.760 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:12:49.413 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:12:49.882 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:12:49.964 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 23:12:40.277 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48178 10 6452 1 2025-09-03 23:13:40.685 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44128 10 6452 1 2025-09-03 23:14:41.113 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49724 10 6452 1 2025-09-03 23:11:24.193 00:04:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 23:15:41.521 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36048 10 6452 1 2025-09-03 23:12:24.197 00:04:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 23:16:41.924 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:56398 10 6452 1 2025-09-03 23:17:49.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 23:17:49.522 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:17:49.514 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:17:49.655 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:17:49.719 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:17:42.310 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:37302 10 6452 1 2025-09-03 23:18:42.674 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:52078 10 6452 1 2025-09-03 23:19:43.058 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56598 10 6452 1 2025-09-03 23:16:24.193 00:04:00.296 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 23:20:43.461 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47332 10 6452 1 2025-09-03 23:17:24.197 00:04:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 23:21:43.886 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:39260 10 6452 1 2025-09-03 23:22:49.883 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:22:50.108 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 23:22:50.045 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:22:50.028 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:22:50.027 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:22:44.309 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40108 10 6452 1 2025-09-03 23:23:44.713 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:53058 10 6452 1 2025-09-03 23:24:45.146 00:00:10.785 TCP 1.101.0.1:3000 -> 23.104.0.1:53536 10 6452 1 2025-09-03 23:21:24.197 00:04:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 23:25:45.976 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47336 10 6452 1 2025-09-03 23:22:24.197 00:04:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 23:26:46.382 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37952 10 6452 1 2025-09-03 23:27:49.889 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:27:49.802 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:27:49.758 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:27:49.884 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:27:49.967 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 23:27:46.793 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:37600 12 10365 1 2025-09-03 23:27:24.202 00:01:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-03 23:28:47.267 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34726 10 6452 1 2025-09-03 23:29:47.671 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35882 10 6452 1 2025-09-03 23:26:24.196 00:04:00.296 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 23:30:48.104 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59164 10 6452 1 2025-09-03 23:29:24.200 00:02:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-03 23:31:48.505 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33862 10 6452 1 2025-09-03 23:32:50.183 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 23:32:49.850 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:32:49.787 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:32:50.054 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:32:50.100 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:32:48.908 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41678 10 6452 1 2025-09-03 23:32:24.202 00:01:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-03 23:33:49.275 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35626 10 6452 1 2025-09-03 23:34:49.680 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41980 10 6452 1 2025-09-03 23:31:24.198 00:04:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 23:35:50.120 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58162 10 6452 1 2025-09-03 23:36:50.484 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54262 10 6452 1 2025-09-03 23:37:50.047 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 23:37:49.958 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:37:49.965 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:37:50.195 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:37:50.102 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:37:50.893 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51966 10 6452 1 2025-09-03 23:34:24.201 00:04:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 23:38:51.301 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47662 10 6452 1 2025-09-03 23:39:51.702 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40814 10 6452 1 2025-09-03 23:36:24.199 00:04:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 23:40:52.111 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39974 10 6452 1 2025-09-03 23:41:52.530 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36898 10 6452 1 2025-09-03 23:41:24.199 00:01:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-03 23:42:49.927 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:42:50.212 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:42:50.152 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:42:50.213 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:42:50.296 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 23:42:52.930 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 10 6452 1 2025-09-03 23:39:24.202 00:04:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 23:43:53.313 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51294 10 6452 1 2025-09-03 23:44:53.720 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33380 10 6452 1 2025-09-03 23:43:24.200 00:02:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-03 23:45:54.130 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45474 10 6452 1 2025-09-03 23:46:54.533 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60452 10 6452 1 2025-09-03 23:46:24.201 00:01:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-03 23:47:50.384 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 23:47:50.447 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:47:50.298 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:47:50.120 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:47:50.301 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:47:54.915 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:37470 10 6452 1 2025-09-03 23:44:24.203 00:04:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 23:48:55.288 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56886 10 6452 1 2025-09-03 23:49:55.692 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:46820 10 6452 1 2025-09-03 23:50:56.090 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45538 10 6452 1 2025-09-03 23:51:56.493 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42578 10 6452 1 2025-09-03 23:48:24.201 00:04:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 23:52:50.263 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:52:50.391 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:52:50.438 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:52:50.585 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:52:50.668 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 23:52:56.896 00:00:10.978 TCP 1.101.0.1:3000 -> 23.104.0.1:58388 10 6452 1 2025-09-03 23:49:24.205 00:04:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 23:53:57.914 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54354 10 6452 1 2025-09-03 23:54:58.275 00:00:10.481 TCP 1.101.0.1:3000 -> 23.104.0.1:52052 10 6452 1 2025-09-03 23:55:58.790 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41788 10 6452 1 2025-09-03 23:56:59.151 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59150 10 6452 1 2025-09-03 23:53:24.203 00:04:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 23:57:50.497 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 23:57:50.572 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 23:57:50.351 00:00:00.017 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:57:50.435 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 23:57:50.518 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 23:57:59.516 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41208 10 6452 1 2025-09-03 23:54:24.206 00:04:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 Summary: total flows: 147, total bytes: 414584, total packets: 1014, avg bps: 906, avg pps: 0, avg bpp: 408 Time window: 2025-09-03 22:57:24 - 2025-09-03 23:58:24 Total flows processed: 147, passed: 147, Blocks skipped: 0, Bytes read: 15352 Sys: 0.0042s User: 0.0000s Wall: 0.0022s flows/second: 67061.4 Runtime: 0.0022s