Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 04:59:00.367 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56936 10 6452 1 2025-09-05 05:00:00.770 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60668 10 6452 1 2025-09-05 04:56:24.839 00:05:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-05 05:01:01.182 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43308 10 6452 1 2025-09-05 05:02:01.544 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34018 10 6452 1 2025-09-05 04:58:24.843 00:05:00.207 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-05 05:03:01.951 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58496 10 6452 1 2025-09-05 05:03:25.642 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:03:25.280 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:03:25.780 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:03:25.560 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:03:25.485 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:04:02.359 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:59122 10 6452 1 2025-09-05 05:05:02.798 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37528 10 6452 1 2025-09-05 05:06:03.201 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55220 10 6452 1 2025-09-05 05:02:24.840 00:05:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-05 05:07:03.610 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58646 10 6452 1 2025-09-05 05:08:04.016 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49646 10 6452 1 2025-09-05 05:08:25.551 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:04:24.844 00:05:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-05 05:08:25.726 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:08:25.724 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:08:25.658 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:08:25.469 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:09:04.418 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48366 10 6452 1 2025-09-05 05:10:04.827 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51570 10 6452 1 2025-09-05 05:11:05.235 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56578 10 6452 1 2025-09-05 05:12:05.641 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50598 10 6452 1 2025-09-05 05:08:24.842 00:05:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-05 05:13:06.068 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43872 10 6452 1 2025-09-05 05:13:25.869 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:13:25.624 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:13:25.754 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:13:25.650 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:13:25.787 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:14:06.476 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:38542 10 6452 1 2025-09-05 05:10:24.845 00:05:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-05 05:15:06.899 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:39832 10 6452 1 2025-09-05 05:16:07.265 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:42872 11 6504 1 2025-09-05 05:17:07.723 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34076 10 6452 1 2025-09-05 05:18:08.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42878 10 6452 1 2025-09-05 05:18:25.933 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:18:25.896 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:14:24.842 00:05:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-05 05:18:25.773 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:18:25.561 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:18:25.849 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:19:08.541 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54576 10 6452 1 2025-09-05 05:20:08.906 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49372 12 6556 1 2025-09-05 05:16:24.846 00:05:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-05 05:21:09.315 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40850 10 6452 1 2025-09-05 05:22:09.681 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40198 10 6452 1 2025-09-05 05:23:10.104 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42196 12 6556 1 2025-09-05 05:23:25.870 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:23:25.787 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:23:25.703 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:23:25.872 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:23:25.956 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:24:10.513 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40790 10 6452 1 2025-09-05 05:20:24.846 00:05:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-05 05:25:10.918 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50596 10 6452 1 2025-09-05 05:26:11.280 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49836 10 6452 1 2025-09-05 05:22:24.848 00:05:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-05 05:27:11.687 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43624 10 6452 1 2025-09-05 05:28:12.111 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46180 10 6452 1 2025-09-05 05:28:26.012 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:28:25.877 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:28:25.823 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:28:26.102 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:28:26.184 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:29:12.470 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52446 10 6452 1 2025-09-05 05:30:12.873 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46440 10 6452 1 2025-09-05 05:26:24.847 00:05:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-05 05:31:13.277 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56396 10 6452 1 2025-09-05 05:32:13.679 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38036 10 6452 1 2025-09-05 05:28:24.852 00:05:00.208 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-05 05:33:14.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38934 10 6452 1 2025-09-05 05:33:25.971 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:33:26.155 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:33:26.040 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:33:26.149 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:33:26.233 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:34:14.511 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45112 10 6452 1 2025-09-05 05:35:14.916 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48156 10 6452 1 2025-09-05 05:32:24.851 00:05:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-05 05:36:15.319 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52406 10 6452 1 2025-09-05 05:37:15.741 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37588 10 6452 1 2025-09-05 05:38:26.169 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:38:26.100 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:38:26.181 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:38:26.175 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:38:16.149 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51888 10 6452 1 2025-09-05 05:38:26.258 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:34:24.853 00:05:00.207 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-05 05:39:16.553 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45660 10 6452 1 2025-09-05 05:40:16.962 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57420 10 6452 1 2025-09-05 05:41:17.363 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40562 10 6452 1 2025-09-05 05:42:17.775 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58692 10 6452 1 2025-09-05 05:38:24.853 00:05:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-05 05:43:26.438 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:43:26.361 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:43:18.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43000 10 6452 1 2025-09-05 05:43:26.357 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:43:26.303 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:43:26.355 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:40:24.856 00:05:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-05 05:44:18.603 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36862 10 6452 1 2025-09-05 05:45:19.009 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53536 10 6452 1 2025-09-05 05:46:19.413 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46020 10 6452 1 2025-09-05 05:47:19.778 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55572 10 6452 1 2025-09-05 05:48:26.683 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:48:26.529 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:44:24.857 00:05:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-05 05:48:26.452 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:48:26.161 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:48:26.599 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:48:20.185 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43838 10 6452 1 2025-09-05 05:49:20.582 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45618 10 6452 1 2025-09-05 05:46:24.860 00:05:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-05 05:50:20.986 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:41890 10 6452 1 2025-09-05 05:51:21.359 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53724 10 6452 1 2025-09-05 05:52:21.760 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50028 10 6452 1 2025-09-05 05:53:26.555 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:53:26.552 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:53:26.318 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:53:26.552 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:53:26.634 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:53:22.183 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43396 10 6452 1 2025-09-05 05:50:24.858 00:05:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-05 05:54:22.588 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34948 10 6452 1 2025-09-05 05:55:22.990 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59330 10 6452 1 2025-09-05 05:52:24.861 00:05:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-05 05:56:23.403 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38306 10 6452 1 2025-09-05 05:57:23.813 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52626 10 6452 1 2025-09-05 05:58:26.718 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 05:58:26.633 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 05:58:26.690 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 05:58:26.700 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:58:26.636 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 05:58:24.225 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56492 10 6452 1 Summary: total flows: 140, total bytes: 417260, total packets: 1025, avg bps: 894, avg pps: 0, avg bpp: 407 Time window: 2025-09-05 04:56:24 - 2025-09-05 05:58:34 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0027s User: 0.0018s Wall: 0.0020s flows/second: 69896.7 Runtime: 0.0020s