Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 18:58:45.498 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53534 10 6452 1 2025-09-05 18:59:45.858 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35800 10 6452 1 2025-09-05 19:00:46.268 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54730 10 6452 1 2025-09-05 18:56:25.154 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-05 19:01:46.674 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35268 10 6452 1 2025-09-05 19:02:47.092 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50010 10 6452 1 2025-09-05 19:03:42.299 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 19:03:42.134 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:03:42.218 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:03:42.314 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:03:42.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:03:47.496 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55064 10 6452 1 2025-09-05 18:59:25.152 00:06:00.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-05 19:04:47.893 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:41702 10 6452 1 2025-09-05 19:05:48.273 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:38788 10 6452 1 2025-09-05 19:06:48.749 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36804 10 6452 1 2025-09-05 19:07:49.148 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49670 10 6452 1 2025-09-05 19:03:25.156 00:06:00.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-05 19:08:42.506 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 19:08:42.425 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:08:42.268 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:08:42.386 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:08:42.424 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:08:49.553 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33596 10 6452 1 2025-09-05 19:09:49.956 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57602 10 6452 1 2025-09-05 19:10:50.370 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56150 10 6452 1 2025-09-05 19:06:25.155 00:06:00.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-05 19:11:50.732 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35774 10 6452 1 2025-09-05 19:12:51.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58314 10 6452 1 2025-09-05 19:13:42.814 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 19:13:42.825 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:13:42.818 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:13:42.336 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:13:42.730 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:13:51.551 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39944 10 6452 1 2025-09-05 19:14:51.913 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41192 10 6452 1 2025-09-05 19:10:25.158 00:06:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-05 19:15:52.330 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57338 10 6452 1 2025-09-05 19:16:52.695 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42304 10 6452 1 2025-09-05 19:17:53.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56014 10 6452 1 2025-09-05 19:13:25.157 00:06:00.158 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-05 19:18:42.650 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 19:18:42.575 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:18:42.646 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:18:42.590 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:18:42.566 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:18:53.508 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42886 10 6452 1 2025-09-05 19:19:53.929 00:00:10.559 TCP 1.101.0.1:3000 -> 23.104.0.1:52886 10 6452 1 2025-09-05 19:20:54.526 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39692 10 6452 1 2025-09-05 19:21:54.937 00:00:10.699 TCP 1.101.0.1:3000 -> 23.104.0.1:33862 10 6452 1 2025-09-05 19:17:25.163 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-05 19:22:55.680 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:38834 12 10365 1 2025-09-05 19:23:42.758 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 19:23:42.669 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:23:42.665 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:23:42.549 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:23:42.675 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:23:56.173 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45070 10 6452 1 2025-09-05 19:24:56.572 00:00:10.542 TCP 1.101.0.1:3000 -> 23.104.0.1:50280 10 6452 1 2025-09-05 19:20:25.160 00:06:00.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-05 19:25:57.164 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34620 10 6452 1 2025-09-05 19:26:57.567 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40830 10 6452 1 2025-09-05 19:27:57.971 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37882 10 6452 1 2025-09-05 19:28:43.166 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 19:28:43.119 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:28:42.677 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:28:42.904 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:28:43.083 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:28:58.379 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58166 10 6452 1 2025-09-05 19:24:25.165 00:06:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-05 19:29:58.786 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56316 10 6452 1 2025-09-05 19:30:59.190 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:45766 10 6452 1 2025-09-05 19:31:59.558 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57858 10 6452 1 2025-09-05 19:27:25.167 00:06:00.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-05 19:32:59.965 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52134 10 6452 1 2025-09-05 19:33:42.830 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:33:43.328 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:33:42.916 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:33:42.980 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:33:43.063 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 19:34:00.373 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56550 10 6452 1 2025-09-05 19:35:00.775 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56558 10 6452 1 2025-09-05 19:36:01.140 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55192 10 6452 1 2025-09-05 19:31:25.169 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-05 19:37:01.501 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43110 10 6452 1 2025-09-05 19:38:01.905 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48382 12 6556 1 2025-09-05 19:38:43.181 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 19:38:43.098 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:38:43.155 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:38:43.094 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:38:43.098 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:39:02.313 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55072 10 6452 1 2025-09-05 19:34:25.168 00:06:00.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-05 19:40:02.716 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36322 10 6452 1 2025-09-05 19:41:03.127 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46868 10 6452 1 2025-09-05 19:42:03.533 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57196 10 6452 1 2025-09-05 19:43:03.936 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40478 10 6452 1 2025-09-05 19:38:25.171 00:06:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-05 19:43:43.189 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 19:43:43.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:43:43.332 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:43:43.130 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:43:43.106 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:44:04.358 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35098 10 6452 1 2025-09-05 19:45:04.762 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37806 10 6452 1 2025-09-05 19:46:05.178 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43452 10 6452 1 2025-09-05 19:41:25.169 00:06:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-05 19:47:05.585 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51020 10 6452 1 2025-09-05 19:48:06.007 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:48884 10 6452 1 2025-09-05 19:48:43.171 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:48:43.185 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:48:43.197 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:48:43.181 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:48:43.264 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 19:49:06.388 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42480 10 6452 1 2025-09-05 19:50:06.792 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:38344 10 6452 1 2025-09-05 19:45:25.173 00:06:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-05 19:51:07.190 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32902 10 6452 1 2025-09-05 19:52:07.593 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47438 10 6452 1 2025-09-05 19:53:07.995 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47264 10 6452 1 2025-09-05 19:48:25.172 00:06:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-05 19:53:43.825 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 19:53:43.608 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:53:43.649 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:53:43.502 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:53:43.742 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:54:08.413 00:00:10.737 TCP 1.101.0.1:3000 -> 23.104.0.1:43614 10 6452 1 2025-09-05 19:55:09.188 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45350 10 6452 1 2025-09-05 19:56:09.585 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48280 10 6452 1 2025-09-05 19:57:09.990 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45502 10 6452 1 2025-09-05 19:52:25.173 00:06:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-05 19:58:10.397 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49712 10 6452 1 2025-09-05 19:58:43.411 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:58:43.671 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 19:58:43.682 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 19:58:43.143 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 19:58:43.494 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 137, total bytes: 420894, total packets: 1022, avg bps: 900, avg pps: 0, avg bpp: 411 Time window: 2025-09-05 18:56:25 - 2025-09-05 19:58:43 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0023s User: 0.0015s Wall: 0.0015s flows/second: 92501.6 Runtime: 0.0015s