Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 22:58:57.915 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34778 10 6452 1 2025-09-10 22:54:27.631 00:06:00.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 22:59:58.316 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45022 10 6452 1 2025-09-10 22:55:27.634 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 23:00:58.722 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:59872 10 6452 1 2025-09-10 23:01:18.799 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:01:18.871 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:01:18.967 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:01:18.740 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:01:18.717 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:01:59.139 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35816 10 6452 1 2025-09-10 23:02:59.542 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39090 10 6452 1 2025-09-10 23:03:59.940 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51696 10 6452 1 2025-09-10 23:05:00.353 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56262 10 6452 1 2025-09-10 23:06:19.047 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:06:00.757 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45174 10 6452 1 2025-09-10 23:06:18.679 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:06:18.793 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:06:18.912 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:06:18.964 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:01:27.638 00:06:00.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 23:07:01.155 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:39476 10 6452 1 2025-09-10 23:02:27.636 00:06:00.086 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 23:08:01.644 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55890 10 6452 1 2025-09-10 23:09:02.057 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57454 10 6452 1 2025-09-10 23:10:02.459 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57294 10 6452 1 2025-09-10 23:11:02.861 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40520 10 6452 1 2025-09-10 23:11:19.073 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:11:19.120 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:11:19.241 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:11:18.965 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:11:18.991 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:12:03.278 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57822 10 6452 1 2025-09-10 23:13:03.683 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35020 10 6452 1 2025-09-10 23:08:27.638 00:06:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 23:14:04.113 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59596 10 6452 1 2025-09-10 23:09:27.636 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 23:15:04.514 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34350 10 6452 1 2025-09-10 23:16:19.196 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:16:19.056 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:16:04.876 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35040 10 6452 1 2025-09-10 23:16:19.276 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:16:19.279 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:16:19.359 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:17:05.248 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:51820 10 6452 1 2025-09-10 23:18:05.640 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43012 10 6452 1 2025-09-10 23:19:06.006 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57204 10 6452 1 2025-09-10 23:20:06.381 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60788 10 6452 1 2025-09-10 23:15:27.640 00:06:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 23:21:19.281 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:21:19.151 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:21:19.295 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:21:06.787 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46166 10 6452 1 2025-09-10 23:21:19.278 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:21:19.362 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:16:27.637 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 23:22:07.192 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34806 10 6452 1 2025-09-10 23:23:07.553 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51438 10 6452 1 2025-09-10 23:24:07.962 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41836 10 6452 1 2025-09-10 23:25:08.372 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58946 10 6452 1 2025-09-10 23:26:19.635 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:26:19.534 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:26:19.544 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:26:19.386 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:26:08.778 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47310 12 6556 1 2025-09-10 23:26:19.552 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:27:09.185 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58652 10 6452 1 2025-09-10 23:22:27.642 00:06:00.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 23:28:09.587 00:00:10.951 TCP 1.101.0.1:3000 -> 23.104.0.1:59508 10 6452 1 2025-09-10 23:23:27.640 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 23:29:10.574 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36956 10 6452 1 2025-09-10 23:30:10.975 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56760 10 6452 1 2025-09-10 23:31:19.549 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:31:19.469 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:31:19.466 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:31:19.495 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:31:19.467 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:31:11.339 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58308 10 6452 1 2025-09-10 23:32:11.740 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56698 10 6452 1 2025-09-10 23:33:12.142 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40876 10 6452 1 2025-09-10 23:34:12.551 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40030 10 6452 1 2025-09-10 23:29:27.646 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 23:35:12.914 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60028 10 6452 1 2025-09-10 23:30:27.643 00:06:00.085 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 23:36:19.685 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:36:19.546 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:36:19.696 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:36:19.234 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:36:19.602 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:36:13.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53198 10 6452 1 2025-09-10 23:37:13.681 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51214 10 6452 1 2025-09-10 23:38:14.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60120 10 6452 1 2025-09-10 23:39:14.512 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46704 10 6452 1 2025-09-10 23:40:14.919 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51810 10 6452 1 2025-09-10 23:41:19.732 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:41:19.650 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:41:19.706 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:41:19.699 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:41:19.579 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:41:15.319 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35598 10 6452 1 2025-09-10 23:36:27.647 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 23:42:15.728 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55712 10 6452 1 2025-09-10 23:37:27.644 00:06:00.085 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 23:43:16.137 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:50562 10 6452 1 2025-09-10 23:44:16.498 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:49432 10 6452 1 2025-09-10 23:45:16.945 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41336 10 6452 1 2025-09-10 23:46:20.297 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:46:20.129 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:46:20.131 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:46:20.246 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:46:20.329 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:46:17.374 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49338 10 6452 1 2025-09-10 23:47:17.774 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37102 10 6452 1 2025-09-10 23:48:18.187 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48606 10 6452 1 2025-09-10 23:43:27.649 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 23:44:27.646 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 23:49:18.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49360 10 6452 1 2025-09-10 23:50:18.998 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39142 10 6452 1 2025-09-10 23:51:19.975 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:51:19.705 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:51:19.598 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:51:19.704 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:51:19.787 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:51:19.405 00:00:10.646 TCP 1.101.0.1:3000 -> 23.104.0.1:55158 10 6452 1 2025-09-10 23:52:20.118 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46082 10 6452 1 2025-09-10 23:53:20.519 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33026 10 6452 1 2025-09-10 23:54:20.917 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47694 10 6452 1 2025-09-10 23:50:27.649 00:06:00.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 23:55:21.323 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40048 10 6452 1 2025-09-10 23:56:19.938 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 23:56:19.941 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 23:56:19.882 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:56:19.983 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 23:56:20.066 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 23:51:27.646 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 23:56:21.724 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55526 10 6452 1 2025-09-10 23:57:22.144 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47870 10 6452 1 2025-09-10 23:58:22.552 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:40782 12 10367 1 Summary: total flows: 138, total bytes: 421757, total packets: 1036, avg bps: 877, avg pps: 0, avg bpp: 407 Time window: 2025-09-10 22:54:27 - 2025-09-10 23:58:32 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0032s User: 0.0008s Wall: 0.0017s flows/second: 80457.9 Runtime: 0.0017s