Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 03:58:40.730 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57844 10 6452 1 2025-09-16 03:54:30.272 00:06:00.040 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 03:59:41.136 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40058 10 6452 1 2025-09-16 04:00:41.496 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52554 10 6452 1 2025-09-16 04:01:41.895 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52374 12 6556 1 2025-09-16 03:57:30.309 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-16 04:02:42.312 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59170 10 6452 1 2025-09-16 04:03:49.418 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 04:03:49.312 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 04:03:49.238 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:03:49.429 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:03:49.512 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 04:03:42.717 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36618 10 6452 1 2025-09-16 04:04:43.133 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49172 10 6452 1 2025-09-16 04:05:43.549 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58130 10 6452 1 2025-09-16 04:01:30.274 00:06:00.039 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 04:06:43.951 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60542 10 6452 1 2025-09-16 04:07:44.366 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50036 10 6452 1 2025-09-16 04:08:49.611 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 04:08:49.528 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 04:08:49.277 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:08:49.308 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:08:49.391 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 04:08:44.769 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47444 12 6556 1 2025-09-16 04:04:30.310 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-16 04:09:45.184 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:58654 12 10367 1 2025-09-16 04:10:45.661 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47992 10 6452 1 2025-09-16 04:11:46.101 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51332 10 6452 1 2025-09-16 04:12:46.515 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58608 10 6452 1 2025-09-16 04:08:30.274 00:06:00.040 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 04:13:49.424 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 04:13:49.341 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 04:13:49.782 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 04:13:49.534 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:13:49.341 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:13:46.918 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55944 10 6452 1 2025-09-16 04:14:47.279 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43736 10 6452 1 2025-09-16 04:15:47.642 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43820 10 6452 1 2025-09-16 04:11:30.311 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-16 04:16:48.049 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:51340 10 6452 1 2025-09-16 04:17:48.433 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53486 10 6452 1 2025-09-16 04:18:49.477 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 04:18:49.637 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 04:18:49.614 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:18:49.569 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:18:49.651 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 04:18:48.801 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56468 10 6452 1 2025-09-16 04:19:49.203 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39306 10 6452 1 2025-09-16 04:15:30.275 00:06:00.052 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 04:20:49.601 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38166 10 6452 1 2025-09-16 04:21:49.967 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56870 10 6452 1 2025-09-16 04:22:50.331 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54236 10 6452 1 2025-09-16 04:18:30.319 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-09-16 04:23:49.655 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 04:23:49.787 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 04:23:49.715 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:23:49.732 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:23:49.815 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 04:23:50.730 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33168 10 6452 1 2025-09-16 04:24:51.148 00:00:10.800 TCP 1.101.0.1:3000 -> 23.104.0.1:38584 10 6452 1 2025-09-16 04:25:51.988 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49108 10 6452 1 2025-09-16 04:26:52.397 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42058 10 6452 1 2025-09-16 04:22:30.278 00:06:00.050 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 04:27:52.807 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37666 10 6452 1 2025-09-16 04:28:49.753 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 04:28:49.667 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 04:28:49.684 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:28:49.744 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:28:49.827 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 04:28:53.213 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39628 10 6452 1 2025-09-16 04:29:53.613 00:00:11.044 TCP 1.101.0.1:3000 -> 23.104.0.1:41420 10 6452 1 2025-09-16 04:25:30.280 00:06:00.046 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-16 04:30:54.696 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47126 10 6452 1 2025-09-16 04:31:55.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46834 10 6452 1 2025-09-16 04:32:55.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57732 10 6452 1 2025-09-16 04:33:50.337 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 04:33:50.094 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 04:33:50.403 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 04:33:50.315 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:33:50.256 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:33:55.919 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43708 10 6452 1 2025-09-16 04:29:30.279 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 04:34:56.319 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:50094 12 10367 1 2025-09-16 04:35:56.800 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46752 10 6452 1 2025-09-16 04:36:57.203 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45512 10 6452 1 2025-09-16 04:32:30.281 00:06:00.049 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-16 04:37:57.603 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42858 10 6452 1 2025-09-16 04:38:50.192 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 04:38:50.112 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 04:38:50.155 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 04:38:50.001 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:38:50.111 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:38:57.973 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:40244 10 6452 1 2025-09-16 04:39:58.348 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56244 10 6452 1 2025-09-16 04:40:58.749 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54728 10 6452 1 2025-09-16 04:36:30.279 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 04:41:59.167 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40566 10 6452 1 2025-09-16 04:42:59.575 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42934 10 6452 1 2025-09-16 04:43:50.154 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 04:43:50.038 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 04:43:50.049 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:43:50.067 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:43:50.149 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 04:43:59.983 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48932 10 6452 1 2025-09-16 04:39:30.282 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-16 04:45:00.397 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57198 10 6452 1 2025-09-16 04:46:00.800 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44378 10 6452 1 2025-09-16 04:47:01.203 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57058 10 6452 1 2025-09-16 04:48:01.608 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55970 10 6452 1 2025-09-16 04:43:30.280 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 04:48:49.847 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:48:50.303 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 04:48:50.124 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 04:48:50.119 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:48:50.201 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 04:49:02.012 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52892 10 6452 1 2025-09-16 04:50:02.423 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40464 10 6452 1 2025-09-16 04:51:02.838 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:50312 10 6452 1 2025-09-16 04:46:30.284 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-16 04:52:03.208 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58794 10 6452 1 2025-09-16 04:53:03.605 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59680 10 6452 1 2025-09-16 04:53:50.606 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:53:50.560 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 04:53:50.605 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 04:53:50.538 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 04:53:50.689 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 04:54:04.009 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39128 10 6452 1 2025-09-16 04:55:04.418 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47174 10 6452 1 2025-09-16 04:50:30.282 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 04:56:04.826 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53932 10 6452 1 2025-09-16 04:57:05.230 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36092 10 6452 1 2025-09-16 04:58:05.638 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44568 10 6452 1 2025-09-16 04:53:30.286 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 133, total bytes: 423372, total packets: 1003, avg bps: 868, avg pps: 0, avg bpp: 422 Time window: 2025-09-16 03:54:30 - 2025-09-16 04:59:30 Total flows processed: 133, passed: 133, Blocks skipped: 0, Bytes read: 13896 Sys: 0.0020s User: 0.0020s Wall: 0.0016s flows/second: 85584.9 Runtime: 0.0016s