Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-22 14:59:00.922 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60806 10 6452 1 2025-09-22 15:00:01.339 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34574 10 6452 1 2025-09-22 14:55:33.411 00:06:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:01:01.745 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60654 10 6452 1 2025-09-22 15:01:55.924 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:01:55.934 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:01:55.842 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:01:55.713 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:01:55.841 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:02:02.150 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49068 10 6452 1 2025-09-22 15:03:02.510 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41878 10 6452 1 2025-09-22 15:04:02.919 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44102 10 6452 1 2025-09-22 14:59:33.407 00:06:00.103 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:05:03.323 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44560 10 6452 1 2025-09-22 15:06:03.727 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35762 10 6452 1 2025-09-22 15:06:55.941 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:06:55.821 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:06:55.738 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:06:55.859 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:06:55.821 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:07:04.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47118 10 6452 1 2025-09-22 15:02:33.412 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:08:04.542 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39320 10 6452 1 2025-09-22 15:09:04.951 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58684 10 6452 1 2025-09-22 15:10:05.367 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34540 10 6452 1 2025-09-22 15:11:05.768 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39474 10 6452 1 2025-09-22 15:06:33.410 00:06:00.103 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:11:56.038 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:11:55.638 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:11:55.657 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:11:55.842 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:11:55.957 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:12:06.137 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:34468 10 6452 1 2025-09-22 15:13:06.509 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57422 10 6452 1 2025-09-22 15:14:06.910 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41638 10 6452 1 2025-09-22 15:09:33.412 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:15:07.324 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46942 10 6452 1 2025-09-22 15:16:07.730 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44742 10 6452 1 2025-09-22 15:16:56.048 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:16:55.888 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:16:56.064 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:16:55.872 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:16:56.130 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:17:08.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50412 10 6452 1 2025-09-22 15:18:08.546 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47934 10 6452 1 2025-09-22 15:13:33.412 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:19:08.954 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57654 10 6452 1 2025-09-22 15:20:09.365 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35536 10 6452 1 2025-09-22 15:21:09.768 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:47516 12 10367 1 2025-09-22 15:16:33.414 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:21:56.189 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:21:55.803 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:21:56.107 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:21:56.143 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:21:55.790 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:22:10.248 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49906 10 6452 1 2025-09-22 15:23:10.647 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36774 10 6452 1 2025-09-22 15:24:11.060 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37992 10 6452 1 2025-09-22 15:25:11.472 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 10 6452 1 2025-09-22 15:20:33.413 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:26:11.830 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:56958 12 10365 1 2025-09-22 15:26:56.519 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:26:56.437 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:26:56.171 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:26:56.114 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:26:56.437 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:27:12.291 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40034 10 6452 1 2025-09-22 15:28:12.692 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60816 10 6452 1 2025-09-22 15:23:33.417 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:29:13.063 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37994 10 6452 1 2025-09-22 15:30:13.421 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44304 10 6452 1 2025-09-22 15:31:13.825 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:58626 11 6504 1 2025-09-22 15:31:56.241 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:31:56.337 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:31:56.087 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:31:56.334 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:31:56.417 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:32:14.284 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43026 10 6452 1 2025-09-22 15:27:33.414 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:33:14.686 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42574 10 6452 1 2025-09-22 15:34:15.070 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46658 10 6452 1 2025-09-22 15:35:15.473 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55622 10 6452 1 2025-09-22 15:30:33.421 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:36:15.882 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42958 10 6452 1 2025-09-22 15:36:56.525 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:36:56.397 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:36:56.397 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:36:56.358 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:36:56.444 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:37:16.285 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54620 10 6452 1 2025-09-22 15:38:16.684 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33678 10 6452 1 2025-09-22 15:39:17.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55382 10 6452 1 2025-09-22 15:34:33.415 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:40:17.512 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45902 10 6452 1 2025-09-22 15:41:17.875 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50500 10 6452 1 2025-09-22 15:41:56.451 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:41:56.483 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:41:56.496 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:41:56.368 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:41:56.475 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:42:18.284 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38292 10 6452 1 2025-09-22 15:37:33.419 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:43:18.647 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59654 10 6452 1 2025-09-22 15:44:19.061 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57770 10 6452 1 2025-09-22 15:45:19.466 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42670 10 6452 1 2025-09-22 15:41:33.417 00:06:00.104 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:46:19.869 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47880 10 6452 1 2025-09-22 15:46:56.769 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:46:56.680 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:46:56.580 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:46:56.637 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:46:56.687 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:47:20.279 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39770 10 6452 1 2025-09-22 15:48:20.690 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57546 10 6452 1 2025-09-22 15:44:33.422 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:49:21.107 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52220 10 6452 1 2025-09-22 15:50:21.473 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37012 10 6452 1 2025-09-22 15:51:21.874 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42140 10 6452 1 2025-09-22 15:51:56.752 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:51:56.756 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:51:56.478 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:51:56.804 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:51:56.889 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:52:22.277 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54114 10 6452 1 2025-09-22 15:48:33.420 00:06:00.104 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:53:22.640 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36958 10 6452 1 2025-09-22 15:54:23.072 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37606 10 6452 1 2025-09-22 15:55:23.483 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36970 10 6452 1 2025-09-22 15:51:33.422 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:56:23.889 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:51238 10 6452 1 2025-09-22 15:56:57.038 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:56:57.097 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:56:57.157 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:56:56.985 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:56:56.955 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:57:24.268 00:00:10.572 TCP 1.101.0.1:3000 -> 23.104.0.1:51872 10 6452 1 2025-09-22 15:58:24.881 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49332 10 6452 1 Summary: total flows: 137, total bytes: 424757, total packets: 1023, avg bps: 898, avg pps: 0, avg bpp: 415 Time window: 2025-09-22 14:55:33 - 2025-09-22 15:58:35 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0028s User: 0.0018s Wall: 0.0019s flows/second: 73972.7 Runtime: 0.0019s