Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 09:59:00.625 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37440 10 6452 1 2025-09-23 10:00:01.024 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60302 10 6452 1 2025-09-23 10:01:01.428 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46554 10 6452 1 2025-09-23 09:56:33.760 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 10:02:01.793 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:50762 10 6452 1 2025-09-23 10:02:18.661 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:02:18.579 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:02:18.503 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:02:18.586 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:02:18.681 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:03:02.180 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6452 1 2025-09-23 10:04:02.546 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53430 12 6556 1 2025-09-23 10:05:02.960 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59886 10 6452 1 2025-09-23 10:00:33.759 00:06:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-23 10:06:03.369 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43556 10 6452 1 2025-09-23 10:07:03.775 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37174 10 6452 1 2025-09-23 10:07:18.462 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:07:18.525 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:07:18.525 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:07:18.621 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:07:18.379 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:08:04.185 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-09-23 10:03:33.763 00:06:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 10:09:04.543 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58696 10 6452 1 2025-09-23 10:10:04.947 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36714 10 6452 1 2025-09-23 10:11:05.360 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56806 10 6452 1 2025-09-23 10:12:18.994 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:12:18.824 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:12:18.832 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:12:18.493 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:12:05.727 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59606 10 6452 1 2025-09-23 10:12:18.912 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:07:33.763 00:06:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-23 10:13:06.135 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54128 10 6452 1 2025-09-23 10:14:06.506 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:43746 10 6452 1 2025-09-23 10:15:06.900 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40154 10 6452 1 2025-09-23 10:10:33.766 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 10:16:07.314 00:00:10.784 TCP 1.101.0.1:3000 -> 23.104.0.1:41060 10 6452 1 2025-09-23 10:17:18.900 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:17:18.750 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:17:18.880 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:17:18.680 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:17:18.817 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:17:08.144 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51124 10 6452 1 2025-09-23 10:18:08.554 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50856 10 6452 1 2025-09-23 10:19:08.962 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46042 10 6452 1 2025-09-23 10:14:33.771 00:06:00.130 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-23 10:20:09.366 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52950 10 6452 1 2025-09-23 10:21:09.737 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:43460 12 10365 1 2025-09-23 10:22:19.134 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:22:19.067 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:22:19.052 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:22:18.884 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:22:19.052 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:22:10.221 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43190 10 6452 1 2025-09-23 10:17:33.774 00:06:00.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 10:23:10.623 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53018 10 6452 1 2025-09-23 10:24:10.985 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53060 10 6452 1 2025-09-23 10:25:11.389 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53010 10 6452 1 2025-09-23 10:26:11.750 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:51192 12 10367 1 2025-09-23 10:21:33.772 00:06:00.131 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-23 10:27:19.197 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:27:19.049 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:27:18.959 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:27:18.637 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:27:19.115 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:27:12.236 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39156 10 6452 1 2025-09-23 10:28:12.641 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41126 10 6452 1 2025-09-23 10:29:13.054 00:00:10.516 TCP 1.101.0.1:3000 -> 23.104.0.1:37436 10 6452 1 2025-09-23 10:24:33.776 00:06:00.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 10:30:13.608 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54934 10 6452 1 2025-09-23 10:31:14.010 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48958 10 6452 1 2025-09-23 10:32:19.181 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:32:19.184 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:32:19.147 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:32:19.192 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:32:19.275 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:32:14.411 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47416 10 6452 1 2025-09-23 10:33:14.821 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39870 10 6452 1 2025-09-23 10:28:33.774 00:06:00.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-23 10:34:15.223 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33404 10 6452 1 2025-09-23 10:35:15.624 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38842 10 6452 1 2025-09-23 10:36:16.025 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49842 10 6452 1 2025-09-23 10:31:33.777 00:06:00.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 10:37:19.032 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:37:19.394 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:37:19.209 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:37:19.166 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:37:19.250 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:37:16.430 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6452 1 2025-09-23 10:38:16.790 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39330 10 6452 1 2025-09-23 10:39:17.198 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42584 10 6452 1 2025-09-23 10:40:17.593 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:35550 10 6452 1 2025-09-23 10:35:33.776 00:06:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-23 10:41:18.031 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55178 10 6452 1 2025-09-23 10:42:19.625 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:42:19.540 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:42:19.276 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:42:19.300 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:42:19.543 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:42:18.438 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:43286 10 6452 1 2025-09-23 10:43:18.815 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50218 10 6452 1 2025-09-23 10:38:33.778 00:06:00.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 10:44:19.223 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37918 10 6452 1 2025-09-23 10:45:19.632 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:55976 10 6452 1 2025-09-23 10:46:20.013 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60870 10 6452 1 2025-09-23 10:47:19.488 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:47:19.406 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:47:19.467 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:47:19.519 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:47:19.271 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:47:20.419 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46382 10 6452 1 2025-09-23 10:42:33.777 00:06:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-23 10:48:20.836 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48548 10 6452 1 2025-09-23 10:49:21.249 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33838 10 6452 1 2025-09-23 10:45:33.783 00:06:00.128 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 10:50:21.657 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38886 10 6452 1 2025-09-23 10:51:22.063 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39920 10 6452 1 2025-09-23 10:52:19.550 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:52:19.349 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:52:19.553 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:52:19.302 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:52:19.467 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:52:22.473 00:00:10.996 TCP 1.101.0.1:3000 -> 23.104.0.1:55386 10 6452 1 2025-09-23 10:53:23.508 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45828 10 6452 1 2025-09-23 10:49:33.780 00:06:00.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-23 10:54:23.910 00:00:10.625 TCP 1.101.0.1:3000 -> 23.104.0.1:47340 10 6452 1 2025-09-23 10:55:24.573 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36046 10 6452 1 2025-09-23 10:56:24.974 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59396 10 6452 1 2025-09-23 10:57:19.733 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 10:57:19.770 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 10:57:19.650 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 10:57:19.611 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:57:19.650 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 10:52:33.785 00:06:00.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 10:57:25.381 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35602 10 6452 1 2025-09-23 10:58:25.789 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6452 1 Summary: total flows: 137, total bytes: 424809, total packets: 1024, avg bps: 912, avg pps: 0, avg bpp: 414 Time window: 2025-09-23 09:56:33 - 2025-09-23 10:58:36 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0048s User: 0.0000s Wall: 0.0020s flows/second: 68529.5 Runtime: 0.0020s