Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 22:59:28.006 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40926 10 6452 1 2025-09-23 23:00:28.407 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34916 10 6452 1 2025-09-23 22:56:34.039 00:06:00.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-23 23:01:28.812 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:47774 10 6452 1 2025-09-23 23:02:34.332 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:02:34.183 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:02:34.292 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:02:34.033 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:02:34.250 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:02:29.206 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38238 10 6452 1 2025-09-23 22:58:34.042 00:06:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 23:03:29.620 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:57256 10 6452 1 2025-09-23 23:04:29.987 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60968 10 6452 1 2025-09-23 23:05:30.398 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32952 10 6452 1 2025-09-23 23:06:30.802 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60726 10 6452 1 2025-09-23 23:07:34.265 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:07:34.445 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:07:34.230 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:07:34.332 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:07:34.415 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:07:31.212 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41402 10 6452 1 2025-09-23 23:03:34.040 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-09-23 23:08:31.574 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39698 10 6452 1 2025-09-23 23:09:31.935 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:37520 10 6452 1 2025-09-23 23:05:34.045 00:05:59.999 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-09-23 23:10:32.313 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38860 10 6452 1 2025-09-23 23:11:32.712 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45992 10 6452 1 2025-09-23 23:12:34.555 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:12:34.399 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:12:34.527 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:12:34.523 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:12:34.473 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:12:33.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53794 10 6452 1 2025-09-23 23:13:33.517 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40584 10 6452 1 2025-09-23 23:09:34.177 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 790 1 2025-09-23 23:14:33.922 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32966 10 6452 1 2025-09-23 23:15:34.322 00:00:10.587 TCP 1.101.0.1:3000 -> 23.104.0.1:32864 10 6452 1 2025-09-23 23:11:34.175 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-09-23 23:16:34.946 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53452 10 6452 1 2025-09-23 23:17:34.719 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:17:34.644 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:17:34.473 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:17:34.717 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:17:34.800 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:17:35.357 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57240 10 6452 1 2025-09-23 23:18:35.756 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33646 10 6452 1 2025-09-23 23:19:36.187 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60352 10 6452 1 2025-09-23 23:16:34.041 00:04:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-23 23:20:36.597 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:35868 10 6452 1 2025-09-23 23:21:36.991 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:45022 10 6452 1 2025-09-23 23:22:34.750 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:22:34.670 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:18:34.045 00:04:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-23 23:22:34.767 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:22:34.536 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:22:34.668 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:22:37.421 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-09-23 23:23:37.783 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42810 10 6452 1 2025-09-23 23:24:38.193 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40140 10 6452 1 2025-09-23 23:25:38.593 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54514 10 6452 1 2025-09-23 23:21:34.043 00:06:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-23 23:26:38.996 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40216 10 6452 1 2025-09-23 23:27:34.680 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:27:34.812 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:27:34.727 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:27:34.814 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:27:34.896 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:27:39.400 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43402 10 6452 1 2025-09-23 23:23:34.047 00:06:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 23:28:39.801 00:00:10.989 TCP 1.101.0.1:3000 -> 23.104.0.1:39826 10 6452 1 2025-09-23 23:29:40.828 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:36306 10 6452 1 2025-09-23 23:30:41.234 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60316 10 6452 1 2025-09-23 23:31:41.647 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52030 10 6452 1 2025-09-23 23:32:34.765 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:32:34.825 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:32:34.726 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:32:34.756 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:32:34.839 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:32:42.053 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52374 10 6452 1 2025-09-23 23:28:34.045 00:06:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-23 23:33:42.462 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59072 10 6452 1 2025-09-23 23:34:42.863 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49074 10 6452 1 2025-09-23 23:30:34.048 00:06:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-23 23:35:43.279 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36374 10 6452 1 2025-09-23 23:36:43.681 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:58166 12 10365 1 2025-09-23 23:37:34.951 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:37:34.819 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:37:34.859 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:37:35.076 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:37:34.993 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:37:44.136 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36544 10 6452 1 2025-09-23 23:38:44.538 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53896 10 6452 1 2025-09-23 23:39:44.956 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47492 12 6556 1 2025-09-23 23:35:34.047 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-09-23 23:40:45.366 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40698 10 6452 1 2025-09-23 23:41:45.764 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44702 10 6452 1 2025-09-23 23:37:34.049 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-09-23 23:42:34.923 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:42:34.873 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:42:35.158 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:42:35.110 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:42:35.193 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:42:46.187 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51264 10 6452 1 2025-09-23 23:43:46.556 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59792 10 6452 1 2025-09-23 23:44:46.948 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:35614 10 6452 1 2025-09-23 23:45:47.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46450 10 6452 1 2025-09-23 23:41:34.188 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 790 1 2025-09-23 23:46:47.723 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:47930 10 6452 1 2025-09-23 23:47:35.111 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:47:35.147 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:47:35.037 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:47:35.074 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:47:35.029 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:47:48.117 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:52374 10 6452 1 2025-09-23 23:43:34.186 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-09-23 23:48:48.560 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48352 10 6452 1 2025-09-23 23:49:48.966 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47184 10 6452 1 2025-09-23 23:50:49.366 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54746 10 6452 1 2025-09-23 23:51:49.775 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58424 10 6452 1 2025-09-23 23:48:34.049 00:04:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-23 23:52:35.548 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:52:35.401 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:52:35.303 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:52:35.121 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:52:35.466 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:52:50.185 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39840 10 6452 1 2025-09-23 23:53:50.583 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33332 10 6452 1 2025-09-23 23:50:34.053 00:04:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-23 23:54:50.993 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33356 10 6452 1 2025-09-23 23:55:51.427 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53374 10 6452 1 2025-09-23 23:56:51.837 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:55654 10 6452 1 2025-09-23 23:57:35.279 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 23:57:35.404 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 23:57:35.366 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:57:35.192 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 23:57:35.274 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 23:57:52.273 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51160 10 6452 1 2025-09-23 23:53:34.050 00:06:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 138, total bytes: 414688, total packets: 1016, avg bps: 877, avg pps: 0, avg bpp: 408 Time window: 2025-09-23 22:56:34 - 2025-09-23 23:59:34 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0030s User: 0.0020s Wall: 0.0025s flows/second: 55913.2 Runtime: 0.0025s