Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 22:58:45.483 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40014 10 6452 1 2025-09-28 22:59:45.888 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48676 12 6556 1 2025-09-28 22:59:58.473 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 22:59:58.500 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 22:59:58.591 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 22:59:58.591 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 22:59:58.674 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 22:55:36.369 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 23:00:46.303 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45142 10 6452 1 2025-09-28 23:01:46.710 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44298 10 6452 1 2025-09-28 22:57:36.366 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 23:02:47.121 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:33478 10 6452 1 2025-09-28 23:03:47.482 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42050 10 6452 1 2025-09-28 23:04:58.903 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 23:04:58.863 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 23:04:58.771 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:04:58.820 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:04:58.860 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 23:04:47.895 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:48190 10 6452 1 2025-09-28 23:05:48.319 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52076 10 6452 1 2025-09-28 23:06:48.739 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57888 10 6452 1 2025-09-28 23:02:36.370 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 23:07:49.145 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49476 10 6452 1 2025-09-28 23:08:49.550 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58966 10 6452 1 2025-09-28 23:04:36.368 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 23:09:49.913 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48906 10 6452 1 2025-09-28 23:09:58.697 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 23:09:58.539 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:09:58.931 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:09:58.843 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 23:09:59.015 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 23:10:50.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37204 10 6452 1 2025-09-28 23:11:50.686 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38292 10 6452 1 2025-09-28 23:12:51.106 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39320 10 6452 1 2025-09-28 23:13:51.511 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51480 10 6452 1 2025-09-28 23:09:36.371 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 23:14:59.010 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 23:14:58.691 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 23:14:58.726 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:14:58.926 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:14:58.681 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 23:14:51.910 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39066 10 6452 1 2025-09-28 23:15:52.312 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51064 10 6452 1 2025-09-28 23:11:36.371 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 23:16:52.713 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41810 10 6452 1 2025-09-28 23:17:53.115 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41290 10 6452 1 2025-09-28 23:18:53.482 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52120 10 6452 1 2025-09-28 23:19:58.994 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 23:19:58.982 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 23:19:58.840 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:19:58.911 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:19:59.069 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 23:19:53.879 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37604 10 6452 1 2025-09-28 23:20:54.282 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:37822 10 6452 1 2025-09-28 23:16:36.377 00:06:00.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 23:21:54.659 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51556 10 6452 1 2025-09-28 23:22:55.025 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44506 10 6452 1 2025-09-28 23:18:36.376 00:06:00.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 23:23:55.426 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52128 10 6452 1 2025-09-28 23:24:59.027 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 23:24:58.681 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:24:59.056 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:24:59.194 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 23:24:59.138 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 23:24:55.830 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50640 10 6452 1 2025-09-28 23:25:56.236 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51166 10 6452 1 2025-09-28 23:26:56.640 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58454 10 6452 1 2025-09-28 23:27:57.067 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57326 10 6452 1 2025-09-28 23:23:36.379 00:06:00.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 23:28:57.435 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42592 10 6452 1 2025-09-28 23:29:59.279 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 23:29:59.204 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 23:29:59.216 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:29:59.197 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:29:58.968 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 23:29:57.843 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:38168 10 6452 1 2025-09-28 23:25:36.378 00:06:00.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 23:30:58.229 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58980 10 6452 1 2025-09-28 23:31:58.630 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53552 10 6452 1 2025-09-28 23:32:59.035 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54606 10 6452 1 2025-09-28 23:33:59.459 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46462 10 6452 1 2025-09-28 23:34:59.202 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 23:34:59.006 00:00:00.049 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:34:59.425 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:34:59.339 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 23:34:59.508 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 23:34:59.875 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48618 10 6452 1 2025-09-28 23:30:36.383 00:06:00.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 23:36:00.280 00:00:10.705 TCP 1.101.0.1:3000 -> 23.104.0.1:47902 10 6452 1 2025-09-28 23:37:01.023 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41826 10 6452 1 2025-09-28 23:32:36.381 00:06:00.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 23:38:01.425 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38222 10 6452 1 2025-09-28 23:39:01.830 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56010 10 6452 1 2025-09-28 23:39:59.594 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 23:39:59.350 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 23:39:59.376 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:39:59.511 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:39:59.507 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 23:40:02.233 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 10 6452 1 2025-09-28 23:41:02.595 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:57528 10 6452 1 2025-09-28 23:42:03.009 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33968 10 6452 1 2025-09-28 23:37:36.386 00:06:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 23:43:03.408 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32778 10 6452 1 2025-09-28 23:44:03.811 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:41582 10 6452 1 2025-09-28 23:39:36.382 00:06:00.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 23:44:59.324 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 23:44:59.449 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:44:59.414 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:44:59.481 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 23:44:59.498 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 23:45:04.184 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51752 11 6492 1 2025-09-28 23:46:04.589 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34726 10 6452 1 2025-09-28 23:47:04.995 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33946 10 6452 1 2025-09-28 23:48:05.405 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52506 10 6452 1 2025-09-28 23:49:05.811 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42508 10 6452 1 2025-09-28 23:44:36.385 00:06:00.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 23:49:59.649 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 23:49:59.337 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:49:59.714 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:49:59.566 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 23:49:59.796 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 23:50:06.213 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42818 10 6452 1 2025-09-28 23:51:06.615 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55414 10 6452 1 2025-09-28 23:46:36.383 00:06:00.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-28 23:52:07.026 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59686 10 6452 1 2025-09-28 23:53:07.431 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46938 10 6452 1 2025-09-28 23:54:07.834 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:35140 10 6452 1 2025-09-28 23:54:59.932 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-28 23:54:59.801 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-28 23:54:59.473 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:54:59.850 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-28 23:54:59.807 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-28 23:55:08.256 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35510 10 6452 1 2025-09-28 23:56:08.660 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43516 10 6452 1 2025-09-28 23:51:36.388 00:06:00.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-28 23:57:09.095 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33978 10 6452 1 2025-09-28 23:58:09.498 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45654 10 6452 1 2025-09-28 23:53:36.387 00:06:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 138, total bytes: 417882, total packets: 1035, avg bps: 870, avg pps: 0, avg bpp: 403 Time window: 2025-09-28 22:55:36 - 2025-09-28 23:59:36 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0041s User: 0.0017s Wall: 0.0023s flows/second: 60742.4 Runtime: 0.0023s