Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 06:58:47.759 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35662 10 6452 1 2025-09-30 06:59:48.168 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43634 10 6452 1 2025-09-30 07:00:37.219 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:00:37.200 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:00:37.065 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:00:37.136 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:00:37.305 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:00:48.529 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36620 10 6452 1 2025-09-30 07:01:48.889 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36776 10 6452 1 2025-09-30 07:02:49.318 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58202 10 6452 1 2025-09-30 07:03:49.756 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56384 10 6452 1 2025-09-30 07:00:36.985 00:05:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-30 07:00:36.984 00:05:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-30 07:04:50.173 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48882 10 6452 1 2025-09-30 07:05:37.449 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:05:37.234 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:05:37.264 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:05:37.367 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:05:37.236 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:05:50.577 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:48268 10 6452 1 2025-09-30 07:06:51.018 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35338 10 6452 1 2025-09-30 07:07:51.419 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59268 10 6452 1 2025-09-30 07:08:51.826 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45500 10 6452 1 2025-09-30 07:09:52.230 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39704 10 6452 1 2025-09-30 07:10:37.422 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:10:37.382 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:10:37.351 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:10:37.139 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:06:36.986 00:05:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-30 07:10:37.435 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:06:36.985 00:05:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-30 07:10:52.634 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53840 10 6452 1 2025-09-30 07:11:53.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54682 10 6452 1 2025-09-30 07:12:53.442 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39742 10 6452 1 2025-09-30 07:13:53.844 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:50192 10 6452 1 2025-09-30 07:14:54.269 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39712 10 6452 1 2025-09-30 07:15:38.012 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:15:37.983 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:15:37.479 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:15:37.927 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:15:37.935 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:15:54.633 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41898 10 6452 1 2025-09-30 07:12:36.988 00:05:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-30 07:12:36.985 00:05:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-30 07:16:55.033 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42910 10 6452 1 2025-09-30 07:17:55.434 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:51150 10 6452 1 2025-09-30 07:18:55.790 00:00:18.070 TCP 1.101.0.1:3000 -> 23.104.0.1:51678 10 6452 1 2025-09-30 07:20:03.896 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41620 10 6452 1 2025-09-30 07:20:37.666 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:20:37.525 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:20:37.653 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:20:37.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:20:37.737 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:21:04.313 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43270 10 6452 1 2025-09-30 07:22:04.679 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56820 10 6452 1 2025-09-30 07:18:36.997 00:05:00.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-30 07:23:05.104 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37278 10 6452 1 2025-09-30 07:18:37.001 00:06:00.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 07:24:05.507 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47710 10 6452 1 2025-09-30 07:25:05.910 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52552 10 6452 1 2025-09-30 07:25:37.793 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:25:37.711 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:25:37.638 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:25:37.712 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:25:37.821 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:26:06.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52270 10 6452 1 2025-09-30 07:27:06.717 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41872 10 6452 1 2025-09-30 07:28:07.112 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:42756 12 10369 1 2025-09-30 07:29:07.555 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50402 10 6452 1 2025-09-30 07:24:37.000 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 07:30:07.957 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:49696 10 6452 1 2025-09-30 07:30:37.980 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:30:37.616 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:30:37.672 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:30:37.691 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:25:37.004 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 07:30:37.754 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:31:08.412 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38018 10 6452 1 2025-09-30 07:32:08.779 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52188 10 6452 1 2025-09-30 07:33:09.177 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59642 10 6452 1 2025-09-30 07:34:09.579 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55640 10 6452 1 2025-09-30 07:35:09.987 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54048 10 6452 1 2025-09-30 07:35:38.527 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:35:38.256 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:35:37.809 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:35:38.445 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:35:38.443 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:36:10.390 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51078 10 6452 1 2025-09-30 07:31:37.002 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 07:37:10.757 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52244 10 6452 1 2025-09-30 07:32:37.004 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 07:38:11.117 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32846 10 6452 1 2025-09-30 07:39:11.534 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53172 10 6452 1 2025-09-30 07:40:11.941 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50200 10 6452 1 2025-09-30 07:40:38.194 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:40:38.206 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:40:38.139 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:40:38.111 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:40:38.108 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:41:12.344 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54290 10 6452 1 2025-09-30 07:42:12.708 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52688 10 6452 1 2025-09-30 07:43:13.119 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48832 10 6452 1 2025-09-30 07:38:37.003 00:06:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 07:44:13.540 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57636 10 6452 1 2025-09-30 07:39:37.006 00:06:00.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 07:45:13.944 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:50104 10 6452 1 2025-09-30 07:45:38.091 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:45:38.158 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:45:37.944 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:45:37.968 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:45:38.029 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:46:14.369 00:00:10.524 TCP 1.101.0.1:3000 -> 23.104.0.1:57674 10 6452 1 2025-09-30 07:47:14.939 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:33882 10 6452 1 2025-09-30 07:48:15.325 00:00:10.465 TCP 1.101.0.1:3000 -> 23.104.0.1:53586 10 6452 1 2025-09-30 07:49:15.833 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:60526 10 6452 1 2025-09-30 07:50:16.267 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54958 10 6452 1 2025-09-30 07:45:37.031 00:06:00.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 07:50:38.128 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:50:38.127 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:50:38.067 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:50:38.046 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:50:38.004 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:51:16.673 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39166 10 6452 1 2025-09-30 07:46:37.035 00:06:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 07:52:17.115 00:00:10.760 TCP 1.101.0.1:3000 -> 23.104.0.1:53712 10 6452 1 2025-09-30 07:53:17.917 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56126 10 6452 1 2025-09-30 07:54:18.323 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40234 10 6452 1 2025-09-30 07:55:18.722 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48662 10 6452 1 2025-09-30 07:55:38.304 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 07:55:38.171 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:55:38.228 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 07:55:38.309 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 07:55:38.312 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 07:56:19.131 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42302 10 6452 1 2025-09-30 07:57:19.546 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46042 10 6452 1 2025-09-30 07:52:37.035 00:06:00.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 07:58:19.908 00:00:10.970 TCP 1.101.0.1:3000 -> 23.104.0.1:38658 10 6452 1 2025-09-30 07:53:37.039 00:06:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 138, total bytes: 420794, total packets: 1020, avg bps: 922, avg pps: 0, avg bpp: 412 Time window: 2025-09-30 06:58:47 - 2025-09-30 07:59:37 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0022s User: 0.0011s Wall: 0.0012s flows/second: 114889.6 Runtime: 0.0012s