Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 20:59:24.229 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55370 10 6452 1 2025-09-30 21:00:24.632 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40636 10 6452 1 2025-09-30 21:00:53.964 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:00:53.822 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:00:53.815 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:00:53.877 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:00:53.897 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:01:25.035 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43384 10 6452 1 2025-09-30 20:56:37.264 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 21:02:25.431 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46502 10 6452 1 2025-09-30 20:57:37.267 00:06:00.194 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 21:03:25.836 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:49534 10 6452 1 2025-09-30 21:04:26.224 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:46504 10 6452 1 2025-09-30 21:05:26.623 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40110 10 6452 1 2025-09-30 21:05:54.273 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:05:54.192 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:05:53.855 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:05:54.192 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:05:54.195 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:06:27.037 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49034 10 6452 1 2025-09-30 21:07:27.451 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48364 10 6452 1 2025-09-30 21:08:27.864 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36210 10 6452 1 2025-09-30 21:03:37.266 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 21:09:28.281 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60708 10 6452 1 2025-09-30 21:04:37.269 00:06:00.195 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 21:10:28.643 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40966 10 6452 1 2025-09-30 21:10:54.193 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:10:53.991 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:10:54.015 00:00:00.036 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:10:54.112 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:10:53.984 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:11:29.065 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:39880 10 6452 1 2025-09-30 21:12:29.434 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60804 10 6452 1 2025-09-30 21:13:29.835 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46162 10 6452 1 2025-09-30 21:14:30.205 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57814 10 6452 1 2025-09-30 21:10:37.268 00:06:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 21:15:30.603 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33180 10 6452 1 2025-09-30 21:15:54.226 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:15:54.143 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:15:54.205 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:15:54.143 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:15:54.227 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:11:37.269 00:06:00.199 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 21:16:31.009 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58730 10 6452 1 2025-09-30 21:17:31.413 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60230 10 6452 1 2025-09-30 21:18:31.816 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33394 10 6452 1 2025-09-30 21:19:32.223 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45234 10 6452 1 2025-09-30 21:20:32.623 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57762 10 6452 1 2025-09-30 21:20:54.435 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:20:54.352 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:20:54.166 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:20:54.351 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:20:54.456 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:21:33.031 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54478 10 6452 1 2025-09-30 21:17:37.268 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 21:22:33.431 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45264 10 6452 1 2025-09-30 21:18:37.271 00:06:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 21:23:33.797 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48210 10 6452 1 2025-09-30 21:24:34.199 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45834 10 6452 1 2025-09-30 21:25:34.605 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48474 10 6452 1 2025-09-30 21:25:54.505 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:25:54.434 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:25:54.470 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:25:54.422 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:25:54.341 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:26:35.011 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52056 10 6452 1 2025-09-30 21:27:35.408 00:00:11.033 TCP 1.101.0.1:3000 -> 23.104.0.1:49848 10 6452 1 2025-09-30 21:28:36.477 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39010 10 6452 1 2025-09-30 21:24:37.270 00:06:00.205 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 21:29:36.882 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:59712 10 6452 1 2025-09-30 21:25:37.275 00:06:00.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 21:30:54.467 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:30:37.254 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59924 10 6452 1 2025-09-30 21:30:54.518 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:30:54.532 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:30:54.385 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:30:54.399 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:31:37.614 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40296 10 6452 1 2025-09-30 21:32:38.013 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57454 10 6452 1 2025-09-30 21:33:38.417 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41982 10 6452 1 2025-09-30 21:34:38.839 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:59802 10 6452 1 2025-09-30 21:35:39.265 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50296 10 6452 1 2025-09-30 21:35:54.462 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:35:54.658 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:35:54.730 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:35:54.569 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:35:54.812 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:31:37.274 00:06:00.203 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 21:36:39.673 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 10 6452 1 2025-09-30 21:32:37.278 00:06:00.198 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 21:37:40.096 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35736 10 6452 1 2025-09-30 21:38:40.506 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:37430 12 6556 1 2025-09-30 21:39:40.929 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52452 10 6452 1 2025-09-30 21:40:54.716 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:40:54.761 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:40:54.834 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:40:54.827 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:40:41.343 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51898 10 6452 1 2025-09-30 21:40:54.916 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:41:41.751 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32858 10 6452 1 2025-09-30 21:42:42.150 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39528 12 6556 1 2025-09-30 21:38:37.278 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 21:43:42.551 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53010 10 6452 1 2025-09-30 21:39:37.282 00:06:00.196 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 21:44:42.951 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50984 10 6452 1 2025-09-30 21:45:55.283 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:45:55.119 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:45:54.877 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:45:43.354 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53468 10 6452 1 2025-09-30 21:45:55.201 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:45:55.043 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:46:43.751 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55696 10 6452 1 2025-09-30 21:47:44.153 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51044 10 6452 1 2025-09-30 21:48:44.568 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58886 10 6452 1 2025-09-30 21:49:44.986 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59764 10 6452 1 2025-09-30 21:45:37.280 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 21:50:54.913 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:50:45.390 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46828 10 6452 1 2025-09-30 21:50:54.942 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:50:54.823 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:50:54.829 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:50:54.811 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:46:37.283 00:06:00.195 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 21:51:45.791 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37608 10 6452 1 2025-09-30 21:52:46.154 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52288 10 6452 1 2025-09-30 21:53:46.557 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33696 10 6452 1 2025-09-30 21:54:46.914 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41710 10 6452 1 2025-09-30 21:55:54.903 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 21:55:54.640 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:55:55.045 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 21:55:55.149 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 21:55:55.128 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 21:55:47.321 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40598 10 6452 1 2025-09-30 21:56:47.725 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52662 10 6452 1 2025-09-30 21:52:37.283 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 21:57:48.129 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:37916 12 10375 1 2025-09-30 21:53:37.285 00:06:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 137, total bytes: 415417, total packets: 1028, avg bps: 879, avg pps: 0, avg bpp: 404 Time window: 2025-09-30 20:56:37 - 2025-09-30 21:59:37 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0021s User: 0.0031s Wall: 0.0021s flows/second: 64987.5 Runtime: 0.0021s