Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 22:59:22.539 00:00:10.509 TCP 1.101.0.1:3000 -> 23.104.0.1:50604 10 6452 1 2025-09-30 23:00:23.109 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40230 10 6452 1 2025-09-30 22:55:37.311 00:06:00.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 23:00:56.444 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:00:56.296 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:00:56.089 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:00:56.362 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:00:56.343 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:01:23.514 00:00:10.474 TCP 1.101.0.1:3000 -> 23.104.0.1:43272 10 6452 1 2025-09-30 22:56:37.314 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 23:02:24.030 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48926 10 6452 1 2025-09-30 23:03:24.432 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36062 10 6452 1 2025-09-30 23:04:24.837 00:00:10.432 TCP 1.101.0.1:3000 -> 23.104.0.1:50324 11 6504 1 2025-09-30 23:05:25.322 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:52006 10 6452 1 2025-09-30 23:05:56.918 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:05:56.866 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:05:56.521 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:05:56.889 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:05:56.604 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:06:25.773 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46240 10 6452 1 2025-09-30 23:02:37.314 00:06:00.193 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 23:07:26.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43270 10 6452 1 2025-09-30 23:08:26.583 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45090 10 6452 1 2025-09-30 23:03:37.317 00:06:00.187 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 23:09:26.986 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53800 10 6452 1 2025-09-30 23:10:27.395 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45596 10 6452 1 2025-09-30 23:10:56.651 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:10:56.393 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:10:56.429 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:10:56.568 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:10:56.639 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:11:27.806 00:00:11.560 TCP 1.101.0.1:3000 -> 23.104.0.1:44846 10 6452 1 2025-09-30 23:12:29.405 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38308 10 6452 1 2025-09-30 23:13:29.806 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41084 10 6452 1 2025-09-30 23:14:30.215 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56712 10 6452 1 2025-09-30 23:09:37.316 00:06:00.193 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 23:15:30.576 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42906 10 6452 1 2025-09-30 23:10:37.318 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 23:15:56.841 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:15:56.642 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:15:56.649 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:15:56.760 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:15:56.566 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:16:30.981 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:59266 10 6452 1 2025-09-30 23:17:31.351 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:46434 12 10369 1 2025-09-30 23:18:31.789 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44354 10 6452 1 2025-09-30 23:19:32.195 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42568 10 6452 1 2025-09-30 23:20:32.557 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42408 10 6452 1 2025-09-30 23:20:56.844 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:20:56.420 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:20:56.716 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:20:56.789 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:20:56.799 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:16:37.325 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 23:21:32.917 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34062 10 6452 1 2025-09-30 23:17:37.327 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 23:22:33.276 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:54770 12 10375 1 2025-09-30 23:23:33.747 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51368 10 6452 1 2025-09-30 23:24:34.151 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47966 10 6452 1 2025-09-30 23:25:34.554 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52292 10 6452 1 2025-09-30 23:25:57.062 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:25:57.187 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:25:56.919 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:25:56.978 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:25:56.984 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:26:34.958 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37022 10 6452 1 2025-09-30 23:27:35.362 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48652 10 6452 1 2025-09-30 23:23:37.327 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 23:28:35.766 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:43302 10 6452 1 2025-09-30 23:24:37.331 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 23:29:36.192 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53816 10 6452 1 2025-09-30 23:30:36.591 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57714 10 6452 1 2025-09-30 23:30:56.809 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:30:56.812 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:30:56.847 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:30:56.726 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:30:56.806 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:31:36.997 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42894 10 6452 1 2025-09-30 23:32:37.399 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44026 10 6452 1 2025-09-30 23:33:37.806 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36728 10 6452 1 2025-09-30 23:34:38.240 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35722 10 6452 1 2025-09-30 23:30:37.328 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 23:35:38.647 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56550 10 6452 1 2025-09-30 23:35:57.165 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:35:56.893 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:35:56.979 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:35:56.874 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:35:57.062 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:31:37.331 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 23:36:39.059 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41752 10 6452 1 2025-09-30 23:37:39.474 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57780 10 6452 1 2025-09-30 23:38:39.877 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41918 10 6452 1 2025-09-30 23:39:40.240 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37102 10 6452 1 2025-09-30 23:40:40.639 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43702 10 6452 1 2025-09-30 23:40:57.168 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:40:56.993 00:00:00.052 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:40:56.853 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:40:56.972 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:40:56.936 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:41:41.040 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50600 10 6452 1 2025-09-30 23:37:37.329 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 23:42:41.440 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34034 10 6452 1 2025-09-30 23:38:37.333 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 23:43:41.846 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40372 10 6452 1 2025-09-30 23:44:42.264 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55592 10 6452 1 2025-09-30 23:45:57.321 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:45:42.624 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42338 10 6452 1 2025-09-30 23:45:57.175 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:45:57.077 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:45:57.239 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:45:57.074 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:46:43.028 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37972 10 6452 1 2025-09-30 23:47:43.429 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59548 10 6452 1 2025-09-30 23:48:43.838 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59352 10 6452 1 2025-09-30 23:44:37.330 00:06:00.186 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 23:49:44.248 00:00:10.785 TCP 1.101.0.1:3000 -> 23.104.0.1:46794 10 6452 1 2025-09-30 23:45:37.332 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 23:50:45.084 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45466 10 6452 1 2025-09-30 23:50:57.432 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:50:57.320 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:50:57.300 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:50:57.383 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:50:57.383 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:51:45.487 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38518 10 6452 1 2025-09-30 23:52:45.888 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54054 10 6452 1 2025-09-30 23:53:46.298 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:43070 10 6452 1 2025-09-30 23:54:46.757 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48442 10 6452 1 2025-09-30 23:55:57.482 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-30 23:55:57.516 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:55:57.379 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-30 23:55:57.623 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-30 23:55:47.168 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51230 10 6452 1 2025-09-30 23:55:57.462 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-30 23:51:37.333 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-30 23:56:47.528 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39580 10 6452 1 2025-09-30 23:52:37.337 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-30 23:57:47.935 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36604 10 6452 1 Summary: total flows: 137, total bytes: 419178, total packets: 1027, avg bps: 887, avg pps: 0, avg bpp: 408 Time window: 2025-09-30 22:55:37 - 2025-09-30 23:58:37 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0038s User: 0.0019s Wall: 0.0019s flows/second: 70800.8 Runtime: 0.0020s