Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 03:59:33.996 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47598 10 6452 1 2025-10-01 04:00:34.371 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39158 10 6452 1 2025-10-01 04:01:02.471 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:01:02.429 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:01:02.400 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:01:02.388 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:01:02.378 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 03:56:37.405 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 04:01:34.771 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41010 10 6452 1 2025-10-01 03:57:37.409 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 04:02:35.175 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38294 10 6452 1 2025-10-01 04:03:35.580 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49522 10 6452 1 2025-10-01 04:04:35.984 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48930 10 6452 1 2025-10-01 04:05:36.392 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50298 10 6452 1 2025-10-01 04:06:02.692 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:06:02.545 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:06:02.321 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:06:02.610 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:06:02.375 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 04:06:36.793 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:48640 10 6452 1 2025-10-01 04:07:37.166 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47596 10 6452 1 2025-10-01 04:03:37.406 00:06:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 04:08:37.565 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34066 10 6452 1 2025-10-01 04:04:37.409 00:06:00.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 04:09:37.965 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57054 10 6452 1 2025-10-01 04:10:38.339 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49178 10 6452 1 2025-10-01 04:11:02.572 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:11:02.557 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:11:02.504 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:11:02.489 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:11:02.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 04:11:38.747 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57860 10 6452 1 2025-10-01 04:12:39.109 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49542 10 6452 1 2025-10-01 04:13:39.510 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53230 10 6452 1 2025-10-01 04:14:39.912 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41816 10 6452 1 2025-10-01 04:10:37.408 00:06:00.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 04:15:40.322 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47440 10 6452 1 2025-10-01 04:16:03.172 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:16:02.955 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:16:03.132 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:16:03.168 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 04:16:03.215 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:11:37.410 00:06:00.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 04:16:40.726 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33896 10 6452 1 2025-10-01 04:17:41.139 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:51086 12 10375 1 2025-10-01 04:18:41.579 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52894 10 6452 1 2025-10-01 04:19:41.982 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49894 10 6452 1 2025-10-01 04:20:42.385 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58210 10 6452 1 2025-10-01 04:21:02.805 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:21:02.558 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:21:02.707 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:21:02.855 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 04:21:02.791 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:21:42.789 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41258 10 6452 1 2025-10-01 04:17:37.409 00:06:00.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 04:22:43.194 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53598 10 6452 1 2025-10-01 04:18:37.413 00:06:00.177 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 04:23:43.596 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47378 10 6452 1 2025-10-01 04:24:43.959 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55906 10 6452 1 2025-10-01 04:25:44.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60764 10 6452 1 2025-10-01 04:26:02.915 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:26:02.753 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:26:02.813 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:26:02.741 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 04:26:02.896 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:26:44.768 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:43912 10 6452 1 2025-10-01 04:27:45.194 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48500 10 6452 1 2025-10-01 04:28:45.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41004 10 6452 1 2025-10-01 04:24:37.412 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 04:29:46.002 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52644 10 6452 1 2025-10-01 04:25:37.415 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 04:30:46.408 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45202 10 6452 1 2025-10-01 04:31:02.996 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:31:02.906 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:31:02.876 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:31:02.913 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:31:03.098 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 04:31:46.804 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:58322 10 6452 1 2025-10-01 04:32:47.174 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42788 10 6452 1 2025-10-01 04:33:47.577 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45690 10 6452 1 2025-10-01 04:34:47.975 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53754 10 6452 1 2025-10-01 04:36:03.366 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:35:48.376 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32924 10 6452 1 2025-10-01 04:36:03.327 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:36:03.200 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:36:03.283 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:36:03.166 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 04:31:37.415 00:06:00.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 04:36:48.784 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59426 10 6452 1 2025-10-01 04:32:37.420 00:06:00.177 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 04:37:49.187 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57388 10 6452 1 2025-10-01 04:38:49.592 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48540 10 6452 1 2025-10-01 04:39:50.001 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39538 10 6452 1 2025-10-01 04:40:50.363 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52090 10 6452 1 2025-10-01 04:41:03.233 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:41:02.910 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:41:03.173 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:41:03.107 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 04:41:03.256 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:41:50.770 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2025-10-01 04:42:51.183 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39678 10 6452 1 2025-10-01 04:38:37.417 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 04:43:51.591 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34158 10 6452 1 2025-10-01 04:39:37.421 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 04:44:51.998 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46046 10 6452 1 2025-10-01 04:46:03.177 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:46:03.108 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:46:03.178 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:46:03.363 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 04:45:52.408 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45798 10 6452 1 2025-10-01 04:46:03.262 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:46:52.815 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41096 10 6452 1 2025-10-01 04:47:53.218 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50392 10 6452 1 2025-10-01 04:48:53.617 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57216 10 6452 1 2025-10-01 04:49:54.026 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:32868 10 6452 1 2025-10-01 04:45:37.418 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 04:51:03.303 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:50:54.432 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47014 10 6452 1 2025-10-01 04:51:03.055 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:51:03.502 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:51:03.502 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 04:51:03.586 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:46:37.421 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 04:51:54.853 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:45256 10 6452 1 2025-10-01 04:52:55.289 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35488 10 6452 1 2025-10-01 04:53:55.716 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:49348 10 6452 1 2025-10-01 04:54:56.140 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46572 10 6452 1 2025-10-01 04:56:03.730 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 04:56:03.526 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:56:03.469 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 04:56:03.558 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 04:56:03.552 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 04:55:56.506 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52950 10 6452 1 2025-10-01 04:56:56.911 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48754 10 6452 1 2025-10-01 04:52:37.422 00:06:00.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 04:57:57.273 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58698 10 6452 1 2025-10-01 04:53:37.426 00:06:00.177 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 137, total bytes: 415209, total packets: 1024, avg bps: 878, avg pps: 0, avg bpp: 405 Time window: 2025-10-01 03:56:37 - 2025-10-01 04:59:37 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0034s User: 0.0026s Wall: 0.0034s flows/second: 40761.8 Runtime: 0.0034s