Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 23:59:18.357 00:00:11.007 TCP 1.101.0.1:3000 -> 23.104.0.1:47056 10 6452 1 2025-09-13 23:59:29.251 00:01:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 00:00:19.418 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45086 10 6452 1 2025-09-14 00:01:19.826 00:00:10.607 TCP 1.101.0.1:3000 -> 23.104.0.1:36820 10 6452 1 2025-09-13 23:58:29.238 00:04:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-14 00:02:20.468 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39384 10 6452 1 2025-09-14 00:02:46.962 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:02:46.880 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:02:46.668 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:02:46.697 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:02:46.879 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:03:20.871 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57278 10 6452 1 2025-09-14 00:04:21.279 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37996 10 6452 1 2025-09-14 00:01:29.251 00:04:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-14 00:05:21.686 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41536 10 6452 1 2025-09-14 00:06:22.110 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47348 10 6452 1 2025-09-14 00:03:29.238 00:04:00.019 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-14 00:07:22.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60950 10 6452 1 2025-09-14 00:07:46.751 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:07:46.789 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:07:46.731 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:07:46.504 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:07:46.668 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:08:22.920 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37624 10 6452 1 2025-09-14 00:08:29.239 00:01:00.019 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 00:09:23.327 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53404 10 6452 1 2025-09-14 00:06:29.251 00:04:00.007 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-14 00:10:23.730 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43686 10 6452 1 2025-09-14 00:11:24.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40568 10 6452 1 2025-09-14 00:10:29.239 00:02:00.022 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 00:12:24.516 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44498 10 6452 1 2025-09-14 00:12:46.667 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:12:46.759 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:12:46.689 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:12:46.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:12:46.853 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:13:24.918 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51930 10 6452 1 2025-09-14 00:13:29.240 00:01:00.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 00:14:25.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33920 10 6452 1 2025-09-14 00:11:29.258 00:04:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-14 00:15:25.719 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44436 10 6452 1 2025-09-14 00:16:26.143 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53912 10 6452 1 2025-09-14 00:17:26.554 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37838 10 6452 1 2025-09-14 00:17:47.055 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:17:47.183 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:17:46.985 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:17:47.183 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:17:47.266 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:18:26.960 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48686 10 6452 1 2025-09-14 00:15:29.239 00:04:00.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-14 00:19:27.372 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:52154 12 10367 1 2025-09-14 00:16:29.262 00:04:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-14 00:20:27.862 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35538 10 6452 1 2025-09-14 00:21:28.269 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44778 10 6452 1 2025-09-14 00:22:28.629 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51966 10 6452 1 2025-09-14 00:22:47.153 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:22:46.893 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:22:47.116 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:22:46.977 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:22:47.059 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:23:29.030 00:00:13.171 TCP 1.101.0.1:3000 -> 23.104.0.1:39688 10 6452 1 2025-09-14 00:20:29.241 00:04:00.025 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-14 00:24:32.241 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:34422 12 10367 1 2025-09-14 00:21:29.263 00:04:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-14 00:25:32.733 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:54256 10 6452 1 2025-09-14 00:26:33.145 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49488 10 6452 1 2025-09-14 00:26:29.264 00:01:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 00:27:33.547 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36302 10 6452 1 2025-09-14 00:27:47.039 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:27:47.150 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:27:47.237 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:27:47.222 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:27:47.305 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:28:33.955 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51290 10 6452 1 2025-09-14 00:25:29.242 00:04:00.028 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-14 00:29:34.366 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36564 10 6452 1 2025-09-14 00:28:29.267 00:02:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-14 00:30:34.769 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57618 10 6452 1 2025-09-14 00:31:35.193 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48094 10 6452 1 2025-09-14 00:31:29.267 00:01:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 00:32:47.151 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:32:47.149 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:32:46.958 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:32:35.597 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37202 10 6452 1 2025-09-14 00:32:47.222 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:32:47.305 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:33:35.962 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49548 10 6452 1 2025-09-14 00:30:29.244 00:04:00.027 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-14 00:34:36.388 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51118 10 6452 1 2025-09-14 00:33:29.267 00:02:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-14 00:35:36.789 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52770 10 6452 1 2025-09-14 00:36:37.191 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38826 10 6452 1 2025-09-14 00:36:29.269 00:01:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 00:37:47.533 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:37:47.387 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:37:47.394 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:37:47.228 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:37:47.450 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:37:37.594 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37054 10 6452 1 2025-09-14 00:38:37.996 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:38814 10 6452 1 2025-09-14 00:35:29.244 00:04:00.027 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-14 00:39:38.427 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48262 10 6452 1 2025-09-14 00:40:38.843 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:42394 10 6452 1 2025-09-14 00:40:29.246 00:01:00.025 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 00:41:39.306 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55986 10 6452 1 2025-09-14 00:38:29.268 00:04:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-14 00:42:47.627 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:42:47.395 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:42:47.396 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:42:47.429 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:42:47.542 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:42:39.709 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41238 10 6452 1 2025-09-14 00:43:40.118 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42280 10 6452 1 2025-09-14 00:42:29.246 00:02:00.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 00:44:40.522 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42590 10 6452 1 2025-09-14 00:45:40.929 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 10 6452 1 2025-09-14 00:45:29.246 00:01:00.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 00:46:41.301 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58882 10 6452 1 2025-09-14 00:43:29.269 00:04:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-14 00:47:47.687 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:47:47.799 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:47:47.608 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:47:47.418 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:47:47.605 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:47:41.662 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46968 10 6452 1 2025-09-14 00:48:42.092 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54002 10 6452 1 2025-09-14 00:49:42.496 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50002 10 6452 1 2025-09-14 00:50:42.901 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37888 10 6452 1 2025-09-14 00:47:29.247 00:04:00.027 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-14 00:51:43.339 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58868 10 6452 1 2025-09-14 00:48:29.270 00:04:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-14 00:52:47.857 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:52:47.486 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:52:47.737 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:52:47.583 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:52:47.775 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:52:43.702 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52018 10 6452 1 2025-09-14 00:53:44.114 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43744 10 6452 1 2025-09-14 00:54:44.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50356 10 6452 1 2025-09-14 00:55:44.923 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35822 10 6452 1 2025-09-14 00:52:29.252 00:04:00.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-14 00:56:45.345 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35634 10 6452 1 2025-09-14 00:53:29.273 00:04:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-14 00:57:47.976 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 00:57:47.795 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 00:57:47.790 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 00:57:47.799 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:57:47.894 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 00:57:45.711 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:55652 10 6452 1 Summary: total flows: 149, total bytes: 415064, total packets: 951, avg bps: 930, avg pps: 0, avg bpp: 436 Time window: 2025-09-13 23:58:29 - 2025-09-14 00:57:56 Total flows processed: 149, passed: 149, Blocks skipped: 0, Bytes read: 15560 Sys: 0.0022s User: 0.0022s Wall: 0.0023s flows/second: 64728.3 Runtime: 0.0023s