Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 23:59:19.960 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50944 10 6452 1 2025-09-26 00:00:20.365 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60638 10 6452 1 2025-09-26 00:01:20.766 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:37186 12 10367 1 2025-09-25 23:57:34.965 00:05:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-26 00:02:21.245 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49988 10 6452 1 2025-09-26 00:03:33.435 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 00:03:33.281 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:03:33.113 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:03:33.310 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:03:21.660 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53094 10 6452 1 2025-09-26 00:03:33.354 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 23:59:34.964 00:05:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-26 00:04:22.072 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43790 10 6452 1 2025-09-26 00:05:22.444 00:00:10.527 TCP 1.101.0.1:3000 -> 23.104.0.1:42650 10 6452 1 2025-09-26 00:06:23.014 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:38570 10 6452 1 2025-09-26 00:07:23.409 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46176 10 6452 1 2025-09-26 00:03:34.966 00:05:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-26 00:08:33.459 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:08:23.771 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57762 10 6452 1 2025-09-26 00:08:33.469 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:08:33.322 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:08:33.365 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:08:33.448 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 00:09:24.186 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 10 6452 1 2025-09-26 00:05:34.964 00:05:00.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-26 00:10:24.608 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49034 10 6452 1 2025-09-26 00:11:25.010 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46658 10 6452 1 2025-09-26 00:12:25.415 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59650 10 6452 1 2025-09-26 00:13:33.619 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 00:13:33.408 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:13:33.632 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:13:33.387 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:13:33.537 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:09:34.967 00:05:00.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-26 00:13:25.781 00:00:10.696 TCP 1.101.0.1:3000 -> 23.104.0.1:51360 10 6452 1 2025-09-26 00:14:26.519 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35324 10 6452 1 2025-09-26 00:11:34.968 00:05:00.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-26 00:15:26.937 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34108 10 6452 1 2025-09-26 00:16:27.351 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53232 10 6452 1 2025-09-26 00:17:27.714 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:59590 10 6452 1 2025-09-26 00:18:33.655 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:18:33.605 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:18:33.569 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:18:33.661 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:18:33.743 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 00:18:28.098 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51344 10 6452 1 2025-09-26 00:15:34.971 00:05:00.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-26 00:19:28.456 00:00:13.265 TCP 1.101.0.1:3000 -> 23.104.0.1:40148 10 6452 1 2025-09-26 00:20:31.760 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:58058 10 6452 1 2025-09-26 00:17:34.971 00:05:00.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-26 00:21:32.134 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46100 10 6452 1 2025-09-26 00:22:32.537 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41448 10 6452 1 2025-09-26 00:23:33.341 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:23:33.638 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:23:33.655 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:23:33.837 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:23:33.921 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 00:23:32.936 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50904 10 6452 1 2025-09-26 00:24:33.344 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45876 10 6452 1 2025-09-26 00:21:34.976 00:05:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-26 00:25:33.751 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47302 10 6452 1 2025-09-26 00:26:34.167 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34392 10 6452 1 2025-09-26 00:23:34.974 00:05:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-26 00:27:34.526 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37304 10 6452 1 2025-09-26 00:28:33.802 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:28:33.560 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:28:33.753 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:28:33.746 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:28:33.830 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 00:28:34.890 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55536 10 6452 1 2025-09-26 00:29:35.306 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35524 10 6452 1 2025-09-26 00:30:35.717 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58554 10 6452 1 2025-09-26 00:27:34.978 00:05:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-26 00:31:36.131 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36336 10 6452 1 2025-09-26 00:32:36.494 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46896 10 6452 1 2025-09-26 00:33:33.997 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:33:33.756 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:33:33.777 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:33:33.837 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:33:33.920 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 00:29:34.976 00:05:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-26 00:33:36.903 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 2025-09-26 00:34:37.293 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47606 10 6452 1 2025-09-26 00:35:37.698 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55950 10 6452 1 2025-09-26 00:36:38.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47036 10 6452 1 2025-09-26 00:33:34.980 00:05:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-26 00:37:38.521 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36902 10 6452 1 2025-09-26 00:38:34.037 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 00:38:33.897 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:38:33.900 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:38:33.851 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:38:33.954 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:38:38.932 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:34816 10 6452 1 2025-09-26 00:35:34.978 00:05:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-26 00:39:39.325 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52210 10 6452 1 2025-09-26 00:40:39.741 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50978 10 6452 1 2025-09-26 00:41:40.139 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:50632 10 6452 1 2025-09-26 00:42:40.541 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51452 10 6452 1 2025-09-26 00:43:34.082 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 00:43:34.163 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:43:33.819 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:43:34.143 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:43:34.001 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:39:34.983 00:05:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-26 00:43:40.937 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:36368 10 6452 1 2025-09-26 00:44:41.307 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51798 10 6452 1 2025-09-26 00:41:34.980 00:05:00.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-26 00:45:41.708 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-09-26 00:46:42.117 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36840 10 6452 1 2025-09-26 00:47:42.508 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44378 10 6452 1 2025-09-26 00:48:34.209 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 00:48:33.967 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:48:33.976 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:48:34.096 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:48:34.126 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:48:42.911 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54874 10 6452 1 2025-09-26 00:45:34.986 00:05:00.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-26 00:49:43.312 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48534 10 6452 1 2025-09-26 00:50:43.675 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57194 10 6452 1 2025-09-26 00:47:34.983 00:05:00.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-26 00:51:44.108 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35980 12 6556 1 2025-09-26 00:52:44.519 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44010 10 6452 1 2025-09-26 00:53:34.121 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:53:34.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:53:34.213 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:53:34.330 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:53:34.414 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 00:53:44.882 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57504 10 6452 1 2025-09-26 00:54:45.284 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58552 10 6452 1 2025-09-26 00:51:34.987 00:05:00.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-26 00:55:45.682 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54846 10 6452 1 2025-09-26 00:56:46.110 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42520 10 6452 1 2025-09-26 00:53:34.984 00:05:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-26 00:57:46.516 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48374 10 6452 1 2025-09-26 00:58:34.410 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 00:58:34.367 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 00:58:34.309 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:58:34.263 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 00:58:34.346 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 139, total bytes: 414567, total packets: 1014, avg bps: 906, avg pps: 0, avg bpp: 408 Time window: 2025-09-25 23:57:34 - 2025-09-26 00:58:35 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0037s User: 0.0018s Wall: 0.0025s flows/second: 54830.1 Runtime: 0.0026s