Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-26 01:59:11.422 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43318 10 6452 1 2025-09-26 02:00:11.785 00:00:10.662 TCP 1.101.0.1:3000 -> 23.104.0.1:34396 10 6452 1 2025-09-26 02:01:12.487 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55564 10 6452 1 2025-09-26 02:02:12.849 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:49048 10 6452 1 2025-09-26 02:03:13.272 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37326 10 6452 1 2025-09-26 02:03:35.651 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:03:35.759 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 01:58:35.002 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 02:03:35.708 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:03:35.390 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:03:35.568 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:04:13.680 00:00:10.800 TCP 1.101.0.1:3000 -> 23.104.0.1:56328 10 6452 1 2025-09-26 01:59:35.000 00:06:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 02:05:14.527 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60228 10 6452 1 2025-09-26 02:06:14.893 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:35084 12 10367 1 2025-09-26 02:07:15.372 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42916 10 6452 1 2025-09-26 02:08:15.773 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36902 10 6452 1 2025-09-26 02:08:35.535 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 02:08:35.680 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:08:35.457 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:08:35.777 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:08:35.860 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:09:16.132 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53684 10 6452 1 2025-09-26 02:10:16.518 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40598 10 6452 1 2025-09-26 02:05:35.017 00:06:00.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 02:11:16.920 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40076 10 6452 1 2025-09-26 02:06:35.017 00:06:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 02:12:17.329 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42020 10 6452 1 2025-09-26 02:13:17.730 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41882 10 6452 1 2025-09-26 02:13:35.950 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 02:13:35.620 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:13:35.675 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:13:35.709 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:13:35.792 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:14:18.140 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42812 10 6452 1 2025-09-26 02:15:18.550 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37834 10 6452 1 2025-09-26 02:16:18.972 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35064 10 6452 1 2025-09-26 02:17:19.384 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46168 10 6452 1 2025-09-26 02:12:35.041 00:06:00.128 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 02:18:19.796 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56796 10 6452 1 2025-09-26 02:18:36.132 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:13:35.040 00:06:00.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 02:18:36.111 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:18:35.797 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:18:36.051 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:18:36.024 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 02:19:20.203 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48756 10 6452 1 2025-09-26 02:20:20.614 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42756 10 6452 1 2025-09-26 02:21:21.018 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52816 10 6452 1 2025-09-26 02:22:21.428 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46176 10 6452 1 2025-09-26 02:23:21.794 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48348 10 6452 1 2025-09-26 02:23:36.311 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 02:23:36.193 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:23:35.823 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:23:36.196 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:23:36.279 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:24:22.197 00:00:10.949 TCP 1.101.0.1:3000 -> 23.104.0.1:45644 10 6452 1 2025-09-26 02:19:35.065 00:06:00.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 02:25:23.189 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37076 10 6452 1 2025-09-26 02:20:35.062 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 02:26:23.553 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49406 10 6452 1 2025-09-26 02:27:23.959 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55152 10 6452 1 2025-09-26 02:28:24.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57892 10 6452 1 2025-09-26 02:28:36.296 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:28:36.320 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 02:28:36.353 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:28:35.875 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:28:36.215 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:29:24.774 00:00:11.090 TCP 1.101.0.1:3000 -> 23.104.0.1:51564 10 6452 1 2025-09-26 02:30:25.902 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60042 10 6452 1 2025-09-26 02:26:35.066 00:06:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 02:31:26.311 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58686 10 6452 1 2025-09-26 02:32:26.714 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38430 10 6452 1 2025-09-26 02:27:35.064 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 02:33:36.259 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:33:36.269 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 02:33:36.228 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:33:36.193 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:33:36.176 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:33:27.116 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49664 10 6452 1 2025-09-26 02:34:27.523 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43752 10 6452 1 2025-09-26 02:35:27.888 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51672 10 6452 1 2025-09-26 02:36:28.320 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42282 10 6452 1 2025-09-26 02:37:28.728 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40594 10 6452 1 2025-09-26 02:38:36.240 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:38:36.384 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 02:33:35.072 00:06:00.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 02:38:36.382 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:38:36.169 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:38:36.158 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:38:29.137 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55586 10 6452 1 2025-09-26 02:34:35.069 00:06:00.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 02:39:29.536 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50742 10 6452 1 2025-09-26 02:40:29.941 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46912 10 6452 1 2025-09-26 02:41:30.357 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41334 10 6452 1 2025-09-26 02:42:30.755 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48616 10 6452 1 2025-09-26 02:43:36.534 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:43:36.507 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 02:43:36.456 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:43:36.422 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:43:36.451 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:43:31.194 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51814 10 6452 1 2025-09-26 02:44:31.605 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45062 10 6452 1 2025-09-26 02:40:35.077 00:06:00.102 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 02:45:32.008 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59244 10 6452 1 2025-09-26 02:41:35.071 00:06:00.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 02:46:32.370 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60380 10 6452 1 2025-09-26 02:47:32.737 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47786 10 6452 1 2025-09-26 02:48:36.611 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:48:36.530 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 02:48:36.392 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:48:36.336 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:48:36.530 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:48:33.139 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55002 10 6452 1 2025-09-26 02:49:33.545 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55966 10 6452 1 2025-09-26 02:50:33.947 00:00:10.769 TCP 1.101.0.1:3000 -> 23.104.0.1:47034 10 6452 1 2025-09-26 02:51:34.749 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58152 10 6452 1 2025-09-26 02:47:35.076 00:06:00.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 02:52:35.151 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35624 10 6452 1 2025-09-26 02:53:36.556 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 02:53:36.549 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:53:36.382 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:53:36.452 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:53:36.534 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:48:35.072 00:06:00.119 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 02:53:35.562 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50846 10 6452 1 2025-09-26 02:54:35.964 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36410 10 6452 1 2025-09-26 02:55:36.326 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58526 10 6452 1 2025-09-26 02:56:36.728 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60138 10 6452 1 2025-09-26 02:57:37.139 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43200 10 6452 1 2025-09-26 02:58:36.409 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 02:58:36.757 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 02:58:36.655 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:58:36.637 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 02:58:36.719 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 02:58:37.541 00:00:10.754 TCP 1.101.0.1:3000 -> 23.104.0.1:44834 10 6452 1 Summary: total flows: 136, total bytes: 419931, total packets: 1006, avg bps: 929, avg pps: 0, avg bpp: 417 Time window: 2025-09-26 01:58:35 - 2025-09-26 02:58:48 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0035s User: 0.0017s Wall: 0.0017s flows/second: 81049.4 Runtime: 0.0017s