Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 23:59:15.939 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:52784 10 6452 1 2025-09-25 00:00:16.314 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60536 10 6452 1 2025-09-25 00:01:16.685 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47352 10 6452 1 2025-09-24 23:56:34.511 00:06:00.127 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-25 00:02:17.109 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33368 10 6452 1 2025-09-24 23:57:34.509 00:06:00.133 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-25 00:03:04.248 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:03:04.074 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:03:04.318 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:03:04.317 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:03:04.401 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:03:17.513 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32962 10 6452 1 2025-09-25 00:04:17.924 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57486 10 6452 1 2025-09-25 00:05:18.326 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38402 10 6452 1 2025-09-25 00:06:18.729 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55748 10 6452 1 2025-09-25 00:07:19.137 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46436 10 6452 1 2025-09-25 00:08:04.523 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:08:04.421 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:08:04.532 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:08:04.533 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:08:04.614 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:08:19.535 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36586 10 6452 1 2025-09-25 00:03:34.515 00:06:00.128 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-25 00:09:19.938 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:56172 10 6452 1 2025-09-25 00:04:34.514 00:06:00.133 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-25 00:10:20.368 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53464 10 6452 1 2025-09-25 00:11:20.776 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53164 10 6452 1 2025-09-25 00:12:21.183 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-09-25 00:13:04.635 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:13:04.421 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:13:04.472 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:13:04.575 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:13:04.556 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:13:21.546 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56508 10 6452 1 2025-09-25 00:14:21.947 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59446 10 6452 1 2025-09-25 00:15:22.359 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47306 10 6452 1 2025-09-25 00:10:34.518 00:06:00.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-25 00:16:22.729 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48196 10 6452 1 2025-09-25 00:11:34.516 00:06:00.131 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-25 00:17:23.132 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60388 10 6452 1 2025-09-25 00:18:04.644 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:18:04.414 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:18:04.706 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:18:04.481 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:18:04.791 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:18:23.535 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45436 10 6452 1 2025-09-25 00:19:23.939 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40030 10 6452 1 2025-09-25 00:20:24.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42700 10 6452 1 2025-09-25 00:21:24.760 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:45892 10 6452 1 2025-09-25 00:22:25.183 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56534 10 6452 1 2025-09-25 00:17:34.520 00:06:00.127 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-25 00:23:04.811 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:23:04.884 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:23:04.801 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:23:04.728 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:23:04.731 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:18:34.517 00:06:00.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-25 00:23:25.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41264 10 6452 1 2025-09-25 00:24:25.971 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58124 10 6452 1 2025-09-25 00:25:26.385 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60544 10 6452 1 2025-09-25 00:26:26.790 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45882 10 6452 1 2025-09-25 00:27:27.192 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42748 10 6452 1 2025-09-25 00:28:04.983 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:28:04.900 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:28:04.662 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:28:04.900 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:28:04.898 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:28:27.601 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45324 10 6452 1 2025-09-25 00:24:34.521 00:06:00.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-25 00:29:28.013 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55542 10 6452 1 2025-09-25 00:25:34.520 00:06:00.133 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-25 00:30:28.376 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37864 10 6452 1 2025-09-25 00:31:28.779 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56576 10 6452 1 2025-09-25 00:32:29.191 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46198 10 6452 1 2025-09-25 00:33:04.813 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:33:04.497 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:33:04.809 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:33:04.944 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:33:04.892 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:33:29.596 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39020 10 6452 1 2025-09-25 00:34:30.006 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41784 10 6452 1 2025-09-25 00:35:30.408 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43572 10 6452 1 2025-09-25 00:31:34.523 00:06:00.127 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-25 00:36:30.811 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60574 10 6452 1 2025-09-25 00:32:34.522 00:06:00.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-25 00:37:31.183 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43252 10 6452 1 2025-09-25 00:38:05.172 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:38:04.913 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:38:05.011 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:38:05.089 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:38:05.003 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:38:31.542 00:00:10.611 TCP 1.101.0.1:3000 -> 23.104.0.1:50228 10 6452 1 2025-09-25 00:39:32.188 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51680 10 6452 1 2025-09-25 00:40:32.591 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45168 10 6452 1 2025-09-25 00:41:33.002 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49064 10 6452 1 2025-09-25 00:42:33.402 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35352 10 6452 1 2025-09-25 00:43:05.187 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:43:04.878 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:43:04.922 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:43:04.939 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:43:05.005 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:38:34.524 00:06:00.127 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-25 00:43:33.804 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44056 10 6452 1 2025-09-25 00:39:34.523 00:06:00.131 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-25 00:44:34.202 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37416 10 6452 1 2025-09-25 00:45:34.602 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53870 10 6452 1 2025-09-25 00:46:34.968 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49700 10 6452 1 2025-09-25 00:47:35.367 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60482 10 6452 1 2025-09-25 00:48:05.345 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:48:05.129 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:48:04.949 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:48:05.262 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:48:05.262 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:48:35.768 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52180 10 6452 1 2025-09-25 00:49:36.169 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41210 10 6452 1 2025-09-25 00:45:34.527 00:06:00.125 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-25 00:50:36.574 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39924 10 6452 1 2025-09-25 00:46:34.525 00:06:00.130 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-25 00:51:36.973 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54738 10 6452 1 2025-09-25 00:52:37.391 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52016 10 6452 1 2025-09-25 00:53:05.674 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:53:05.495 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:53:05.450 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:53:05.592 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:53:05.587 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:53:37.759 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49654 10 6452 1 2025-09-25 00:54:38.174 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60218 10 6452 1 2025-09-25 00:55:38.581 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33390 10 6452 1 2025-09-25 00:56:38.984 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:40492 10 6452 1 2025-09-25 00:52:34.529 00:06:00.125 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-25 00:57:39.364 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59846 10 6452 1 2025-09-25 00:58:05.404 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-25 00:58:05.147 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:58:05.333 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-25 00:58:05.332 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-25 00:58:05.415 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-25 00:53:34.526 00:06:00.129 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-25 00:58:39.780 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45548 10 6452 1 Summary: total flows: 138, total bytes: 417738, total packets: 1032, avg bps: 884, avg pps: 0, avg bpp: 404 Time window: 2025-09-24 23:56:34 - 2025-09-25 00:59:34 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0034s User: 0.0011s Wall: 0.0018s flows/second: 78144.2 Runtime: 0.0018s