Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 01:58:43.726 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51914 10 6452 1 2025-09-24 01:59:44.141 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59590 10 6452 1 2025-09-24 01:56:34.087 00:04:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 02:00:44.514 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60796 10 6452 1 2025-09-24 02:01:44.915 00:00:10.780 TCP 1.101.0.1:3000 -> 23.104.0.1:41436 10 6452 1 2025-09-24 01:58:34.089 00:04:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 02:02:38.208 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:02:38.009 00:00:00.041 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:02:37.708 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:02:38.002 00:00:00.050 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:02:38.084 00:00:00.051 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:02:45.735 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39014 10 6452 1 2025-09-24 02:03:46.161 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:34534 10 6452 1 2025-09-24 02:04:46.582 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58946 10 6452 1 2025-09-24 02:01:34.088 00:04:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 02:05:46.946 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50992 10 6452 1 2025-09-24 02:06:47.359 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:41794 12 10367 1 2025-09-24 02:03:34.091 00:04:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 02:07:37.980 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:07:37.786 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:07:37.985 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:07:37.857 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:07:38.068 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:07:47.863 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56660 10 6452 1 2025-09-24 02:08:48.278 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33854 10 6452 1 2025-09-24 02:09:48.681 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54316 10 6452 1 2025-09-24 02:10:49.098 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51094 10 6452 1 2025-09-24 02:06:34.088 00:06:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-24 02:11:49.504 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59922 10 6452 1 2025-09-24 02:08:34.090 00:04:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 02:12:38.084 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:12:38.121 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:12:37.997 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:12:38.059 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:12:38.002 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:12:49.914 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50712 10 6452 1 2025-09-24 02:13:50.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59152 10 6452 1 2025-09-24 02:14:50.718 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34798 10 6452 1 2025-09-24 02:15:51.141 00:00:10.647 TCP 1.101.0.1:3000 -> 23.104.0.1:50850 10 6452 1 2025-09-24 02:16:51.825 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52974 10 6452 1 2025-09-24 02:17:38.357 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:17:38.269 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:17:38.274 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:17:38.291 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:17:38.440 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:17:52.224 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50606 10 6452 1 2025-09-24 02:13:34.092 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-24 02:13:34.089 00:06:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-24 02:18:52.628 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:52310 10 6452 1 2025-09-24 02:19:52.987 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56406 10 6452 1 2025-09-24 02:20:53.399 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56966 10 6452 1 2025-09-24 02:21:53.805 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46914 10 6452 1 2025-09-24 02:22:38.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:22:38.114 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:22:38.164 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:22:38.186 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:22:38.269 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:22:54.208 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44952 10 6452 1 2025-09-24 02:23:54.613 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46564 10 6452 1 2025-09-24 02:24:54.976 00:00:10.487 TCP 1.101.0.1:3000 -> 23.104.0.1:57238 10 6452 1 2025-09-24 02:20:34.091 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-09-24 02:20:34.093 00:06:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-24 02:25:55.504 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:60030 11 6504 1 2025-09-24 02:26:55.956 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47562 10 6452 1 2025-09-24 02:26:34.238 00:01:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 175 1 2025-09-24 02:27:38.610 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:27:38.616 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:27:38.618 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:27:38.454 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:27:38.529 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:27:56.364 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38552 10 6452 1 2025-09-24 02:28:56.731 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51562 10 6452 1 2025-09-24 02:27:34.096 00:02:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 02:29:57.139 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:32974 10 6452 1 2025-09-24 02:30:57.504 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34762 10 6452 1 2025-09-24 02:31:57.913 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40050 10 6452 1 2025-09-24 02:28:34.094 00:04:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 02:32:38.386 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:32:38.515 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:32:38.217 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:32:38.513 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:32:38.596 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:32:58.321 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48712 10 6452 1 2025-09-24 02:33:58.721 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54738 10 6452 1 2025-09-24 02:30:34.096 00:04:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 02:34:59.143 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57170 10 6452 1 2025-09-24 02:35:59.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53164 10 6452 1 2025-09-24 02:36:59.954 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35142 10 6452 1 2025-09-24 02:33:34.094 00:04:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 02:37:38.613 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:37:38.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:37:38.533 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:37:38.646 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:37:38.454 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:38:00.326 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41234 10 6452 1 2025-09-24 02:39:00.732 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50482 10 6452 1 2025-09-24 02:35:34.097 00:04:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 02:40:01.149 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38838 10 6452 1 2025-09-24 02:41:01.550 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34608 10 6452 1 2025-09-24 02:42:01.950 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:52222 12 10367 1 2025-09-24 02:38:34.097 00:04:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 02:42:38.767 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:42:38.687 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:42:38.935 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:42:39.089 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:42:38.684 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:43:02.441 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60330 10 6452 1 2025-09-24 02:44:02.849 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57484 10 6452 1 2025-09-24 02:40:34.098 00:04:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 02:45:03.250 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52350 10 6452 1 2025-09-24 02:46:03.657 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59908 10 6452 1 2025-09-24 02:47:04.098 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49934 10 6452 1 2025-09-24 02:47:38.874 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:47:38.791 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:47:38.704 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:47:38.542 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:47:38.792 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:48:04.499 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52020 10 6452 1 2025-09-24 02:43:34.097 00:06:00.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-24 02:49:04.862 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35376 10 6452 1 2025-09-24 02:50:05.227 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42500 10 6452 1 2025-09-24 02:45:34.100 00:06:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-24 02:51:05.632 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:49520 10 6452 1 2025-09-24 02:52:05.988 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34368 10 6452 1 2025-09-24 02:52:38.848 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:52:38.849 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:52:38.941 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:52:38.810 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:52:38.766 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:53:06.399 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42672 10 6452 1 2025-09-24 02:54:06.760 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56208 10 6452 1 2025-09-24 02:55:07.174 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59834 10 6452 1 2025-09-24 02:50:34.099 00:06:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-24 02:56:07.576 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:58444 12 10367 1 2025-09-24 02:57:08.061 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52632 10 6452 1 2025-09-24 02:52:34.102 00:06:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-24 02:57:38.944 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:57:38.604 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 02:57:38.604 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 02:57:38.961 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 02:57:39.027 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 02:58:08.461 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52980 10 6452 1 Summary: total flows: 142, total bytes: 429043, total packets: 1031, avg bps: 922, avg pps: 0, avg bpp: 416 Time window: 2025-09-24 01:56:34 - 2025-09-24 02:58:34 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0031s User: 0.0016s Wall: 0.0019s flows/second: 73159.5 Runtime: 0.0020s