Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 14:59:19.796 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55120 10 6452 1 2025-09-24 15:00:20.198 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49020 10 6452 1 2025-09-24 14:56:34.325 00:04:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 15:01:20.561 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40150 10 6452 1 2025-09-24 15:02:20.918 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36026 10 6452 1 2025-09-24 15:02:53.529 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:02:53.552 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:02:53.443 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:02:53.481 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:02:53.447 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 14:59:34.324 00:04:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 15:03:21.324 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36092 10 6452 1 2025-09-24 15:04:21.688 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39576 10 6452 1 2025-09-24 15:05:22.104 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:34324 10 6452 1 2025-09-24 15:01:34.326 00:04:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 15:04:34.325 00:01:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 15:06:22.536 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53914 10 6452 1 2025-09-24 15:06:34.328 00:01:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 15:07:22.899 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51994 10 6452 1 2025-09-24 15:07:53.844 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:07:53.650 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:07:53.554 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:07:53.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:07:53.760 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:08:23.309 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45580 10 6452 1 2025-09-24 15:06:34.325 00:02:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 15:09:23.710 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40158 10 6452 1 2025-09-24 15:09:34.326 00:01:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 15:08:34.328 00:02:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 15:10:24.118 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46170 10 6452 1 2025-09-24 15:11:24.481 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38596 10 6452 1 2025-09-24 15:11:34.329 00:01:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 15:12:24.883 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:32932 10 6452 1 2025-09-24 15:12:54.012 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:12:53.930 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:12:53.796 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:12:53.644 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:12:53.929 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:11:34.327 00:02:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 15:13:25.298 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55060 10 6452 1 2025-09-24 15:14:25.705 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58054 10 6452 1 2025-09-24 15:14:34.327 00:01:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 15:13:34.329 00:02:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 15:15:26.119 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35582 10 6452 1 2025-09-24 15:16:26.528 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44992 10 6452 1 2025-09-24 15:16:34.330 00:01:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 15:17:26.928 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:33806 10 6452 1 2025-09-24 15:17:53.687 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:17:53.989 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:17:53.642 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:17:53.947 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:17:54.030 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:16:34.327 00:02:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 15:18:27.355 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54518 10 6452 1 2025-09-24 15:19:27.756 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34976 10 6452 1 2025-09-24 15:18:34.329 00:02:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 15:19:34.329 00:01:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 15:20:28.117 00:00:11.034 TCP 1.101.0.1:3000 -> 23.104.0.1:41532 10 6452 1 2025-09-24 15:21:29.194 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56778 10 6452 1 2025-09-24 15:21:34.331 00:01:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 15:22:29.555 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60218 10 6452 1 2025-09-24 15:22:53.948 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:22:53.809 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:22:53.825 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:22:53.986 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:22:54.070 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:21:34.328 00:02:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 15:23:29.958 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46432 10 6452 1 2025-09-24 15:24:30.363 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6452 1 2025-09-24 15:24:34.329 00:01:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 15:23:34.331 00:02:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 15:25:30.770 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33544 10 6452 1 2025-09-24 15:26:31.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55434 10 6452 1 2025-09-24 15:26:34.332 00:01:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 15:27:31.589 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57978 10 6452 1 2025-09-24 15:27:54.278 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:27:54.200 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:27:54.239 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:27:54.107 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:27:54.195 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:28:31.990 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51440 10 6452 1 2025-09-24 15:29:32.403 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53944 10 6452 1 2025-09-24 15:26:34.330 00:04:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 15:30:32.771 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36762 10 6452 1 2025-09-24 15:31:33.138 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59118 10 6452 1 2025-09-24 15:28:34.332 00:04:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 15:32:33.498 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43180 10 6452 1 2025-09-24 15:32:54.364 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:32:54.264 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:32:54.129 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:32:54.364 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:32:54.446 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:33:33.903 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49816 10 6452 1 2025-09-24 15:33:34.333 00:01:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 15:34:34.315 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33902 10 6452 1 2025-09-24 15:31:34.330 00:04:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 15:35:34.716 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:56616 10 6452 1 2025-09-24 15:36:35.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49362 10 6452 1 2025-09-24 15:36:34.331 00:01:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 15:35:34.335 00:02:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 15:37:35.518 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35018 10 6452 1 2025-09-24 15:37:54.219 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:37:54.298 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:37:54.122 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:37:54.147 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:37:54.301 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:38:35.923 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:58460 10 6452 1 2025-09-24 15:38:34.334 00:01:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 15:39:36.295 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33622 10 6452 1 2025-09-24 15:38:34.331 00:02:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 15:40:36.708 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:44376 10 6452 1 2025-09-24 15:41:37.139 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43126 10 6452 1 2025-09-24 15:41:34.332 00:01:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 15:40:34.334 00:02:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 15:42:54.550 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:42:37.547 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37032 10 6452 1 2025-09-24 15:42:54.176 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:42:54.393 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:42:54.351 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:42:54.468 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:43:37.952 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35554 10 6452 1 2025-09-24 15:43:34.335 00:01:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 15:44:38.361 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52958 10 6452 1 2025-09-24 15:43:34.332 00:02:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 15:45:38.767 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52600 10 6452 1 2025-09-24 15:46:39.181 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42890 10 6452 1 2025-09-24 15:45:34.336 00:02:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 15:46:34.332 00:01:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 15:47:39.546 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46488 10 6452 1 2025-09-24 15:47:54.278 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:47:54.158 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:47:54.161 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:47:54.336 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:47:54.362 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:48:39.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50870 10 6452 1 2025-09-24 15:48:34.335 00:01:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 15:49:40.315 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40794 10 6452 1 2025-09-24 15:48:34.334 00:02:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 15:50:40.725 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39584 10 6452 1 2025-09-24 15:51:41.136 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51982 10 6452 1 2025-09-24 15:51:34.334 00:01:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 15:52:54.421 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:52:54.423 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:52:54.385 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:52:54.517 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:52:41.542 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55958 10 6452 1 2025-09-24 15:52:54.600 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:53:41.949 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58196 10 6452 1 2025-09-24 15:50:34.337 00:04:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 15:54:42.352 00:00:10.747 TCP 1.101.0.1:3000 -> 23.104.0.1:54784 10 6452 1 2025-09-24 15:53:34.334 00:02:00.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 15:55:43.137 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:42770 10 6452 1 2025-09-24 15:56:43.527 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47376 10 6452 1 2025-09-24 15:56:34.333 00:01:00.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 15:57:54.732 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 15:57:54.651 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:57:54.699 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 15:57:54.698 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 15:57:54.454 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 15:57:43.937 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56074 10 6452 1 Summary: total flows: 160, total bytes: 410302, total packets: 1006, avg bps: 891, avg pps: 0, avg bpp: 407 Time window: 2025-09-24 14:56:34 - 2025-09-24 15:57:54 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0037s User: 0.0009s Wall: 0.0023s flows/second: 70359.5 Runtime: 0.0023s