Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 16:59:09.759 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:46346 10 6452 1 2025-09-24 16:57:34.354 00:02:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 17:00:10.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51086 10 6452 1 2025-09-24 16:59:34.358 00:01:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:01:10.587 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:57992 12 10365 1 2025-09-24 17:00:34.360 00:01:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 17:02:11.086 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43954 10 6452 1 2025-09-24 17:02:55.898 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:02:55.881 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:02:55.877 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:02:55.795 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:02:55.816 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:03:11.490 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42918 10 6452 1 2025-09-24 17:01:34.358 00:02:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 17:04:11.893 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41236 10 6452 1 2025-09-24 17:02:34.358 00:02:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 17:05:12.295 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46016 10 6452 1 2025-09-24 17:04:34.361 00:01:00.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:06:12.695 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40164 10 6452 1 2025-09-24 17:05:34.359 00:01:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 17:07:13.118 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50344 10 6452 1 2025-09-24 17:07:55.867 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:07:55.753 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:07:56.143 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:07:55.973 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:07:55.785 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:08:13.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39188 10 6452 1 2025-09-24 17:06:34.362 00:02:00.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 17:09:13.928 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:59064 10 6452 1 2025-09-24 17:10:14.395 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:45830 10 6452 1 2025-09-24 17:09:34.361 00:01:00.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:11:14.829 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36700 10 6452 1 2025-09-24 17:07:34.359 00:04:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 17:12:15.195 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:48528 10 6452 1 2025-09-24 17:12:55.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:12:56.178 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:12:55.962 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:12:56.113 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:12:56.196 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:13:15.612 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36532 10 6452 1 2025-09-24 17:11:34.363 00:02:00.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 17:14:16.022 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53880 10 6452 1 2025-09-24 17:15:16.423 00:00:11.019 TCP 1.101.0.1:3000 -> 23.104.0.1:57030 10 6452 1 2025-09-24 17:14:34.362 00:01:00.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:16:17.484 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:49474 10 6452 1 2025-09-24 17:12:34.360 00:04:00.161 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 17:17:17.844 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:48990 10 6452 1 2025-09-24 17:17:56.208 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:17:56.197 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:17:56.050 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:17:56.158 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:17:56.126 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:18:18.281 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42990 10 6452 1 2025-09-24 17:17:34.361 00:01:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 17:16:34.362 00:02:00.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 17:19:18.680 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41338 10 6452 1 2025-09-24 17:20:19.104 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53064 10 6452 1 2025-09-24 17:19:34.362 00:01:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:21:19.510 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:58856 12 10367 1 2025-09-24 17:19:34.360 00:02:00.161 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 17:22:19.997 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51928 10 6452 1 2025-09-24 17:22:56.368 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:22:56.226 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:22:56.361 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:22:56.236 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:22:56.319 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:22:34.360 00:01:00.161 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 17:23:20.404 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41098 10 6452 1 2025-09-24 17:24:20.804 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:38016 10 6452 1 2025-09-24 17:21:34.364 00:04:00.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 17:25:21.180 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54300 10 6452 1 2025-09-24 17:24:34.361 00:02:00.161 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 17:26:21.580 00:00:10.461 TCP 1.101.0.1:3000 -> 23.104.0.1:58318 12 10367 1 2025-09-24 17:26:34.363 00:01:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:27:22.102 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59886 10 6452 1 2025-09-24 17:27:56.339 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:27:56.425 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:27:56.350 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:27:56.256 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:27:56.338 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:28:22.506 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42500 10 6452 1 2025-09-24 17:27:34.363 00:01:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 17:29:22.873 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51940 10 6452 1 2025-09-24 17:30:23.292 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37956 10 6452 1 2025-09-24 17:28:34.365 00:02:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 17:29:34.362 00:02:00.161 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 17:31:23.697 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56860 10 6452 1 2025-09-24 17:32:24.121 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41240 10 6452 1 2025-09-24 17:31:34.366 00:01:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:32:56.631 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:32:56.636 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:32:56.716 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:32:56.646 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:32:56.547 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:32:34.362 00:01:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 17:33:24.531 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:47768 10 6452 1 2025-09-24 17:34:24.901 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:46144 10 6452 1 2025-09-24 17:33:34.365 00:02:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 17:35:25.288 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45034 10 6452 1 2025-09-24 17:34:34.363 00:02:00.161 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 17:36:25.697 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54756 10 6452 1 2025-09-24 17:36:34.368 00:01:00.153 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:37:26.109 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39092 10 6452 1 2025-09-24 17:37:56.717 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:37:56.720 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:37:56.386 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:37:56.482 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:37:56.565 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:37:34.366 00:01:00.158 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 17:38:26.513 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37200 10 6452 1 2025-09-24 17:39:26.921 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57840 10 6452 1 2025-09-24 17:38:34.368 00:02:00.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 17:40:27.341 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51658 10 6452 1 2025-09-24 17:41:27.738 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48706 10 6452 1 2025-09-24 17:41:34.373 00:01:00.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:42:28.143 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44108 10 6452 1 2025-09-24 17:42:56.629 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:42:56.754 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:42:56.570 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:42:56.537 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:42:56.621 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:39:34.367 00:04:00.158 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 17:43:28.557 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49448 10 6452 1 2025-09-24 17:44:28.960 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36808 10 6452 1 2025-09-24 17:44:34.372 00:01:00.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 17:43:34.374 00:02:00.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 17:45:29.365 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48970 10 6452 1 2025-09-24 17:46:29.727 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47594 10 6452 1 2025-09-24 17:46:34.375 00:01:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:47:30.139 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:41840 10 6452 1 2025-09-24 17:47:56.694 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:47:56.944 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:47:56.614 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:47:56.939 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:47:57.023 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:46:34.372 00:02:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 17:48:30.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50526 10 6452 1 2025-09-24 17:49:30.916 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37826 10 6452 1 2025-09-24 17:49:34.377 00:01:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 17:48:34.376 00:02:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 17:50:31.278 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46316 10 6452 1 2025-09-24 17:51:31.680 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38988 10 6452 1 2025-09-24 17:51:34.378 00:01:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:52:32.102 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51018 10 6452 1 2025-09-24 17:52:56.851 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:52:56.920 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:52:56.773 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:52:56.977 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:52:57.059 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:51:34.376 00:02:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 17:53:32.504 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49728 10 6452 1 2025-09-24 17:54:32.866 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44292 10 6452 1 2025-09-24 17:54:34.376 00:01:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 17:53:34.379 00:02:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 17:55:33.276 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33146 10 6452 1 2025-09-24 17:56:33.637 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42486 10 6452 1 2025-09-24 17:56:34.380 00:01:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:57:34.052 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:59048 10 6452 1 2025-09-24 17:57:57.147 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 17:57:56.851 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:57:56.940 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 17:57:56.940 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 17:57:57.024 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 17:56:34.376 00:02:00.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 17:58:34.459 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53148 10 6452 1 Summary: total flows: 165, total bytes: 428866, total packets: 1028, avg bps: 934, avg pps: 0, avg bpp: 417 Time window: 2025-09-24 16:57:34 - 2025-09-24 17:58:44 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0039s User: 0.0020s Wall: 0.0023s flows/second: 71835.2 Runtime: 0.0023s