Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 17:58:34.381 00:01:00.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 17:59:34.869 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48506 10 6452 1 2025-09-24 17:59:34.377 00:01:00.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:00:35.289 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52742 10 6452 1 2025-09-24 18:01:35.699 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56870 10 6452 1 2025-09-24 18:00:34.380 00:02:00.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 18:02:36.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38590 10 6452 1 2025-09-24 18:02:57.042 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:02:57.040 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:02:57.159 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:02:57.051 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:02:57.134 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:01:34.378 00:02:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 18:03:36.514 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57564 10 6452 1 2025-09-24 18:03:34.381 00:01:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:04:36.879 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51460 10 6452 1 2025-09-24 18:04:34.379 00:01:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:05:37.239 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48888 10 6452 1 2025-09-24 18:06:37.649 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57770 10 6452 1 2025-09-24 18:05:34.381 00:02:00.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 18:07:38.055 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47228 10 6452 1 2025-09-24 18:07:57.357 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:07:57.197 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:07:57.242 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:07:57.182 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:07:57.274 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:06:34.378 00:02:00.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 18:08:38.421 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59426 10 6452 1 2025-09-24 18:08:34.382 00:01:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:09:38.788 00:00:10.522 TCP 1.101.0.1:3000 -> 23.104.0.1:60716 10 6452 1 2025-09-24 18:09:34.380 00:01:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:10:39.341 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58794 10 6452 1 2025-09-24 18:11:39.743 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42626 10 6452 1 2025-09-24 18:10:34.382 00:02:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 18:12:40.154 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52158 10 6452 1 2025-09-24 18:12:57.395 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:12:57.313 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:12:57.040 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:12:57.310 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:12:57.242 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:11:34.381 00:02:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 18:13:40.552 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59550 10 6452 1 2025-09-24 18:13:34.385 00:01:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:14:40.956 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47862 10 6452 1 2025-09-24 18:14:34.385 00:01:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:15:41.357 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45940 10 6452 1 2025-09-24 18:16:41.758 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:59420 10 6452 1 2025-09-24 18:16:34.383 00:01:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:15:34.387 00:02:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 18:17:42.182 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56800 10 6452 1 2025-09-24 18:17:57.346 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:17:57.431 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:17:57.197 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:17:57.345 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:17:57.430 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:18:42.587 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45694 10 6452 1 2025-09-24 18:18:34.387 00:01:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:19:42.990 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47904 10 6452 1 2025-09-24 18:18:34.383 00:02:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 18:20:43.364 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50998 10 6452 1 2025-09-24 18:21:43.725 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54200 10 6452 1 2025-09-24 18:20:34.386 00:02:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 18:21:34.384 00:01:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:22:44.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35362 10 6452 1 2025-09-24 18:22:57.622 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:22:57.537 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:22:57.628 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:22:57.493 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:22:57.540 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:23:44.509 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45898 10 6452 1 2025-09-24 18:23:34.388 00:01:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:24:44.909 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47988 10 6452 1 2025-09-24 18:23:34.385 00:02:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 18:25:45.319 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52366 10 6452 1 2025-09-24 18:26:45.684 00:00:10.770 TCP 1.101.0.1:3000 -> 23.104.0.1:48444 10 6452 1 2025-09-24 18:26:34.386 00:01:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:25:34.387 00:02:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 18:27:57.647 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:27:57.574 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:27:57.683 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:27:57.582 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:27:46.493 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51292 10 6452 1 2025-09-24 18:27:57.565 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:28:46.900 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:56846 10 6452 1 2025-09-24 18:28:34.388 00:01:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:29:47.290 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45438 10 6452 1 2025-09-24 18:28:34.386 00:02:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 18:30:47.657 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48730 10 6452 1 2025-09-24 18:30:34.389 00:01:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:31:48.025 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33070 10 6452 1 2025-09-24 18:31:34.388 00:01:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:32:57.727 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:32:57.779 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:32:57.654 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:32:57.650 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:32:57.644 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:32:48.426 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45364 10 6452 1 2025-09-24 18:33:48.838 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:58994 10 6452 1 2025-09-24 18:32:34.389 00:02:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 18:34:49.223 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42180 10 6452 1 2025-09-24 18:33:34.386 00:02:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 18:35:49.590 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42250 10 6452 1 2025-09-24 18:35:34.391 00:01:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:36:49.998 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:51072 12 10367 1 2025-09-24 18:36:34.389 00:01:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:37:58.188 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:37:57.992 00:00:00.068 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:37:58.101 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:37:57.977 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:37:58.104 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:37:50.476 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35756 10 6452 1 2025-09-24 18:38:50.880 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54528 12 6556 1 2025-09-24 18:37:34.391 00:02:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 18:39:51.301 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42550 10 6452 1 2025-09-24 18:38:34.389 00:02:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 18:40:51.707 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52226 10 6452 1 2025-09-24 18:40:34.391 00:01:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:41:52.095 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54860 10 6452 1 2025-09-24 18:41:34.389 00:01:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:42:57.891 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:42:57.821 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:42:57.878 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:42:57.643 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:42:57.808 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:42:52.500 00:00:10.651 TCP 1.101.0.1:3000 -> 23.104.0.1:54200 10 6452 1 2025-09-24 18:43:53.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39128 10 6452 1 2025-09-24 18:42:34.390 00:02:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 18:44:53.586 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54796 10 6452 1 2025-09-24 18:43:34.387 00:02:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 18:45:53.991 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50862 10 6452 1 2025-09-24 18:45:34.390 00:01:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:46:54.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51064 10 6452 1 2025-09-24 18:46:34.387 00:01:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:47:58.209 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:47:57.905 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:47:57.986 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:47:57.864 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:47:58.124 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:47:54.760 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60620 10 6452 1 2025-09-24 18:48:55.163 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48144 10 6452 1 2025-09-24 18:47:34.390 00:02:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 18:48:34.389 00:01:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:49:55.525 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46234 10 6452 1 2025-09-24 18:50:55.928 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45646 10 6452 1 2025-09-24 18:50:34.392 00:01:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:51:56.350 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48978 10 6452 1 2025-09-24 18:50:34.389 00:02:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 18:52:58.220 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:52:58.196 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:52:58.245 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:52:57.889 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:52:58.137 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:52:56.752 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:34262 10 6452 1 2025-09-24 18:53:57.119 00:00:10.807 TCP 1.101.0.1:3000 -> 23.104.0.1:39736 10 6452 1 2025-09-24 18:53:34.389 00:01:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 18:52:34.392 00:02:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 18:54:57.965 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46512 10 6452 1 2025-09-24 18:55:58.371 00:00:18.250 TCP 1.101.0.1:3000 -> 23.104.0.1:51786 10 6452 1 2025-09-24 18:55:34.404 00:01:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 18:57:06.667 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:50638 11 6504 1 2025-09-24 18:55:34.390 00:02:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 18:57:58.170 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 18:57:58.168 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 18:57:58.130 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:57:58.237 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 18:57:58.320 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 18:58:07.136 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40562 10 6452 1 Summary: total flows: 167, total bytes: 414373, total packets: 1011, avg bps: 925, avg pps: 0, avg bpp: 409 Time window: 2025-09-24 17:58:34 - 2025-09-24 18:58:17 Total flows processed: 167, passed: 167, Blocks skipped: 0, Bytes read: 17432 Sys: 0.0033s User: 0.0011s Wall: 0.0023s flows/second: 73793.6 Runtime: 0.0023s