Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 03:59:29.116 00:00:10.790 TCP 1.101.0.1:3000 -> 23.104.0.1:55794 10 6452 1 2025-10-05 03:59:39.360 00:01:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 04:00:29.957 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41970 10 6452 1 2025-10-05 04:01:30.376 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38566 10 6452 1 2025-10-05 04:02:30.735 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40650 10 6452 1 2025-10-05 04:02:58.071 00:00:00.051 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:02:57.948 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:02:57.937 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:02:57.749 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:02:57.989 00:00:00.051 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 03:59:39.358 00:04:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-05 04:03:31.107 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38634 10 6452 1 2025-10-05 04:04:31.501 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60668 10 6452 1 2025-10-05 04:04:39.359 00:01:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 04:01:39.361 00:04:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-05 04:05:31.913 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47924 10 6452 1 2025-10-05 04:06:32.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35450 10 6452 1 2025-10-05 04:07:32.720 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52200 10 6452 1 2025-10-05 04:07:58.061 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:07:58.066 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:07:57.917 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:07:58.204 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:07:58.287 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:06:39.363 00:02:00.386 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 04:08:33.136 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46884 10 6452 1 2025-10-05 04:09:33.540 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35268 10 6452 1 2025-10-05 04:09:39.362 00:01:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 04:06:39.365 00:04:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-05 04:10:33.906 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39120 10 6452 1 2025-10-05 04:11:34.310 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51558 10 6452 1 2025-10-05 04:11:39.365 00:01:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 04:12:34.676 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35366 10 6452 1 2025-10-05 04:12:58.033 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:12:58.146 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:12:58.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:12:58.163 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:12:57.951 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:11:39.363 00:02:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 04:13:35.099 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41170 10 6452 1 2025-10-05 04:14:35.505 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59368 10 6452 1 2025-10-05 04:14:39.365 00:01:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 04:13:39.367 00:02:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 04:15:35.910 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55524 10 6452 1 2025-10-05 04:16:36.276 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55058 10 6452 1 2025-10-05 04:16:39.368 00:01:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 04:17:36.679 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39004 10 6452 1 2025-10-05 04:17:58.771 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:17:58.677 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:17:58.490 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:17:58.767 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:17:58.572 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:16:39.366 00:02:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 04:18:37.114 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55580 10 6452 1 2025-10-05 04:19:37.511 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37972 10 6452 1 2025-10-05 04:19:39.367 00:01:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 04:18:39.368 00:02:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 04:20:37.873 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45560 10 6452 1 2025-10-05 04:21:38.277 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37032 10 6452 1 2025-10-05 04:21:39.369 00:01:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 04:22:38.680 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:53350 10 6452 1 2025-10-05 04:22:58.466 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:22:58.205 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:22:58.248 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:22:58.112 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:22:58.195 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:21:39.366 00:02:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 04:23:39.057 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57980 10 6452 1 2025-10-05 04:24:39.465 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51138 10 6452 1 2025-10-05 04:24:39.368 00:01:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 04:23:39.369 00:02:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 04:25:39.862 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:42662 10 6452 1 2025-10-05 04:26:40.250 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38474 10 6452 1 2025-10-05 04:26:39.371 00:01:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 04:27:40.654 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:42520 10 6452 1 2025-10-05 04:27:58.451 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:27:58.453 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:27:58.510 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:27:58.513 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:27:58.536 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:26:39.369 00:02:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 04:28:41.042 00:00:10.542 TCP 1.101.0.1:3000 -> 23.104.0.1:54666 10 6452 1 2025-10-05 04:29:41.623 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56716 10 6452 1 2025-10-05 04:28:39.372 00:02:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 04:29:39.370 00:01:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 04:30:42.021 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45028 10 6452 1 2025-10-05 04:31:42.423 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50614 10 6452 1 2025-10-05 04:31:39.374 00:01:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 04:32:42.827 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:49876 10 6452 1 2025-10-05 04:32:58.586 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:32:58.536 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:32:58.542 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:32:58.503 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:32:58.666 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:31:39.370 00:02:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 04:33:43.226 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35404 10 6452 1 2025-10-05 04:34:43.632 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45958 10 6452 1 2025-10-05 04:33:39.374 00:02:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 04:34:39.372 00:01:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 04:35:44.065 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39118 10 6452 1 2025-10-05 04:36:44.423 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35574 10 6452 1 2025-10-05 04:36:39.374 00:01:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 04:37:59.120 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:37:58.753 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:37:58.642 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:37:44.826 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44066 10 6452 1 2025-10-05 04:37:59.255 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:37:59.337 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:38:45.187 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56960 10 6452 1 2025-10-05 04:38:39.374 00:01:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 04:39:45.590 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49700 10 6452 1 2025-10-05 04:36:39.371 00:04:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-05 04:40:46.010 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45938 10 6452 1 2025-10-05 04:41:46.379 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:47742 10 6452 1 2025-10-05 04:41:39.373 00:01:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 04:40:39.375 00:02:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 04:42:58.765 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:42:58.937 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:42:58.838 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:42:46.759 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34202 10 6452 1 2025-10-05 04:42:58.682 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:42:58.847 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:43:47.172 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34272 10 6452 1 2025-10-05 04:43:39.375 00:01:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 04:44:47.536 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33082 10 6452 1 2025-10-05 04:43:39.373 00:02:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 04:45:47.939 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 10 6452 1 2025-10-05 04:46:48.363 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54798 10 6452 1 2025-10-05 04:46:39.374 00:01:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 04:45:39.376 00:02:00.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 04:47:58.641 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:47:58.883 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:47:58.530 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:47:48.763 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38578 10 6452 1 2025-10-05 04:47:58.945 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:47:59.030 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:48:49.181 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58818 10 6452 1 2025-10-05 04:48:39.379 00:01:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 04:49:49.584 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60674 10 6452 1 2025-10-05 04:48:39.376 00:02:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 04:50:49.987 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41842 10 6452 1 2025-10-05 04:51:50.395 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53746 10 6452 1 2025-10-05 04:51:39.377 00:01:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 04:50:39.379 00:02:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 04:52:58.991 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:52:58.759 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:52:58.760 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:52:59.001 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:52:58.909 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:52:50.796 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:39102 10 6452 1 2025-10-05 04:53:51.230 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:34284 12 10369 1 2025-10-05 04:53:39.379 00:01:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 04:54:51.707 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57476 10 6452 1 2025-10-05 04:53:39.376 00:02:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 04:55:52.119 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60484 10 6452 1 2025-10-05 04:56:52.525 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58130 10 6452 1 2025-10-05 04:56:39.379 00:01:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 04:55:39.381 00:02:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 04:57:59.360 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 04:57:59.271 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 04:57:58.939 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:57:59.277 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 04:57:59.266 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 04:57:52.935 00:00:10.541 TCP 1.101.0.1:3000 -> 23.104.0.1:57770 10 6452 1 Summary: total flows: 163, total bytes: 414219, total packets: 1008, avg bps: 942, avg pps: 0, avg bpp: 410 Time window: 2025-10-05 03:59:29 - 2025-10-05 04:58:03 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0008s User: 0.0042s Wall: 0.0023s flows/second: 71965.4 Runtime: 0.0023s