Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 05:59:19.449 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-10-05 05:57:39.391 00:02:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 06:00:19.855 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55408 10 6452 1 2025-10-05 06:01:20.274 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44358 10 6452 1 2025-10-05 05:59:39.395 00:02:00.388 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 06:00:39.392 00:01:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:02:20.688 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:54286 10 6452 1 2025-10-05 06:03:00.616 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:03:00.289 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:03:00.414 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:03:00.214 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:03:00.533 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:03:21.099 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49260 12 6556 1 2025-10-05 06:02:39.397 00:01:00.387 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:04:21.494 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44088 10 6452 1 2025-10-05 06:02:39.393 00:02:00.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 06:05:21.899 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56044 10 6452 1 2025-10-05 06:06:22.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48466 10 6452 1 2025-10-05 06:04:39.396 00:02:00.387 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 06:05:39.395 00:01:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:07:22.720 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54244 10 6452 1 2025-10-05 06:08:00.578 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:08:00.511 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:08:00.449 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:08:00.775 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:08:00.858 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:08:23.138 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39006 10 6452 1 2025-10-05 06:07:39.398 00:01:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:09:23.543 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51934 10 6452 1 2025-10-05 06:07:39.396 00:02:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 06:10:23.903 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45326 10 6452 1 2025-10-05 06:11:24.270 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 10 6452 1 2025-10-05 06:10:39.395 00:01:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:09:39.399 00:02:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 06:12:24.633 00:00:11.111 TCP 1.101.0.1:3000 -> 23.104.0.1:56296 10 6452 1 2025-10-05 06:13:00.516 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:13:00.434 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:13:00.586 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:13:00.523 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:13:00.670 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:12:39.400 00:01:00.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:13:25.785 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37060 10 6452 1 2025-10-05 06:12:39.396 00:01:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:14:26.188 00:00:10.703 TCP 1.101.0.1:3000 -> 23.104.0.1:47080 10 6452 1 2025-10-05 06:14:39.399 00:01:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:15:26.934 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52710 10 6452 1 2025-10-05 06:14:39.397 00:02:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 06:16:39.401 00:00:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-05 06:16:27.357 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41616 10 6452 1 2025-10-05 06:17:27.756 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44346 10 6452 1 2025-10-05 06:18:00.870 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:18:00.786 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:18:00.678 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:18:00.586 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:18:00.787 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:17:39.400 00:01:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:18:28.157 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:58564 12 10375 1 2025-10-05 06:17:39.399 00:01:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:19:28.591 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43700 10 6452 1 2025-10-05 06:19:39.400 00:01:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:20:28.995 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41380 10 6452 1 2025-10-05 06:19:39.398 00:02:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 06:21:29.406 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43958 10 6452 1 2025-10-05 06:22:29.805 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54212 10 6452 1 2025-10-05 06:23:00.869 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:23:00.782 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:23:00.669 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:23:00.487 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:23:00.787 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:22:39.398 00:01:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:21:39.401 00:02:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 06:23:30.206 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49044 10 6452 1 2025-10-05 06:24:30.609 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38458 10 6452 1 2025-10-05 06:24:39.403 00:01:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:25:31.017 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49804 10 6452 1 2025-10-05 06:24:39.400 00:02:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 06:26:31.417 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52544 10 6452 1 2025-10-05 06:27:31.829 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46260 10 6452 1 2025-10-05 06:28:01.001 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:28:01.051 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:28:00.797 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:28:00.553 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:28:00.917 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:27:39.400 00:01:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:26:39.403 00:02:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 06:28:32.232 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37248 10 6452 1 2025-10-05 06:29:32.596 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37746 10 6452 1 2025-10-05 06:29:39.404 00:01:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:30:33.001 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34090 10 6452 1 2025-10-05 06:29:39.401 00:02:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 06:31:33.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36930 10 6452 1 2025-10-05 06:32:33.758 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49366 10 6452 1 2025-10-05 06:33:00.979 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:33:00.862 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:33:00.819 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:33:00.867 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:33:00.948 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:31:39.404 00:02:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 06:32:39.403 00:01:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:33:34.178 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50092 10 6452 1 2025-10-05 06:34:34.580 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:52164 10 6452 1 2025-10-05 06:34:39.406 00:01:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:35:34.961 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40126 10 6452 1 2025-10-05 06:34:39.403 00:02:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 06:36:35.397 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59598 10 6452 1 2025-10-05 06:37:35.801 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39072 10 6452 1 2025-10-05 06:38:01.227 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:38:01.138 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:38:01.211 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:38:00.764 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:38:01.146 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:37:39.405 00:01:00.386 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:36:39.405 00:02:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 06:38:36.207 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42666 10 6452 1 2025-10-05 06:39:36.612 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51564 10 6452 1 2025-10-05 06:39:39.412 00:01:00.377 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:40:37.023 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49594 10 6452 1 2025-10-05 06:39:39.409 00:02:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 06:41:37.392 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53848 10 6452 1 2025-10-05 06:42:37.801 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38108 10 6452 1 2025-10-05 06:43:01.278 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:43:01.143 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:43:01.075 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:43:00.965 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:43:01.195 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:42:39.411 00:01:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:41:39.413 00:02:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 06:43:38.213 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58296 10 6452 1 2025-10-05 06:44:38.602 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59776 10 6452 1 2025-10-05 06:44:39.416 00:01:00.375 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:44:39.415 00:01:00.381 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:45:38.969 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39600 10 6452 1 2025-10-05 06:46:39.415 00:00:00.380 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-05 06:46:39.389 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50072 10 6452 1 2025-10-05 06:47:39.794 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58754 10 6452 1 2025-10-05 06:48:01.176 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:48:01.176 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:48:01.176 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:48:01.199 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:48:01.260 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:46:39.417 00:02:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 06:47:39.414 00:01:00.382 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:48:40.207 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39170 10 6452 1 2025-10-05 06:49:40.606 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45910 10 6452 1 2025-10-05 06:49:39.416 00:01:00.381 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:49:39.418 00:01:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:50:41.007 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41318 10 6452 1 2025-10-05 06:51:41.408 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38132 10 6452 1 2025-10-05 06:51:39.419 00:01:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:52:41.820 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:57504 10 6452 1 2025-10-05 06:53:01.303 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:53:01.319 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:53:01.249 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:53:01.412 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:53:01.496 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:51:39.417 00:02:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-05 06:53:42.277 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36312 10 6452 1 2025-10-05 06:54:42.681 00:00:10.934 TCP 1.101.0.1:3000 -> 23.104.0.1:39458 10 6452 1 2025-10-05 06:53:39.418 00:02:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-05 06:54:39.415 00:01:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-05 06:55:43.664 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58124 10 6452 1 2025-10-05 06:56:44.106 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56160 10 6452 1 2025-10-05 06:56:39.418 00:01:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-05 06:57:44.502 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33756 10 6452 1 2025-10-05 06:58:01.644 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 06:58:01.340 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 06:58:01.417 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 06:58:01.434 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:58:01.561 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 06:56:39.416 00:02:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 Summary: total flows: 170, total bytes: 414698, total packets: 1016, avg bps: 906, avg pps: 0, avg bpp: 408 Time window: 2025-10-05 05:57:39 - 2025-10-05 06:58:39 Total flows processed: 170, passed: 170, Blocks skipped: 0, Bytes read: 17744 Sys: 0.0044s User: 0.0000s Wall: 0.0015s flows/second: 115246.8 Runtime: 0.0015s