Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 02:58:48.548 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57846 10 6452 1 2025-10-15 02:58:44.374 00:01:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 02:59:48.953 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58108 10 6452 1 2025-10-15 02:58:44.377 00:02:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-15 03:00:49.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53334 10 6452 1 2025-10-15 03:01:49.765 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:54898 12 10375 1 2025-10-15 03:00:44.375 00:02:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-15 03:01:44.377 00:01:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:02:45.583 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:02:45.453 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:02:45.551 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:02:45.653 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:02:45.739 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:02:50.252 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50434 10 6452 1 2025-10-15 03:03:50.657 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40484 10 6452 1 2025-10-15 03:03:44.376 00:01:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:04:51.066 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35014 10 6452 1 2025-10-15 03:03:44.378 00:02:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-15 03:05:51.466 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33072 10 6452 1 2025-10-15 03:06:51.886 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:40116 10 6452 1 2025-10-15 03:06:44.379 00:01:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:05:44.377 00:02:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-15 03:07:45.645 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:07:45.785 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:07:45.546 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:07:45.704 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:07:45.788 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:07:52.303 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58000 10 6452 1 2025-10-15 03:08:52.708 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40498 10 6452 1 2025-10-15 03:08:44.378 00:01:00.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:09:53.114 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:44152 10 6452 1 2025-10-15 03:08:44.381 00:02:00.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-15 03:10:53.478 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-10-15 03:11:53.879 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47178 10 6452 1 2025-10-15 03:11:44.382 00:01:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:12:45.490 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:12:45.587 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:12:45.705 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:12:45.586 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:10:44.379 00:02:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-15 03:12:45.668 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:12:54.285 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49152 10 6452 1 2025-10-15 03:13:54.685 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57674 10 6452 1 2025-10-15 03:13:44.382 00:01:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:14:55.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45342 10 6452 1 2025-10-15 03:13:44.383 00:02:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-15 03:15:55.509 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:35184 11 6504 1 2025-10-15 03:16:55.962 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59374 12 6556 1 2025-10-15 03:15:44.380 00:02:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-15 03:17:45.985 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:16:44.386 00:01:00.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:17:45.906 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:17:45.804 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:17:45.781 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:17:45.901 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:17:56.378 00:00:10.550 TCP 1.101.0.1:3000 -> 23.104.0.1:43220 10 6452 1 2025-10-15 03:18:56.971 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38620 10 6452 1 2025-10-15 03:18:44.385 00:01:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:18:44.383 00:01:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:19:57.339 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40420 10 6452 1 2025-10-15 03:20:57.745 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55284 10 6452 1 2025-10-15 03:21:58.146 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 10 6452 1 2025-10-15 03:20:44.385 00:02:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-15 03:20:44.387 00:02:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-15 03:22:45.946 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:22:45.912 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:22:45.918 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:22:45.849 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:22:45.932 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:22:58.553 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37232 10 6452 1 2025-10-15 03:23:58.908 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51858 10 6452 1 2025-10-15 03:23:44.384 00:01:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:23:44.387 00:01:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:24:59.275 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39282 10 6452 1 2025-10-15 03:25:59.676 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60418 10 6452 1 2025-10-15 03:27:00.101 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37186 10 6452 1 2025-10-15 03:25:44.387 00:02:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-15 03:25:44.385 00:02:00.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-15 03:27:45.881 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:27:45.900 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:27:45.930 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:27:46.113 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:27:46.196 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:28:00.500 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52432 10 6452 1 2025-10-15 03:29:00.906 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55360 10 6452 1 2025-10-15 03:28:44.387 00:01:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:28:44.384 00:01:00.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:30:01.319 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59138 10 6452 1 2025-10-15 03:31:01.738 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58790 10 6452 1 2025-10-15 03:30:44.386 00:01:00.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:32:02.118 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57666 10 6452 1 2025-10-15 03:30:44.387 00:02:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-15 03:32:45.934 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:32:46.138 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:32:45.872 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:32:46.054 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:32:46.138 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:33:02.485 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55734 10 6452 1 2025-10-15 03:34:02.842 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:58304 10 6452 1 2025-10-15 03:32:44.386 00:02:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-15 03:33:44.389 00:01:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:35:03.264 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46284 10 6452 1 2025-10-15 03:36:03.667 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54610 10 6452 1 2025-10-15 03:35:44.387 00:01:00.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:37:04.101 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51046 10 6452 1 2025-10-15 03:35:44.388 00:02:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-15 03:37:46.516 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:37:46.348 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:37:46.365 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:37:46.179 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:37:46.263 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:38:04.502 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44252 10 6452 1 2025-10-15 03:39:04.909 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51118 12 6556 1 2025-10-15 03:38:44.391 00:01:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:37:44.386 00:02:00.460 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-15 03:40:05.319 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:51906 10 6452 1 2025-10-15 03:41:05.718 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:49350 10 6452 1 2025-10-15 03:40:44.387 00:01:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:42:06.135 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56670 10 6452 1 2025-10-15 03:40:44.390 00:02:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-15 03:42:46.424 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:42:46.259 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:42:46.427 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:42:46.290 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:42:46.341 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:43:06.542 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:34500 11 6504 1 2025-10-15 03:44:06.988 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52468 10 6452 1 2025-10-15 03:43:44.391 00:01:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:42:44.389 00:02:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-15 03:45:07.397 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54550 10 6452 1 2025-10-15 03:46:07.801 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50532 10 6452 1 2025-10-15 03:45:44.390 00:01:00.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:47:08.217 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-10-15 03:45:44.392 00:02:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-15 03:47:46.311 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:47:46.504 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:47:46.346 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:47:46.397 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:47:46.479 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:48:08.625 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52904 10 6452 1 2025-10-15 03:49:08.989 00:00:10.568 TCP 1.101.0.1:3000 -> 23.104.0.1:39144 10 6452 1 2025-10-15 03:47:44.392 00:02:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-15 03:48:44.396 00:01:00.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:50:09.596 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42842 10 6452 1 2025-10-15 03:51:10.000 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34274 10 6452 1 2025-10-15 03:50:44.394 00:01:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:52:10.404 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54936 10 6452 1 2025-10-15 03:50:44.396 00:02:00.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-15 03:52:46.625 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:52:46.534 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:52:46.423 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:52:46.476 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:52:46.560 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:53:10.807 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51972 10 6452 1 2025-10-15 03:54:11.226 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47034 10 6452 1 2025-10-15 03:53:44.398 00:01:00.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:52:44.395 00:02:00.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-15 03:55:11.648 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52064 10 6452 1 2025-10-15 03:56:12.063 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42484 10 6452 1 2025-10-15 03:55:44.401 00:01:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-15 03:55:44.405 00:01:00.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-15 03:57:12.470 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59528 10 6452 1 2025-10-15 03:57:46.807 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 03:57:46.722 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 03:57:46.779 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:57:46.722 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 03:57:46.516 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 03:58:12.877 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39788 10 6452 1 Summary: total flows: 168, total bytes: 420989, total packets: 1024, avg bps: 941, avg pps: 0, avg bpp: 411 Time window: 2025-10-15 02:58:44 - 2025-10-15 03:58:23 Total flows processed: 168, passed: 168, Blocks skipped: 0, Bytes read: 17536 Sys: 0.0046s User: 0.0009s Wall: 0.0030s flows/second: 55387.8 Runtime: 0.0031s