Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 14:59:11.655 00:00:11.272 TCP 1.101.0.1:3000 -> 23.104.0.1:39400 10 6452 1 2025-10-24 15:00:12.967 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 10 6452 1 2025-10-24 15:01:13.372 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55328 10 6452 1 2025-10-24 14:59:49.317 00:02:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 14:59:49.314 00:02:00.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 15:02:19.968 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:02:20.254 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:02:19.995 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:02:13.777 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57960 10 6452 1 2025-10-24 15:02:20.375 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:02:20.458 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:03:14.145 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59306 10 6452 1 2025-10-24 15:02:49.317 00:01:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 15:02:49.315 00:01:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 15:04:14.548 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44396 10 6452 1 2025-10-24 15:05:14.907 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40118 10 6452 1 2025-10-24 15:06:15.322 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39482 10 6452 1 2025-10-24 15:04:49.320 00:02:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 15:07:20.511 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:07:20.399 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:07:20.128 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:07:20.297 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:07:20.380 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:07:15.724 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44994 10 6452 1 2025-10-24 15:08:16.135 00:00:10.553 TCP 1.101.0.1:3000 -> 23.104.0.1:43762 10 6452 1 2025-10-24 15:04:49.317 00:04:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 15:07:49.321 00:01:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 15:09:16.729 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35016 10 6452 1 2025-10-24 15:10:17.137 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46874 10 6452 1 2025-10-24 15:11:17.541 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40680 10 6452 1 2025-10-24 15:09:49.319 00:02:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 15:12:20.437 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:12:20.303 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:12:20.318 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:12:20.446 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:12:20.529 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:12:17.944 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35208 10 6452 1 2025-10-24 15:13:18.360 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:55304 11 6504 1 2025-10-24 15:12:49.321 00:01:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 15:09:49.319 00:04:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 15:14:18.811 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45014 10 6452 1 2025-10-24 15:15:19.217 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52738 10 6452 1 2025-10-24 15:16:19.613 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42038 10 6452 1 2025-10-24 15:14:49.322 00:02:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 15:17:20.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:17:20.481 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:17:20.315 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:17:20.484 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:17:20.566 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:17:20.018 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54222 10 6452 1 2025-10-24 15:18:20.388 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45390 10 6452 1 2025-10-24 15:17:49.322 00:01:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 15:14:49.319 00:04:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 15:19:20.752 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42148 10 6452 1 2025-10-24 15:20:21.152 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53202 10 6452 1 2025-10-24 15:19:49.319 00:01:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 15:21:21.559 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44108 10 6452 1 2025-10-24 15:22:20.915 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:22:20.428 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:22:20.833 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:22:20.391 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:22:20.663 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:22:21.957 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35958 10 6452 1 2025-10-24 15:23:22.322 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44594 10 6452 1 2025-10-24 15:21:49.320 00:02:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 15:19:49.322 00:04:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 15:24:22.729 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58442 10 6452 1 2025-10-24 15:25:23.141 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:37076 12 10375 1 2025-10-24 15:24:49.322 00:01:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 15:26:23.622 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58684 10 6452 1 2025-10-24 15:27:20.894 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:27:20.889 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:27:20.905 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:27:20.899 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:27:20.982 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:27:24.030 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:56600 10 6452 1 2025-10-24 15:28:24.393 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52650 10 6452 1 2025-10-24 15:26:49.321 00:02:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 15:24:49.323 00:04:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 15:29:24.794 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40080 10 6452 1 2025-10-24 15:30:25.200 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56892 10 6452 1 2025-10-24 15:29:49.324 00:01:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 15:29:49.322 00:01:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 15:31:25.604 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:48840 10 6452 1 2025-10-24 15:32:20.997 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:32:20.830 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:32:20.739 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:32:20.907 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:32:21.080 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:32:26.023 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52154 10 6452 1 2025-10-24 15:33:26.423 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42090 10 6452 1 2025-10-24 15:31:49.326 00:02:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 15:31:49.325 00:02:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 15:34:26.782 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48828 10 6452 1 2025-10-24 15:35:27.198 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46640 10 6452 1 2025-10-24 15:34:49.324 00:01:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 15:34:49.328 00:01:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 15:36:27.600 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44822 10 6452 1 2025-10-24 15:37:21.015 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:37:21.089 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:37:20.860 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:37:20.780 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:37:20.931 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:37:28.003 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51562 10 6452 1 2025-10-24 15:38:28.408 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41720 10 6452 1 2025-10-24 15:36:49.325 00:02:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 15:36:49.328 00:02:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 15:39:28.771 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:52576 10 6452 1 2025-10-24 15:40:29.139 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38702 10 6452 1 2025-10-24 15:39:49.329 00:01:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 15:39:49.327 00:01:00.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 15:41:29.552 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58404 10 6452 1 2025-10-24 15:42:21.188 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:42:21.156 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:42:21.047 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:42:21.106 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:42:21.151 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:42:29.963 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:59742 10 6452 1 2025-10-24 15:43:30.336 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37798 10 6452 1 2025-10-24 15:41:49.329 00:02:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 15:44:30.735 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43608 10 6452 1 2025-10-24 15:45:31.145 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:45664 12 10369 1 2025-10-24 15:41:49.326 00:04:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 15:44:49.331 00:01:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 15:46:31.584 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41614 10 6452 1 2025-10-24 15:47:21.282 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:47:20.995 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:47:21.241 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:47:21.137 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:47:21.201 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:47:31.985 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33184 10 6452 1 2025-10-24 15:48:32.391 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37742 10 6452 1 2025-10-24 15:46:49.332 00:02:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 15:49:32.754 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33854 10 6452 1 2025-10-24 15:50:33.157 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56674 10 6452 1 2025-10-24 15:49:49.336 00:01:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 15:46:49.330 00:04:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 15:51:33.560 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60912 10 6452 1 2025-10-24 15:52:21.187 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:52:21.181 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:52:21.229 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:52:21.301 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:52:21.385 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:52:33.959 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40028 10 6452 1 2025-10-24 15:51:49.335 00:01:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 15:53:34.324 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42458 10 6452 1 2025-10-24 15:54:34.730 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49764 10 6452 1 2025-10-24 15:51:49.337 00:04:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 15:55:35.137 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50300 10 6452 1 2025-10-24 15:53:49.336 00:02:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 15:56:35.547 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44176 10 6452 1 2025-10-24 15:57:21.428 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 15:57:21.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 15:57:21.237 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:57:21.425 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 15:57:21.510 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 15:56:49.335 00:01:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 15:57:35.957 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39622 10 6452 1 2025-10-24 15:58:36.329 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57556 10 6452 1 Summary: total flows: 159, total bytes: 424400, total packets: 1017, avg bps: 949, avg pps: 0, avg bpp: 417 Time window: 2025-10-24 14:59:11 - 2025-10-24 15:58:46 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0038s User: 0.0019s Wall: 0.0021s flows/second: 75534.5 Runtime: 0.0021s