Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 13:58:54.742 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45994 10 6452 1 2025-10-07 13:59:07.843 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 13:59:07.526 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 13:59:07.677 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 13:59:07.751 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 13:59:07.761 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 13:58:40.720 00:01:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 13:59:40.720 00:00:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 13:59:55.116 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53012 10 6452 1 2025-10-07 14:00:55.519 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60426 10 6452 1 2025-10-07 14:00:40.719 00:01:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 14:00:40.722 00:01:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 14:01:55.920 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43888 10 6452 1 2025-10-07 14:02:40.720 00:00:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 14:02:40.723 00:00:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:02:56.319 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52270 10 6452 1 2025-10-07 14:03:40.722 00:00:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:03:56.728 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51056 10 6452 1 2025-10-07 14:04:08.403 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 14:04:08.150 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:04:08.469 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:04:08.580 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 14:04:08.552 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 14:04:40.722 00:00:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:03:40.721 00:01:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 14:04:57.141 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43616 10 6452 1 2025-10-07 14:05:57.553 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51970 10 6452 1 2025-10-07 14:05:40.722 00:01:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 14:05:40.725 00:01:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 14:06:57.974 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46042 10 6452 1 2025-10-07 14:07:40.722 00:00:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 14:07:40.724 00:00:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:07:58.396 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53432 10 6452 1 2025-10-07 14:08:40.722 00:00:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 14:08:40.725 00:00:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:09:07.816 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 14:09:07.733 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:09:07.822 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 14:08:58.804 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38134 10 6452 1 2025-10-07 14:09:07.815 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 14:09:07.667 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:09:40.724 00:00:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:09:40.721 00:00:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 14:09:59.218 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40634 10 6452 1 2025-10-07 14:10:59.623 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53300 10 6452 1 2025-10-07 14:10:40.721 00:01:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 14:10:40.725 00:01:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 14:11:59.989 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34126 10 6452 1 2025-10-07 14:12:40.722 00:00:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 14:12:40.724 00:00:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:13:00.405 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:42670 10 6452 1 2025-10-07 14:13:40.722 00:00:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 14:13:40.726 00:00:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:14:08.071 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 14:14:07.993 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 14:14:08.166 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:14:07.989 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:14:08.150 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 14:14:00.825 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:45258 10 6452 1 2025-10-07 14:14:40.724 00:00:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:14:40.722 00:00:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 14:15:01.257 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:36682 12 10375 1 2025-10-07 14:16:01.738 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51862 10 6452 1 2025-10-07 14:15:40.725 00:01:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 14:15:40.722 00:01:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 14:17:02.142 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42678 10 6452 1 2025-10-07 14:17:40.723 00:00:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 14:17:40.726 00:00:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:18:02.549 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57018 10 6452 1 2025-10-07 14:18:40.722 00:00:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 14:18:40.725 00:00:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:19:08.005 00:00:00.037 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 14:19:07.886 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:19:08.006 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:19:08.087 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 14:19:08.087 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 14:19:02.947 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49730 10 6452 1 2025-10-07 14:19:40.722 00:00:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 14:19:40.725 00:00:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:20:03.369 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:41994 12 10375 1 2025-10-07 14:21:03.849 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:36876 10 6452 1 2025-10-07 14:20:40.724 00:01:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 14:20:40.727 00:01:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 14:22:04.240 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56978 10 6452 1 2025-10-07 14:23:04.637 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49582 10 6452 1 2025-10-07 14:22:40.723 00:01:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 14:22:40.726 00:01:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 14:24:08.051 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 14:24:07.992 00:00:00.051 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 14:24:08.064 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:24:07.969 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:24:08.179 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 14:24:05.057 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56416 10 6452 1 2025-10-07 14:24:40.723 00:00:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 14:24:40.726 00:00:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 14:25:05.456 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43754 10 6452 1 2025-10-07 14:26:05.860 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36444 10 6452 1 2025-10-07 14:25:40.724 00:01:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 14:25:40.726 00:01:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 14:27:06.281 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58868 11 6492 1 2025-10-07 14:28:06.680 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41268 10 6452 1 2025-10-07 14:29:08.347 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 14:29:08.215 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:29:08.254 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:29:08.200 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 14:29:08.336 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 14:29:07.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52032 10 6452 1 2025-10-07 14:30:07.517 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45446 10 6452 1 2025-10-07 14:31:07.928 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46422 10 6452 1 2025-10-07 14:27:40.727 00:05:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 14:27:40.724 00:05:00.280 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 14:32:08.334 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40616 10 6452 1 2025-10-07 14:33:08.696 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60144 10 6452 1 2025-10-07 14:34:08.798 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 14:34:08.804 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:34:08.660 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:34:08.797 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 14:34:08.742 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 14:34:09.110 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51502 10 6452 1 2025-10-07 14:35:09.518 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:42034 10 6452 1 2025-10-07 14:36:09.934 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:36592 10 6452 1 2025-10-07 14:37:10.369 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44074 10 6452 1 2025-10-07 14:33:40.728 00:05:00.292 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 14:33:40.726 00:05:00.296 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 14:38:10.787 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47546 10 6452 1 2025-10-07 14:39:08.450 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 14:39:08.359 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:39:08.247 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:39:08.454 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 14:39:08.329 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 14:39:11.193 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54284 10 6452 1 2025-10-07 14:40:11.607 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57954 10 6452 1 2025-10-07 14:41:12.013 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43656 10 6452 1 2025-10-07 14:42:12.413 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56492 10 6452 1 2025-10-07 14:43:12.815 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49778 10 6452 1 2025-10-07 14:39:40.732 00:05:00.300 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 14:39:40.729 00:05:00.305 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 14:44:08.694 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 14:44:08.495 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 14:44:08.591 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:44:08.610 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:44:08.622 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 14:44:13.216 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60390 10 6452 1 2025-10-07 14:45:13.618 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37378 10 6452 1 2025-10-07 14:46:13.985 00:00:10.849 TCP 1.101.0.1:3000 -> 23.104.0.1:41160 10 6452 1 2025-10-07 14:47:14.867 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45908 10 6452 1 2025-10-07 14:48:15.277 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57968 10 6452 1 2025-10-07 14:49:08.648 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 14:49:08.704 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 14:49:08.728 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:49:08.566 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:49:08.639 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 14:49:15.677 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:37616 12 10369 1 2025-10-07 14:45:40.733 00:05:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 14:45:40.730 00:05:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 14:50:16.153 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56260 10 6452 1 2025-10-07 14:51:16.563 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59558 10 6452 1 2025-10-07 14:52:16.965 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6452 1 2025-10-07 14:53:17.373 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51922 10 6452 1 2025-10-07 14:54:08.880 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 14:54:08.353 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:54:08.689 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 14:54:08.685 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 14:54:08.772 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 14:54:17.781 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51648 10 6452 1 2025-10-07 14:55:18.193 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47276 10 6452 1 2025-10-07 14:51:40.734 00:05:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 14:51:40.732 00:05:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 14:56:18.593 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:39932 11 6504 1 2025-10-07 14:57:19.085 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44344 10 6452 1 2025-10-07 14:58:19.451 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50752 10 6452 1 Summary: total flows: 171, total bytes: 428486, total packets: 1022, avg bps: 955, avg pps: 0, avg bpp: 419 Time window: 2025-10-07 13:58:40 - 2025-10-07 14:58:29 Total flows processed: 171, passed: 171, Blocks skipped: 0, Bytes read: 17848 Sys: 0.0025s User: 0.0025s Wall: 0.0026s flows/second: 66514.5 Runtime: 0.0026s