Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 21:59:14.515 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59368 10 6452 1 2025-10-16 21:57:45.344 00:02:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 22:00:14.920 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45850 10 6452 1 2025-10-16 21:59:45.349 00:01:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 22:01:15.325 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45710 10 6452 1 2025-10-16 22:00:45.348 00:01:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 22:02:15.724 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:49710 10 6452 1 2025-10-16 22:03:16.133 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55634 10 6452 1 2025-10-16 22:03:37.404 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:03:37.321 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:03:37.096 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:03:37.321 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:03:37.242 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:01:45.349 00:02:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 22:04:16.533 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45766 10 6452 1 2025-10-16 22:02:45.347 00:02:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 22:05:16.936 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:46864 10 6452 1 2025-10-16 22:04:45.350 00:01:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 22:06:17.316 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33406 10 6452 1 2025-10-16 22:05:45.348 00:01:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 22:07:17.718 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47944 10 6452 1 2025-10-16 22:08:18.124 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59172 10 6452 1 2025-10-16 22:08:37.522 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:08:37.447 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:08:37.455 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:08:37.632 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:08:37.539 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:06:45.350 00:02:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 22:09:18.524 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52506 10 6452 1 2025-10-16 22:07:45.349 00:02:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 22:10:18.890 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39398 12 6556 1 2025-10-16 22:09:45.350 00:01:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 22:11:19.300 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53134 10 6452 1 2025-10-16 22:10:45.348 00:01:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 22:12:19.679 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45618 10 6452 1 2025-10-16 22:13:20.105 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45742 10 6452 1 2025-10-16 22:13:37.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:13:37.524 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:13:37.432 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:13:37.437 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:13:37.515 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:11:45.352 00:02:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 22:14:20.469 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54504 10 6452 1 2025-10-16 22:15:20.873 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51066 10 6452 1 2025-10-16 22:14:45.354 00:01:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 22:16:21.275 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47318 10 6452 1 2025-10-16 22:12:45.351 00:04:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 22:17:21.698 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56500 10 6452 1 2025-10-16 22:18:22.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52922 10 6452 1 2025-10-16 22:18:37.740 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:18:37.402 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:18:37.570 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:18:37.569 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:18:37.654 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:16:45.354 00:02:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 22:19:22.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59030 10 6452 1 2025-10-16 22:20:22.924 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39496 10 6452 1 2025-10-16 22:19:45.355 00:01:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 22:21:23.293 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42062 10 6452 1 2025-10-16 22:17:45.351 00:04:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 22:22:23.697 00:00:10.531 TCP 1.101.0.1:3000 -> 23.104.0.1:36774 12 10375 1 2025-10-16 22:23:24.271 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44332 10 6452 1 2025-10-16 22:23:38.064 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:23:37.471 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:23:37.701 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:23:37.812 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:23:37.784 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:22:45.354 00:01:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 22:24:24.680 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35628 10 6452 1 2025-10-16 22:25:25.107 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46854 10 6452 1 2025-10-16 22:21:45.355 00:04:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 22:26:25.476 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39616 10 6452 1 2025-10-16 22:24:45.354 00:02:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 22:27:25.842 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:33058 10 6452 1 2025-10-16 22:26:45.357 00:01:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 22:28:37.986 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:28:37.696 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:28:37.948 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:28:37.588 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:28:26.262 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52232 10 6452 1 2025-10-16 22:28:38.031 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:27:45.354 00:01:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 22:29:26.668 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39952 10 6452 1 2025-10-16 22:30:27.026 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35440 10 6452 1 2025-10-16 22:28:45.356 00:02:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 22:31:27.387 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58474 10 6452 1 2025-10-16 22:29:45.356 00:02:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 22:32:27.786 00:00:10.985 TCP 1.101.0.1:3000 -> 23.104.0.1:33866 10 6452 1 2025-10-16 22:31:45.359 00:01:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 22:33:37.990 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:33:37.908 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:33:37.811 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:33:37.907 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:33:37.859 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:33:28.813 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:59632 10 6452 1 2025-10-16 22:32:45.355 00:01:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 22:34:29.186 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:54936 10 6452 1 2025-10-16 22:35:29.564 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35988 10 6452 1 2025-10-16 22:33:45.358 00:02:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 22:36:29.970 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58802 10 6452 1 2025-10-16 22:34:45.355 00:02:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 22:37:30.373 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53014 10 6452 1 2025-10-16 22:36:45.359 00:01:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 22:38:38.725 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:37:45.358 00:01:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 22:38:38.709 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:38:38.586 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:38:38.641 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:38:38.754 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:38:30.772 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55224 10 6452 1 2025-10-16 22:39:31.139 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37504 10 6452 1 2025-10-16 22:40:31.533 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53554 10 6452 1 2025-10-16 22:38:45.359 00:02:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 22:41:31.938 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57566 10 6452 1 2025-10-16 22:39:45.356 00:02:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 22:42:32.354 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36694 10 6452 1 2025-10-16 22:41:45.360 00:01:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 22:43:38.212 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:42:45.358 00:01:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 22:43:38.268 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:43:38.141 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:43:38.129 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:43:38.232 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:43:32.752 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:57968 11 6504 1 2025-10-16 22:44:33.208 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:53788 10 6452 1 2025-10-16 22:45:33.569 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53742 10 6452 1 2025-10-16 22:43:45.360 00:02:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 22:44:45.358 00:02:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 22:46:33.936 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56640 10 6452 1 2025-10-16 22:47:34.348 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48310 10 6452 1 2025-10-16 22:46:45.363 00:01:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 22:48:38.092 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:48:38.198 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:48:38.085 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:48:38.275 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:48:38.168 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:47:45.361 00:01:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 22:48:34.750 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43898 10 6452 1 2025-10-16 22:49:35.152 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36474 10 6452 1 2025-10-16 22:50:35.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45008 10 6452 1 2025-10-16 22:48:45.364 00:02:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 22:51:35.956 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51346 10 6452 1 2025-10-16 22:51:45.364 00:01:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 22:52:36.369 00:00:11.112 TCP 1.101.0.1:3000 -> 23.104.0.1:49298 10 6452 1 2025-10-16 22:53:38.414 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:53:38.077 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:53:38.285 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:53:38.356 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:53:38.367 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:49:45.361 00:04:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 22:53:37.516 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:46172 10 6452 1 2025-10-16 22:54:37.934 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49524 10 6452 1 2025-10-16 22:54:45.362 00:01:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 22:55:38.349 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36214 10 6452 1 2025-10-16 22:56:38.752 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60850 10 6452 1 2025-10-16 22:53:45.364 00:04:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 22:57:39.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57330 10 6452 1 2025-10-16 22:58:38.422 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 22:58:38.363 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:58:38.288 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 22:58:38.469 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 22:58:38.370 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 22:56:45.362 00:02:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 22:58:39.520 00:00:10.533 TCP 1.101.0.1:3000 -> 23.104.0.1:39294 10 6452 1 Summary: total flows: 164, total bytes: 421202, total packets: 1027, avg bps: 919, avg pps: 0, avg bpp: 410 Time window: 2025-10-16 21:57:45 - 2025-10-16 22:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0023s Wall: 0.0021s flows/second: 77541.0 Runtime: 0.0021s