Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-19 22:54:32.163 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-19 22:59:32.330 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53796 10 6452 1 2025-09-19 23:00:38.707 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:00:38.624 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:00:38.705 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:00:38.624 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:00:38.695 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:00:32.692 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40910 10 6452 1 2025-09-19 23:01:33.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39212 10 6452 1 2025-09-19 23:02:33.518 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 10 6452 1 2025-09-19 23:03:33.925 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:33516 10 6452 1 2025-09-19 23:04:34.359 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47466 10 6452 1 2025-09-19 23:00:32.127 00:06:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 23:05:39.253 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:05:39.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:05:39.111 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:05:39.081 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:05:39.170 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:05:34.766 00:00:10.517 TCP 1.101.0.1:3000 -> 23.104.0.1:32936 10 6452 1 2025-09-19 23:01:32.164 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-19 23:06:35.326 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40472 10 6452 1 2025-09-19 23:07:35.684 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54900 10 6452 1 2025-09-19 23:08:36.114 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:42826 10 6452 1 2025-09-19 23:09:36.508 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34842 12 6556 1 2025-09-19 23:10:38.987 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:10:38.674 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:10:38.676 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:10:38.735 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:10:38.906 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:10:36.913 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43168 10 6452 1 2025-09-19 23:11:37.318 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54980 10 6452 1 2025-09-19 23:07:32.131 00:06:00.038 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 23:12:37.732 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38710 10 6452 1 2025-09-19 23:08:32.167 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-19 23:13:38.106 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44290 10 6452 1 2025-09-19 23:14:38.518 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43586 10 6452 1 2025-09-19 23:15:38.873 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:15:39.108 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:15:38.925 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:15:39.110 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:15:39.192 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:15:38.885 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:59180 10 6452 1 2025-09-19 23:16:39.275 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43546 10 6452 1 2025-09-19 23:17:39.678 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:49534 10 6452 1 2025-09-19 23:18:40.107 00:00:10.830 TCP 1.101.0.1:3000 -> 23.104.0.1:38270 10 6452 1 2025-09-19 23:14:32.132 00:06:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 23:19:40.977 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:38574 10 6452 1 2025-09-19 23:15:32.167 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-19 23:20:39.001 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:20:39.104 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:20:39.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:20:38.864 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:20:39.083 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:20:41.357 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55470 10 6452 1 2025-09-19 23:21:41.763 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:34604 10 6452 1 2025-09-19 23:22:42.136 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41068 10 6452 1 2025-09-19 23:23:42.542 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41478 10 6452 1 2025-09-19 23:24:42.906 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49114 10 6452 1 2025-09-19 23:25:39.422 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:25:39.339 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:25:39.416 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:25:39.334 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:25:39.356 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:25:43.316 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54030 10 6452 1 2025-09-19 23:21:32.134 00:06:00.040 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 23:26:43.719 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40566 10 6452 1 2025-09-19 23:22:32.170 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-19 23:27:44.128 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49162 10 6452 1 2025-09-19 23:28:44.532 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44986 10 6452 1 2025-09-19 23:29:44.948 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55456 10 6452 1 2025-09-19 23:30:39.339 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:30:39.390 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:30:39.352 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:30:39.280 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:30:39.256 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:30:45.356 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54132 10 6452 1 2025-09-19 23:31:45.725 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58772 10 6452 1 2025-09-19 23:32:46.151 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36800 10 6452 1 2025-09-19 23:28:32.137 00:06:00.040 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 23:33:46.558 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44940 10 6452 1 2025-09-19 23:29:32.173 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-19 23:34:46.927 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:58574 10 6452 1 2025-09-19 23:35:39.623 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:35:39.167 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:35:39.174 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:35:39.031 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:35:39.541 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:35:47.304 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43782 10 6452 1 2025-09-19 23:36:47.715 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54024 10 6452 1 2025-09-19 23:37:48.126 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54492 10 6452 1 2025-09-19 23:38:48.540 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:34156 11 6504 1 2025-09-19 23:39:49.024 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39014 10 6452 1 2025-09-19 23:35:32.137 00:06:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 23:40:39.662 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:40:39.566 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:40:39.587 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:40:39.579 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:40:39.490 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:40:49.393 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50806 10 6452 1 2025-09-19 23:36:32.174 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-19 23:41:49.767 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37782 10 6452 1 2025-09-19 23:42:50.189 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:48568 10 6452 1 2025-09-19 23:43:50.623 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47176 10 6452 1 2025-09-19 23:44:51.034 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38826 10 6452 1 2025-09-19 23:45:39.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:45:39.608 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:45:39.630 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:45:39.714 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:45:39.796 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:45:51.399 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:52384 11 6504 1 2025-09-19 23:46:51.854 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44270 10 6452 1 2025-09-19 23:42:32.140 00:06:00.040 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 23:47:52.269 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58172 10 6452 1 2025-09-19 23:43:32.176 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-19 23:48:52.667 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55046 10 6452 1 2025-09-19 23:49:53.032 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42966 10 6452 1 2025-09-19 23:50:39.758 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:50:39.760 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:50:39.642 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:50:39.620 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:50:39.841 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:50:53.433 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:38804 12 10367 1 2025-09-19 23:51:53.911 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33668 10 6452 1 2025-09-19 23:52:54.317 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50562 10 6452 1 2025-09-19 23:53:54.678 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37212 10 6452 1 2025-09-19 23:49:32.142 00:06:00.038 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 23:54:55.112 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35984 10 6452 1 2025-09-19 23:50:32.178 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-19 23:55:39.637 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 23:55:39.870 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 23:55:39.785 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:55:39.939 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 23:55:40.021 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 23:55:55.520 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58430 10 6452 1 2025-09-19 23:56:55.935 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47162 10 6452 1 2025-09-19 23:57:56.301 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33452 10 6452 1 Summary: total flows: 136, total bytes: 411272, total packets: 951, avg bps: 862, avg pps: 0, avg bpp: 432 Time window: 2025-09-19 22:54:32 - 2025-09-19 23:58:06 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0047s User: 0.0009s Wall: 0.0030s flows/second: 44795.5 Runtime: 0.0031s