Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 20:54:37.721 00:06:00.240 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 20:59:32.912 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50562 12 6556 1 2025-10-01 21:00:33.323 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34304 10 6452 1 2025-10-01 21:01:22.976 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:01:22.894 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:01:22.965 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:01:22.745 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:01:22.892 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:01:33.725 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54972 10 6452 1 2025-10-01 21:02:34.132 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:37772 12 10375 1 2025-10-01 21:03:34.608 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52920 10 6452 1 2025-10-01 20:59:37.721 00:06:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 21:04:35.009 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43544 10 6452 1 2025-10-01 21:05:35.409 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44192 10 6452 1 2025-10-01 21:06:23.064 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:06:23.035 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:06:23.111 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:06:22.918 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:06:23.001 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:01:37.723 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 21:06:35.811 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40232 10 6452 1 2025-10-01 21:07:36.183 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53450 10 6452 1 2025-10-01 21:08:36.581 00:00:10.630 TCP 1.101.0.1:3000 -> 23.104.0.1:49566 10 6452 1 2025-10-01 21:09:37.253 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49422 10 6452 1 2025-10-01 21:10:37.653 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36144 10 6452 1 2025-10-01 21:11:23.190 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:11:23.000 00:00:00.035 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:11:22.801 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:11:22.877 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:11:23.108 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:06:37.723 00:06:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 21:11:38.056 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37284 10 6452 1 2025-10-01 21:12:38.458 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:52304 12 10375 1 2025-10-01 21:08:37.725 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 21:13:38.940 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40640 10 6452 1 2025-10-01 21:14:39.354 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37720 10 6452 1 2025-10-01 21:15:39.760 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46280 10 6452 1 2025-10-01 21:16:23.161 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:16:23.224 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:16:23.202 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:16:23.166 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:16:23.249 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:16:40.176 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51598 10 6452 1 2025-10-01 21:17:40.579 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33124 10 6452 1 2025-10-01 21:13:37.723 00:06:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 21:18:41.002 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60330 10 6452 1 2025-10-01 21:19:41.411 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60342 10 6452 1 2025-10-01 21:15:37.726 00:06:00.242 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 21:20:41.826 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49718 10 6452 1 2025-10-01 21:21:23.378 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:21:23.295 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:21:23.294 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:21:23.206 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:21:23.256 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:21:42.236 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51910 10 6452 1 2025-10-01 21:22:42.595 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60412 10 6452 1 2025-10-01 21:23:42.965 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34398 10 6452 1 2025-10-01 21:24:43.375 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59998 10 6452 1 2025-10-01 21:20:37.726 00:06:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 21:25:43.775 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51926 10 6452 1 2025-10-01 21:26:23.543 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:26:23.619 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:26:23.507 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:26:23.617 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:26:23.702 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:26:44.181 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36480 10 6452 1 2025-10-01 21:22:37.730 00:06:00.240 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 21:27:44.581 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46124 10 6452 1 2025-10-01 21:28:44.944 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55304 10 6452 1 2025-10-01 21:29:45.357 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57712 10 6452 1 2025-10-01 21:30:45.763 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34182 10 6452 1 2025-10-01 21:31:23.619 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:31:23.458 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:31:23.536 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:31:23.398 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:31:23.537 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:31:46.179 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35954 10 6452 1 2025-10-01 21:27:37.727 00:06:00.249 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 21:32:46.584 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37916 10 6452 1 2025-10-01 21:33:46.992 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35308 10 6452 1 2025-10-01 21:29:37.731 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 21:34:47.392 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51416 10 6452 1 2025-10-01 21:35:47.794 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41732 10 6452 1 2025-10-01 21:36:23.706 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:36:23.726 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:36:23.728 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:36:23.648 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:36:23.623 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:36:48.198 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37748 10 6452 1 2025-10-01 21:37:48.603 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33610 10 6452 1 2025-10-01 21:38:48.967 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42246 10 6452 1 2025-10-01 21:34:37.728 00:06:00.249 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 21:39:49.380 00:00:10.315 TCP 1.101.0.1:3000 -> 23.104.0.1:56268 10 6452 1 2025-10-01 21:40:49.733 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46670 10 6452 1 2025-10-01 21:41:23.832 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:41:23.808 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:41:23.742 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:41:23.385 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:41:23.750 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:36:37.731 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 21:41:50.138 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51398 10 6452 1 2025-10-01 21:42:50.537 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57878 10 6452 1 2025-10-01 21:43:50.900 00:00:10.704 TCP 1.101.0.1:3000 -> 23.104.0.1:35478 10 6452 1 2025-10-01 21:44:51.644 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60724 10 6452 1 2025-10-01 21:45:52.011 00:00:10.536 TCP 1.101.0.1:3000 -> 23.104.0.1:41014 10 6452 1 2025-10-01 21:46:23.916 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:46:23.758 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:46:23.679 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:46:23.670 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:46:24.000 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:41:37.730 00:06:00.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 21:46:52.583 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60744 10 6452 1 2025-10-01 21:47:52.990 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33560 10 6452 1 2025-10-01 21:43:37.733 00:06:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 21:48:53.399 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55404 10 6452 1 2025-10-01 21:49:53.805 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58346 10 6452 1 2025-10-01 21:50:54.216 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52418 10 6452 1 2025-10-01 21:51:23.927 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:51:23.817 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:51:23.844 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:51:23.778 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:51:23.927 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:51:54.580 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45976 10 6452 1 2025-10-01 21:52:54.985 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45886 10 6452 1 2025-10-01 21:48:37.731 00:06:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 21:53:55.393 00:00:10.674 TCP 1.101.0.1:3000 -> 23.104.0.1:55636 10 6452 1 2025-10-01 21:54:56.116 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49216 10 6452 1 2025-10-01 21:50:37.733 00:06:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 21:55:56.515 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55268 10 6452 1 2025-10-01 21:56:23.953 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 21:56:23.809 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 21:56:23.846 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:56:23.818 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 21:56:23.901 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 21:56:56.917 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57498 10 6452 1 2025-10-01 21:57:57.319 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39352 10 6452 1 Summary: total flows: 136, total bytes: 418375, total packets: 1014, avg bps: 878, avg pps: 0, avg bpp: 412 Time window: 2025-10-01 20:54:37 - 2025-10-01 21:58:07 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0041s User: 0.0008s Wall: 0.0014s flows/second: 94378.8 Runtime: 0.0015s