Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 20:59:12.355 00:00:10.627 TCP 1.101.0.1:3000 -> 23.104.0.1:48050 10 6452 1 2025-10-04 20:55:39.224 00:04:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 21:00:13.035 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50578 10 6452 1 2025-10-04 20:58:39.224 00:02:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-04 21:01:13.395 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45192 10 6452 1 2025-10-04 21:02:13.801 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60058 10 6452 1 2025-10-04 21:01:39.224 00:01:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-04 21:02:49.879 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:02:49.717 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:02:49.721 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:02:49.748 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:02:49.795 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:03:14.206 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:56226 11 6504 1 2025-10-04 21:04:14.669 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54614 10 6452 1 2025-10-04 21:00:39.228 00:04:00.381 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 21:05:15.105 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37748 10 6452 1 2025-10-04 21:06:15.504 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53534 10 6452 1 2025-10-04 21:07:15.909 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36216 10 6452 1 2025-10-04 21:03:39.229 00:04:00.382 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 21:07:49.667 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:07:49.584 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:07:49.546 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:07:49.672 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:07:49.755 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:08:16.316 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37466 10 6452 1 2025-10-04 21:09:16.685 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:33798 10 6452 1 2025-10-04 21:05:39.230 00:04:00.380 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 21:10:17.110 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37642 10 6452 1 2025-10-04 21:11:17.526 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52168 10 6452 1 2025-10-04 21:10:39.230 00:01:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-04 21:12:17.924 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:43838 10 6452 1 2025-10-04 21:08:39.228 00:04:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 21:12:49.871 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:12:49.672 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:12:49.676 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:12:49.685 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:12:49.786 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:13:18.294 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:41320 12 10369 1 2025-10-04 21:14:18.733 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46182 10 6452 1 2025-10-04 21:12:39.231 00:02:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-04 21:15:19.138 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57332 10 6452 1 2025-10-04 21:16:19.540 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58246 10 6452 1 2025-10-04 21:15:39.231 00:01:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-04 21:17:19.953 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56802 10 6452 1 2025-10-04 21:13:39.228 00:04:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 21:17:49.717 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:17:50.207 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:17:50.179 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:17:50.154 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:17:50.123 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:18:20.362 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55516 10 6452 1 2025-10-04 21:19:20.764 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51916 10 6452 1 2025-10-04 21:18:39.228 00:01:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-04 21:20:21.135 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56142 10 6452 1 2025-10-04 21:21:21.543 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36520 10 6452 1 2025-10-04 21:17:39.233 00:04:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 21:22:21.943 00:00:10.789 TCP 1.101.0.1:3000 -> 23.104.0.1:52116 10 6452 1 2025-10-04 21:22:49.838 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:22:49.736 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:22:49.590 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:22:49.826 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:22:49.910 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:23:22.768 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39776 10 6452 1 2025-10-04 21:24:23.182 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:55628 10 6452 1 2025-10-04 21:20:39.229 00:04:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 21:25:23.578 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60754 10 6452 1 2025-10-04 21:26:23.980 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54944 10 6452 1 2025-10-04 21:22:39.233 00:04:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 21:27:24.385 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47604 10 6452 1 2025-10-04 21:27:49.901 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:27:49.913 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:27:49.876 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:27:49.915 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:27:49.998 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:28:24.796 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46226 10 6452 1 2025-10-04 21:29:25.156 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38124 10 6452 1 2025-10-04 21:25:39.231 00:04:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 21:30:25.556 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33168 10 6452 1 2025-10-04 21:27:39.234 00:04:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 21:31:25.921 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:45684 10 6452 1 2025-10-04 21:32:26.352 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55640 10 6452 1 2025-10-04 21:32:49.945 00:00:00.018 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:32:49.858 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:32:50.265 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:32:50.182 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:32:50.073 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:33:26.716 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46668 10 6452 1 2025-10-04 21:30:39.232 00:04:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 21:34:27.112 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49110 10 6452 1 2025-10-04 21:35:27.513 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48356 10 6452 1 2025-10-04 21:32:39.235 00:04:00.378 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 21:36:27.912 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60344 10 6452 1 2025-10-04 21:37:28.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41540 10 6452 1 2025-10-04 21:37:50.428 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:37:50.345 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:37:50.444 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:37:50.198 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:37:50.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:38:28.714 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:45860 11 6504 1 2025-10-04 21:39:29.191 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54556 10 6452 1 2025-10-04 21:35:39.233 00:04:00.386 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 21:40:29.595 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36898 10 6452 1 2025-10-04 21:37:39.237 00:04:00.380 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 21:40:39.233 00:01:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-04 21:41:29.966 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36364 10 6452 1 2025-10-04 21:42:30.331 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42866 10 6452 1 2025-10-04 21:42:50.316 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:42:50.360 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:42:50.375 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:42:50.365 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:42:50.446 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:42:39.237 00:01:00.381 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-04 21:43:30.735 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51776 10 6452 1 2025-10-04 21:42:39.235 00:02:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-04 21:44:31.139 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58022 10 6452 1 2025-10-04 21:45:31.558 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54750 10 6452 1 2025-10-04 21:45:39.235 00:01:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-04 21:44:39.238 00:02:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-04 21:46:31.955 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53894 10 6452 1 2025-10-04 21:47:32.360 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35922 10 6452 1 2025-10-04 21:47:50.627 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:47:50.504 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:47:50.058 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:47:50.543 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:47:50.373 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:47:39.239 00:01:00.381 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-04 21:48:32.770 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57224 10 6452 1 2025-10-04 21:49:33.194 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39066 10 6452 1 2025-10-04 21:50:33.608 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59164 10 6452 1 2025-10-04 21:49:39.238 00:02:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-04 21:47:39.235 00:04:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 21:51:34.015 00:00:10.597 TCP 1.101.0.1:3000 -> 23.104.0.1:53524 10 6452 1 2025-10-04 21:52:34.641 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56366 10 6452 1 2025-10-04 21:52:50.334 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:52:50.576 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:52:50.087 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:52:50.432 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:52:50.515 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:52:39.240 00:01:00.381 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-04 21:53:35.058 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41698 10 6452 1 2025-10-04 21:54:35.421 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60550 10 6452 1 2025-10-04 21:55:35.784 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33588 10 6452 1 2025-10-04 21:52:39.238 00:04:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 21:56:36.188 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46008 10 6452 1 2025-10-04 21:57:36.594 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40074 10 6452 1 2025-10-04 21:57:50.848 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 21:57:50.799 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 21:57:50.618 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 21:57:50.673 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:57:50.766 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 21:54:39.240 00:04:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 21:58:37.000 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39420 10 6452 1 Summary: total flows: 152, total bytes: 421390, total packets: 1030, avg bps: 889, avg pps: 0, avg bpp: 409 Time window: 2025-10-04 20:55:39 - 2025-10-04 21:58:47 Total flows processed: 152, passed: 152, Blocks skipped: 0, Bytes read: 15872 Sys: 0.0025s User: 0.0025s Wall: 0.0023s flows/second: 65684.5 Runtime: 0.0023s