Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 07:54:43.515 00:06:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 07:54:43.513 00:06:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 07:59:38.283 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40482 10 6452 1 2025-10-13 08:00:38.694 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48528 10 6452 1 2025-10-13 08:01:39.113 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49708 10 6452 1 2025-10-13 08:01:53.769 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:01:53.705 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:01:53.610 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:01:53.687 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:01:53.591 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:02:39.516 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56970 10 6452 1 2025-10-13 08:03:39.877 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35464 10 6452 1 2025-10-13 08:04:40.275 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42332 10 6452 1 2025-10-13 08:05:40.683 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38998 10 6452 1 2025-10-13 08:01:43.516 00:06:00.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 08:01:43.513 00:06:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 08:06:53.908 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:06:53.843 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:06:53.861 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:06:53.914 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:06:41.111 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53958 10 6452 1 2025-10-13 08:06:53.999 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:07:41.513 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 10 6452 1 2025-10-13 08:08:41.922 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48526 10 6452 1 2025-10-13 08:09:42.332 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40538 10 6452 1 2025-10-13 08:10:42.738 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2025-10-13 08:11:54.057 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:11:54.065 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:11:53.887 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:11:43.148 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55226 10 6452 1 2025-10-13 08:11:54.065 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:11:54.148 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:12:43.557 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56272 10 6452 1 2025-10-13 08:08:43.513 00:06:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 08:08:43.516 00:06:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 08:13:43.964 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59378 10 6452 1 2025-10-13 08:14:44.323 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45832 10 6452 1 2025-10-13 08:15:44.724 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33918 10 6452 1 2025-10-13 08:16:54.284 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:16:53.790 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:16:54.255 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:16:53.925 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:16:54.201 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:16:45.135 00:00:10.518 TCP 1.101.0.1:3000 -> 23.104.0.1:41992 10 6452 1 2025-10-13 08:17:45.694 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51550 10 6452 1 2025-10-13 08:18:46.110 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58656 10 6452 1 2025-10-13 08:19:46.511 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54300 10 6452 1 2025-10-13 08:15:43.517 00:06:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 08:15:43.515 00:06:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 08:20:46.876 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50646 10 6452 1 2025-10-13 08:21:54.181 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:21:54.192 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:21:54.192 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:21:54.130 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:21:54.098 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:21:47.240 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38058 10 6452 1 2025-10-13 08:22:47.642 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49708 10 6452 1 2025-10-13 08:23:48.004 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35814 10 6452 1 2025-10-13 08:24:48.402 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44434 10 6452 1 2025-10-13 08:25:48.817 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38634 10 6452 1 2025-10-13 08:26:54.111 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:26:54.288 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:26:54.102 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:26:54.221 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:26:54.304 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:26:49.221 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50414 10 6452 1 2025-10-13 08:22:43.519 00:06:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 08:22:43.517 00:06:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 08:27:49.623 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:43192 11 6504 1 2025-10-13 08:28:50.110 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39444 10 6452 1 2025-10-13 08:29:50.511 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41906 10 6452 1 2025-10-13 08:30:50.876 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36052 10 6452 1 2025-10-13 08:31:54.374 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:31:54.286 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:31:54.287 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:31:54.337 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:31:54.291 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:31:51.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53072 10 6452 1 2025-10-13 08:32:51.681 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42418 10 6452 1 2025-10-13 08:33:52.108 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47786 10 6452 1 2025-10-13 08:29:43.519 00:06:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 08:29:43.521 00:06:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 08:34:52.519 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37076 10 6452 1 2025-10-13 08:35:52.883 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:42728 10 6452 1 2025-10-13 08:36:54.397 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:36:54.405 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:36:54.367 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:36:54.296 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:36:54.378 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:36:53.301 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33434 10 6452 1 2025-10-13 08:37:53.711 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51502 10 6452 1 2025-10-13 08:38:54.117 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6452 1 2025-10-13 08:39:54.529 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57354 10 6452 1 2025-10-13 08:40:54.967 00:00:10.878 TCP 1.101.0.1:3000 -> 23.104.0.1:52380 10 6452 1 2025-10-13 08:36:43.522 00:06:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 08:36:43.519 00:06:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 08:41:54.609 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:41:54.560 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:41:54.660 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:41:54.657 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:41:54.743 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:41:55.884 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53804 10 6452 1 2025-10-13 08:42:56.296 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36854 10 6452 1 2025-10-13 08:43:56.664 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34212 10 6452 1 2025-10-13 08:44:57.105 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44318 10 6452 1 2025-10-13 08:45:57.465 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52272 10 6452 1 2025-10-13 08:46:54.603 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:46:54.675 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:46:54.664 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:46:54.605 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:46:54.521 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:46:57.869 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38440 10 6452 1 2025-10-13 08:47:58.277 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60484 10 6452 1 2025-10-13 08:43:43.526 00:06:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 08:43:43.523 00:06:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 08:48:58.685 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:49776 10 6452 1 2025-10-13 08:49:59.151 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42820 10 6452 1 2025-10-13 08:50:59.558 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33574 10 6452 1 2025-10-13 08:51:54.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:51:54.714 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:51:54.640 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:51:54.710 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:51:54.793 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:51:59.964 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37316 10 6452 1 2025-10-13 08:53:00.372 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48284 10 6452 1 2025-10-13 08:54:00.776 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:38820 10 6452 1 2025-10-13 08:55:01.160 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38344 10 6452 1 2025-10-13 08:50:43.525 00:06:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 08:50:43.528 00:06:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 08:56:01.566 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54930 10 6452 1 2025-10-13 08:56:54.913 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 08:56:54.838 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 08:56:54.774 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 08:56:54.708 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:56:54.831 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 08:57:01.970 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41848 10 6452 1 2025-10-13 08:58:02.390 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43944 10 6452 1 Summary: total flows: 137, total bytes: 411338, total packets: 1023, avg bps: 863, avg pps: 0, avg bpp: 402 Time window: 2025-10-13 07:54:43 - 2025-10-13 08:58:12 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0031s User: 0.0021s Wall: 0.0014s flows/second: 98630.2 Runtime: 0.0014s