Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 10:53:51.362 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 10:58:55.096 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 10 6452 1 2025-10-28 10:59:10.939 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 10:59:10.626 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 10:59:10.841 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 10:59:10.855 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 10:59:10.870 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 10:59:55.497 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42760 10 6452 1 2025-10-28 11:00:55.904 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46942 10 6452 1 2025-10-28 10:56:51.360 00:06:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 11:01:56.316 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49858 10 6452 1 2025-10-28 11:02:56.720 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55284 10 6452 1 2025-10-28 11:03:57.112 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50014 10 6452 1 2025-10-28 11:04:10.986 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:04:11.086 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:04:10.880 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:04:10.988 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:04:11.070 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:04:57.512 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48522 10 6452 1 2025-10-28 11:00:51.364 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 11:05:57.872 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45646 10 6452 1 2025-10-28 11:06:58.288 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48026 10 6452 1 2025-10-28 11:07:58.656 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43116 10 6452 1 2025-10-28 11:03:51.365 00:06:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 11:08:59.079 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:51642 10 6452 1 2025-10-28 11:09:10.993 00:00:00.049 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:09:11.101 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:09:10.719 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:09:11.111 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:09:11.194 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:09:59.465 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58350 10 6452 1 2025-10-28 11:10:59.871 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:53716 10 6452 1 2025-10-28 11:12:00.250 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40614 10 6452 1 2025-10-28 11:07:51.367 00:06:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 11:13:00.675 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:47508 10 6452 1 2025-10-28 11:14:11.253 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:14:01.033 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39992 10 6452 1 2025-10-28 11:14:11.202 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:14:11.124 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:14:11.182 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:14:11.265 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:15:01.388 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:60950 10 6452 1 2025-10-28 11:10:51.366 00:06:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 11:16:01.818 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43562 10 6452 1 2025-10-28 11:17:02.225 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38210 10 6452 1 2025-10-28 11:18:02.634 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47034 10 6452 1 2025-10-28 11:19:11.264 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:19:11.170 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:19:11.268 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:19:11.347 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:19:11.181 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:19:03.031 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60588 10 6452 1 2025-10-28 11:14:51.369 00:06:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 11:20:03.435 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50112 10 6452 1 2025-10-28 11:21:03.837 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:49774 10 6452 1 2025-10-28 11:22:04.222 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34052 10 6452 1 2025-10-28 11:17:51.368 00:06:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 11:23:04.623 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35200 10 6452 1 2025-10-28 11:24:11.260 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:24:11.188 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:24:11.003 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:24:11.313 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:24:11.397 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:24:05.024 00:00:17.741 TCP 1.101.0.1:3000 -> 23.104.0.1:42978 10 6452 1 2025-10-28 11:25:12.807 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43066 10 6452 1 2025-10-28 11:26:13.211 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40188 10 6452 1 2025-10-28 11:21:51.370 00:06:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 11:27:13.611 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59714 10 6452 1 2025-10-28 11:28:14.021 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54000 10 6452 1 2025-10-28 11:29:11.576 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:29:11.534 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:29:11.573 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:29:11.508 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:29:11.658 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:29:14.430 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51188 10 6452 1 2025-10-28 11:24:51.370 00:06:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 11:30:14.835 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:44890 10 6452 1 2025-10-28 11:31:15.265 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47032 10 6452 1 2025-10-28 11:32:15.626 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44198 10 6452 1 2025-10-28 11:33:16.025 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41464 10 6452 1 2025-10-28 11:28:51.373 00:06:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 11:34:11.532 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:34:11.588 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:34:11.617 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:34:11.589 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:34:11.671 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:34:16.427 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47164 10 6452 1 2025-10-28 11:35:16.826 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49342 10 6452 1 2025-10-28 11:36:17.190 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35700 10 6452 1 2025-10-28 11:31:51.371 00:06:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 11:37:17.556 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48204 10 6452 1 2025-10-28 11:38:17.962 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60686 10 6452 1 2025-10-28 11:39:11.726 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:39:11.860 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:39:11.709 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:39:11.665 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:39:11.643 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:39:18.393 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36990 10 6452 1 2025-10-28 11:40:18.758 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:55076 10 6452 1 2025-10-28 11:35:51.374 00:06:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 11:41:19.178 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52178 10 6452 1 2025-10-28 11:42:19.540 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40572 10 6452 1 2025-10-28 11:43:19.942 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52798 10 6452 1 2025-10-28 11:38:51.372 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 11:44:11.817 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:44:11.865 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:44:11.502 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:44:11.823 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:44:11.907 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:44:20.354 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35372 10 6452 1 2025-10-28 11:45:20.726 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60560 10 6452 1 2025-10-28 11:46:21.132 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37552 10 6452 1 2025-10-28 11:47:21.531 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53744 10 6452 1 2025-10-28 11:42:51.375 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 11:48:21.935 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:47468 10 6452 1 2025-10-28 11:49:11.854 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:49:11.788 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:49:11.721 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:49:11.792 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:49:11.875 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:49:22.347 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59420 10 6452 1 2025-10-28 11:50:22.752 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 2025-10-28 11:45:51.374 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 11:51:23.113 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37582 10 6452 1 2025-10-28 11:52:23.516 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49142 10 6452 1 2025-10-28 11:53:23.878 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39880 10 6452 1 2025-10-28 11:54:11.986 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:54:11.883 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:54:12.124 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:54:12.224 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:54:12.307 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:54:24.242 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35232 10 6452 1 2025-10-28 11:49:51.377 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 11:55:24.646 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53018 10 6452 1 2025-10-28 11:56:25.059 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39936 10 6452 1 2025-10-28 11:57:25.417 00:00:10.490 TCP 1.101.0.1:3000 -> 23.104.0.1:36596 10 6452 1 2025-10-28 11:52:51.377 00:06:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 11:58:25.945 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:43646 10 6452 1 Summary: total flows: 138, total bytes: 417738, total packets: 1032, avg bps: 856, avg pps: 0, avg bpp: 404 Time window: 2025-10-28 10:53:51 - 2025-10-28 11:58:51 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0031s User: 0.0008s Wall: 0.0016s flows/second: 84350.6 Runtime: 0.0016s