Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-21 10:54:32.855 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 10:59:20.450 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33134 10 6452 1 2025-09-21 10:54:32.847 00:06:00.014 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 11:00:20.853 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:32870 10 6452 1 2025-09-21 11:01:21.958 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:01:21.638 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:01:21.954 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:01:21.954 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:01:22.039 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:01:21.278 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51754 10 6452 1 2025-09-21 11:02:21.691 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35616 10 6452 1 2025-09-21 11:03:22.110 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38562 10 6452 1 2025-09-21 11:04:22.513 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42336 10 6452 1 2025-09-21 11:05:22.925 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:39832 10 6452 1 2025-09-21 11:06:21.954 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:06:22.087 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:06:21.940 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:06:21.872 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:06:22.086 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:01:32.858 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 11:06:23.347 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43710 10 6452 1 2025-09-21 11:01:32.848 00:06:00.013 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 11:07:23.755 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47374 10 6452 1 2025-09-21 11:08:24.156 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35178 10 6452 1 2025-09-21 11:09:24.568 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44350 10 6452 1 2025-09-21 11:10:24.963 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49704 10 6452 1 2025-09-21 11:11:22.078 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:11:22.168 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:11:22.219 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:11:22.163 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:11:22.303 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:11:25.368 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:38856 12 10367 1 2025-09-21 11:12:25.815 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47116 10 6452 1 2025-09-21 11:08:32.852 00:06:00.012 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 11:08:32.859 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 11:13:26.219 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49310 10 6452 1 2025-09-21 11:14:26.621 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42744 10 6452 1 2025-09-21 11:15:27.020 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38190 10 6452 1 2025-09-21 11:16:22.303 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:16:22.409 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:16:22.241 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:16:22.208 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:16:22.470 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:16:27.422 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40052 10 6452 1 2025-09-21 11:17:27.825 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41286 10 6452 1 2025-09-21 11:18:28.232 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:37388 10 6452 1 2025-09-21 11:19:28.661 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55138 10 6452 1 2025-09-21 11:15:32.852 00:06:00.013 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 11:15:32.861 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 11:20:29.099 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48040 10 6452 1 2025-09-21 11:21:22.477 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:21:22.457 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:21:22.333 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:21:22.394 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:21:22.320 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:21:29.499 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58524 10 6452 1 2025-09-21 11:22:29.906 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51186 10 6452 1 2025-09-21 11:23:30.328 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55044 10 6452 1 2025-09-21 11:24:30.729 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57464 10 6452 1 2025-09-21 11:25:31.143 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53034 10 6452 1 2025-09-21 11:26:22.400 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:26:22.510 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:26:22.697 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:26:22.403 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:26:22.780 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:26:31.551 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59568 10 6452 1 2025-09-21 11:22:32.865 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 11:22:32.861 00:06:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 11:27:31.955 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53140 10 6452 1 2025-09-21 11:28:32.358 00:00:10.635 TCP 1.101.0.1:3000 -> 23.104.0.1:39560 10 6452 1 2025-09-21 11:29:33.035 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38452 10 6452 1 2025-09-21 11:30:33.437 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34922 10 6452 1 2025-09-21 11:31:22.630 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:31:22.638 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:31:22.652 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:31:22.548 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:31:22.736 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:31:33.804 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52584 10 6452 1 2025-09-21 11:32:34.209 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55256 10 6452 1 2025-09-21 11:33:34.614 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38452 10 6452 1 2025-09-21 11:29:32.867 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 11:29:32.862 00:06:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 11:34:35.023 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45676 10 6452 1 2025-09-21 11:35:35.439 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58854 10 6452 1 2025-09-21 11:36:23.055 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:36:23.123 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:36:22.945 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:36:22.972 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:36:23.174 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:36:35.848 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:36402 10 6452 1 2025-09-21 11:37:36.278 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33234 10 6452 1 2025-09-21 11:38:36.648 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44230 10 6452 1 2025-09-21 11:39:37.057 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49624 10 6452 1 2025-09-21 11:40:37.459 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41036 10 6452 1 2025-09-21 11:41:22.749 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:41:22.820 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:41:22.590 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:41:22.668 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:41:22.823 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:36:32.868 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 11:36:32.866 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 11:41:37.859 00:00:10.457 TCP 1.101.0.1:3000 -> 23.104.0.1:47412 12 10367 1 2025-09-21 11:42:38.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33456 10 6452 1 2025-09-21 11:43:38.764 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54340 10 6452 1 2025-09-21 11:44:39.174 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53366 10 6452 1 2025-09-21 11:45:39.575 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43806 11 6492 1 2025-09-21 11:46:23.034 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:46:22.869 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:46:22.865 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:46:22.952 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:46:22.994 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:46:39.970 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:39070 12 10574 1 2025-09-21 11:47:40.455 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54430 10 6661 1 2025-09-21 11:43:32.865 00:06:00.014 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 11:43:32.871 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 11:48:40.812 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37292 10 6661 1 2025-09-21 11:49:41.225 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38284 10 6661 1 2025-09-21 11:50:41.631 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34076 10 6661 1 2025-09-21 11:51:22.963 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:51:22.889 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:51:23.107 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:51:23.059 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:51:23.192 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:51:42.057 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33290 10 6661 1 2025-09-21 11:52:42.466 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33348 10 6661 1 2025-09-21 11:53:42.866 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39062 10 6661 1 2025-09-21 11:54:43.285 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47048 10 6661 1 2025-09-21 11:50:32.866 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 11:50:32.877 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 11:55:43.648 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33720 10 6661 1 2025-09-21 11:56:23.367 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 11:56:23.207 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 11:56:22.885 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:56:23.284 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 11:56:23.209 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 11:56:44.056 00:00:10.743 TCP 1.101.0.1:3000 -> 23.104.0.1:39752 10 6661 1 2025-09-21 11:57:44.847 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6661 1 Summary: total flows: 137, total bytes: 422301, total packets: 966, avg bps: 888, avg pps: 0, avg bpp: 437 Time window: 2025-09-21 10:54:32 - 2025-09-21 11:57:55 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0052s User: 0.0000s Wall: 0.0019s flows/second: 72838.1 Runtime: 0.0019s