Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-11 07:54:11.305 00:06:00.544 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-11 07:59:12.347 00:00:12.233 TCP 1.101.0.1:3000 -> 23.104.0.1:46852 14 14282 1 2025-08-11 07:55:11.309 00:06:00.539 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-11 08:00:14.621 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41260 10 6452 1 2025-08-11 08:01:26.801 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:01:26.740 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:01:26.819 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:01:26.806 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:01:15.024 00:00:10.614 TCP 1.101.0.1:3000 -> 23.104.0.1:37680 10 6452 1 2025-08-11 08:01:26.890 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:02:15.677 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38274 10 6452 1 2025-08-11 08:03:16.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60632 10 6452 1 2025-08-11 08:04:16.518 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 10 6452 1 2025-08-11 08:05:16.919 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39814 10 6452 1 2025-08-11 08:01:11.306 00:06:00.546 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-11 08:06:26.671 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:06:26.792 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:06:17.319 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44130 10 6452 1 2025-08-11 08:06:26.934 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:06:26.760 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:06:27.016 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:02:11.309 00:06:00.541 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-11 08:07:17.719 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50276 10 6452 1 2025-08-11 08:08:18.135 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56346 10 6452 1 2025-08-11 08:09:18.549 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57096 10 6452 1 2025-08-11 08:10:18.913 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55946 10 6452 1 2025-08-11 08:11:27.093 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:11:26.977 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:11:26.944 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:11:19.324 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41154 10 6452 1 2025-08-11 08:11:26.877 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:11:26.961 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:12:19.729 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42072 10 6452 1 2025-08-11 08:08:11.309 00:06:00.549 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-11 08:13:20.121 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 10 6452 1 2025-08-11 08:09:11.312 00:06:00.544 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-11 08:14:20.520 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40098 10 6452 1 2025-08-11 08:15:20.927 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:35856 10 6452 1 2025-08-11 08:16:27.243 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:16:27.112 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:16:27.155 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:16:27.086 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:16:27.160 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:16:21.351 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33054 10 6452 1 2025-08-11 08:17:21.751 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35132 10 6452 1 2025-08-11 08:18:22.118 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56890 10 6452 1 2025-08-11 08:19:22.532 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41374 10 6452 1 2025-08-11 08:15:11.315 00:06:00.543 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-11 08:20:22.898 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41610 12 6556 1 2025-08-11 08:16:11.318 00:06:00.538 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-11 08:21:27.347 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:21:27.428 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:21:27.323 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:21:27.275 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:21:27.265 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:21:23.311 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37310 10 6452 1 2025-08-11 08:22:23.708 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:43600 10 6452 1 2025-08-11 08:23:24.133 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56144 10 6452 1 2025-08-11 08:24:24.533 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57832 10 6452 1 2025-08-11 08:25:24.950 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48456 10 6452 1 2025-08-11 08:26:27.334 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:26:27.335 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:26:27.142 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:26:27.882 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:26:27.964 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:26:25.356 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36380 10 6452 1 2025-08-11 08:22:11.316 00:06:00.544 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-11 08:27:25.760 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34552 10 6452 1 2025-08-11 08:23:11.318 00:06:00.539 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-11 08:28:26.175 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43198 10 6452 1 2025-08-11 08:29:26.549 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54128 10 6452 1 2025-08-11 08:30:26.953 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48566 10 6452 1 2025-08-11 08:31:27.261 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:31:27.262 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:31:27.175 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:31:27.268 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:31:27.351 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:31:27.364 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38564 10 6452 1 2025-08-11 08:32:27.720 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36970 10 6452 1 2025-08-11 08:33:28.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52870 10 6452 1 2025-08-11 08:29:11.322 00:06:00.539 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-11 08:34:28.512 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-08-11 08:30:11.325 00:06:00.534 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-11 08:35:28.882 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45494 10 6452 1 2025-08-11 08:36:27.646 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:36:27.465 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:36:27.244 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:36:27.540 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:36:27.623 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:36:29.290 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56442 10 6452 1 2025-08-11 08:37:29.690 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33356 10 6452 1 2025-08-11 08:38:30.113 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46876 10 6452 1 2025-08-11 08:39:30.513 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:40772 12 10367 1 2025-08-11 08:40:30.997 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52418 10 6452 1 2025-08-11 08:36:11.324 00:06:00.539 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-11 08:41:27.719 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:41:27.465 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:41:27.365 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:41:27.441 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:41:27.637 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:41:31.405 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36702 10 6452 1 2025-08-11 08:37:11.328 00:06:00.532 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-11 08:42:31.815 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:58098 10 6452 1 2025-08-11 08:43:32.186 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56556 10 6452 1 2025-08-11 08:44:32.588 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47424 10 6452 1 2025-08-11 08:45:32.990 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48624 10 6452 1 2025-08-11 08:46:27.907 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:46:27.888 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:46:27.824 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:46:27.838 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:46:27.826 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:46:33.396 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40718 10 6452 1 2025-08-11 08:47:33.754 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:52446 10 6452 1 2025-08-11 08:43:11.327 00:06:00.540 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-11 08:48:34.131 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56906 10 6452 1 2025-08-11 08:44:11.330 00:06:00.535 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-11 08:49:34.534 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45454 10 6452 1 2025-08-11 08:50:34.896 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 10 6452 1 2025-08-11 08:51:27.820 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:51:27.828 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:51:27.904 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:51:27.637 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:51:27.738 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:51:35.310 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52710 10 6452 1 2025-08-11 08:52:35.716 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45442 10 6452 1 2025-08-11 08:53:36.147 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50964 10 6452 1 2025-08-11 08:54:36.561 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:41482 10 6452 1 2025-08-11 08:50:11.329 00:06:00.539 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-11 08:55:36.990 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52808 10 6452 1 2025-08-11 08:51:11.333 00:06:00.534 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-11 08:56:28.010 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 08:56:27.868 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:56:27.926 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 08:56:27.715 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 08:56:27.992 00:00:00.040 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 08:56:37.402 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47994 10 6452 1 2025-08-11 08:57:37.807 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33504 10 6452 1 2025-08-11 08:58:38.211 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:56396 10 6452 1 Summary: total flows: 138, total bytes: 429587, total packets: 1040, avg bps: 886, avg pps: 0, avg bpp: 413 Time window: 2025-08-11 07:54:11 - 2025-08-11 08:58:48 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0019s User: 0.0028s Wall: 0.0017s flows/second: 79946.7 Runtime: 0.0017s