Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 07:55:13.519 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 07:59:33.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53154 10 6452 1 2025-08-15 07:56:13.521 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 08:00:33.586 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36658 10 6452 1 2025-08-15 08:01:33.983 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35880 10 6452 1 2025-08-15 08:02:34.342 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37308 10 6452 1 2025-08-15 08:03:22.392 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:03:22.241 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:03:22.327 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:03:22.338 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:03:22.421 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:03:34.747 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:58024 10 6452 1 2025-08-15 08:04:35.172 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37402 10 6452 1 2025-08-15 08:01:13.520 00:05:00.587 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 08:05:35.538 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:47968 10 6452 1 2025-08-15 08:02:13.521 00:05:00.582 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 08:06:35.899 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45322 10 6452 1 2025-08-15 08:07:36.306 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53650 10 6452 1 2025-08-15 08:08:22.431 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:08:22.496 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:08:22.457 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:08:21.970 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:08:22.350 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:08:36.708 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50112 10 6452 1 2025-08-15 08:09:37.124 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55378 10 6452 1 2025-08-15 08:10:37.482 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-08-15 08:07:13.523 00:05:00.585 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 08:11:37.888 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55938 12 6556 1 2025-08-15 08:08:13.525 00:05:00.579 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 08:12:38.296 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59360 10 6452 1 2025-08-15 08:13:22.291 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:13:22.521 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:13:22.407 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:13:22.584 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:13:22.604 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:13:38.698 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54712 10 6452 1 2025-08-15 08:14:39.110 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45562 10 6452 1 2025-08-15 08:15:39.470 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 10 6452 1 2025-08-15 08:16:39.868 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58572 10 6452 1 2025-08-15 08:13:13.524 00:05:00.583 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 08:17:40.276 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59568 10 6452 1 2025-08-15 08:14:13.526 00:05:00.578 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 08:18:22.710 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:18:22.473 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:18:22.574 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:18:22.476 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:18:22.628 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:18:40.682 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51072 10 6452 1 2025-08-15 08:19:41.052 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45642 10 6452 1 2025-08-15 08:20:41.455 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:50488 13 13937 1 2025-08-15 08:21:41.938 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38838 10 6452 1 2025-08-15 08:22:42.358 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46026 10 6452 1 2025-08-15 08:19:13.525 00:05:00.584 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 08:23:22.772 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:23:22.590 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:23:22.555 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:23:22.743 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:23:22.832 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:23:42.760 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60784 10 6452 1 2025-08-15 08:20:13.527 00:05:00.579 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 08:24:43.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37322 10 6452 1 2025-08-15 08:25:43.587 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60902 10 6452 1 2025-08-15 08:26:43.989 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58724 10 6452 1 2025-08-15 08:27:44.388 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44180 10 6452 1 2025-08-15 08:28:22.822 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:28:22.651 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:28:22.775 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:28:22.756 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:28:22.839 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:28:44.805 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:46776 10 6452 1 2025-08-15 08:25:13.525 00:05:00.584 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 08:29:45.181 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59872 10 6452 1 2025-08-15 08:26:13.528 00:05:00.578 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 08:30:45.584 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48260 10 6452 1 2025-08-15 08:31:45.990 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:36790 10 6452 1 2025-08-15 08:32:46.413 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41534 10 6452 1 2025-08-15 08:33:22.991 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:33:22.894 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:33:22.891 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:33:22.817 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:33:22.908 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:33:46.816 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45270 10 6452 1 2025-08-15 08:34:47.219 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:46192 10 6452 1 2025-08-15 08:31:13.527 00:05:00.583 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 08:35:47.585 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51150 10 6452 1 2025-08-15 08:32:13.530 00:05:00.577 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 08:36:47.989 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57896 10 6452 1 2025-08-15 08:37:48.393 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35374 10 6452 1 2025-08-15 08:38:22.832 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:38:22.888 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:38:22.748 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:38:22.885 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:38:22.969 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:38:48.754 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33504 10 6452 1 2025-08-15 08:39:49.154 00:00:10.472 TCP 1.101.0.1:3000 -> 23.104.0.1:34162 10 6452 1 2025-08-15 08:40:49.676 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55592 10 6452 1 2025-08-15 08:37:13.528 00:05:00.583 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 08:41:50.104 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:59430 10 6452 1 2025-08-15 08:38:13.530 00:05:00.578 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 08:42:50.476 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41438 10 6452 1 2025-08-15 08:43:23.122 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:43:23.058 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:43:23.068 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:43:23.165 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:43:23.039 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:43:50.873 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58150 10 6452 1 2025-08-15 08:44:51.280 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52430 10 6452 1 2025-08-15 08:45:51.682 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:49364 10 6452 1 2025-08-15 08:46:52.064 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38080 10 6452 1 2025-08-15 08:43:13.529 00:05:00.584 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 08:47:52.470 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49254 10 6452 1 2025-08-15 08:44:13.531 00:05:00.579 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 08:48:23.185 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:48:23.103 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:48:23.253 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:48:22.927 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:48:22.944 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:48:52.871 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34664 10 6452 1 2025-08-15 08:49:53.275 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38768 10 6452 1 2025-08-15 08:50:53.673 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35542 10 6452 1 2025-08-15 08:51:54.037 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36732 10 6452 1 2025-08-15 08:52:54.436 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46004 10 6452 1 2025-08-15 08:49:13.534 00:05:00.592 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 08:53:23.221 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:53:23.302 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:53:23.266 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:53:23.221 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:53:23.304 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:53:54.860 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:47294 10 6452 1 2025-08-15 08:50:13.537 00:05:00.587 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 08:54:55.233 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34594 10 6452 1 2025-08-15 08:55:55.637 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56728 10 6452 1 2025-08-15 08:56:56.040 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52222 10 6452 1 2025-08-15 08:57:56.403 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47680 10 6452 1 2025-08-15 08:58:23.555 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 08:58:23.473 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 08:58:23.397 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 08:58:23.487 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 08:58:23.379 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 418137, total packets: 1015, avg bps: 882, avg pps: 0, avg bpp: 411 Time window: 2025-08-15 07:55:13 - 2025-08-15 08:58:23 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0022s User: 0.0011s Wall: 0.0012s flows/second: 115745.1 Runtime: 0.0012s