Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 12:55:13.631 00:05:00.606 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 12:59:33.957 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34794 10 6452 1 2025-08-15 12:56:13.635 00:05:00.601 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 13:00:34.370 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52712 10 6452 1 2025-08-15 13:01:34.771 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51078 10 6452 1 2025-08-15 13:02:35.182 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52762 10 6452 1 2025-08-15 13:03:28.601 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:03:28.425 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:03:28.548 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:03:28.444 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:03:28.518 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:03:35.589 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46910 10 6452 1 2025-08-15 13:04:35.994 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46906 10 6452 1 2025-08-15 13:01:13.632 00:05:00.609 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 13:05:36.394 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44188 10 6452 1 2025-08-15 13:02:13.635 00:05:00.604 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 13:06:36.760 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60630 10 6452 1 2025-08-15 13:07:37.177 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41090 10 6452 1 2025-08-15 13:08:28.386 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:08:28.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:08:28.391 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:08:28.395 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:08:28.477 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:08:37.583 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33970 10 6452 1 2025-08-15 13:09:37.984 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45852 10 6452 1 2025-08-15 13:10:38.389 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43862 10 6452 1 2025-08-15 13:07:13.635 00:05:00.609 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 13:11:38.791 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41926 10 6452 1 2025-08-15 13:08:13.636 00:05:00.604 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 13:12:39.197 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46752 10 6452 1 2025-08-15 13:13:28.493 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:13:28.550 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:13:28.188 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:13:28.495 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:13:28.578 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:13:39.629 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57246 10 6452 1 2025-08-15 13:14:40.041 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47662 10 6452 1 2025-08-15 13:15:40.450 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38400 10 6452 1 2025-08-15 13:16:40.857 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42862 10 6452 1 2025-08-15 13:13:13.638 00:05:00.607 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 13:17:41.230 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60394 10 6452 1 2025-08-15 13:14:13.641 00:05:00.602 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 13:18:28.679 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:18:28.780 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:18:28.486 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:18:28.638 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:18:28.597 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:18:41.639 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60190 10 6452 1 2025-08-15 13:19:42.006 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34274 10 6452 1 2025-08-15 13:20:42.409 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51366 10 6452 1 2025-08-15 13:21:42.810 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54116 10 6452 1 2025-08-15 13:22:43.227 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57252 10 6452 1 2025-08-15 13:19:13.640 00:05:00.605 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 13:23:28.861 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:23:28.780 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:23:28.700 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:23:28.885 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:23:28.461 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:23:43.630 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47306 10 6452 1 2025-08-15 13:20:13.645 00:05:00.600 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 13:24:44.027 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:57990 10 6452 1 2025-08-15 13:25:44.427 00:00:10.952 TCP 1.101.0.1:3000 -> 23.104.0.1:47666 10 6452 1 2025-08-15 13:26:45.416 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50470 10 6452 1 2025-08-15 13:27:45.820 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54148 10 6452 1 2025-08-15 13:28:28.828 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:28:28.747 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:28:28.774 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:28:28.745 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:28:28.944 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:28:46.224 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34454 10 6452 1 2025-08-15 13:25:13.642 00:05:00.606 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 13:29:46.588 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57856 10 6452 1 2025-08-15 13:26:13.644 00:05:00.601 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 13:30:46.989 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35268 10 6452 1 2025-08-15 13:31:47.396 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46536 10 6452 1 2025-08-15 13:32:47.799 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40920 10 6452 1 2025-08-15 13:33:28.758 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:33:28.755 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:33:28.695 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:33:28.825 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:33:28.908 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:33:48.208 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60702 10 6452 1 2025-08-15 13:34:48.611 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54874 10 6452 1 2025-08-15 13:31:13.643 00:05:00.606 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 13:35:49.019 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51522 10 6452 1 2025-08-15 13:32:13.646 00:05:00.600 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 13:36:49.427 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34216 10 6452 1 2025-08-15 13:37:49.789 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33638 10 6452 1 2025-08-15 13:38:28.867 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:38:28.860 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:38:28.859 00:00:00.036 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:38:29.208 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:38:29.293 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:38:50.156 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39104 10 6452 1 2025-08-15 13:39:50.519 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39308 10 6452 1 2025-08-15 13:40:50.939 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:55890 10 6452 1 2025-08-15 13:37:13.644 00:05:00.606 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 13:41:51.320 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50614 10 6452 1 2025-08-15 13:38:13.647 00:05:00.601 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 13:42:51.718 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36606 10 6452 1 2025-08-15 13:43:28.895 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:43:28.799 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:43:28.992 00:00:00.049 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:43:29.179 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:43:28.812 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:43:52.132 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43094 10 6452 1 2025-08-15 13:44:52.537 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42806 10 6452 1 2025-08-15 13:45:52.903 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34824 10 6452 1 2025-08-15 13:46:53.312 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48240 10 6452 1 2025-08-15 13:43:13.646 00:05:00.604 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 13:47:53.680 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40636 10 6452 1 2025-08-15 13:44:13.650 00:05:00.599 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 13:48:29.232 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:48:28.899 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:48:29.086 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:48:29.350 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:48:29.433 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:48:54.114 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56252 10 6452 1 2025-08-15 13:49:54.472 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36824 10 6452 1 2025-08-15 13:50:54.868 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55320 10 6452 1 2025-08-15 13:51:55.275 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38702 10 6452 1 2025-08-15 13:52:55.681 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46466 10 6452 1 2025-08-15 13:49:13.651 00:05:00.601 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 13:53:29.380 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:53:29.270 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:53:28.908 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:53:29.269 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:53:29.351 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:53:56.115 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55106 10 6452 1 2025-08-15 13:50:13.652 00:05:00.597 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 13:54:56.482 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40512 10 6452 1 2025-08-15 13:55:56.885 00:00:10.463 TCP 1.101.0.1:3000 -> 23.104.0.1:34266 14 10471 1 2025-08-15 13:56:57.385 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58206 10 6452 1 2025-08-15 13:57:57.748 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:35442 10 6452 1 2025-08-15 13:58:29.582 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 13:58:29.432 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 13:58:29.154 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 13:58:29.306 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 13:58:29.500 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 414567, total packets: 1014, avg bps: 873, avg pps: 0, avg bpp: 408 Time window: 2025-08-15 12:55:13 - 2025-08-15 13:58:29 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0036s User: 0.0009s Wall: 0.0019s flows/second: 74098.7 Runtime: 0.0019s