Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 06:54:15.127 00:06:00.407 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 06:59:21.113 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37148 10 6452 1 2025-08-18 06:59:47.614 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 06:59:47.612 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 06:59:47.253 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 06:59:47.743 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 06:59:47.827 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:00:21.516 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56894 10 6452 1 2025-08-18 07:01:21.922 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38566 10 6452 1 2025-08-18 07:02:22.321 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50420 10 6452 1 2025-08-18 07:03:22.738 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57110 10 6452 1 2025-08-18 07:04:23.116 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:59026 10 6452 1 2025-08-18 07:04:47.879 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:04:47.793 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 07:04:47.632 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 07:04:47.446 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:04:47.798 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:00:15.134 00:06:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 07:05:23.565 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39838 10 6452 1 2025-08-18 07:01:15.129 00:06:00.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 07:06:23.970 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43530 10 6452 1 2025-08-18 07:07:24.381 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35900 10 6452 1 2025-08-18 07:08:24.781 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36464 10 6452 1 2025-08-18 07:09:25.184 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42514 10 6452 1 2025-08-18 07:09:48.149 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:09:48.067 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:09:47.946 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 07:09:47.652 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 07:09:47.795 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:10:25.592 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59222 10 6452 1 2025-08-18 07:11:25.996 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34728 10 6452 1 2025-08-18 07:07:15.134 00:06:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 07:12:26.401 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42170 10 6452 1 2025-08-18 07:08:15.134 00:06:00.403 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 07:13:26.803 00:00:10.624 TCP 1.101.0.1:3000 -> 23.104.0.1:34520 10 6452 1 2025-08-18 07:14:27.469 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40010 10 6452 1 2025-08-18 07:14:48.531 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:14:47.861 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 07:14:47.841 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 07:14:48.254 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:14:48.448 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:15:27.871 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:55526 11 6504 1 2025-08-18 07:16:28.328 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:46322 10 6452 1 2025-08-18 07:17:28.766 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34484 10 6452 1 2025-08-18 07:18:29.177 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50570 10 6452 1 2025-08-18 07:14:15.141 00:06:00.394 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 07:19:29.578 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34752 10 6452 1 2025-08-18 07:19:48.043 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:19:47.961 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:19:47.856 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 07:19:47.967 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 07:19:47.922 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:15:15.138 00:06:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 07:20:29.990 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47834 10 6452 1 2025-08-18 07:21:30.401 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57838 10 6452 1 2025-08-18 07:22:30.803 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56508 10 6452 1 2025-08-18 07:23:31.204 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58518 10 6452 1 2025-08-18 07:24:31.606 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:48026 10 6452 1 2025-08-18 07:24:48.214 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:24:47.981 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 07:24:47.985 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 07:24:47.826 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:24:48.131 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:25:31.983 00:00:10.851 TCP 1.101.0.1:3000 -> 23.104.0.1:50894 10 6452 1 2025-08-18 07:21:15.141 00:06:00.394 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 07:26:32.879 00:00:10.649 TCP 1.101.0.1:3000 -> 23.104.0.1:43392 10 6452 1 2025-08-18 07:22:15.141 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 07:27:33.563 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51658 10 6452 1 2025-08-18 07:28:33.968 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58460 10 6452 1 2025-08-18 07:29:48.178 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:29:34.373 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46660 10 6452 1 2025-08-18 07:29:48.082 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 07:29:48.085 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 07:29:48.074 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:29:48.095 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:30:34.797 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53074 10 6452 1 2025-08-18 07:31:35.203 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45992 10 6452 1 2025-08-18 07:32:35.609 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33234 10 6452 1 2025-08-18 07:28:15.145 00:06:00.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 07:33:36.013 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37578 10 6452 1 2025-08-18 07:29:15.142 00:06:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 07:34:48.370 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:34:48.287 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 07:34:36.426 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47566 10 6452 1 2025-08-18 07:34:48.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 07:34:48.447 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:34:48.287 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:35:36.834 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:37916 10 6452 1 2025-08-18 07:36:37.259 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47494 10 6452 1 2025-08-18 07:37:37.677 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51028 10 6452 1 2025-08-18 07:38:38.110 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48220 10 6452 1 2025-08-18 07:39:48.614 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:39:48.417 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 07:39:48.413 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 07:39:48.352 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:39:38.475 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44624 10 6452 1 2025-08-18 07:39:48.532 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:35:15.145 00:06:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 07:40:38.881 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:48068 12 6556 1 2025-08-18 07:36:15.143 00:06:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 07:41:39.317 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33340 10 6452 1 2025-08-18 07:42:39.682 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:56098 10 6452 1 2025-08-18 07:43:40.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58018 10 6452 1 2025-08-18 07:44:48.641 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:44:48.550 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 07:44:48.554 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 07:44:48.405 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:44:48.723 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:44:40.516 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53054 10 6452 1 2025-08-18 07:45:40.925 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:45194 12 10367 1 2025-08-18 07:46:41.420 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41896 10 6452 1 2025-08-18 07:42:15.148 00:06:00.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 07:47:41.822 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50702 10 6452 1 2025-08-18 07:43:15.144 00:06:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 07:48:42.230 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:42354 10 6452 1 2025-08-18 07:49:48.467 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 07:49:48.467 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 07:49:48.546 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:49:48.744 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:49:48.826 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:49:42.712 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:38952 10 6452 1 2025-08-18 07:50:43.136 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:44266 12 10365 1 2025-08-18 07:51:43.615 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50924 10 6452 1 2025-08-18 07:52:44.022 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36674 10 6452 1 2025-08-18 07:53:44.391 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44084 10 6452 1 2025-08-18 07:49:15.148 00:06:00.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 07:54:48.909 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 07:54:48.601 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 07:54:48.704 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 07:54:48.351 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:54:48.826 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 07:54:44.800 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36718 10 6452 1 2025-08-18 07:50:15.145 00:06:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 07:55:45.204 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56990 10 6452 1 2025-08-18 07:56:45.609 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48578 10 6452 1 2025-08-18 07:57:46.009 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38904 10 6452 1 Summary: total flows: 136, total bytes: 418409, total packets: 1015, avg bps: 875, avg pps: 0, avg bpp: 412 Time window: 2025-08-18 06:54:15 - 2025-08-18 07:57:56 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0018s User: 0.0027s Wall: 0.0018s flows/second: 75513.0 Runtime: 0.0018s