Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 17:54:16.441 00:06:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 17:59:16.368 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49890 10 6452 1 2025-08-20 17:55:16.444 00:06:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 18:00:16.780 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36724 10 6452 1 2025-08-20 18:00:58.610 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:00:58.662 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:00:58.681 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:00:58.722 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:00:58.805 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:01:17.138 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41064 10 6452 1 2025-08-20 18:02:17.548 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53928 10 6452 1 2025-08-20 18:03:17.950 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34542 10 6452 1 2025-08-20 18:04:18.361 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50268 10 6452 1 2025-08-20 18:05:18.761 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:36702 10 6452 1 2025-08-20 18:05:58.769 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:05:58.782 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:05:58.775 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:05:58.735 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:05:58.687 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:01:16.443 00:06:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 18:06:19.135 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33118 10 6452 1 2025-08-20 18:02:16.445 00:06:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 18:07:19.537 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38990 10 6452 1 2025-08-20 18:08:19.904 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:60738 10 6452 1 2025-08-20 18:09:20.277 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35974 10 6452 1 2025-08-20 18:10:20.678 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41744 10 6452 1 2025-08-20 18:10:59.038 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:10:58.892 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:10:58.802 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:10:58.809 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:10:58.957 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:11:21.105 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56912 10 6452 1 2025-08-20 18:12:21.471 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60498 10 6452 1 2025-08-20 18:08:16.443 00:06:00.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 18:13:21.872 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59228 10 6452 1 2025-08-20 18:09:16.446 00:06:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 18:14:22.279 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41612 10 6452 1 2025-08-20 18:15:22.685 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47156 10 6452 1 2025-08-20 18:15:58.799 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:15:59.032 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:15:58.877 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:15:59.126 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:15:59.209 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:16:23.061 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37310 10 6452 1 2025-08-20 18:17:23.479 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36700 10 6452 1 2025-08-20 18:18:23.852 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37626 10 6452 1 2025-08-20 18:19:24.263 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40008 10 6452 1 2025-08-20 18:15:16.444 00:06:00.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 18:20:24.666 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43022 10 6452 1 2025-08-20 18:20:59.228 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:20:58.978 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:20:59.153 00:00:00.015 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:20:58.935 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:20:59.144 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:16:16.447 00:06:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 18:21:25.097 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58048 10 6452 1 2025-08-20 18:22:25.510 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44928 10 6452 1 2025-08-20 18:23:25.919 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54188 10 6452 1 2025-08-20 18:24:26.325 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51052 10 6452 1 2025-08-20 18:25:26.729 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:35754 10 6452 1 2025-08-20 18:25:59.306 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:25:58.961 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:25:58.875 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:25:58.847 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:25:58.929 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:26:27.113 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36548 10 6452 1 2025-08-20 18:22:16.448 00:06:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 18:27:27.522 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47050 10 6452 1 2025-08-20 18:23:16.450 00:06:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 18:28:27.920 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:52416 10 6452 1 2025-08-20 18:29:28.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41140 10 6452 1 2025-08-20 18:30:28.685 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:57908 11 6504 1 2025-08-20 18:30:59.417 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:30:59.199 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:30:59.306 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:30:59.092 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:30:59.175 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:31:29.169 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55060 10 6452 1 2025-08-20 18:32:29.574 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37444 10 6452 1 2025-08-20 18:33:29.934 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35750 10 6452 1 2025-08-20 18:29:16.450 00:06:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 18:34:30.346 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45114 10 6452 1 2025-08-20 18:30:16.453 00:06:00.240 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 18:35:30.752 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:58016 12 10367 1 2025-08-20 18:35:59.446 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:35:59.186 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:35:58.972 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:35:59.323 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:35:59.406 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:36:31.230 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34618 10 6452 1 2025-08-20 18:37:31.636 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38106 10 6452 1 2025-08-20 18:38:32.066 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:44252 10 6452 1 2025-08-20 18:39:32.423 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51000 10 6452 1 2025-08-20 18:40:32.826 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48232 10 6452 1 2025-08-20 18:40:59.620 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:40:59.438 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:40:59.341 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:40:59.610 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:40:59.539 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:36:16.454 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 18:41:33.227 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58044 10 6452 1 2025-08-20 18:37:16.457 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 18:42:33.633 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47478 10 6452 1 2025-08-20 18:43:34.030 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37948 10 6452 1 2025-08-20 18:44:34.392 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54522 10 6452 1 2025-08-20 18:45:34.790 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50930 10 6452 1 2025-08-20 18:45:59.366 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:45:59.370 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:45:59.475 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:45:59.471 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:45:59.558 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:46:35.189 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33750 10 6452 1 2025-08-20 18:47:35.593 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43244 10 6452 1 2025-08-20 18:43:16.456 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 18:48:35.994 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41590 10 6452 1 2025-08-20 18:44:16.459 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 18:49:36.361 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40382 10 6452 1 2025-08-20 18:50:36.763 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:57232 10 6452 1 2025-08-20 18:50:59.934 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:50:59.839 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:50:59.855 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:50:59.446 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:50:59.851 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:51:37.142 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47636 10 6452 1 2025-08-20 18:52:37.541 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49190 10 6452 1 2025-08-20 18:53:37.944 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38134 10 6452 1 2025-08-20 18:54:38.363 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33760 10 6452 1 2025-08-20 18:50:16.457 00:06:00.242 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 18:55:38.762 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60276 10 6452 1 2025-08-20 18:55:59.631 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 18:55:59.787 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 18:55:59.801 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:55:59.741 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 18:55:59.824 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 18:51:16.460 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 18:56:39.175 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39580 10 6452 1 2025-08-20 18:57:39.605 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52148 10 6452 1 Summary: total flows: 137, total bytes: 415253, total packets: 1025, avg bps: 871, avg pps: 0, avg bpp: 405 Time window: 2025-08-20 17:54:16 - 2025-08-20 18:57:49 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0025s User: 0.0016s Wall: 0.0016s flows/second: 83230.0 Runtime: 0.0017s