Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-22 16:54:17.510 00:06:00.049 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 16:59:04.980 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57052 10 6452 1 2025-08-22 17:00:05.342 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50428 10 6452 1 2025-08-22 17:01:05.751 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59352 10 6452 1 2025-08-22 17:01:55.503 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:01:55.282 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:01:55.394 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:01:55.506 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:01:55.480 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:02:06.152 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50770 10 6452 1 2025-08-22 17:03:06.553 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40618 10 6452 1 2025-08-22 16:59:17.512 00:06:00.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 17:04:06.964 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50214 10 6452 1 2025-08-22 17:05:07.364 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47724 10 6452 1 2025-08-22 17:06:07.731 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52078 10 6452 1 2025-08-22 17:01:17.513 00:06:00.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 17:06:55.568 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:06:55.642 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:06:55.425 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:06:55.560 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:06:55.644 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:07:08.139 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:32842 10 6452 1 2025-08-22 17:08:08.503 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48084 10 6452 1 2025-08-22 17:09:08.912 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47538 10 6452 1 2025-08-22 17:10:09.296 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:54272 10 6452 1 2025-08-22 17:06:17.512 00:06:00.055 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 17:11:09.807 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:51832 12 10367 1 2025-08-22 17:11:55.485 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:11:55.535 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:11:55.480 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:11:55.345 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:11:55.401 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:12:10.299 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42368 10 6452 1 2025-08-22 17:08:17.514 00:06:00.050 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 17:13:10.714 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:35448 10 6452 1 2025-08-22 17:14:11.134 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39106 10 6452 1 2025-08-22 17:15:11.534 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43218 10 6452 1 2025-08-22 17:16:11.939 00:00:10.540 TCP 1.101.0.1:3000 -> 23.104.0.1:38610 10 6452 1 2025-08-22 17:16:55.717 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:16:55.547 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:16:55.640 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:16:55.680 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:16:55.634 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:17:12.515 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59742 10 6452 1 2025-08-22 17:13:17.516 00:06:00.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 17:18:12.930 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:53758 10 6452 1 2025-08-22 17:19:13.361 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40130 10 6452 1 2025-08-22 17:15:17.517 00:06:00.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 17:20:13.728 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51178 10 6452 1 2025-08-22 17:21:14.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59332 10 6452 1 2025-08-22 17:21:55.671 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:21:55.557 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:21:55.553 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:21:55.553 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:21:55.636 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:22:14.542 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33170 10 6452 1 2025-08-22 17:23:14.908 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48328 12 6556 1 2025-08-22 17:24:15.312 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58394 10 6452 1 2025-08-22 17:20:17.514 00:06:00.058 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 17:25:15.725 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51364 10 6452 1 2025-08-22 17:26:16.133 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49998 10 6452 1 2025-08-22 17:26:56.093 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:26:55.660 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:26:55.596 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:26:56.011 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:26:55.837 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:22:17.518 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 17:27:16.497 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40750 10 6452 1 2025-08-22 17:28:16.902 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48634 10 6452 1 2025-08-22 17:29:17.314 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59686 10 6452 1 2025-08-22 17:30:17.721 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38962 10 6452 1 2025-08-22 17:31:18.141 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56410 10 6452 1 2025-08-22 17:31:55.944 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:31:55.861 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:31:55.968 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:31:55.717 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:31:55.927 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:27:17.516 00:06:00.058 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 17:32:18.536 00:00:12.939 TCP 1.101.0.1:3000 -> 23.104.0.1:33962 10 6452 1 2025-08-22 17:33:21.540 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55016 10 6452 1 2025-08-22 17:29:17.518 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 17:34:21.939 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49176 10 6452 1 2025-08-22 17:35:22.349 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54374 10 6452 1 2025-08-22 17:36:22.707 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41064 10 6452 1 2025-08-22 17:36:56.008 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:36:55.990 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:36:55.995 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:36:55.867 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:36:55.925 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:37:23.097 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56516 10 6452 1 2025-08-22 17:38:23.501 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54868 10 6452 1 2025-08-22 17:34:17.516 00:06:00.062 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 17:39:23.894 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:36766 10 6452 1 2025-08-22 17:40:24.280 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46556 10 6452 1 2025-08-22 17:36:17.520 00:06:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 17:41:24.684 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42888 10 6452 1 2025-08-22 17:41:56.272 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:41:56.274 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:41:56.206 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:41:55.743 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:41:56.189 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:42:25.114 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36988 10 6452 1 2025-08-22 17:43:25.547 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43808 10 6452 1 2025-08-22 17:44:25.956 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36350 10 6452 1 2025-08-22 17:45:26.365 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53368 10 6452 1 2025-08-22 17:41:17.524 00:06:00.055 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 17:46:26.770 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36650 10 6452 1 2025-08-22 17:46:56.266 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:46:56.232 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:46:56.173 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:46:55.781 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:46:56.183 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:47:27.178 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40750 10 6452 1 2025-08-22 17:43:17.526 00:06:00.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 17:48:27.541 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35228 10 6452 1 2025-08-22 17:49:27.905 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35742 10 6452 1 2025-08-22 17:50:28.310 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46018 10 6452 1 2025-08-22 17:51:28.669 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35018 10 6452 1 2025-08-22 17:51:56.331 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:51:56.114 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:51:56.135 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:51:56.259 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:51:56.342 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:52:29.029 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58580 10 6452 1 2025-08-22 17:48:17.525 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 17:53:29.431 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41598 10 6452 1 2025-08-22 17:54:29.840 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51052 10 6452 1 2025-08-22 17:50:17.528 00:06:00.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 17:55:30.262 00:00:10.891 TCP 1.101.0.1:3000 -> 23.104.0.1:50636 12 6556 1 2025-08-22 17:56:31.187 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58772 10 6452 1 2025-08-22 17:56:56.699 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 17:56:56.466 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 17:56:56.354 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:56:56.578 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 17:56:56.661 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 17:57:31.592 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:52354 10 6452 1 2025-08-22 17:58:31.967 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41164 10 6452 1 Summary: total flows: 137, total bytes: 421000, total packets: 1024, avg bps: 871, avg pps: 0, avg bpp: 411 Time window: 2025-08-22 16:54:17 - 2025-08-22 17:58:42 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0031s User: 0.0010s Wall: 0.0019s flows/second: 72443.2 Runtime: 0.0019s