Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 11:54:18.527 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 11:54:18.498 00:06:00.033 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 11:59:24.411 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33464 10 6452 1 2025-08-24 12:00:24.814 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55200 10 6452 1 2025-08-24 12:01:25.220 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57474 10 6452 1 2025-08-24 12:02:25.635 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:33948 10 6452 1 2025-08-24 12:02:47.074 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:02:47.121 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:02:46.987 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:02:46.853 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:02:47.157 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:03:26.021 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45910 10 6452 1 2025-08-24 12:04:26.395 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39578 10 6452 1 2025-08-24 12:05:26.814 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:55330 10 6452 1 2025-08-24 12:01:18.529 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 12:01:18.497 00:06:00.035 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 12:06:27.187 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56716 10 6452 1 2025-08-24 12:07:27.588 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42334 10 6452 1 2025-08-24 12:07:47.361 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:07:47.206 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:07:47.284 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:07:46.860 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:07:47.279 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:08:27.987 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57070 10 6452 1 2025-08-24 12:09:28.393 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46118 10 6452 1 2025-08-24 12:10:28.794 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60732 10 6452 1 2025-08-24 12:11:29.205 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40132 10 6452 1 2025-08-24 12:12:29.613 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59958 10 6452 1 2025-08-24 12:12:46.969 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:12:47.290 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:12:47.074 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:12:47.339 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:12:47.423 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:08:18.500 00:06:00.035 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 12:08:18.531 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 12:13:30.022 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41096 10 6452 1 2025-08-24 12:14:30.385 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52972 10 6452 1 2025-08-24 12:15:30.789 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37404 10 6452 1 2025-08-24 12:16:31.192 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45470 10 6452 1 2025-08-24 12:17:31.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57128 10 6452 1 2025-08-24 12:17:47.218 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:17:47.468 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:17:47.656 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:17:47.696 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:17:47.779 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:18:31.996 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47860 10 6452 1 2025-08-24 12:19:32.395 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38648 10 6452 1 2025-08-24 12:15:18.533 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 12:15:18.501 00:06:00.035 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 12:20:32.796 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58354 10 6452 1 2025-08-24 12:21:33.213 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59152 10 6452 1 2025-08-24 12:22:33.613 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52892 10 6452 1 2025-08-24 12:22:47.495 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:22:47.430 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:22:47.192 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:22:47.496 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:22:47.579 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:23:33.979 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:32866 10 6452 1 2025-08-24 12:24:34.348 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46706 10 6452 1 2025-08-24 12:25:34.712 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35644 10 6452 1 2025-08-24 12:26:35.121 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47922 10 6452 1 2025-08-24 12:22:18.534 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 12:22:18.503 00:06:00.035 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 12:27:47.485 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:27:47.485 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:27:47.507 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:27:47.500 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:27:35.542 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38762 10 6452 1 2025-08-24 12:27:47.582 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:28:35.900 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46304 12 6556 1 2025-08-24 12:29:36.316 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44156 10 6452 1 2025-08-24 12:30:36.746 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37808 10 6452 1 2025-08-24 12:31:37.151 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42826 10 6452 1 2025-08-24 12:32:47.509 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:32:47.489 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:32:37.558 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43296 10 6452 1 2025-08-24 12:32:47.511 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:32:47.587 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:32:47.594 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:33:37.962 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59736 10 6452 1 2025-08-24 12:29:18.537 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 12:29:18.506 00:06:00.035 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 12:34:38.362 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44702 10 6452 1 2025-08-24 12:35:38.758 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:39758 10 6452 1 2025-08-24 12:36:39.194 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54944 10 6452 1 2025-08-24 12:37:47.790 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:37:39.598 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37464 10 6452 1 2025-08-24 12:37:48.008 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:37:47.336 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:37:47.788 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:37:47.871 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:38:39.996 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40832 10 6452 1 2025-08-24 12:39:40.403 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52970 10 6452 1 2025-08-24 12:40:40.815 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47692 10 6452 1 2025-08-24 12:36:18.507 00:06:00.035 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 12:36:18.538 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 12:41:41.224 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51304 10 6452 1 2025-08-24 12:42:47.556 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:42:47.885 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:42:47.882 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:42:47.936 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:42:47.968 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:42:41.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43350 10 6452 1 2025-08-24 12:43:41.987 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36214 10 6452 1 2025-08-24 12:44:42.394 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46254 10 6452 1 2025-08-24 12:45:42.791 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44872 10 6452 1 2025-08-24 12:46:43.192 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49970 10 6452 1 2025-08-24 12:47:47.985 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:47:47.947 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:47:47.653 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:47:47.895 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:47:47.979 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:47:43.605 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-08-24 12:43:18.540 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 12:43:18.509 00:06:00.035 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 12:48:44.014 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52390 10 6452 1 2025-08-24 12:49:44.416 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45846 10 6452 1 2025-08-24 12:50:44.818 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38144 10 6452 1 2025-08-24 12:51:45.191 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54418 10 6452 1 2025-08-24 12:52:48.101 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:52:48.179 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:52:47.936 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:52:47.806 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:52:47.889 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:52:45.598 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35120 10 6452 1 2025-08-24 12:53:46.006 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59044 10 6452 1 2025-08-24 12:54:46.405 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52480 10 6452 1 2025-08-24 12:50:18.541 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-24 12:50:18.513 00:06:00.036 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 12:55:46.809 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36876 10 6452 1 2025-08-24 12:56:47.214 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51086 10 6452 1 2025-08-24 12:57:48.206 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 12:57:47.982 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 12:57:48.232 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 12:57:48.092 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:57:48.124 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 12:57:47.623 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37124 10 6452 1 Summary: total flows: 137, total bytes: 408114, total packets: 961, avg bps: 854, avg pps: 0, avg bpp: 424 Time window: 2025-08-24 11:54:18 - 2025-08-24 12:57:57 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0054s User: 0.0000s Wall: 0.0020s flows/second: 67689.9 Runtime: 0.0020s