Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 12:54:20.488 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 12:59:15.524 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:55124 10 6452 1 2025-08-28 12:59:44.024 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 12:59:43.940 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 12:59:43.940 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 12:59:43.852 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 12:59:43.941 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:00:15.884 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43638 10 6452 1 2025-08-28 13:01:16.293 00:00:10.768 TCP 1.101.0.1:3000 -> 23.104.0.1:42794 10 6452 1 2025-08-28 13:02:17.112 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:57404 12 10367 1 2025-08-28 12:58:20.486 00:06:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 13:03:17.597 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33742 10 6452 1 2025-08-28 13:04:18.004 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34498 10 6452 1 2025-08-28 13:04:43.891 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:04:44.277 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:04:44.224 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 13:04:44.122 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 13:04:44.361 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 13:05:18.403 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56074 10 6452 1 2025-08-28 13:01:20.489 00:06:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 13:06:18.814 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33052 10 6452 1 2025-08-28 13:07:19.225 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:51806 12 10367 1 2025-08-28 13:08:19.677 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55048 10 6452 1 2025-08-28 13:09:20.108 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 10 6452 1 2025-08-28 13:09:44.165 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 13:09:44.335 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 13:09:44.097 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:09:44.165 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:09:44.248 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 13:05:20.487 00:06:00.252 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 13:10:20.507 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51550 10 6452 1 2025-08-28 13:11:20.907 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51750 10 6452 1 2025-08-28 13:12:21.309 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41522 10 6452 1 2025-08-28 13:08:20.500 00:06:00.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 13:13:21.672 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51972 10 6452 1 2025-08-28 13:14:22.101 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59284 10 6452 1 2025-08-28 13:14:44.667 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 13:14:44.583 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 13:14:44.583 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 13:14:44.287 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:14:44.585 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:15:22.508 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45136 10 6452 1 2025-08-28 13:16:22.915 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50628 10 6452 1 2025-08-28 13:12:20.489 00:06:00.252 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 13:17:23.321 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57170 10 6452 1 2025-08-28 13:18:23.726 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37818 10 6452 1 2025-08-28 13:19:24.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49856 10 6452 1 2025-08-28 13:19:44.641 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 13:19:44.559 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:19:44.559 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 13:19:44.655 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 13:19:44.492 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:15:20.490 00:06:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 13:20:24.510 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49304 10 6452 1 2025-08-28 13:21:24.910 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57222 10 6452 1 2025-08-28 13:22:25.319 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40510 10 6452 1 2025-08-28 13:23:25.681 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45410 10 6452 1 2025-08-28 13:19:20.491 00:06:00.252 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 13:24:26.067 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58636 10 6452 1 2025-08-28 13:24:44.629 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 13:24:44.580 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:24:44.627 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:24:44.563 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 13:24:44.708 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 13:25:26.470 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35260 10 6452 1 2025-08-28 13:26:26.886 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:46980 10 6452 1 2025-08-28 13:22:20.497 00:06:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 13:27:27.323 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52544 10 6452 1 2025-08-28 13:28:27.728 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:36858 10 6452 1 2025-08-28 13:29:28.112 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:56664 10 6452 1 2025-08-28 13:29:44.627 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 13:29:44.428 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:29:44.545 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:29:44.636 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 13:29:44.627 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 13:30:28.515 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48540 10 6452 1 2025-08-28 13:26:20.495 00:06:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 13:31:28.922 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:49698 10 6452 1 2025-08-28 13:32:29.298 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37454 10 6452 1 2025-08-28 13:33:29.698 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51466 10 6452 1 2025-08-28 13:29:20.499 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 13:34:30.132 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37888 10 6452 1 2025-08-28 13:34:44.621 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 13:34:44.662 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:34:44.531 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:34:44.746 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 13:34:44.613 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 13:35:30.551 00:00:10.944 TCP 1.101.0.1:3000 -> 23.104.0.1:46610 10 6452 1 2025-08-28 13:36:31.536 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36206 10 6452 1 2025-08-28 13:37:31.938 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48498 10 6452 1 2025-08-28 13:33:20.496 00:06:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 13:38:32.357 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:50708 10 6452 1 2025-08-28 13:39:44.857 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 13:39:32.780 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36804 10 6452 1 2025-08-28 13:39:44.797 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 13:39:44.756 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:39:44.659 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:39:44.742 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 13:40:33.189 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57512 10 6452 1 2025-08-28 13:36:20.501 00:06:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 13:41:33.590 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47786 10 6452 1 2025-08-28 13:42:33.989 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56258 10 6452 1 2025-08-28 13:43:34.397 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35600 10 6452 1 2025-08-28 13:44:44.961 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:44:34.799 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46848 10 6452 1 2025-08-28 13:44:45.182 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:44:45.147 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 13:44:45.207 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 13:44:45.265 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 13:40:20.500 00:06:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 13:45:35.206 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52442 10 6452 1 2025-08-28 13:46:35.574 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56070 10 6452 1 2025-08-28 13:47:35.973 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48430 10 6452 1 2025-08-28 13:43:20.504 00:06:00.242 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 13:48:36.374 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37470 10 6452 1 2025-08-28 13:49:44.942 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 13:49:44.851 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:49:44.859 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:49:44.942 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 13:49:45.145 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 13:49:36.773 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53508 10 6452 1 2025-08-28 13:50:37.137 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57076 10 6452 1 2025-08-28 13:51:37.551 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:50546 10 6452 1 2025-08-28 13:47:20.502 00:06:00.249 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 13:52:37.956 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48168 10 6452 1 2025-08-28 13:53:38.355 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37878 10 6452 1 2025-08-28 13:54:44.943 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:54:45.098 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 13:54:44.999 00:00:00.040 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 13:54:45.103 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 13:54:38.756 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:39850 10 6452 1 2025-08-28 13:54:45.186 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 13:50:20.505 00:06:00.242 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 13:55:39.131 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52156 10 6452 1 2025-08-28 13:56:39.536 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45936 10 6452 1 2025-08-28 13:57:39.945 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:36212 10 6452 1 Summary: total flows: 136, total bytes: 418255, total packets: 1012, avg bps: 878, avg pps: 0, avg bpp: 413 Time window: 2025-08-28 12:54:20 - 2025-08-28 13:57:50 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0041s User: 0.0010s Wall: 0.0026s flows/second: 51338.8 Runtime: 0.0027s