Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-30 16:54:21.724 00:06:00.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-30 16:59:18.808 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48656 10 6452 1 2025-08-30 17:00:19.213 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 10 6452 1 2025-08-30 17:00:46.618 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:00:46.734 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:00:46.632 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:00:46.632 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:00:46.714 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:01:19.618 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47020 10 6452 1 2025-08-30 16:57:21.722 00:06:00.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-30 17:02:20.022 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52966 10 6452 1 2025-08-30 17:03:20.388 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45552 10 6452 1 2025-08-30 17:04:20.793 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57486 10 6452 1 2025-08-30 17:05:21.201 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:37020 10 6452 1 2025-08-30 17:05:46.791 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:05:46.860 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:05:46.557 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:05:46.700 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:05:46.783 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:01:21.725 00:06:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-30 17:06:21.637 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58918 10 6452 1 2025-08-30 17:07:22.052 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38478 10 6452 1 2025-08-30 17:08:22.426 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52726 10 6452 1 2025-08-30 17:04:21.723 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-30 17:09:22.830 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39456 10 6452 1 2025-08-30 17:10:23.238 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60188 10 6452 1 2025-08-30 17:10:46.946 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:10:46.750 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:10:47.048 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:10:46.810 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:10:46.862 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:11:23.647 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54802 10 6452 1 2025-08-30 17:12:24.056 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33992 10 6452 1 2025-08-30 17:08:21.728 00:06:00.109 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-30 17:13:24.463 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56060 10 6452 1 2025-08-30 17:14:24.889 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44022 10 6452 1 2025-08-30 17:15:25.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41498 10 6452 1 2025-08-30 17:15:47.008 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:15:46.792 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:15:46.886 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:15:46.737 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:15:46.923 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:11:21.725 00:06:00.114 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-30 17:16:25.716 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40532 10 6452 1 2025-08-30 17:17:26.128 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38604 10 6452 1 2025-08-30 17:18:26.533 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37032 10 6452 1 2025-08-30 17:19:26.936 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34970 10 6452 1 2025-08-30 17:15:21.729 00:06:00.109 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-30 17:20:27.355 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46280 10 6452 1 2025-08-30 17:20:47.117 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:20:47.188 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:20:46.871 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:20:46.922 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:20:47.007 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:21:27.759 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:47086 10 6452 1 2025-08-30 17:22:28.131 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:48808 10 6452 1 2025-08-30 17:18:21.727 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-30 17:23:28.558 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45978 10 6452 1 2025-08-30 17:24:28.955 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57226 11 6492 1 2025-08-30 17:25:29.362 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47466 10 6452 1 2025-08-30 17:25:47.235 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:25:47.101 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:25:47.102 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:25:46.718 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:25:47.152 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:26:29.724 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60208 10 6452 1 2025-08-30 17:22:21.731 00:06:00.109 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-30 17:27:30.141 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59998 10 6452 1 2025-08-30 17:28:30.547 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43786 10 6452 1 2025-08-30 17:29:30.947 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51568 10 6452 1 2025-08-30 17:25:21.728 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-30 17:30:31.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49982 10 6452 1 2025-08-30 17:30:47.092 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:30:47.210 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:30:47.099 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:30:47.202 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:30:47.285 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:31:31.772 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41892 10 6452 1 2025-08-30 17:32:32.185 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-08-30 17:33:32.592 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60902 10 6452 1 2025-08-30 17:29:21.731 00:06:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-30 17:34:33.002 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50250 10 6452 1 2025-08-30 17:35:33.363 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48794 10 6452 1 2025-08-30 17:35:47.339 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:35:47.333 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:35:47.299 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:35:47.258 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:35:47.392 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:36:33.765 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55684 10 6452 1 2025-08-30 17:32:21.729 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-30 17:37:34.142 00:00:31.476 TCP 1.101.0.1:3000 -> 23.104.0.1:44254 10 6452 1 2025-08-30 17:38:55.686 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:41186 10 6452 1 2025-08-30 17:39:56.102 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44818 12 6556 1 2025-08-30 17:40:47.506 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:40:47.427 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:40:47.427 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:40:47.333 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:40:47.423 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:40:56.517 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33534 10 6452 1 2025-08-30 17:36:21.733 00:06:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-30 17:41:56.921 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51154 10 6452 1 2025-08-30 17:42:57.329 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41998 10 6452 1 2025-08-30 17:43:57.732 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55774 10 6452 1 2025-08-30 17:39:21.733 00:06:00.114 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-30 17:44:58.111 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:42028 10 6452 1 2025-08-30 17:45:47.404 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:45:47.220 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:45:47.479 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:45:47.392 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:45:47.322 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:45:58.510 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38232 10 6452 1 2025-08-30 17:46:58.917 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56792 10 6452 1 2025-08-30 17:47:59.318 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:46496 12 10365 1 2025-08-30 17:43:21.736 00:06:00.109 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-30 17:48:59.797 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:52762 10 6452 1 2025-08-30 17:50:00.186 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42742 10 6452 1 2025-08-30 17:50:47.701 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:50:47.522 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:50:47.438 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:50:47.712 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:50:47.795 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:51:00.549 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59020 10 6452 1 2025-08-30 17:46:21.733 00:06:00.114 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-30 17:52:00.950 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57566 10 6452 1 2025-08-30 17:53:01.360 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38742 10 6452 1 2025-08-30 17:54:01.760 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:51142 10 6452 1 2025-08-30 17:55:02.183 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44766 10 6452 1 2025-08-30 17:50:21.736 00:06:00.119 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-30 17:55:47.903 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-30 17:55:47.662 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-30 17:55:47.625 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:55:47.820 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-30 17:55:47.489 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-30 17:56:02.590 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53992 10 6452 1 2025-08-30 17:57:03.002 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40358 10 6452 1 2025-08-30 17:58:03.400 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40384 10 6452 1 2025-08-30 17:53:21.736 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 137, total bytes: 415343, total packets: 1027, avg bps: 851, avg pps: 0, avg bpp: 404 Time window: 2025-08-30 16:54:21 - 2025-08-30 17:59:21 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0008s User: 0.0034s Wall: 0.0018s flows/second: 76923.6 Runtime: 0.0018s