Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 02:54:17.709 00:06:00.083 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 02:59:18.369 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57090 10 6452 1 2025-08-23 03:00:18.776 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57082 10 6452 1 2025-08-23 03:01:19.186 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54834 10 6452 1 2025-08-23 03:02:07.353 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:02:07.319 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:02:07.476 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:02:07.422 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:02:07.569 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:02:19.552 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60340 10 6452 1 2025-08-23 03:03:19.952 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43022 10 6452 1 2025-08-23 03:04:20.317 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53896 10 6452 1 2025-08-23 03:00:17.714 00:06:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 03:05:20.728 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33864 10 6452 1 2025-08-23 03:01:17.713 00:06:00.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 03:06:21.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52026 10 6452 1 2025-08-23 03:07:07.593 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:07:07.563 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:07:07.409 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:07:07.510 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:07:07.455 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:07:21.511 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60944 10 6452 1 2025-08-23 03:08:21.918 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54930 10 6452 1 2025-08-23 03:09:22.329 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35724 10 6452 1 2025-08-23 03:10:22.734 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51448 10 6452 1 2025-08-23 03:11:23.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44078 10 6452 1 2025-08-23 03:12:07.416 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:12:07.422 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:12:07.500 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:12:07.397 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:12:07.499 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:07:17.716 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 03:12:23.512 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53138 10 6452 1 2025-08-23 03:08:17.714 00:06:00.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 03:13:23.919 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55238 10 6452 1 2025-08-23 03:14:24.322 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54932 10 6452 1 2025-08-23 03:15:24.719 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44516 10 6452 1 2025-08-23 03:16:25.134 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60630 10 6452 1 2025-08-23 03:17:07.611 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:17:07.608 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:17:07.623 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:17:07.559 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:17:07.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:17:25.496 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37378 10 6452 1 2025-08-23 03:18:25.902 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51282 10 6452 1 2025-08-23 03:14:17.718 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 03:19:26.337 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42998 10 6452 1 2025-08-23 03:15:17.714 00:06:00.083 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 03:20:26.741 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:43820 10 6452 1 2025-08-23 03:21:27.145 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38510 10 6452 1 2025-08-23 03:22:07.702 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:22:07.547 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:22:07.680 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:22:07.620 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:22:07.526 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:22:27.509 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40602 10 6452 1 2025-08-23 03:23:27.906 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47498 10 6452 1 2025-08-23 03:24:28.321 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55290 10 6452 1 2025-08-23 03:25:28.740 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42408 10 6452 1 2025-08-23 03:21:17.720 00:06:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 03:26:29.146 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40264 10 6452 1 2025-08-23 03:27:07.923 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:27:08.078 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:27:08.103 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:27:08.025 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:27:08.187 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:22:17.718 00:06:00.080 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 03:27:29.509 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45156 10 6452 1 2025-08-23 03:28:29.915 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32880 10 6452 1 2025-08-23 03:29:30.317 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53850 10 6452 1 2025-08-23 03:30:30.683 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41724 10 6452 1 2025-08-23 03:31:31.112 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42752 10 6452 1 2025-08-23 03:32:07.735 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:32:07.882 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:32:07.969 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:32:07.735 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:32:08.053 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:32:31.478 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46032 10 6452 1 2025-08-23 03:28:17.721 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 03:33:31.891 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:48198 12 6556 1 2025-08-23 03:29:17.719 00:06:00.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 03:34:32.310 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42194 10 6452 1 2025-08-23 03:35:32.716 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:34160 10 6452 1 2025-08-23 03:36:33.101 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55132 10 6452 1 2025-08-23 03:37:07.926 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:37:07.942 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:37:08.123 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:37:07.929 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:37:08.205 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:37:33.509 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44066 10 6452 1 2025-08-23 03:38:33.910 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46256 10 6452 1 2025-08-23 03:39:34.315 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46060 10 6452 1 2025-08-23 03:35:17.722 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 03:40:34.722 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35364 10 6452 1 2025-08-23 03:36:17.719 00:06:00.084 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 03:41:35.138 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53962 10 6452 1 2025-08-23 03:42:08.256 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:42:08.142 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:42:08.174 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:42:07.783 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:42:08.170 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:42:35.541 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45730 10 6452 1 2025-08-23 03:43:35.910 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34520 10 6452 1 2025-08-23 03:44:36.309 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44550 10 6452 1 2025-08-23 03:45:36.712 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:56140 10 6452 1 2025-08-23 03:46:37.114 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49190 10 6452 1 2025-08-23 03:47:08.115 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:47:08.139 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:47:08.406 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:47:08.265 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:47:08.489 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:42:17.724 00:06:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 03:47:37.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55666 10 6452 1 2025-08-23 03:43:17.721 00:06:00.084 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 03:48:37.927 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:39954 10 6452 1 2025-08-23 03:49:38.334 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37904 10 6452 1 2025-08-23 03:50:38.739 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42576 10 6452 1 2025-08-23 03:51:39.112 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53220 10 6452 1 2025-08-23 03:52:08.574 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:52:08.886 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:52:08.719 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:52:08.925 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:52:08.968 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:52:39.519 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47360 10 6452 1 2025-08-23 03:53:39.926 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56474 10 6452 1 2025-08-23 03:49:17.728 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 03:54:40.358 00:00:13.814 TCP 1.101.0.1:3000 -> 23.104.0.1:52762 10 6452 1 2025-08-23 03:50:17.726 00:06:00.085 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 03:55:44.268 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47142 10 6452 1 2025-08-23 03:56:44.668 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47448 10 6452 1 2025-08-23 03:57:08.447 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:57:08.375 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 03:57:08.531 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 03:57:08.391 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 03:57:08.530 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 03:57:45.034 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57832 10 6452 1 Summary: total flows: 136, total bytes: 410529, total packets: 1010, avg bps: 860, avg pps: 0, avg bpp: 406 Time window: 2025-08-23 02:54:17 - 2025-08-23 03:57:55 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0023s User: 0.0023s Wall: 0.0028s flows/second: 48729.3 Runtime: 0.0028s