Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 19:59:10.765 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:56794 10 6452 1 2025-08-07 19:59:45.567 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 19:59:45.577 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 19:59:45.485 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 19:59:45.694 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 19:59:45.777 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 19:56:09.217 00:04:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 20:00:11.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53750 10 6452 1 2025-08-07 20:01:11.550 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39858 10 6452 1 2025-08-07 20:02:11.953 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59168 10 6452 1 2025-08-07 19:59:09.216 00:04:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 20:03:12.361 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:46008 10 6452 1 2025-08-07 20:04:12.724 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36118 10 6452 1 2025-08-07 20:04:46.091 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 20:04:45.868 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 20:04:45.960 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:04:45.986 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:04:46.068 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 20:01:09.223 00:04:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 20:05:13.128 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52404 10 6452 1 2025-08-07 20:06:13.530 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53794 10 6452 1 2025-08-07 20:07:13.931 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58816 10 6452 1 2025-08-07 20:04:09.220 00:04:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 20:08:14.332 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57592 10 6452 1 2025-08-07 20:09:14.733 00:00:10.452 TCP 1.101.0.1:3000 -> 23.104.0.1:45004 12 10365 1 2025-08-07 20:09:46.217 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 20:09:46.196 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 20:09:46.050 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 20:09:46.083 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:09:46.135 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:06:09.223 00:04:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 20:09:09.221 00:01:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-07 20:10:15.223 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48524 10 6452 1 2025-08-07 20:11:15.652 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56798 10 6452 1 2025-08-07 20:11:09.224 00:01:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-07 20:12:16.064 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41662 10 6452 1 2025-08-07 20:13:16.460 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36874 10 6452 1 2025-08-07 20:14:16.825 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47272 10 6452 1 2025-08-07 20:14:45.938 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 20:14:45.940 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 20:14:45.869 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:14:45.722 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:14:45.807 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 20:11:09.221 00:04:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 20:13:09.225 00:02:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-07 20:15:17.223 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:59162 11 6504 1 2025-08-07 20:16:17.683 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36444 10 6452 1 2025-08-07 20:16:09.226 00:01:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-07 20:17:18.050 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47640 10 6452 1 2025-08-07 20:18:18.458 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32770 10 6452 1 2025-08-07 20:19:18.872 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53334 10 6452 1 2025-08-07 20:19:46.060 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 20:19:45.890 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:19:45.944 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:19:45.948 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 20:19:46.026 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 20:16:09.224 00:04:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 20:20:19.292 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43104 10 6452 1 2025-08-07 20:21:19.700 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60444 10 6452 1 2025-08-07 20:18:09.227 00:04:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 20:22:20.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60946 10 6452 1 2025-08-07 20:23:20.510 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37132 10 6452 1 2025-08-07 20:24:20.881 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35276 10 6452 1 2025-08-07 20:24:46.296 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 20:24:46.263 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 20:24:46.212 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 20:24:46.159 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:24:46.212 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:21:09.223 00:04:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 20:25:21.282 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46524 10 6452 1 2025-08-07 20:26:21.677 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46080 10 6452 1 2025-08-07 20:23:09.226 00:04:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 20:27:22.106 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45370 10 6452 1 2025-08-07 20:28:22.501 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39350 10 6452 1 2025-08-07 20:29:22.864 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58866 10 6452 1 2025-08-07 20:29:46.286 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 20:29:46.275 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 20:29:46.274 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 20:29:46.139 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:29:46.192 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:26:09.225 00:04:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 20:30:23.276 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41634 10 6452 1 2025-08-07 20:31:23.680 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34718 10 6452 1 2025-08-07 20:28:09.228 00:04:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 20:32:24.060 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40564 10 6452 1 2025-08-07 20:33:24.465 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57124 10 6452 1 2025-08-07 20:34:24.877 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34898 10 6452 1 2025-08-07 20:34:46.456 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 20:34:46.175 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 20:34:46.331 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 20:34:46.105 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:34:46.373 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:31:09.227 00:04:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 20:35:25.282 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33552 10 6452 1 2025-08-07 20:36:25.685 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46574 10 6452 1 2025-08-07 20:33:09.231 00:04:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 20:37:26.107 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41970 10 6452 1 2025-08-07 20:38:26.469 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41474 11 6504 1 2025-08-07 20:39:26.887 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47452 10 6452 1 2025-08-07 20:39:46.783 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 20:39:46.758 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 20:39:46.861 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 20:39:46.367 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:39:46.699 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:36:09.230 00:04:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 20:40:27.307 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44062 10 6452 1 2025-08-07 20:41:27.672 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49762 10 6452 1 2025-08-07 20:41:09.230 00:01:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-07 20:38:09.233 00:04:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 20:42:28.034 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55516 10 6452 1 2025-08-07 20:43:28.392 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54664 10 6452 1 2025-08-07 20:43:09.232 00:01:00.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-07 20:44:28.797 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58710 10 6452 1 2025-08-07 20:44:46.332 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 20:44:46.617 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 20:44:46.567 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 20:44:46.413 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:44:46.249 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:43:09.229 00:02:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-07 20:45:29.203 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51164 10 6452 1 2025-08-07 20:46:29.604 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48272 10 6452 1 2025-08-07 20:46:09.229 00:01:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-07 20:45:09.232 00:02:00.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-07 20:47:30.008 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 10 6452 1 2025-08-07 20:48:30.415 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:39498 12 10367 1 2025-08-07 20:48:09.232 00:01:00.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-07 20:49:30.899 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56220 12 6556 1 2025-08-07 20:49:46.968 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 20:49:46.906 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 20:49:46.758 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:49:46.731 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:49:46.815 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 20:50:31.315 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46312 10 6452 1 2025-08-07 20:51:31.726 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42122 10 6452 1 2025-08-07 20:48:09.232 00:04:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 20:52:32.139 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37506 10 6452 1 2025-08-07 20:53:32.506 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45190 10 6452 1 2025-08-07 20:50:09.233 00:04:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 20:54:32.909 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54516 10 6452 1 2025-08-07 20:54:47.260 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 20:54:47.178 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 20:54:47.133 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:54:47.169 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 20:54:47.252 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 20:55:33.312 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33980 10 6452 1 2025-08-07 20:56:33.719 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38758 10 6452 1 2025-08-07 20:53:09.232 00:04:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 20:57:34.138 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34104 10 6452 1 2025-08-07 20:58:34.497 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40248 10 6452 1 Summary: total flows: 149, total bytes: 424790, total packets: 1024, avg bps: 904, avg pps: 0, avg bpp: 414 Time window: 2025-08-07 19:56:09 - 2025-08-07 20:58:44 Total flows processed: 149, passed: 149, Blocks skipped: 0, Bytes read: 15560 Sys: 0.0027s User: 0.0018s Wall: 0.0021s flows/second: 72156.9 Runtime: 0.0021s