Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 20:54:10.513 00:06:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 20:59:12.529 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51888 10 6452 1 2025-08-09 20:55:10.511 00:06:00.240 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 21:00:12.934 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:58640 10 6452 1 2025-08-09 21:00:44.937 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:00:44.778 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:00:44.851 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:00:44.640 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:00:44.853 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:01:13.311 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35904 10 6452 1 2025-08-09 21:02:13.729 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60354 10 6452 1 2025-08-09 21:03:14.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52000 10 6452 1 2025-08-09 21:04:14.550 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43434 10 6452 1 2025-08-09 21:05:14.914 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6452 1 2025-08-09 21:05:44.531 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:05:44.682 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:05:44.767 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:05:44.715 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:05:44.615 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:01:10.525 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 21:06:15.275 00:00:10.813 TCP 1.101.0.1:3000 -> 23.104.0.1:49236 10 6452 1 2025-08-09 21:02:10.523 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 21:07:16.128 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42374 10 6452 1 2025-08-09 21:08:16.491 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46762 10 6452 1 2025-08-09 21:09:16.892 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:33980 10 6452 1 2025-08-09 21:10:17.264 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50778 10 6452 1 2025-08-09 21:10:45.950 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:10:45.977 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:10:45.781 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:10:45.726 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:10:45.863 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:11:17.628 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59840 10 6452 1 2025-08-09 21:12:18.037 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52288 10 6452 1 2025-08-09 21:08:10.527 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 21:13:18.404 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35292 10 6452 1 2025-08-09 21:09:10.524 00:06:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 21:14:18.804 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:57878 10 6452 1 2025-08-09 21:15:19.179 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53428 10 6452 1 2025-08-09 21:15:44.768 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:15:44.819 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:15:45.166 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:15:44.977 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:15:45.083 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:16:19.584 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45034 10 6452 1 2025-08-09 21:17:19.987 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37962 10 6452 1 2025-08-09 21:18:20.404 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58438 10 6452 1 2025-08-09 21:19:20.778 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34926 10 6452 1 2025-08-09 21:15:10.529 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 21:20:21.140 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54776 10 6452 1 2025-08-09 21:20:44.880 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:20:44.957 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:20:45.039 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:20:45.162 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:20:45.116 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:16:10.527 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 21:21:21.515 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54636 10 6452 1 2025-08-09 21:22:21.924 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:55380 10 6452 1 2025-08-09 21:23:22.299 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47808 10 6452 1 2025-08-09 21:24:22.703 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53520 10 6452 1 2025-08-09 21:25:23.116 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43802 10 6452 1 2025-08-09 21:25:44.956 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:25:44.780 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:25:44.750 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:25:44.874 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:25:45.152 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:26:23.479 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53870 10 6452 1 2025-08-09 21:22:10.530 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 21:27:23.850 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53874 10 6452 1 2025-08-09 21:23:10.527 00:06:00.243 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 21:28:24.274 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39002 10 6452 1 2025-08-09 21:29:24.636 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35440 10 6452 1 2025-08-09 21:30:25.036 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53142 10 6452 1 2025-08-09 21:30:46.351 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:30:46.343 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:30:46.244 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:30:46.435 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:30:46.516 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:31:25.439 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44688 10 6452 1 2025-08-09 21:32:25.841 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:59920 10 6452 1 2025-08-09 21:33:26.262 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50044 10 6452 1 2025-08-09 21:29:10.532 00:06:00.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 21:30:10.530 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 21:34:26.660 00:01:10.768 TCP 1.101.0.1:3000 -> 23.104.0.1:33468 20 12904 1 2025-08-09 21:35:45.593 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:35:45.453 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:35:45.563 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:35:45.333 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:35:45.511 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:36:27.466 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47334 10 6452 1 2025-08-09 21:37:27.829 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60896 10 6452 1 2025-08-09 21:38:28.192 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49638 10 6452 1 2025-08-09 21:39:28.563 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:37656 12 10367 1 2025-08-09 21:40:29.040 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60640 10 6452 1 2025-08-09 21:40:45.578 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:40:45.565 00:00:00.038 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:40:45.536 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:40:45.310 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:40:45.496 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:36:10.534 00:06:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 21:41:29.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39494 10 6452 1 2025-08-09 21:37:10.531 00:06:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 21:42:29.805 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48166 10 6452 1 2025-08-09 21:43:30.207 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48078 10 6452 1 2025-08-09 21:44:30.615 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38244 10 6452 1 2025-08-09 21:45:31.027 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39626 10 6452 1 2025-08-09 21:45:45.592 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:45:45.554 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:45:45.536 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:45:45.554 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:45:45.637 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:46:31.445 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46280 10 6452 1 2025-08-09 21:47:31.852 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56774 10 6452 1 2025-08-09 21:43:10.534 00:06:00.245 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 21:48:32.223 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57884 10 6452 1 2025-08-09 21:44:10.533 00:06:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 21:49:32.642 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57130 10 6452 1 2025-08-09 21:50:33.005 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50946 10 6452 1 2025-08-09 21:50:45.796 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:50:45.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:50:45.600 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:50:45.621 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:50:45.713 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:51:33.407 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53474 10 6452 1 2025-08-09 21:52:33.805 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33022 10 6452 1 2025-08-09 21:53:34.177 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33432 10 6452 1 2025-08-09 21:54:34.583 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37844 10 6452 1 2025-08-09 21:50:10.536 00:06:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 21:55:46.034 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 21:55:46.080 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 21:55:45.600 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:55:45.951 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 21:55:34.981 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59416 10 6452 1 2025-08-09 21:55:46.244 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 21:51:10.533 00:06:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 21:56:35.387 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60862 10 6452 1 2025-08-09 21:57:35.797 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58816 10 6452 1 2025-08-09 21:58:36.212 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:36310 10 6452 1 Summary: total flows: 137, total bytes: 421653, total packets: 1034, avg bps: 870, avg pps: 0, avg bpp: 407 Time window: 2025-08-09 20:54:10 - 2025-08-09 21:58:46 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0031s User: 0.0000s Wall: 0.0013s flows/second: 109160.3 Runtime: 0.0013s