Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-19 12:55:15.777 00:05:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 12:59:09.148 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56666 10 6452 1 2025-08-19 12:55:15.774 00:05:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 13:00:09.550 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:60660 10 6452 1 2025-08-19 13:00:23.670 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:00:23.817 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:00:23.682 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:00:23.611 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:00:23.588 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:01:09.908 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34894 10 6452 1 2025-08-19 13:02:10.284 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:50692 10 6452 1 2025-08-19 13:03:10.699 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34030 10 6452 1 2025-08-19 13:04:11.084 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55568 10 6452 1 2025-08-19 13:01:15.779 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 13:05:24.246 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:05:11.493 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34784 10 6452 1 2025-08-19 13:05:24.178 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:05:24.210 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:05:24.176 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:01:15.782 00:05:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 13:05:24.259 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:06:11.891 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:35472 12 6556 1 2025-08-19 13:07:12.313 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34088 10 6452 1 2025-08-19 13:08:12.674 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57670 10 6452 1 2025-08-19 13:09:13.101 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44952 10 6452 1 2025-08-19 13:10:24.017 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:10:24.113 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:10:24.009 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:10:23.963 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:10:23.934 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:10:13.522 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51688 10 6452 1 2025-08-19 13:07:15.783 00:05:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 13:07:15.780 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 13:11:13.928 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53636 13 6608 1 2025-08-19 13:12:14.321 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36132 10 6452 1 2025-08-19 13:13:14.729 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59898 10 6452 1 2025-08-19 13:14:15.138 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59658 10 6452 1 2025-08-19 13:15:24.241 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:15:23.976 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:15:24.252 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:15:24.075 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:15:24.159 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:15:15.548 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51960 10 6452 1 2025-08-19 13:16:15.906 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50656 12 6556 1 2025-08-19 13:13:15.782 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 13:13:15.785 00:05:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 13:17:16.323 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37446 10 6452 1 2025-08-19 13:18:16.731 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48874 10 6452 1 2025-08-19 13:19:17.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57060 10 6452 1 2025-08-19 13:20:23.982 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:20:24.213 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:20:24.217 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:20:24.282 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:20:23.900 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:20:17.517 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:50776 12 10367 1 2025-08-19 13:21:17.996 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48870 10 6452 1 2025-08-19 13:22:18.408 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54964 10 6452 1 2025-08-19 13:19:15.789 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 13:19:15.787 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 13:23:18.814 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53120 10 6452 1 2025-08-19 13:24:19.225 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44356 10 6452 1 2025-08-19 13:25:24.453 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:25:24.525 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:25:24.455 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:25:24.399 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:25:24.371 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:25:19.591 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49444 10 6452 1 2025-08-19 13:26:19.952 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55108 10 6452 1 2025-08-19 13:27:20.325 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:34178 10 6452 1 2025-08-19 13:28:20.680 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51588 10 6452 1 2025-08-19 13:25:15.790 00:05:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 13:25:15.789 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 13:29:21.119 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33196 10 6452 1 2025-08-19 13:30:24.417 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:30:24.241 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:30:24.508 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:30:24.061 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:30:24.334 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:30:21.516 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:42598 12 10367 1 2025-08-19 13:31:21.995 00:00:10.757 TCP 1.101.0.1:3000 -> 23.104.0.1:45486 10 6452 1 2025-08-19 13:32:22.794 00:00:11.040 TCP 1.101.0.1:3000 -> 23.104.0.1:59264 10 6452 1 2025-08-19 13:33:23.872 00:00:10.708 TCP 1.101.0.1:3000 -> 23.104.0.1:60104 10 6452 1 2025-08-19 13:34:24.621 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49604 10 6452 1 2025-08-19 13:31:15.791 00:05:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 13:31:15.789 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 13:35:24.602 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:35:24.561 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:35:24.515 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:35:24.418 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:35:24.520 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:35:25.030 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34328 10 6452 1 2025-08-19 13:36:25.430 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60278 10 6452 1 2025-08-19 13:37:25.795 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58722 10 6452 1 2025-08-19 13:38:26.201 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34826 10 6452 1 2025-08-19 13:39:26.608 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45976 10 6452 1 2025-08-19 13:40:24.667 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:40:24.581 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:40:24.436 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:40:24.227 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:40:24.586 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:40:27.019 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:43290 10 6452 1 2025-08-19 13:37:15.793 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 13:37:15.794 00:05:00.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 13:41:27.418 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45968 10 6452 1 2025-08-19 13:42:27.824 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45492 10 6452 1 2025-08-19 13:43:28.228 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38048 10 6452 1 2025-08-19 13:44:28.641 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48620 10 6452 1 2025-08-19 13:45:24.779 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:45:24.573 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:45:24.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:45:24.616 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:45:24.697 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:45:29.041 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46782 10 6452 1 2025-08-19 13:46:29.445 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55210 10 6452 1 2025-08-19 13:43:15.793 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 13:43:15.795 00:05:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 13:47:29.846 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:43652 10 6452 1 2025-08-19 13:48:30.282 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40446 10 6452 1 2025-08-19 13:49:30.681 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41268 10 6452 1 2025-08-19 13:50:24.953 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:50:24.802 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:50:24.662 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:50:24.734 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:50:24.870 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:50:31.058 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:57740 10 6452 1 2025-08-19 13:51:31.479 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:49932 10 6452 1 2025-08-19 13:52:31.863 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42506 10 6452 1 2025-08-19 13:49:15.800 00:05:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 13:49:15.797 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 13:53:32.275 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43842 10 6452 1 2025-08-19 13:54:32.674 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33076 10 6452 1 2025-08-19 13:55:24.722 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 13:55:24.600 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 13:55:24.895 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:55:24.807 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 13:55:24.890 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 13:55:33.060 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42014 10 6452 1 2025-08-19 13:56:33.427 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50556 10 6452 1 2025-08-19 13:57:33.834 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:45058 10 6452 1 2025-08-19 13:58:34.267 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51586 10 6452 1 Summary: total flows: 140, total bytes: 425194, total packets: 1031, avg bps: 893, avg pps: 0, avg bpp: 412 Time window: 2025-08-19 12:55:15 - 2025-08-19 13:58:44 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0024s User: 0.0024s Wall: 0.0024s flows/second: 57755.7 Runtime: 0.0024s