Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 10:58:10.240 00:01:00.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 10:59:06.645 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:37350 12 10365 1 2025-08-09 10:59:10.237 00:01:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 11:00:07.142 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57076 10 6452 1 2025-08-09 11:00:32.638 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:00:32.542 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:00:32.590 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:00:32.644 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:00:32.673 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:01:07.548 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59014 10 6452 1 2025-08-09 11:00:10.243 00:02:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-09 11:02:07.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32776 12 6556 1 2025-08-09 11:03:08.328 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40886 10 6452 1 2025-08-09 11:03:10.244 00:01:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 11:04:08.732 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43716 10 6452 1 2025-08-09 11:01:10.241 00:04:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 11:05:09.100 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46498 10 6452 1 2025-08-09 11:05:32.872 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:05:32.509 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:05:32.741 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:05:32.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:05:32.824 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:06:09.464 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40992 10 6452 1 2025-08-09 11:07:09.826 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40654 10 6452 1 2025-08-09 11:08:10.190 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47686 10 6452 1 2025-08-09 11:05:10.246 00:04:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 11:09:10.549 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44548 10 6452 1 2025-08-09 11:06:10.242 00:04:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 11:10:10.913 00:00:10.561 TCP 1.101.0.1:3000 -> 23.104.0.1:59528 10 6452 1 2025-08-09 11:10:32.742 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:10:32.747 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:10:32.807 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:10:32.737 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:10:32.891 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:11:11.509 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37162 10 6452 1 2025-08-09 11:12:11.914 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49762 10 6452 1 2025-08-09 11:13:12.314 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33350 10 6452 1 2025-08-09 11:10:10.247 00:04:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 11:14:12.676 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58910 10 6452 1 2025-08-09 11:11:10.245 00:04:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 11:15:13.104 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34948 10 6452 1 2025-08-09 11:15:33.233 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:15:33.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:15:33.070 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:15:33.150 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:15:33.111 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:16:13.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52010 10 6452 1 2025-08-09 11:17:13.909 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39920 10 6452 1 2025-08-09 11:18:14.318 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6452 1 2025-08-09 11:15:10.248 00:04:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 11:19:14.681 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:57210 10 6452 1 2025-08-09 11:16:10.247 00:04:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 11:20:15.111 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 10 6452 1 2025-08-09 11:20:32.904 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:20:33.008 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:20:33.072 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:20:32.822 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:20:32.935 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:21:15.472 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40308 10 6452 1 2025-08-09 11:22:15.838 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:47346 10 6452 1 2025-08-09 11:23:16.222 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36504 10 6452 1 2025-08-09 11:20:10.252 00:04:00.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 11:24:16.625 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46916 10 6452 1 2025-08-09 11:21:10.251 00:04:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 11:25:17.030 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56438 10 6452 1 2025-08-09 11:25:33.192 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:25:32.992 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:25:33.192 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:25:32.689 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:25:33.110 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:26:17.440 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43084 10 6452 1 2025-08-09 11:26:10.253 00:01:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 11:27:17.841 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:55072 10 6452 1 2025-08-09 11:28:18.274 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42562 10 6452 1 2025-08-09 11:25:10.255 00:04:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 11:29:18.672 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60216 10 6452 1 2025-08-09 11:28:10.254 00:02:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-09 11:30:19.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47244 10 6452 1 2025-08-09 11:30:33.330 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:30:33.234 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:30:33.169 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:30:33.249 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:30:33.246 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:30:10.258 00:01:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 11:31:19.521 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44146 10 6452 1 2025-08-09 11:31:10.254 00:01:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 11:32:19.926 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:55896 10 6452 1 2025-08-09 11:33:20.361 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47632 10 6452 1 2025-08-09 11:32:10.257 00:02:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-09 11:34:20.725 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33584 10 6452 1 2025-08-09 11:33:10.256 00:02:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-09 11:35:33.434 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:35:33.219 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:35:33.392 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:35:33.512 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:35:21.133 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37756 10 6452 1 2025-08-09 11:35:33.474 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:35:10.259 00:01:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 11:36:21.546 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37660 10 6452 1 2025-08-09 11:36:10.257 00:01:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 11:37:21.955 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50300 10 6452 1 2025-08-09 11:38:22.359 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46494 10 6452 1 2025-08-09 11:37:10.261 00:02:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-09 11:39:22.718 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:45438 10 6452 1 2025-08-09 11:40:33.842 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:40:33.839 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:40:33.840 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:40:23.144 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36674 10 6452 1 2025-08-09 11:40:33.471 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:40:33.925 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:40:10.260 00:01:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 11:41:23.546 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:55974 10 6452 1 2025-08-09 11:38:10.257 00:04:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 11:42:23.925 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:59572 10 6452 1 2025-08-09 11:43:24.342 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33864 10 6452 1 2025-08-09 11:44:24.745 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45902 10 6452 1 2025-08-09 11:45:33.558 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:45:33.588 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:45:33.628 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:45:33.432 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:45:25.148 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59512 10 6452 1 2025-08-09 11:45:33.712 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:42:10.261 00:04:00.214 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 11:46:25.551 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6452 1 2025-08-09 11:43:10.259 00:04:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 11:47:25.959 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48614 10 6452 1 2025-08-09 11:48:26.367 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48810 10 6452 1 2025-08-09 11:49:26.733 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:56318 10 6452 1 2025-08-09 11:50:33.810 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:50:33.729 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:50:33.594 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:50:33.725 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:50:33.656 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:50:27.105 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47174 10 6452 1 2025-08-09 11:47:10.263 00:04:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 11:51:27.517 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36612 10 6452 1 2025-08-09 11:48:10.265 00:04:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 11:52:27.917 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53084 10 6452 1 2025-08-09 11:53:28.318 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36466 10 6452 1 2025-08-09 11:54:28.727 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42742 10 6452 1 2025-08-09 11:55:33.708 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 11:55:33.739 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 11:55:33.548 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:55:33.625 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 11:55:33.740 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 11:55:29.140 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39470 10 6452 1 2025-08-09 11:52:10.271 00:04:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 11:56:29.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39348 10 6452 1 2025-08-09 11:53:10.269 00:04:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 11:57:29.947 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:40582 10 6452 1 2025-08-09 11:58:30.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34218 10 6452 1 Summary: total flows: 151, total bytes: 420771, total packets: 1020, avg bps: 927, avg pps: 0, avg bpp: 412 Time window: 2025-08-09 10:58:10 - 2025-08-09 11:58:40 Total flows processed: 151, passed: 151, Blocks skipped: 0, Bytes read: 15768 Sys: 0.0022s User: 0.0022s Wall: 0.0025s flows/second: 59845.0 Runtime: 0.0025s