Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-05 10:58:40.191 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36432 10 6452 1 2025-08-05 10:55:07.944 00:05:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 10:59:40.594 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41350 10 6452 1 2025-08-05 10:56:07.943 00:05:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 11:00:40.994 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41638 10 6452 1 2025-08-05 11:01:41.409 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47408 10 6452 1 2025-08-05 11:02:41.772 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51908 10 6452 1 2025-08-05 11:03:36.918 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 11:03:37.273 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:03:37.274 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:03:37.104 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:03:36.835 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:03:42.140 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59244 10 6452 1 2025-08-05 11:04:42.542 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60058 10 6452 1 2025-08-05 11:01:07.947 00:05:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 11:05:42.957 00:00:10.558 TCP 1.101.0.1:3000 -> 23.104.0.1:38180 10 6452 1 2025-08-05 11:02:07.945 00:05:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 11:06:43.550 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57200 10 6452 1 2025-08-05 11:07:43.955 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33224 10 6452 1 2025-08-05 11:08:37.047 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:08:36.905 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:08:37.063 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:08:37.197 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:08:37.280 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 11:08:44.384 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36820 10 6452 1 2025-08-05 11:09:44.795 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:57296 10 6452 1 2025-08-05 11:10:45.180 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38960 10 6452 1 2025-08-05 11:07:07.950 00:05:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 11:11:45.588 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56692 10 6452 1 2025-08-05 11:08:07.947 00:05:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 11:12:45.993 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49420 10 6452 1 2025-08-05 11:13:37.282 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 11:13:37.309 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:13:37.309 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:13:37.243 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:13:37.200 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:13:46.402 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55984 10 6452 1 2025-08-05 11:14:46.797 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48752 10 6452 1 2025-08-05 11:15:47.200 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35212 10 6452 1 2025-08-05 11:16:47.601 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56934 10 6452 1 2025-08-05 11:13:07.950 00:05:00.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 11:17:48.004 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51906 10 6452 1 2025-08-05 11:14:07.948 00:05:00.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 11:18:37.634 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 11:18:37.547 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:18:37.552 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:18:37.269 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:18:37.552 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:18:48.406 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42644 10 6452 1 2025-08-05 11:19:48.808 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40598 10 6452 1 2025-08-05 11:20:49.210 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45922 10 6452 1 2025-08-05 11:21:49.628 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52746 10 6452 1 2025-08-05 11:22:50.035 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38700 10 6452 1 2025-08-05 11:19:07.952 00:05:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 11:23:37.756 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:23:37.535 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:23:37.488 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:23:37.693 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:23:37.776 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 11:23:50.400 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41680 10 6452 1 2025-08-05 11:20:07.949 00:05:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 11:24:50.773 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55078 10 6452 1 2025-08-05 11:25:51.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50274 10 6452 1 2025-08-05 11:26:51.592 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54026 10 6452 1 2025-08-05 11:27:51.999 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39256 10 6452 1 2025-08-05 11:28:37.560 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 11:28:37.727 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:28:37.729 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:28:37.752 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:28:37.479 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:28:52.401 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48084 10 6452 1 2025-08-05 11:25:07.954 00:05:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 11:29:52.766 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52462 10 6452 1 2025-08-05 11:26:07.952 00:05:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 11:30:53.188 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59022 10 6452 1 2025-08-05 11:31:53.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34968 10 6452 1 2025-08-05 11:32:53.952 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35754 10 6452 1 2025-08-05 11:33:37.873 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 11:33:37.672 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:33:37.882 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:33:37.844 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:33:37.790 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:33:54.315 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60118 10 6452 1 2025-08-05 11:31:07.956 00:05:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 11:34:54.724 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54990 10 6452 1 2025-08-05 11:32:07.952 00:05:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 11:35:55.132 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45898 10 6452 1 2025-08-05 11:36:55.502 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54482 10 6452 1 2025-08-05 11:37:55.907 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49330 10 6452 1 2025-08-05 11:38:37.925 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:38:37.812 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:38:37.856 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:38:37.874 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:38:37.957 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 11:38:56.315 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44668 10 6452 1 2025-08-05 11:39:56.736 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55216 10 6452 1 2025-08-05 11:37:07.957 00:05:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 11:40:57.149 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44794 10 6452 1 2025-08-05 11:38:07.955 00:05:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 11:41:57.562 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56978 10 6452 1 2025-08-05 11:42:57.967 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58828 10 6452 1 2025-08-05 11:43:37.953 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 11:43:37.794 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:43:37.912 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:43:37.810 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:43:37.869 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:43:58.370 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:44194 12 10367 1 2025-08-05 11:44:58.852 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53162 10 6452 1 2025-08-05 11:45:59.280 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35254 10 6452 1 2025-08-05 11:43:07.957 00:05:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 11:46:59.644 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57978 10 6452 1 2025-08-05 11:44:07.955 00:05:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 11:48:00.052 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50372 10 6452 1 2025-08-05 11:48:38.210 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 11:48:37.962 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:48:38.389 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:48:38.178 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:48:38.127 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:49:00.452 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33830 10 6452 1 2025-08-05 11:50:00.855 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:53296 10 6452 1 2025-08-05 11:51:01.281 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38256 10 6452 1 2025-08-05 11:52:01.696 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57202 10 6452 1 2025-08-05 11:49:07.958 00:05:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 11:53:02.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51540 10 6452 1 2025-08-05 11:53:38.130 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:53:38.176 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:53:37.961 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:53:38.063 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:53:38.146 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 11:50:07.955 00:05:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 11:54:02.523 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36994 10 6452 1 2025-08-05 11:55:02.931 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 10 6452 1 2025-08-05 11:56:03.335 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:45310 10 6452 1 2025-08-05 11:57:03.709 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57904 10 6452 1 2025-08-05 11:58:04.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49084 10 6452 1 2025-08-05 11:58:38.462 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 11:58:38.548 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 11:58:38.055 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:58:38.359 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 11:58:38.441 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 140, total bytes: 420915, total packets: 1022, avg bps: 883, avg pps: 0, avg bpp: 411 Time window: 2025-08-05 10:55:07 - 2025-08-05 11:58:38 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0028s User: 0.0019s Wall: 0.0036s flows/second: 39225.3 Runtime: 0.0036s