Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 11:58:58.539 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43908 10 6452 1 2025-08-07 11:59:35.924 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:59:36.124 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:59:36.007 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:59:36.192 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:59:36.274 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:59:58.904 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60136 10 6452 1 2025-08-07 12:00:59.318 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41980 10 6452 1 2025-08-07 12:01:59.726 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50636 10 6452 1 2025-08-07 12:03:00.146 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43536 10 6452 1 2025-08-07 12:00:08.984 00:05:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 12:00:08.987 00:05:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 12:04:00.549 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44696 10 6452 1 2025-08-07 12:04:36.248 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:04:36.115 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:04:36.164 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 12:04:35.829 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:04:36.167 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:05:00.906 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56204 10 6452 1 2025-08-07 12:06:01.321 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37270 10 6452 1 2025-08-07 12:07:01.724 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:59774 10 6452 1 2025-08-07 12:08:02.114 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42364 10 6452 1 2025-08-07 12:09:02.472 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:58412 12 10367 1 2025-08-07 12:09:36.243 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:09:36.467 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:09:36.185 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 12:09:36.366 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:09:36.162 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:06:08.989 00:05:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 12:10:02.948 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55100 10 6452 1 2025-08-07 12:06:08.987 00:05:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 12:11:03.363 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55682 10 6452 1 2025-08-07 12:12:03.766 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:56142 10 6452 1 2025-08-07 12:13:04.140 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44754 10 6452 1 2025-08-07 12:14:04.505 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45434 10 6452 1 2025-08-07 12:14:36.429 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:14:36.429 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:14:36.338 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 12:14:36.318 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:14:36.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:15:04.913 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53528 10 6452 1 2025-08-07 12:12:08.996 00:05:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 12:12:08.994 00:05:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 12:16:05.313 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60060 10 6452 1 2025-08-07 12:17:05.717 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:59700 10 6452 1 2025-08-07 12:18:06.138 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57244 10 6452 1 2025-08-07 12:19:06.544 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:38718 12 10367 1 2025-08-07 12:19:36.474 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:19:36.267 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:19:36.281 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 12:19:36.118 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:19:36.391 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:20:07.020 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37662 10 6452 1 2025-08-07 12:21:07.424 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59880 10 6452 1 2025-08-07 12:18:08.994 00:05:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 12:18:08.997 00:05:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 12:22:07.791 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42796 12 6556 1 2025-08-07 12:23:08.189 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55942 10 6452 1 2025-08-07 12:24:08.594 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51504 10 6452 1 2025-08-07 12:24:36.628 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:24:36.559 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 12:24:36.502 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:24:36.485 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:24:36.567 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:25:09.002 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58718 10 6452 1 2025-08-07 12:26:09.371 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46260 10 6452 1 2025-08-07 12:24:09.003 00:03:00.135 TCP 179.21.23.21:38570 -> 179.21.23.23:179 8 492 1 2025-08-07 12:27:09.791 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60392 10 6452 1 2025-08-07 12:28:10.198 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57476 10 6452 1 2025-08-07 12:24:09.000 00:06:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 12:29:10.598 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34994 10 6452 1 2025-08-07 12:29:36.631 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:29:36.639 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 12:29:36.542 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:29:36.806 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:29:36.890 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:30:11.013 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41626 10 6452 1 2025-08-07 12:31:11.378 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43842 10 6452 1 2025-08-07 12:32:11.778 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36094 10 6452 1 2025-08-07 12:28:09.037 00:06:00.102 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 12:33:12.141 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44762 10 6452 1 2025-08-07 12:34:12.510 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34860 10 6452 1 2025-08-07 12:34:36.778 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:34:36.740 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:34:36.698 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 12:34:36.504 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:34:36.695 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:35:12.914 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32800 10 6452 1 2025-08-07 12:31:09.035 00:06:00.110 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 12:36:13.279 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34028 10 6452 1 2025-08-07 12:37:13.681 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58992 10 6452 1 2025-08-07 12:38:14.110 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57382 10 6452 1 2025-08-07 12:39:14.519 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44862 10 6452 1 2025-08-07 12:39:36.885 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:39:36.864 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:39:36.687 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 12:39:36.595 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:39:36.803 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:35:09.039 00:06:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 12:40:14.922 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54850 10 6452 1 2025-08-07 12:41:15.328 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33002 10 6452 1 2025-08-07 12:38:09.048 00:04:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 12:42:15.727 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:38764 10 6452 1 2025-08-07 12:43:16.146 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58674 10 6452 1 2025-08-07 12:44:16.552 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42684 10 6452 1 2025-08-07 12:44:37.271 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:44:37.186 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:44:37.276 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 12:44:37.125 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:44:37.189 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:45:16.958 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37706 10 6452 1 2025-08-07 12:46:17.367 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53664 10 6452 1 2025-08-07 12:43:09.039 00:04:00.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 12:42:09.042 00:06:00.103 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 12:47:17.763 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40078 10 6452 1 2025-08-07 12:48:18.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54118 10 6452 1 2025-08-07 12:49:18.581 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51512 10 6452 1 2025-08-07 12:49:37.067 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:49:36.762 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 12:49:36.904 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:49:37.070 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:49:37.152 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:50:18.989 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44752 10 6452 1 2025-08-07 12:51:19.398 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40058 10 6452 1 2025-08-07 12:52:19.764 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51170 10 6452 1 2025-08-07 12:48:09.040 00:06:00.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 12:53:20.186 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36588 10 6452 1 2025-08-07 12:49:09.044 00:05:00.102 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 12:54:20.588 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42716 10 6452 1 2025-08-07 12:54:37.051 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:54:36.968 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:54:37.087 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 12:54:36.779 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:54:36.968 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:55:21.002 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47372 10 6452 1 2025-08-07 12:56:21.410 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55654 10 6452 1 2025-08-07 12:57:21.782 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49962 10 6452 1 2025-08-07 12:58:22.186 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33912 10 6452 1 Summary: total flows: 138, total bytes: 423704, total packets: 1006, avg bps: 948, avg pps: 0, avg bpp: 421 Time window: 2025-08-07 11:58:58 - 2025-08-07 12:58:32 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0023s User: 0.0023s Wall: 0.0021s flows/second: 66248.6 Runtime: 0.0021s