Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 17:59:22.684 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:56222 12 10367 1 2025-08-07 17:59:43.196 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 17:59:43.282 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 17:59:43.183 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 17:59:43.406 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 17:59:43.489 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:00:23.167 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45894 10 6452 1 2025-08-07 18:01:23.565 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 10 6452 1 2025-08-07 17:58:09.148 00:04:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 18:02:23.971 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48052 10 6452 1 2025-08-07 17:58:09.147 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 18:03:24.377 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35316 10 6452 1 2025-08-07 18:04:24.779 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53084 10 6452 1 2025-08-07 18:04:43.190 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 18:04:43.205 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 18:04:43.341 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:04:43.303 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:04:43.387 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:05:25.149 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33028 10 6452 1 2025-08-07 18:06:25.554 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:34486 10 6452 1 2025-08-07 18:05:09.148 00:02:00.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-07 18:07:25.916 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33070 10 6452 1 2025-08-07 18:03:09.151 00:06:00.085 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 18:08:26.322 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44500 10 6452 1 2025-08-07 18:09:26.730 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40064 10 6452 1 2025-08-07 18:09:43.497 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:09:43.416 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:09:43.505 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 18:09:43.660 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 18:09:43.358 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:10:27.144 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57076 10 6452 1 2025-08-07 18:11:27.546 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40236 10 6452 1 2025-08-07 18:08:09.148 00:04:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 18:12:27.903 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57898 10 6452 1 2025-08-07 18:13:28.302 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37912 10 6452 1 2025-08-07 18:10:09.152 00:04:00.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 18:14:28.707 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36996 10 6452 1 2025-08-07 18:14:43.780 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:14:43.551 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 18:14:43.546 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 18:14:43.505 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:14:43.696 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:15:29.117 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38696 10 6452 1 2025-08-07 18:16:29.520 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45556 10 6452 1 2025-08-07 18:13:09.165 00:04:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 18:17:29.928 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:34514 10 6452 1 2025-08-07 18:18:30.356 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38438 10 6452 1 2025-08-07 18:15:09.167 00:04:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 18:19:43.657 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 18:19:30.721 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:39674 10 6452 1 2025-08-07 18:19:43.388 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 18:19:43.539 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:19:43.501 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:19:43.584 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:20:31.146 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55648 10 6452 1 2025-08-07 18:21:31.546 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33752 10 6452 1 2025-08-07 18:18:09.164 00:04:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 18:22:31.910 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38044 10 6452 1 2025-08-07 18:23:32.316 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35670 10 6452 1 2025-08-07 18:20:09.167 00:04:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 18:24:43.796 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:24:43.612 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 18:24:43.847 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 18:24:43.690 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:24:32.676 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43250 10 6452 1 2025-08-07 18:24:43.713 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:25:33.127 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53826 10 6452 1 2025-08-07 18:26:33.529 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45648 10 6452 1 2025-08-07 18:23:09.166 00:04:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 18:27:33.933 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:49334 10 6452 1 2025-08-07 18:28:34.358 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:59792 10 6452 1 2025-08-07 18:25:09.169 00:04:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 18:29:44.021 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:29:43.783 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 18:29:43.878 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 18:29:43.797 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:29:43.932 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:29:34.756 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:33152 10 6452 1 2025-08-07 18:30:35.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44360 10 6452 1 2025-08-07 18:31:35.539 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59760 10 6452 1 2025-08-07 18:32:35.939 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:55286 10 6452 1 2025-08-07 18:28:09.165 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 18:33:36.319 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:49320 10 6452 1 2025-08-07 18:30:09.169 00:04:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 18:34:43.933 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 18:34:44.076 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 18:34:43.718 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:34:43.992 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:34:44.075 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:34:36.700 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44882 10 6452 1 2025-08-07 18:35:37.093 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42116 10 6452 1 2025-08-07 18:36:37.498 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53310 10 6452 1 2025-08-07 18:37:37.858 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50032 10 6452 1 2025-08-07 18:38:38.276 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38830 10 6452 1 2025-08-07 18:35:09.170 00:04:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 18:35:09.173 00:04:00.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 18:39:44.075 00:00:00.048 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:39:44.177 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 18:39:43.985 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 18:39:43.728 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:39:43.993 00:00:00.047 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:39:38.677 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34250 10 6452 1 2025-08-07 18:40:39.098 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40630 10 6452 1 2025-08-07 18:41:39.502 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60418 10 6452 1 2025-08-07 18:42:39.916 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:38460 10 6452 1 2025-08-07 18:43:40.347 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40538 10 6452 1 2025-08-07 18:40:09.171 00:04:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 18:44:44.389 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:44:44.275 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 18:44:44.246 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 18:44:44.095 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:44:44.307 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:44:40.709 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37730 10 6452 1 2025-08-07 18:40:09.174 00:06:00.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 18:45:41.114 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39652 10 6452 1 2025-08-07 18:46:41.531 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49046 10 6452 1 2025-08-07 18:47:41.938 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44754 10 6452 1 2025-08-07 18:48:42.357 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51206 10 6452 1 2025-08-07 18:45:09.174 00:04:00.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 18:49:44.373 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 18:49:44.529 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 18:49:44.287 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:49:44.654 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:49:44.737 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:49:42.779 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38784 10 6452 1 2025-08-07 18:50:43.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56982 10 6452 1 2025-08-07 18:47:09.176 00:04:00.086 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 18:51:43.551 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33410 10 6452 1 2025-08-07 18:52:43.918 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46852 10 6452 1 2025-08-07 18:53:44.319 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34528 10 6452 1 2025-08-07 18:50:09.175 00:04:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 18:54:44.561 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 18:54:44.365 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 18:54:44.590 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:54:44.692 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 18:54:44.774 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 18:54:44.725 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38924 10 6452 1 2025-08-07 18:55:45.110 00:00:10.643 TCP 1.101.0.1:3000 -> 23.104.0.1:48158 10 6452 1 2025-08-07 18:52:09.178 00:04:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 18:56:45.791 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45872 10 6452 1 2025-08-07 18:57:46.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59866 10 6452 1 Summary: total flows: 141, total bytes: 413971, total packets: 1004, avg bps: 923, avg pps: 0, avg bpp: 412 Time window: 2025-08-07 17:58:09 - 2025-08-07 18:57:56 Total flows processed: 141, passed: 141, Blocks skipped: 0, Bytes read: 14728 Sys: 0.0038s User: 0.0000s Wall: 0.0022s flows/second: 64945.8 Runtime: 0.0022s