Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-10 11:58:41.513 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60978 10 6452 1 2025-08-10 11:59:41.916 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50044 10 6452 1 2025-08-10 12:00:42.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45342 10 6452 1 2025-08-10 12:01:02.899 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:01:02.758 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:01:02.756 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:01:02.623 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:01:02.817 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:01:42.684 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:54816 10 6452 1 2025-08-10 12:02:43.062 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60078 10 6452 1 2025-08-10 11:59:10.831 00:05:00.523 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 11:59:10.835 00:05:00.518 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 12:03:43.470 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54140 10 6452 1 2025-08-10 12:04:43.878 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56904 10 6452 1 2025-08-10 12:05:44.293 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33438 10 6452 1 2025-08-10 12:06:02.987 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:06:02.905 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:06:02.950 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:06:02.952 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:06:02.795 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:06:44.695 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37408 10 6452 1 2025-08-10 12:07:45.105 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33572 10 6452 1 2025-08-10 12:08:45.515 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:49958 10 6452 1 2025-08-10 12:05:10.832 00:05:00.525 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 12:05:10.836 00:05:00.520 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 12:09:45.874 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48836 10 6452 1 2025-08-10 12:10:46.297 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51244 10 6452 1 2025-08-10 12:11:02.932 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:11:02.846 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:11:02.729 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:11:02.975 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:11:03.058 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:11:46.704 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40206 10 6452 1 2025-08-10 12:12:47.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49190 10 6452 1 2025-08-10 12:13:47.522 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37216 10 6452 1 2025-08-10 12:14:47.928 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:49062 10 6452 1 2025-08-10 12:11:10.836 00:05:00.520 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 12:11:10.835 00:05:00.525 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 12:15:48.411 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35910 10 6452 1 2025-08-10 12:16:02.945 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:16:03.063 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:16:02.924 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:16:03.060 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:16:03.143 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:16:48.820 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47730 10 6452 1 2025-08-10 12:17:49.231 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57998 10 6452 1 2025-08-10 12:18:49.631 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:50390 12 10367 1 2025-08-10 12:19:50.137 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55440 10 6452 1 2025-08-10 12:21:03.083 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:21:03.116 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:21:03.130 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:21:03.085 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:21:03.001 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:20:50.505 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60424 10 6452 1 2025-08-10 12:17:10.837 00:05:00.521 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 12:17:10.835 00:05:00.526 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 12:21:50.867 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55388 10 6452 1 2025-08-10 12:22:51.275 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49186 10 6452 1 2025-08-10 12:23:51.687 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39016 10 6452 1 2025-08-10 12:24:52.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34780 10 6452 1 2025-08-10 12:26:03.861 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:26:03.865 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:26:03.828 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:26:03.878 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:25:52.516 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33864 10 6452 1 2025-08-10 12:26:03.779 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:26:52.881 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55436 10 6452 1 2025-08-10 12:23:10.836 00:05:00.526 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 12:23:10.839 00:05:00.521 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 12:27:53.299 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51512 10 6452 1 2025-08-10 12:28:53.696 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:43256 10 6452 1 2025-08-10 12:29:54.138 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35524 10 6452 1 2025-08-10 12:31:03.143 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:30:54.505 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:51238 10 6452 1 2025-08-10 12:31:03.146 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:31:03.235 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:31:03.142 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:31:03.227 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:31:54.862 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55472 10 6452 1 2025-08-10 12:32:55.274 00:00:11.506 TCP 1.101.0.1:3000 -> 23.104.0.1:51650 10 6452 1 2025-08-10 12:29:10.841 00:05:00.520 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 12:29:10.838 00:05:00.526 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 12:33:56.817 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51862 10 6452 1 2025-08-10 12:34:57.187 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49050 10 6452 1 2025-08-10 12:36:03.228 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:36:03.409 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:36:03.427 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:36:03.110 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:36:03.194 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:35:57.590 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60138 10 6452 1 2025-08-10 12:36:57.998 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57426 10 6452 1 2025-08-10 12:37:58.400 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50292 10 6452 1 2025-08-10 12:35:10.842 00:05:00.520 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 12:38:58.802 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:57986 12 10367 1 2025-08-10 12:35:10.840 00:05:00.526 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 12:39:59.255 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60918 10 6452 1 2025-08-10 12:41:03.654 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:41:03.611 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:41:03.410 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:41:03.378 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:41:03.463 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:40:59.661 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33914 10 6452 1 2025-08-10 12:42:00.099 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54432 10 6452 1 2025-08-10 12:43:00.504 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34418 10 6452 1 2025-08-10 12:44:00.920 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:54206 10 6452 1 2025-08-10 12:41:10.846 00:05:00.529 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 12:41:10.843 00:05:00.534 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 12:45:01.354 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57026 10 6452 1 2025-08-10 12:46:03.465 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:46:03.629 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:46:03.514 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:46:03.720 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:46:03.802 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:46:01.729 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38336 10 6452 1 2025-08-10 12:47:02.111 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35970 10 6452 1 2025-08-10 12:48:02.518 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35368 10 6452 1 2025-08-10 12:49:02.881 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:56336 10 6452 1 2025-08-10 12:50:03.268 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57512 10 6452 1 2025-08-10 12:51:03.847 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:51:03.852 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:51:03.649 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:51:03.808 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:51:03.891 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:47:10.847 00:05:00.526 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 12:51:03.663 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:59788 10 6452 1 2025-08-10 12:47:10.849 00:05:00.520 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 12:52:04.023 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54728 10 6452 1 2025-08-10 12:53:04.431 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44286 10 6452 1 2025-08-10 12:54:04.836 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:35282 10 6452 1 2025-08-10 12:55:05.264 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55728 10 6452 1 2025-08-10 12:56:03.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 12:56:03.813 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 12:56:03.778 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:56:03.653 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 12:56:03.736 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 12:56:05.675 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39068 10 6452 1 2025-08-10 12:53:10.850 00:05:00.524 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 12:53:10.853 00:05:00.519 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 12:57:06.105 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46382 10 6452 1 2025-08-10 12:58:06.510 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:52566 10 6452 1 Summary: total flows: 140, total bytes: 424830, total packets: 1024, avg bps: 950, avg pps: 0, avg bpp: 414 Time window: 2025-08-10 11:58:41 - 2025-08-10 12:58:16 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0011s User: 0.0032s Wall: 0.0022s flows/second: 64485.2 Runtime: 0.0022s