Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-10 17:59:10.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32824 10 6452 1 2025-08-10 18:00:10.766 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37024 10 6452 1 2025-08-10 18:01:09.528 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:01:09.513 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:01:09.801 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:01:09.741 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:01:09.824 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:01:11.132 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53906 10 6452 1 2025-08-10 18:02:11.531 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58080 10 6452 1 2025-08-10 17:59:10.984 00:05:00.539 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 17:59:10.980 00:05:00.545 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 18:03:11.976 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52164 10 6452 1 2025-08-10 18:04:12.368 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:34270 10 6452 1 2025-08-10 18:05:12.776 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59920 10 6452 1 2025-08-10 18:06:09.741 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:06:10.083 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:06:09.990 00:00:00.050 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:06:10.001 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:06:10.115 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:06:13.188 00:00:11.060 TCP 1.101.0.1:3000 -> 23.104.0.1:54112 10 6452 1 2025-08-10 18:07:14.287 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53658 10 6452 1 2025-08-10 18:08:14.699 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41156 10 6452 1 2025-08-10 18:05:10.981 00:05:00.544 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 18:05:10.985 00:05:00.539 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 18:09:15.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53872 10 6452 1 2025-08-10 18:10:15.516 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35788 10 6452 1 2025-08-10 18:11:10.171 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:11:10.150 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:11:10.090 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:11:09.986 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:11:10.088 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:11:15.925 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:55460 10 6452 1 2025-08-10 18:12:16.349 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52362 10 6452 1 2025-08-10 18:13:16.716 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:49942 10 6452 1 2025-08-10 18:14:17.105 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48672 10 6452 1 2025-08-10 18:11:10.984 00:05:00.539 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 18:11:10.981 00:05:00.544 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 18:15:17.467 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57314 10 6452 1 2025-08-10 18:16:10.182 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:16:10.340 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:16:10.139 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:16:10.373 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:16:10.455 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:16:17.872 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:55254 10 6452 1 2025-08-10 18:17:18.249 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48056 10 6452 1 2025-08-10 18:18:18.645 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 2025-08-10 18:19:19.056 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54356 10 6452 1 2025-08-10 18:20:19.410 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40748 10 6452 1 2025-08-10 18:21:10.334 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:17:10.984 00:05:00.544 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 18:21:10.347 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:21:10.148 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:21:10.292 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:21:10.374 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:17:10.986 00:05:00.539 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 18:21:19.773 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40908 10 6452 1 2025-08-10 18:22:20.192 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34450 10 6452 1 2025-08-10 18:23:20.595 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49812 10 6452 1 2025-08-10 18:24:21.010 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:41338 10 6452 1 2025-08-10 18:25:21.397 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45668 10 6452 1 2025-08-10 18:26:10.527 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:26:10.038 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:26:10.434 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:26:10.390 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:26:10.516 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:26:21.803 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57980 10 6452 1 2025-08-10 18:23:10.985 00:05:00.545 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 18:23:10.987 00:05:00.540 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 18:27:22.206 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55802 10 6452 1 2025-08-10 18:28:22.609 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40826 10 6452 1 2025-08-10 18:29:23.021 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48702 10 6452 1 2025-08-10 18:30:23.429 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42700 10 6452 1 2025-08-10 18:31:10.456 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:31:10.575 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:31:10.368 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:31:10.534 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:31:10.617 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:31:23.798 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43018 10 6452 1 2025-08-10 18:32:24.204 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60696 10 6452 1 2025-08-10 18:29:10.987 00:05:00.544 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 18:29:10.986 00:05:00.549 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 18:33:24.565 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46848 10 6452 1 2025-08-10 18:34:24.974 00:00:10.660 TCP 1.101.0.1:3000 -> 23.104.0.1:38522 10 6452 1 2025-08-10 18:35:25.675 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57836 10 6452 1 2025-08-10 18:36:10.610 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:36:10.695 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:36:10.564 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:36:10.766 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:36:10.850 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:36:26.037 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37248 10 6452 1 2025-08-10 18:37:26.435 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36476 10 6452 1 2025-08-10 18:38:26.801 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39330 10 6452 1 2025-08-10 18:35:10.986 00:05:00.551 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 18:35:10.989 00:05:00.546 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 18:39:27.201 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37236 10 6452 1 2025-08-10 18:40:27.609 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42044 10 6452 1 2025-08-10 18:41:10.644 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:41:10.734 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:41:10.716 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:41:10.792 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:41:10.875 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:41:28.013 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48922 10 6452 1 2025-08-10 18:42:28.420 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56146 10 6452 1 2025-08-10 18:43:28.781 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53274 10 6452 1 2025-08-10 18:44:29.179 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39842 10 6452 1 2025-08-10 18:41:10.986 00:05:00.551 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 18:41:10.989 00:05:00.547 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 18:45:29.540 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58290 10 6452 1 2025-08-10 18:46:10.984 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:46:10.907 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:46:10.903 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:46:10.485 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:46:10.902 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:46:29.901 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51440 10 6452 1 2025-08-10 18:47:30.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50760 10 6452 1 2025-08-10 18:48:30.723 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35172 10 6452 1 2025-08-10 18:49:31.130 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 12 10367 1 2025-08-10 18:50:31.566 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51534 10 6452 1 2025-08-10 18:51:10.900 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:47:10.992 00:05:00.553 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 18:51:10.977 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:51:10.980 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:51:11.057 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:51:11.140 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:47:10.995 00:05:00.547 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 18:51:31.974 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:38914 10 6452 1 2025-08-10 18:52:32.399 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40840 10 6452 1 2025-08-10 18:53:32.813 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60568 10 6452 1 2025-08-10 18:54:33.222 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:43650 12 10365 1 2025-08-10 18:55:33.700 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49456 10 6452 1 2025-08-10 18:56:10.999 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:56:10.994 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-10 18:56:10.989 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-10 18:56:10.701 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-10 18:56:11.081 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-10 18:56:34.108 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:59484 10 6452 1 2025-08-10 18:53:10.993 00:05:00.553 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-10 18:53:10.995 00:05:00.548 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-10 18:57:34.587 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53868 10 6452 1 2025-08-10 18:58:34.953 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42746 10 6452 1 Summary: total flows: 140, total bytes: 424828, total packets: 1024, avg bps: 950, avg pps: 0, avg bpp: 414 Time window: 2025-08-10 17:59:10 - 2025-08-10 18:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0024s User: 0.0016s Wall: 0.0016s flows/second: 89335.5 Runtime: 0.0016s