Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 03:59:08.600 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52216 10 6452 1 2025-08-18 03:59:44.161 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 03:59:43.958 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 03:59:43.764 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 03:59:43.644 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 03:59:44.079 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:00:09.008 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49562 10 6452 1 2025-08-18 04:01:09.370 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43134 10 6452 1 2025-08-18 04:02:09.776 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49650 10 6452 1 2025-08-18 03:58:15.078 00:06:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 04:03:10.185 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56286 10 6452 1 2025-08-18 03:59:15.077 00:06:00.406 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 04:04:10.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49934 10 6452 1 2025-08-18 04:04:44.002 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 04:04:44.137 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 04:04:44.221 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 04:04:43.955 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:04:43.917 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:05:10.994 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38040 10 6452 1 2025-08-18 04:06:11.397 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40494 10 6452 1 2025-08-18 04:07:11.815 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58070 10 6452 1 2025-08-18 04:08:12.236 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47650 10 6452 1 2025-08-18 04:09:12.641 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33254 10 6452 1 2025-08-18 04:09:44.218 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 04:09:44.137 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 04:09:44.161 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:09:44.140 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:09:44.223 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 04:05:15.080 00:06:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 04:10:13.038 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46566 10 6452 1 2025-08-18 04:06:15.077 00:06:00.409 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 04:11:13.405 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33344 10 6452 1 2025-08-18 04:12:13.805 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58394 10 6452 1 2025-08-18 04:13:14.217 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 2025-08-18 04:14:14.625 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43280 10 6452 1 2025-08-18 04:14:44.488 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 04:14:44.401 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 04:14:44.281 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 04:14:44.368 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:14:44.405 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:15:14.986 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:43828 12 10365 1 2025-08-18 04:16:15.472 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46884 10 6452 1 2025-08-18 04:12:15.081 00:06:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 04:17:15.839 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:51082 10 6452 1 2025-08-18 04:13:15.079 00:06:00.408 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 04:18:16.227 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47910 10 6452 1 2025-08-18 04:19:16.627 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48908 10 6452 1 2025-08-18 04:19:44.509 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 04:19:44.427 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:19:44.483 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 04:19:44.678 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 04:19:44.050 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:20:17.039 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33722 10 6452 1 2025-08-18 04:21:17.450 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56886 10 6452 1 2025-08-18 04:22:17.853 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53184 10 6452 1 2025-08-18 04:23:18.275 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41722 10 6452 1 2025-08-18 04:19:15.082 00:06:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 04:24:18.674 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32848 10 6452 1 2025-08-18 04:24:44.744 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 04:24:44.566 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 04:24:44.564 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 04:24:44.492 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:24:44.662 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:20:15.079 00:06:00.407 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 04:25:19.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50858 10 6452 1 2025-08-18 04:26:19.507 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33858 10 6452 1 2025-08-18 04:27:19.911 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39850 10 6452 1 2025-08-18 04:28:20.316 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40104 10 6452 1 2025-08-18 04:29:20.721 00:00:10.601 TCP 1.101.0.1:3000 -> 23.104.0.1:34944 10 6452 1 2025-08-18 04:29:44.688 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 04:29:44.685 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 04:29:44.687 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 04:29:44.633 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:29:44.606 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:30:21.363 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39390 10 6452 1 2025-08-18 04:26:15.083 00:06:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 04:31:21.763 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56328 10 6452 1 2025-08-18 04:27:15.081 00:06:00.407 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 04:32:22.183 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58128 10 6452 1 2025-08-18 04:33:22.583 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60188 10 6452 1 2025-08-18 04:34:22.951 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41766 10 6452 1 2025-08-18 04:34:44.960 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:34:44.874 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 04:34:44.872 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 04:34:44.784 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:34:45.042 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 04:35:23.360 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47456 10 6452 1 2025-08-18 04:36:23.728 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42478 10 6452 1 2025-08-18 04:37:24.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43034 10 6452 1 2025-08-18 04:33:15.085 00:06:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 04:38:24.541 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53844 10 6452 1 2025-08-18 04:34:15.082 00:06:00.414 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 04:39:24.941 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44154 10 6452 1 2025-08-18 04:39:44.632 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:39:44.955 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 04:39:44.968 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 04:39:45.093 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 04:39:45.012 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:40:25.349 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37070 10 6452 1 2025-08-18 04:41:25.754 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58792 10 6452 1 2025-08-18 04:42:26.153 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49638 10 6452 1 2025-08-18 04:43:26.519 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45278 10 6452 1 2025-08-18 04:44:45.082 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 04:44:26.925 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43386 10 6452 1 2025-08-18 04:44:44.869 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 04:44:44.736 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:44:45.000 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 04:44:45.001 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:40:15.086 00:06:00.408 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 04:45:27.347 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54314 10 6452 1 2025-08-18 04:41:15.083 00:06:00.413 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 04:46:27.761 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38686 10 6452 1 2025-08-18 04:47:28.179 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33098 10 6452 1 2025-08-18 04:48:28.585 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55102 10 6452 1 2025-08-18 04:49:28.992 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41178 10 6452 1 2025-08-18 04:49:44.859 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 04:49:44.927 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:49:44.862 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:49:44.944 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 04:49:45.098 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 04:50:29.398 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45520 10 6452 1 2025-08-18 04:51:29.808 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50596 10 6452 1 2025-08-18 04:47:15.088 00:06:00.408 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 04:52:30.215 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57870 12 6556 1 2025-08-18 04:48:15.085 00:06:00.412 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 04:53:30.628 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50748 10 6452 1 2025-08-18 04:54:30.992 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39088 10 6452 1 2025-08-18 04:54:44.894 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:54:45.274 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 04:54:45.191 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 04:54:45.126 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 04:54:45.191 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 04:55:31.400 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37522 10 6452 1 2025-08-18 04:56:31.812 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52216 10 6452 1 2025-08-18 04:57:32.181 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:32782 10 6452 1 2025-08-18 04:58:32.546 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60858 10 6452 1 Summary: total flows: 136, total bytes: 420033, total packets: 1008, avg bps: 926, avg pps: 0, avg bpp: 416 Time window: 2025-08-18 03:58:15 - 2025-08-18 04:58:42 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0028s User: 0.0019s Wall: 0.0018s flows/second: 75353.4 Runtime: 0.0018s