Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 09:58:57.500 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43092 10 6452 1 2025-08-20 09:59:57.863 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40826 10 6452 1 2025-08-20 10:00:49.058 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:00:48.908 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:00:48.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:00:48.847 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:00:48.976 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:00:58.278 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58036 10 6452 1 2025-08-20 10:01:58.690 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57180 10 6452 1 2025-08-20 10:02:59.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48450 10 6452 1 2025-08-20 09:58:16.280 00:06:00.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 10:03:59.521 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47354 10 6452 1 2025-08-20 09:59:16.284 00:06:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 10:04:59.927 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:41316 10 6452 1 2025-08-20 10:05:49.566 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:05:49.795 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:05:49.481 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:05:49.598 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:05:49.681 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:06:00.358 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50016 10 6452 1 2025-08-20 10:07:00.772 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:48956 10 6452 1 2025-08-20 10:08:01.196 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56058 10 6452 1 2025-08-20 10:09:01.561 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44438 10 6452 1 2025-08-20 10:10:01.962 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:32800 10 6452 1 2025-08-20 10:05:16.281 00:06:00.228 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 10:10:49.474 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:10:49.275 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:10:49.275 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:10:49.176 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:10:49.393 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:11:02.380 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35346 10 6452 1 2025-08-20 10:06:16.286 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 10:12:02.781 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49828 10 6452 1 2025-08-20 10:13:03.188 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:36920 10 6452 1 2025-08-20 10:14:03.580 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39110 10 6452 1 2025-08-20 10:15:03.945 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59744 10 6452 1 2025-08-20 10:15:49.393 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:15:49.377 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:15:49.435 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:15:49.504 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:15:49.308 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:16:04.361 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37364 10 6452 1 2025-08-20 10:12:16.284 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 10:17:04.772 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:55366 10 6452 1 2025-08-20 10:13:16.287 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 10:18:05.198 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47144 10 6452 1 2025-08-20 10:19:05.560 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36100 10 6452 1 2025-08-20 10:20:05.926 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:42344 10 6452 1 2025-08-20 10:20:49.455 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:20:49.368 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:20:49.501 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:20:49.402 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:20:49.372 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:21:06.321 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:46020 11 6504 1 2025-08-20 10:22:06.751 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36808 10 6452 1 2025-08-20 10:23:07.153 00:00:14.950 TCP 1.101.0.1:3000 -> 23.104.0.1:32806 10 6452 1 2025-08-20 10:19:16.286 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 10:24:12.168 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41902 10 6452 1 2025-08-20 10:20:16.288 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 10:25:12.575 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45654 10 6452 1 2025-08-20 10:25:50.314 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:25:50.314 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:25:50.325 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:25:50.398 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:25:50.479 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:26:12.975 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:47138 12 10367 1 2025-08-20 10:27:13.470 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36012 10 6452 1 2025-08-20 10:28:13.872 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34826 10 6452 1 2025-08-20 10:29:14.280 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55318 10 6452 1 2025-08-20 10:30:14.689 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41928 10 6452 1 2025-08-20 10:30:49.868 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:30:49.822 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:30:49.785 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:30:49.748 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:30:49.787 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:26:16.286 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 10:31:15.113 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52330 10 6452 1 2025-08-20 10:27:16.289 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 10:32:15.514 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53690 10 6452 1 2025-08-20 10:33:15.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51642 10 6452 1 2025-08-20 10:34:16.313 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37530 10 6452 1 2025-08-20 10:35:16.718 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:46470 10 6452 1 2025-08-20 10:35:49.758 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:35:49.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:35:49.650 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:35:49.808 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:35:49.891 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:36:17.135 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38324 10 6452 1 2025-08-20 10:37:17.501 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46564 10 6452 1 2025-08-20 10:33:16.287 00:06:00.238 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 10:38:17.908 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51558 10 6452 1 2025-08-20 10:34:16.289 00:06:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 10:39:18.269 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:50640 10 6452 1 2025-08-20 10:40:18.664 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60590 10 6452 1 2025-08-20 10:40:49.757 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:40:49.845 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:40:49.846 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:40:49.916 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:40:49.674 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:41:19.096 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59658 10 6452 1 2025-08-20 10:42:19.500 00:00:10.575 TCP 1.101.0.1:3000 -> 23.104.0.1:49532 10 6452 1 2025-08-20 10:43:20.114 00:00:10.520 TCP 1.101.0.1:3000 -> 23.104.0.1:35108 10 6452 1 2025-08-20 10:44:20.672 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39062 10 6452 1 2025-08-20 10:40:16.288 00:06:00.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 10:45:21.029 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53604 10 6452 1 2025-08-20 10:45:50.461 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:45:50.325 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:45:50.283 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:45:50.180 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:45:50.379 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:41:16.293 00:06:00.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 10:46:21.390 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 2025-08-20 10:47:21.759 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40108 10 6452 1 2025-08-20 10:48:22.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58232 10 6452 1 2025-08-20 10:49:22.545 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:48992 10 6452 1 2025-08-20 10:50:22.919 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:38602 10 6452 1 2025-08-20 10:50:50.141 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:50:50.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:50:50.143 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:50:50.105 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:50:50.058 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:51:23.308 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49512 10 6452 1 2025-08-20 10:47:16.290 00:06:00.242 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 10:52:23.717 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42526 10 6452 1 2025-08-20 10:48:16.292 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 10:53:24.135 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59650 10 6452 1 2025-08-20 10:54:24.539 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38152 10 6452 1 2025-08-20 10:55:24.900 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38284 10 6452 1 2025-08-20 10:55:49.963 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 10:55:49.963 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:55:50.337 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 10:55:50.144 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 10:55:50.046 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 10:56:25.310 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33704 10 6452 1 2025-08-20 10:57:25.713 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56660 10 6452 1 2025-08-20 10:58:26.113 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35076 10 6452 1 Summary: total flows: 136, total bytes: 419983, total packets: 1007, avg bps: 928, avg pps: 0, avg bpp: 417 Time window: 2025-08-20 09:58:16 - 2025-08-20 10:58:36 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0020s User: 0.0020s Wall: 0.0018s flows/second: 76362.2 Runtime: 0.0018s