Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 13:59:26.945 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:59638 10 6452 1 2025-08-23 14:00:27.326 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35980 10 6452 1 2025-08-23 14:01:27.686 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47482 10 6452 1 2025-08-23 14:02:20.739 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:02:20.742 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:02:20.498 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:02:20.702 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:02:20.784 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:02:28.112 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48252 10 6452 1 2025-08-23 13:58:18.044 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 13:58:18.045 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 14:03:28.513 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51060 10 6452 1 2025-08-23 14:04:28.878 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58292 10 6452 1 2025-08-23 14:05:29.280 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49450 10 6452 1 2025-08-23 14:06:29.682 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49086 10 6452 1 2025-08-23 14:07:20.607 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:07:20.716 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:07:20.521 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:07:20.848 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:07:20.525 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:07:30.106 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42662 10 6452 1 2025-08-23 14:08:30.470 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47618 10 6452 1 2025-08-23 14:09:30.872 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33630 10 6452 1 2025-08-23 14:05:18.046 00:06:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 14:05:18.049 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 11 705 1 2025-08-23 14:10:31.275 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48074 10 6452 1 2025-08-23 14:11:31.687 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39776 10 6452 1 2025-08-23 14:12:20.747 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:12:20.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:12:20.680 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:12:20.889 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:12:20.972 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:12:32.108 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46956 10 6452 1 2025-08-23 14:13:32.511 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57878 10 6452 1 2025-08-23 14:14:32.922 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:49250 10 6452 1 2025-08-23 14:15:33.350 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57860 10 6452 1 2025-08-23 14:16:33.759 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:32952 10 6452 1 2025-08-23 14:12:18.055 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-08-23 14:17:21.069 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:12:18.051 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 14:17:21.195 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:17:21.120 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:17:20.726 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:17:20.987 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:17:34.172 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60546 10 6452 1 2025-08-23 14:18:34.579 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43272 10 6452 1 2025-08-23 14:19:35.010 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52282 10 6452 1 2025-08-23 14:20:35.411 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48968 10 6452 1 2025-08-23 14:21:35.813 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35676 10 6452 1 2025-08-23 14:22:21.084 00:00:00.048 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:22:21.042 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:22:20.831 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:22:20.959 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:22:21.003 00:00:00.047 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:22:36.230 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41744 10 6452 1 2025-08-23 14:23:36.591 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60192 10 6452 1 2025-08-23 14:19:18.055 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-08-23 14:19:18.054 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 14:24:36.993 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36566 10 6452 1 2025-08-23 14:25:37.400 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44048 10 6452 1 2025-08-23 14:26:37.800 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33246 10 6452 1 2025-08-23 14:27:21.616 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:27:21.311 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:27:21.579 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:27:21.281 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:27:21.534 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:27:38.203 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48870 10 6452 1 2025-08-23 14:28:38.606 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58440 10 6452 1 2025-08-23 14:29:39.005 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41688 10 6452 1 2025-08-23 14:30:39.370 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35080 10 6452 1 2025-08-23 14:26:18.059 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 11 705 1 2025-08-23 14:26:18.056 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 14:31:39.780 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:54236 12 10367 1 2025-08-23 14:32:21.323 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:32:21.233 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:32:21.362 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:32:21.195 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:32:21.239 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:32:40.272 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44460 10 6452 1 2025-08-23 14:33:40.674 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49432 10 6452 1 2025-08-23 14:34:41.103 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35118 10 6452 1 2025-08-23 14:35:41.509 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38064 10 6452 1 2025-08-23 14:36:41.912 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51182 10 6452 1 2025-08-23 14:37:21.283 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:37:21.144 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:37:21.094 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:37:21.286 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:37:21.369 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:37:42.282 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56718 10 6452 1 2025-08-23 14:33:18.060 00:06:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-08-23 14:33:18.058 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 14:38:42.648 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60256 10 6452 1 2025-08-23 14:39:43.060 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52892 10 6452 1 2025-08-23 14:40:43.464 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42644 10 6452 1 2025-08-23 14:41:43.867 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42616 10 6452 1 2025-08-23 14:42:21.490 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:42:21.491 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:42:21.484 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:42:21.343 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:42:21.436 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:42:44.284 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43390 10 6452 1 2025-08-23 14:43:44.687 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55142 10 6452 1 2025-08-23 14:44:45.116 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:59606 10 6452 1 2025-08-23 14:40:18.060 00:06:00.021 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 14:40:18.061 00:06:00.017 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 14:45:45.494 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59254 10 6452 1 2025-08-23 14:46:45.853 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:41978 12 10365 1 2025-08-23 14:47:21.993 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:47:22.195 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:47:22.338 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:47:21.975 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:47:22.057 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:47:46.350 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:32804 10 6452 1 2025-08-23 14:48:46.709 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54402 10 6452 1 2025-08-23 14:49:47.116 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:52630 10 6452 1 2025-08-23 14:50:47.511 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41710 10 6452 1 2025-08-23 14:51:47.917 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33114 10 6452 1 2025-08-23 14:47:18.069 00:06:00.012 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 14:52:21.485 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:52:21.664 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:52:21.396 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:52:21.301 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:47:18.077 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-23 14:52:21.568 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:52:48.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58060 10 6452 1 2025-08-23 14:53:48.678 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53908 10 6452 1 2025-08-23 14:54:49.046 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36144 10 6452 1 2025-08-23 14:55:49.450 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53412 10 6452 1 2025-08-23 14:56:49.849 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:46092 11 6504 1 2025-08-23 14:57:21.952 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 14:57:21.804 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 14:57:21.806 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 14:57:21.623 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:57:21.871 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 14:57:50.333 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36612 10 6452 1 Summary: total flows: 135, total bytes: 416196, total packets: 975, avg bps: 929, avg pps: 0, avg bpp: 426 Time window: 2025-08-23 13:58:18 - 2025-08-23 14:58:00 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0034s User: 0.0011s Wall: 0.0021s flows/second: 64286.0 Runtime: 0.0021s