Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-29 09:58:59.981 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46382 10 6661 1 2025-08-29 10:00:09.404 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:00:09.495 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:00:09.451 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:00:09.418 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:00:09.322 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:00:00.403 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:49384 10 6661 1 2025-08-29 10:01:00.785 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42406 10 6661 1 2025-08-29 09:57:20.904 00:05:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 10:02:01.188 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:42074 12 10367 1 2025-08-29 10:03:01.624 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58680 10 6452 1 2025-08-29 10:04:02.034 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38128 10 6452 1 2025-08-29 10:00:20.900 00:05:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 10:05:09.807 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:05:09.645 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:05:09.728 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:05:09.673 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:05:09.725 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:05:02.399 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34908 10 6452 1 2025-08-29 10:06:02.799 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38318 10 6452 1 2025-08-29 10:07:03.206 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49384 10 6452 1 2025-08-29 10:03:20.905 00:05:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 10:08:03.604 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57754 10 6452 1 2025-08-29 10:09:03.967 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47352 10 6452 1 2025-08-29 10:10:09.611 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:10:09.629 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:10:09.585 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:10:09.538 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:10:09.620 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:10:04.367 00:00:10.735 TCP 1.101.0.1:3000 -> 23.104.0.1:53378 10 6452 1 2025-08-29 10:06:20.902 00:05:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 10:11:05.142 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52250 10 6452 1 2025-08-29 10:12:05.550 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6452 1 2025-08-29 10:13:05.950 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46988 10 6452 1 2025-08-29 10:09:20.906 00:05:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 10:14:06.363 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37786 10 6452 1 2025-08-29 10:15:09.710 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:15:09.932 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:15:09.831 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:15:09.724 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:15:09.627 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:15:06.779 00:00:10.475 TCP 1.101.0.1:3000 -> 23.104.0.1:44830 10 6452 1 2025-08-29 10:16:07.291 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43162 10 6452 1 2025-08-29 10:12:20.902 00:05:00.311 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 10:17:07.690 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36576 10 6452 1 2025-08-29 10:18:08.111 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56672 10 6452 1 2025-08-29 10:19:08.513 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56510 10 6452 1 2025-08-29 10:15:20.906 00:05:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 10:20:09.859 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:20:09.775 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:20:09.570 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:20:09.778 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:20:09.530 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:20:08.877 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39474 10 6452 1 2025-08-29 10:21:09.253 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41228 10 6452 1 2025-08-29 10:22:09.652 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53434 10 6452 1 2025-08-29 10:18:20.903 00:05:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 10:23:10.065 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33048 10 6452 1 2025-08-29 10:24:10.468 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53794 10 6452 1 2025-08-29 10:25:09.854 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:25:09.714 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:25:09.787 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:25:09.903 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:25:09.985 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:21:20.905 00:05:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 10:25:10.868 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58668 10 6452 1 2025-08-29 10:26:11.283 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34686 10 6452 1 2025-08-29 10:27:11.685 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46536 10 6452 1 2025-08-29 10:28:12.109 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47408 10 6452 1 2025-08-29 10:24:20.905 00:05:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 10:29:12.519 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45404 10 6452 1 2025-08-29 10:30:09.893 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:30:09.720 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:30:10.072 00:00:00.012 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:30:10.056 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:30:10.139 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:30:12.921 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39850 10 6452 1 2025-08-29 10:27:20.907 00:05:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 10:31:13.345 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37826 10 6452 1 2025-08-29 10:32:13.762 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:56570 12 10365 1 2025-08-29 10:33:14.251 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53244 10 6452 1 2025-08-29 10:30:20.905 00:05:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 10:34:14.667 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46628 10 6452 1 2025-08-29 10:35:09.952 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:35:09.871 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:35:09.880 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:35:09.889 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:35:09.870 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:35:15.103 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57948 10 6452 1 2025-08-29 10:36:15.517 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60356 10 6452 1 2025-08-29 10:33:20.908 00:05:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 10:37:15.922 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:49818 12 10365 1 2025-08-29 10:38:16.373 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57926 12 6556 1 2025-08-29 10:39:16.779 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58580 10 6452 1 2025-08-29 10:40:09.965 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:40:09.971 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:40:09.914 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:40:09.883 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:40:10.170 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:36:20.907 00:05:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 10:40:17.146 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35586 10 6452 1 2025-08-29 10:41:17.551 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47112 10 6452 1 2025-08-29 10:42:17.963 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51026 10 6452 1 2025-08-29 10:39:20.911 00:05:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 10:43:18.369 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33120 10 6452 1 2025-08-29 10:44:18.775 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:33958 10 6452 1 2025-08-29 10:45:10.333 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:45:10.245 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:45:10.194 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:45:10.254 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:45:10.250 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:45:19.159 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41842 10 6452 1 2025-08-29 10:42:20.909 00:05:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 10:46:19.521 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37858 10 6452 1 2025-08-29 10:47:19.921 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:52086 10 6452 1 2025-08-29 10:48:20.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34538 10 6452 1 2025-08-29 10:45:20.915 00:05:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 10:49:20.759 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52928 10 6452 1 2025-08-29 10:50:10.336 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:50:10.328 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:50:10.128 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:50:10.139 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:50:10.254 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:50:21.170 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48712 10 6452 1 2025-08-29 10:51:21.574 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45286 10 6452 1 2025-08-29 10:48:20.913 00:05:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 10:52:21.934 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:52880 10 6452 1 2025-08-29 10:53:22.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59728 10 6452 1 2025-08-29 10:54:22.765 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:48594 10 6452 1 2025-08-29 10:55:10.408 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 10:55:10.318 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 10:55:10.397 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 10:55:10.220 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:55:10.323 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 10:51:20.917 00:05:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 10:55:23.181 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36722 10 6452 1 2025-08-29 10:56:23.543 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39460 10 6452 1 2025-08-29 10:57:23.945 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53318 10 6452 1 2025-08-29 10:54:20.915 00:05:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 10:58:24.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36838 10 6452 1 Summary: total flows: 140, total bytes: 429472, total packets: 1028, avg bps: 923, avg pps: 0, avg bpp: 417 Time window: 2025-08-29 09:57:20 - 2025-08-29 10:59:21 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0025s User: 0.0025s Wall: 0.0019s flows/second: 72208.9 Runtime: 0.0020s