Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-29 10:59:24.755 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:48432 10 6452 1 2025-08-29 11:00:10.447 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:00:10.552 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:00:10.267 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:00:10.915 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:00:10.998 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:00:25.198 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37992 10 6452 1 2025-08-29 10:57:20.917 00:05:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 11:01:25.561 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35274 10 6452 1 2025-08-29 11:02:25.964 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45568 10 6452 1 2025-08-29 11:03:26.373 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50556 10 6452 1 2025-08-29 11:00:20.916 00:05:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 11:04:26.774 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54436 10 6452 1 2025-08-29 11:05:11.242 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:05:11.311 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:05:10.972 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:05:11.310 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:05:11.393 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:05:27.186 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52054 10 6452 1 2025-08-29 11:06:27.600 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52914 10 6452 1 2025-08-29 11:03:20.921 00:05:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 11:07:28.002 00:00:10.761 TCP 1.101.0.1:3000 -> 23.104.0.1:54172 10 6452 1 2025-08-29 11:08:28.804 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47064 10 6452 1 2025-08-29 11:09:29.209 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42096 10 6452 1 2025-08-29 11:10:10.570 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:10:10.596 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:10:10.488 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:10:10.664 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:10:10.595 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:06:20.919 00:05:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 11:10:29.579 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42152 10 6452 1 2025-08-29 11:11:29.982 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34948 10 6452 1 2025-08-29 11:12:30.341 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35822 10 6452 1 2025-08-29 11:09:20.923 00:05:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 11:13:30.744 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42000 10 6452 1 2025-08-29 11:14:31.153 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40552 10 6452 1 2025-08-29 11:15:11.041 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:15:10.813 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:15:11.080 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:15:10.737 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:15:10.958 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:15:31.558 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45134 10 6452 1 2025-08-29 11:12:20.920 00:05:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 11:16:31.960 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38846 10 6452 1 2025-08-29 11:17:32.374 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34604 10 6452 1 2025-08-29 11:18:32.773 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40960 10 6452 1 2025-08-29 11:15:20.924 00:05:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 11:19:33.181 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48122 10 6452 1 2025-08-29 11:20:10.816 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:20:10.737 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:20:10.802 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:20:10.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:20:10.734 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:20:33.583 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33958 10 6452 1 2025-08-29 11:21:33.948 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37306 10 6452 1 2025-08-29 11:18:20.923 00:05:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 11:22:34.323 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47028 10 6452 1 2025-08-29 11:23:34.724 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37486 10 6452 1 2025-08-29 11:24:35.131 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56690 10 6452 1 2025-08-29 11:25:11.125 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:25:10.970 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:25:10.745 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:25:10.947 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:25:11.043 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:21:20.927 00:05:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 11:25:35.548 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:49954 10 6452 1 2025-08-29 11:26:35.931 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:42890 10 6452 1 2025-08-29 11:27:36.354 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:34808 11 6504 1 2025-08-29 11:24:20.924 00:05:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 11:28:36.811 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:57988 10 6452 1 2025-08-29 11:29:37.188 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47044 10 6452 1 2025-08-29 11:30:10.974 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:30:10.986 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:30:11.103 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:30:10.881 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:30:10.963 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:30:37.599 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40704 10 6452 1 2025-08-29 11:27:20.927 00:05:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 11:31:38.029 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51484 10 6452 1 2025-08-29 11:32:38.430 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51044 10 6452 1 2025-08-29 11:33:38.798 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:48884 10 6452 1 2025-08-29 11:30:20.925 00:05:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 11:34:39.169 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34730 10 6452 1 2025-08-29 11:35:11.173 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:35:11.181 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:35:10.968 00:00:00.060 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:35:11.121 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:35:11.204 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:35:39.573 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33458 10 6452 1 2025-08-29 11:36:39.981 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39124 10 6452 1 2025-08-29 11:33:20.927 00:05:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 11:37:40.385 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43408 10 6452 1 2025-08-29 11:38:40.750 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47686 10 6452 1 2025-08-29 11:39:41.151 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51060 12 6556 1 2025-08-29 11:40:11.406 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:40:11.129 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:40:11.297 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:40:11.405 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:40:11.381 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:36:20.927 00:05:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 11:40:41.556 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37494 10 6452 1 2025-08-29 11:41:41.959 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57880 10 6452 1 2025-08-29 11:42:42.364 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36988 10 6452 1 2025-08-29 11:39:20.929 00:05:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 11:43:42.727 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6452 1 2025-08-29 11:44:43.134 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45500 10 6452 1 2025-08-29 11:45:11.148 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:45:11.284 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:45:11.277 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:45:11.206 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:45:11.064 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:45:43.540 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44656 10 6452 1 2025-08-29 11:42:20.927 00:05:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 11:46:43.902 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59278 10 6452 1 2025-08-29 11:47:44.314 00:00:11.080 TCP 1.101.0.1:3000 -> 23.104.0.1:44240 10 6452 1 2025-08-29 11:48:45.434 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:60514 10 6452 1 2025-08-29 11:45:20.930 00:05:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 11:49:45.794 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47098 10 6452 1 2025-08-29 11:50:11.538 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:50:11.358 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:50:11.459 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:50:11.543 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:50:11.456 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:50:46.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39770 10 6452 1 2025-08-29 11:51:46.593 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36336 10 6452 1 2025-08-29 11:48:20.927 00:05:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-29 11:52:46.998 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56642 10 6452 1 2025-08-29 11:53:47.401 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47684 10 6452 1 2025-08-29 11:54:47.805 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49348 10 6452 1 2025-08-29 11:55:11.572 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-29 11:55:11.613 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-29 11:55:11.535 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:55:11.625 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-29 11:55:11.712 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-29 11:51:20.932 00:05:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-29 11:55:48.218 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44598 10 6452 1 2025-08-29 11:56:48.617 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47188 10 6452 1 2025-08-29 11:57:49.020 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40176 10 6452 1 2025-08-29 11:54:20.929 00:05:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 410704, total packets: 1013, avg bps: 883, avg pps: 0, avg bpp: 405 Time window: 2025-08-29 10:57:20 - 2025-08-29 11:59:21 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0031s User: 0.0010s Wall: 0.0022s flows/second: 63123.5 Runtime: 0.0022s