Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 12:59:22.587 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50788 10 6452 1 2025-08-07 12:59:37.288 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 12:59:37.205 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 12:59:37.201 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:59:37.207 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 12:59:37.365 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:00:22.994 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53452 10 6452 1 2025-08-07 13:01:23.399 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60684 10 6452 1 2025-08-07 12:57:09.055 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 13:02:23.767 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51116 10 6452 1 2025-08-07 13:03:24.185 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37188 10 6452 1 2025-08-07 12:59:09.055 00:06:00.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 13:04:24.591 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46270 10 6452 1 2025-08-07 13:04:37.538 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:04:37.336 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:04:37.225 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:04:37.403 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:04:37.307 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:05:24.990 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35172 10 6452 1 2025-08-07 13:06:25.396 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57244 10 6452 1 2025-08-07 13:07:25.758 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58744 10 6452 1 2025-08-07 13:08:26.161 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40230 10 6452 1 2025-08-07 13:04:09.060 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 13:09:37.463 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:09:37.432 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:09:26.561 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49860 10 6452 1 2025-08-07 13:09:37.474 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:09:37.333 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:09:37.557 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:10:26.961 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51900 10 6452 1 2025-08-07 13:06:09.059 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 13:11:27.323 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50232 10 6452 1 2025-08-07 13:12:27.733 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57280 10 6452 1 2025-08-07 13:13:28.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48118 10 6452 1 2025-08-07 13:14:37.504 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:14:37.439 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:14:37.660 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:14:37.618 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:14:28.544 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:56688 10 6452 1 2025-08-07 13:14:37.742 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:15:28.913 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41078 10 6452 1 2025-08-07 13:11:09.062 00:06:00.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 13:16:29.273 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48322 10 6452 1 2025-08-07 13:17:29.678 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60324 10 6452 1 2025-08-07 13:13:09.063 00:06:00.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 13:18:30.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33350 10 6452 1 2025-08-07 13:19:37.580 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:19:37.498 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:19:30.511 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40164 10 6452 1 2025-08-07 13:19:37.680 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:19:37.415 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:19:37.497 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:20:30.914 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45270 10 6452 1 2025-08-07 13:21:31.273 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41234 10 6452 1 2025-08-07 13:22:31.680 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44508 10 6452 1 2025-08-07 13:18:09.066 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 13:23:32.041 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:49516 12 10367 1 2025-08-07 13:24:37.652 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:24:37.737 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:24:37.725 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:24:37.786 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:24:37.808 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:24:32.516 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:32794 10 6452 1 2025-08-07 13:20:09.065 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 13:25:32.941 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:59010 10 6452 1 2025-08-07 13:26:33.337 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56102 10 6452 1 2025-08-07 13:27:33.749 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35808 10 6452 1 2025-08-07 13:28:34.130 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39978 10 6452 1 2025-08-07 13:29:38.240 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:29:37.910 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:29:37.901 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:29:38.157 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:29:38.172 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:29:34.532 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45968 10 6452 1 2025-08-07 13:25:09.068 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 13:30:34.936 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:53080 10 6452 1 2025-08-07 13:31:35.379 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38470 10 6452 1 2025-08-07 13:27:09.065 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 13:32:35.780 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43336 10 6452 1 2025-08-07 13:33:36.188 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55538 10 6452 1 2025-08-07 13:34:38.027 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:34:37.873 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:34:37.887 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:34:37.945 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:34:37.998 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:34:36.589 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34156 10 6452 1 2025-08-07 13:35:36.997 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46752 10 6452 1 2025-08-07 13:36:37.391 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34418 10 6452 1 2025-08-07 13:32:09.074 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 13:37:37.754 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40464 10 6452 1 2025-08-07 13:38:38.166 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33312 10 6452 1 2025-08-07 13:34:09.071 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 13:39:38.218 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:39:38.058 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:39:37.884 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:39:38.136 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:39:38.052 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:39:38.566 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44294 10 6452 1 2025-08-07 13:40:38.973 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57808 10 6452 1 2025-08-07 13:41:39.335 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39370 10 6452 1 2025-08-07 13:42:39.737 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58264 10 6452 1 2025-08-07 13:43:40.148 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:34198 10 6452 1 2025-08-07 13:39:09.074 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 13:44:38.248 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:44:38.176 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:44:38.085 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:44:38.223 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:44:38.168 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:44:40.535 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36968 10 6452 1 2025-08-07 13:45:40.944 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:43414 10 6452 1 2025-08-07 13:41:09.072 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 13:46:41.325 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53610 10 6452 1 2025-08-07 13:47:41.732 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33660 10 6452 1 2025-08-07 13:48:42.134 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42534 10 6452 1 2025-08-07 13:49:38.086 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:49:38.174 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:49:38.254 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:49:37.804 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:49:38.169 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:49:42.496 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40632 10 6452 1 2025-08-07 13:50:42.898 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43298 10 6452 1 2025-08-07 13:46:09.076 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 13:51:43.306 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52382 10 6452 1 2025-08-07 13:52:43.717 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58674 10 6452 1 2025-08-07 13:48:09.074 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 13:53:44.125 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39258 10 6452 1 2025-08-07 13:54:38.543 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:54:38.484 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:54:38.411 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:54:38.460 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:54:38.330 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:54:44.534 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60900 10 6452 1 2025-08-07 13:55:44.953 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47184 10 6452 1 2025-08-07 13:56:45.360 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48632 10 6452 1 2025-08-07 13:57:45.765 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:51416 10 6452 1 2025-08-07 13:53:09.078 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 136, total bytes: 414340, total packets: 1010, avg bps: 891, avg pps: 0, avg bpp: 410 Time window: 2025-08-07 12:57:09 - 2025-08-07 13:59:09 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0034s User: 0.0011s Wall: 0.0025s flows/second: 54643.7 Runtime: 0.0025s