Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-08 23:59:33.767 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37450 10 6452 1 2025-08-08 23:56:09.974 00:05:00.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-09 00:00:19.208 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:00:18.951 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:00:19.368 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:00:19.472 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:00:19.451 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:00:34.177 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34730 10 6452 1 2025-08-09 00:01:34.539 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42130 10 6452 1 2025-08-08 23:58:09.981 00:05:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-09 00:02:34.908 00:00:10.620 TCP 1.101.0.1:3000 -> 23.104.0.1:48684 10 6452 1 2025-08-09 00:03:35.567 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40812 10 6452 1 2025-08-09 00:04:35.974 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37878 10 6452 1 2025-08-09 00:05:19.636 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:05:19.553 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:05:19.551 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:05:19.600 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:05:19.475 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:05:36.342 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54542 10 6452 1 2025-08-09 00:02:09.978 00:05:00.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-09 00:06:36.751 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41360 10 6452 1 2025-08-09 00:07:37.150 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58986 10 6452 1 2025-08-09 00:04:09.982 00:05:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-09 00:08:37.551 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49806 10 6452 1 2025-08-09 00:09:37.956 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 10 6452 1 2025-08-09 00:10:19.475 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:10:19.491 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:10:19.282 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:10:19.658 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:10:19.365 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:10:38.326 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56400 10 6452 1 2025-08-09 00:11:38.732 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56538 12 6556 1 2025-08-09 00:08:09.980 00:05:00.100 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-09 00:12:39.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48390 10 6452 1 2025-08-09 00:13:39.549 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34210 10 6452 1 2025-08-09 00:10:09.985 00:05:00.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-09 00:14:39.954 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36360 10 6452 1 2025-08-09 00:15:19.583 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:15:19.540 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:15:19.723 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:15:19.722 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:15:19.808 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:15:40.373 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44520 10 6452 1 2025-08-09 00:16:40.781 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53284 10 6452 1 2025-08-09 00:17:41.185 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47816 10 6452 1 2025-08-09 00:14:09.981 00:05:00.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-09 00:18:41.586 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43562 10 6452 1 2025-08-09 00:19:41.990 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36420 10 6452 1 2025-08-09 00:16:09.984 00:05:00.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-09 00:20:19.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:20:19.749 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:20:19.887 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:20:19.789 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:20:19.970 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:20:42.399 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49026 10 6452 1 2025-08-09 00:21:42.761 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:54436 10 6452 1 2025-08-09 00:22:43.185 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43608 10 6452 1 2025-08-09 00:23:43.590 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38122 10 6452 1 2025-08-09 00:20:09.982 00:05:00.100 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-09 00:24:44.001 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42482 10 6452 1 2025-08-09 00:25:20.124 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:25:19.790 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:25:19.925 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:25:20.146 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:25:20.010 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:25:44.402 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55712 10 6452 1 2025-08-09 00:22:09.985 00:05:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-09 00:26:44.816 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:56444 10 6452 1 2025-08-09 00:27:45.242 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35126 10 6452 1 2025-08-09 00:28:45.601 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60746 10 6452 1 2025-08-09 00:29:46.005 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60638 10 6452 1 2025-08-09 00:26:09.984 00:05:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-09 00:30:19.732 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:30:20.010 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:30:19.826 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:30:19.841 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:30:19.814 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:30:46.411 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:41030 10 6452 1 2025-08-09 00:31:46.865 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48716 10 6452 1 2025-08-09 00:28:09.986 00:05:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-09 00:32:47.274 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47640 10 6452 1 2025-08-09 00:33:47.692 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:44578 12 10365 1 2025-08-09 00:34:48.189 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33042 10 6452 1 2025-08-09 00:35:20.044 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:35:20.521 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:35:19.802 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:35:19.962 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:35:20.448 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:35:48.552 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35248 10 6452 1 2025-08-09 00:32:09.983 00:05:00.100 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-09 00:36:48.967 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:57864 10 6452 1 2025-08-09 00:37:49.349 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55538 10 6452 1 2025-08-09 00:34:09.987 00:05:00.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-09 00:38:49.713 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:36626 12 10367 1 2025-08-09 00:39:50.204 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-08-09 00:40:20.202 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:40:20.146 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:40:20.165 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:40:20.121 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:40:20.140 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:40:50.568 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39356 10 6452 1 2025-08-09 00:41:50.971 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37816 10 6452 1 2025-08-09 00:38:09.985 00:05:00.102 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-09 00:42:51.338 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45110 10 6452 1 2025-08-09 00:43:51.746 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38714 10 6452 1 2025-08-09 00:40:09.988 00:05:00.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-09 00:44:52.120 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47624 10 6452 1 2025-08-09 00:45:20.167 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:45:19.925 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:45:20.257 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:45:20.483 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:45:20.339 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:45:52.528 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50936 10 6452 1 2025-08-09 00:46:52.891 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56094 10 6452 1 2025-08-09 00:47:53.304 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37190 10 6452 1 2025-08-09 00:44:09.986 00:05:00.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-09 00:48:53.707 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46562 10 6452 1 2025-08-09 00:49:54.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33930 10 6452 1 2025-08-09 00:46:09.991 00:05:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-09 00:50:20.429 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:50:20.291 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:50:20.320 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:50:20.465 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:50:20.404 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:50:54.515 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58200 10 6452 1 2025-08-09 00:51:54.923 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:38836 10 6452 1 2025-08-09 00:52:55.349 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38438 10 6452 1 2025-08-09 00:53:55.752 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:32952 12 10367 1 2025-08-09 00:50:09.988 00:05:00.116 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-09 00:54:56.233 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41150 10 6452 1 2025-08-09 00:55:20.885 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 00:55:20.726 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 00:55:20.401 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:55:20.802 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 00:55:20.704 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 00:55:56.603 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38698 10 6452 1 2025-08-09 00:52:09.991 00:05:00.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-09 00:56:57.010 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57808 10 6452 1 2025-08-09 00:57:57.375 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34920 10 6452 1 Summary: total flows: 139, total bytes: 422395, total packets: 1018, avg bps: 908, avg pps: 0, avg bpp: 414 Time window: 2025-08-08 23:56:09 - 2025-08-09 00:58:07 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0012s User: 0.0024s Wall: 0.0013s flows/second: 104108.6 Runtime: 0.0013s