Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-11 19:58:43.732 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56474 10 6452 1 2025-08-11 19:55:11.598 00:05:00.606 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-11 19:59:44.146 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37568 10 6452 1 2025-08-11 20:00:44.525 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-08-11 19:57:11.600 00:05:00.601 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-11 20:01:41.220 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:01:41.254 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:01:41.056 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:01:41.074 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:01:41.136 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:01:44.925 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56022 10 6452 1 2025-08-11 20:02:45.336 00:00:10.472 TCP 1.101.0.1:3000 -> 23.104.0.1:59426 10 6452 1 2025-08-11 20:03:45.846 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:48906 10 6452 1 2025-08-11 20:04:46.280 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58480 10 6452 1 2025-08-11 20:01:11.598 00:05:00.608 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-11 20:05:46.683 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39676 10 6452 1 2025-08-11 20:06:41.109 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:06:40.907 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:06:41.147 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:06:41.260 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:06:41.343 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:06:47.103 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60354 10 6452 1 2025-08-11 20:03:11.601 00:05:00.603 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-11 20:07:47.527 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41360 10 6452 1 2025-08-11 20:08:47.934 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:45130 10 6452 1 2025-08-11 20:09:48.320 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51166 10 6452 1 2025-08-11 20:10:48.725 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46860 10 6452 1 2025-08-11 20:07:11.608 00:05:00.599 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-11 20:11:41.578 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:11:41.496 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:11:41.342 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:11:41.344 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:11:41.466 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:11:49.133 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43664 10 6452 1 2025-08-11 20:12:49.536 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49012 10 6452 1 2025-08-11 20:09:11.611 00:05:00.595 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-11 20:13:49.939 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:46824 10 6452 1 2025-08-11 20:14:50.359 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:60740 10 6452 1 2025-08-11 20:15:50.716 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39120 10 6452 1 2025-08-11 20:16:41.471 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:16:41.334 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:16:41.434 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:16:41.338 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:16:41.421 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:16:51.136 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55074 10 6452 1 2025-08-11 20:13:11.609 00:05:00.599 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-11 20:17:51.535 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60778 10 6452 1 2025-08-11 20:18:51.938 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37026 10 6452 1 2025-08-11 20:15:11.611 00:05:00.594 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-11 20:19:52.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50476 10 6452 1 2025-08-11 20:20:52.761 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:37750 10 6452 1 2025-08-11 20:21:41.670 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:21:41.403 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:21:41.644 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:21:41.524 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:21:41.587 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:21:53.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42222 10 6452 1 2025-08-11 20:22:53.595 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35464 10 6452 1 2025-08-11 20:19:11.611 00:05:00.605 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-11 20:23:54.005 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58068 10 6452 1 2025-08-11 20:24:54.410 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50194 10 6452 1 2025-08-11 20:21:11.615 00:05:00.598 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-11 20:25:54.771 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57486 10 6452 1 2025-08-11 20:26:41.868 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:26:41.545 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:26:41.862 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:26:41.623 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:26:41.785 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:26:55.186 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38414 10 6452 1 2025-08-11 20:27:55.592 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47356 10 6452 1 2025-08-11 20:28:55.956 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53984 10 6452 1 2025-08-11 20:25:11.611 00:05:00.605 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-11 20:29:56.370 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42402 10 6452 1 2025-08-11 20:30:56.774 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50124 10 6452 1 2025-08-11 20:27:11.614 00:05:00.600 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-11 20:31:41.670 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:31:41.746 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:31:41.694 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:31:41.582 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:31:41.665 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:31:57.181 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55906 10 6452 1 2025-08-11 20:32:57.593 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37628 10 6452 1 2025-08-11 20:33:57.991 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58616 10 6452 1 2025-08-11 20:34:58.395 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35740 10 6452 1 2025-08-11 20:31:11.613 00:05:00.605 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-11 20:35:58.793 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50778 10 6452 1 2025-08-11 20:36:42.263 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:36:42.251 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:36:42.164 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:36:42.116 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:36:42.348 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:36:59.198 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56864 10 6452 1 2025-08-11 20:33:11.615 00:05:00.613 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-11 20:37:59.557 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33574 10 6452 1 2025-08-11 20:38:59.925 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41264 10 6452 1 2025-08-11 20:40:00.338 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53200 10 6452 1 2025-08-11 20:37:11.614 00:05:00.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-11 20:41:00.703 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39532 10 6452 1 2025-08-11 20:41:42.107 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:41:41.765 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:41:41.925 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:41:41.796 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:41:42.023 00:00:00.039 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:42:01.121 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35234 10 6452 1 2025-08-11 20:43:01.525 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57748 10 6452 1 2025-08-11 20:39:11.617 00:05:00.614 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-11 20:44:01.924 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44306 10 6452 1 2025-08-11 20:45:02.340 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:50280 12 10365 1 2025-08-11 20:46:02.781 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48756 10 6452 1 2025-08-11 20:46:41.908 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:46:42.119 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:46:41.834 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:46:42.061 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:46:42.144 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:43:11.615 00:05:00.619 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-11 20:47:03.201 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41818 10 6452 1 2025-08-11 20:48:03.624 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49414 10 6452 1 2025-08-11 20:49:04.038 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49748 10 6452 1 2025-08-11 20:45:11.619 00:05:00.613 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-11 20:50:04.400 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:47910 10 6452 1 2025-08-11 20:51:04.859 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:32806 10 6452 1 2025-08-11 20:51:42.460 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:51:42.555 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:51:42.349 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:51:42.212 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:51:42.296 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:52:05.282 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59744 10 6452 1 2025-08-11 20:49:11.615 00:05:00.619 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-11 20:53:05.686 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58404 10 6452 1 2025-08-11 20:54:06.117 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60486 10 6452 1 2025-08-11 20:51:11.619 00:05:00.614 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-11 20:55:06.479 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40414 10 6452 1 2025-08-11 20:56:06.884 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56804 10 6452 1 2025-08-11 20:56:42.616 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-11 20:56:42.411 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-11 20:56:42.408 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-11 20:56:42.322 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:56:42.534 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-11 20:57:07.301 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:49276 10 6452 1 2025-08-11 20:58:07.677 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58278 10 6452 1 Summary: total flows: 140, total bytes: 420913, total packets: 1022, avg bps: 889, avg pps: 0, avg bpp: 411 Time window: 2025-08-11 19:55:11 - 2025-08-11 20:58:18 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0011s User: 0.0032s Wall: 0.0030s flows/second: 46729.5 Runtime: 0.0030s