Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 06:58:42.972 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48352 10 6452 1 2025-08-20 06:59:43.387 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:43796 10 6452 1 2025-08-20 07:00:45.562 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:00:45.747 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:00:45.100 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:00:45.560 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:00:45.644 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:00:43.767 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60882 10 6452 1 2025-08-20 06:56:16.223 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 07:01:44.185 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60266 10 6452 1 2025-08-20 06:57:16.226 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 07:02:44.586 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50730 10 6452 1 2025-08-20 07:03:44.991 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35354 10 6452 1 2025-08-20 07:04:45.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41772 10 6452 1 2025-08-20 07:05:45.614 00:00:00.020 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:05:45.618 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:05:45.455 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:05:45.358 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:05:45.442 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:05:45.765 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 10 6452 1 2025-08-20 07:06:46.133 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60330 10 6452 1 2025-08-20 07:07:46.503 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35998 10 6452 1 2025-08-20 07:03:16.224 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 07:08:46.910 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35164 10 6452 1 2025-08-20 07:04:16.226 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 07:09:47.278 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:47290 10 6452 1 2025-08-20 07:10:45.771 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:10:45.761 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:10:45.435 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:10:45.566 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:10:45.691 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:10:47.644 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50324 10 6452 1 2025-08-20 07:11:48.050 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39636 10 6452 1 2025-08-20 07:12:48.449 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51710 10 6452 1 2025-08-20 07:13:48.847 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:47000 10 6452 1 2025-08-20 07:14:49.284 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32860 10 6452 1 2025-08-20 07:10:16.224 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 07:15:45.769 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:15:45.823 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:15:45.774 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:15:45.621 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:15:45.685 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:15:49.687 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34398 10 6452 1 2025-08-20 07:11:16.227 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 07:16:50.116 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51830 10 6452 1 2025-08-20 07:17:50.520 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46282 10 6452 1 2025-08-20 07:18:50.940 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:43062 10 6452 1 2025-08-20 07:19:51.365 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34784 10 6452 1 2025-08-20 07:20:45.954 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:20:45.903 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:20:45.711 00:00:00.035 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:20:46.100 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:20:46.184 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:20:51.765 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34560 10 6452 1 2025-08-20 07:21:52.188 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40000 10 6452 1 2025-08-20 07:17:16.225 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 07:22:52.587 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41762 10 6452 1 2025-08-20 07:18:16.228 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 07:23:52.951 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:57480 10 6452 1 2025-08-20 07:24:53.318 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56980 10 6452 1 2025-08-20 07:25:46.175 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:25:46.085 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:25:45.971 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:25:46.079 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:25:46.163 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:25:53.717 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:56450 10 6452 1 2025-08-20 07:26:54.131 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45528 10 6452 1 2025-08-20 07:27:54.537 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37848 10 6452 1 2025-08-20 07:28:54.905 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57438 10 6452 1 2025-08-20 07:24:16.230 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 07:29:55.321 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42324 10 6452 1 2025-08-20 07:25:16.231 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 07:30:45.932 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:30:45.930 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:30:45.749 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:30:46.066 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:30:46.150 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:30:55.738 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:52058 12 10367 1 2025-08-20 07:31:56.179 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43808 10 6452 1 2025-08-20 07:32:56.548 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44682 10 6452 1 2025-08-20 07:33:57.001 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41048 10 6452 1 2025-08-20 07:34:57.362 00:00:10.564 TCP 1.101.0.1:3000 -> 23.104.0.1:52630 10 6452 1 2025-08-20 07:35:46.158 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:35:46.195 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:35:46.142 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:35:46.097 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:35:46.076 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:35:58.309 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56078 10 6452 1 2025-08-20 07:31:16.233 00:06:00.228 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 07:36:58.665 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46676 10 6452 1 2025-08-20 07:32:16.233 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 07:37:59.094 00:00:10.696 TCP 1.101.0.1:3000 -> 23.104.0.1:53802 10 6452 1 2025-08-20 07:38:59.826 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39084 10 6452 1 2025-08-20 07:40:00.224 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37028 10 6452 1 2025-08-20 07:40:46.464 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:40:46.454 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:40:46.267 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:40:46.347 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:40:46.381 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:41:00.627 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44306 10 6452 1 2025-08-20 07:42:01.028 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41776 10 6452 1 2025-08-20 07:43:01.442 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39920 10 6452 1 2025-08-20 07:38:16.234 00:06:00.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 07:44:01.852 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60314 10 6452 1 2025-08-20 07:39:16.236 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 07:45:02.272 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44376 10 6452 1 2025-08-20 07:45:46.279 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:45:46.268 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:45:46.139 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:45:46.404 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:45:46.487 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:46:02.676 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48396 10 6452 1 2025-08-20 07:47:03.107 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60772 10 6452 1 2025-08-20 07:48:03.506 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59662 10 6452 1 2025-08-20 07:49:03.911 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40918 10 6452 1 2025-08-20 07:50:04.309 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40466 10 6452 1 2025-08-20 07:45:16.233 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 07:50:46.864 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:50:46.469 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:50:46.483 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:50:46.861 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:50:46.781 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:51:04.718 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37234 10 6452 1 2025-08-20 07:46:16.237 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 07:52:05.134 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56240 10 6452 1 2025-08-20 07:53:05.539 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40458 10 6452 1 2025-08-20 07:54:05.903 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42336 10 6452 1 2025-08-20 07:55:06.307 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38366 10 6452 1 2025-08-20 07:55:46.522 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 07:55:46.507 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 07:55:46.509 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 07:55:46.530 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:55:46.439 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 07:56:06.713 00:00:10.430 TCP 1.101.0.1:3000 -> 23.104.0.1:59644 10 6452 1 2025-08-20 07:52:16.236 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 07:57:07.194 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:59780 10 6452 1 2025-08-20 07:58:07.563 00:00:10.715 TCP 1.101.0.1:3000 -> 23.104.0.1:56612 10 6452 1 2025-08-20 07:53:16.239 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 138, total bytes: 421653, total packets: 1034, avg bps: 892, avg pps: 0, avg bpp: 407 Time window: 2025-08-20 06:56:16 - 2025-08-20 07:59:16 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0026s User: 0.0017s Wall: 0.0024s flows/second: 56420.1 Runtime: 0.0025s