Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 22:59:23.391 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45612 10 6452 1 2025-08-20 22:55:16.550 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 23:00:23.755 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:60060 11 6504 1 2025-08-20 23:01:04.638 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:01:04.800 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:01:04.748 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:01:04.801 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:01:04.884 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 22:56:16.553 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 23:01:24.235 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36128 10 6452 1 2025-08-20 23:02:24.644 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37110 10 6452 1 2025-08-20 23:03:25.065 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 10 6452 1 2025-08-20 23:04:25.466 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33928 10 6452 1 2025-08-20 23:05:25.875 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59230 10 6452 1 2025-08-20 23:06:04.924 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:06:05.071 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 23:06:04.987 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:06:05.110 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:06:05.091 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:06:26.282 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40972 10 6452 1 2025-08-20 23:02:16.552 00:06:00.228 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 23:07:26.686 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42948 10 6452 1 2025-08-20 23:03:16.554 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 23:08:27.111 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54032 10 6452 1 2025-08-20 23:09:27.474 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42486 10 6452 1 2025-08-20 23:10:27.879 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41726 10 6452 1 2025-08-20 23:11:04.596 00:00:00.014 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:11:04.912 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:11:04.629 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:11:04.858 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:11:04.941 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 23:11:28.283 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56046 10 6452 1 2025-08-20 23:12:28.697 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52064 10 6452 1 2025-08-20 23:13:29.116 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52432 10 6452 1 2025-08-20 23:09:16.555 00:06:00.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 23:14:29.479 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33912 10 6452 1 2025-08-20 23:10:16.556 00:06:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 23:15:29.846 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:36520 10 6452 1 2025-08-20 23:16:04.971 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:16:04.807 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:16:04.867 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:16:04.861 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:16:04.949 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 23:16:30.270 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54060 10 6452 1 2025-08-20 23:17:30.633 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52010 10 6452 1 2025-08-20 23:18:31.035 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38238 10 6452 1 2025-08-20 23:19:31.439 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44108 10 6452 1 2025-08-20 23:20:31.842 00:00:10.463 TCP 1.101.0.1:3000 -> 23.104.0.1:40142 12 10365 1 2025-08-20 23:21:04.937 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:21:05.204 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 23:21:05.195 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:21:05.189 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:21:05.121 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:16:16.555 00:06:00.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 23:21:32.347 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36428 10 6452 1 2025-08-20 23:17:16.559 00:06:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 23:22:32.749 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46212 10 6452 1 2025-08-20 23:23:33.153 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48232 10 6452 1 2025-08-20 23:24:33.513 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41884 10 6452 1 2025-08-20 23:25:33.921 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:60848 10 6452 1 2025-08-20 23:26:05.212 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:26:05.277 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:26:05.279 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:26:05.006 00:00:00.049 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:26:05.294 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 23:26:34.346 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46024 10 6452 1 2025-08-20 23:27:34.763 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46988 10 6452 1 2025-08-20 23:23:16.566 00:06:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 23:28:35.184 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44570 10 6452 1 2025-08-20 23:24:16.568 00:06:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 23:29:35.604 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48562 10 6452 1 2025-08-20 23:30:36.017 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41646 10 6452 1 2025-08-20 23:31:05.226 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:31:05.389 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:31:05.327 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:31:05.471 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:31:05.554 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 23:31:36.418 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42536 10 6452 1 2025-08-20 23:32:36.825 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:36992 10 6452 1 2025-08-20 23:33:37.250 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:50294 10 6452 1 2025-08-20 23:34:37.621 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34550 10 6452 1 2025-08-20 23:30:16.570 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 23:35:38.026 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:51906 12 10367 1 2025-08-20 23:36:05.610 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:36:05.321 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:36:05.290 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:36:05.397 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:36:05.480 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 23:31:16.577 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 23:36:38.503 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50558 10 6452 1 2025-08-20 23:37:38.908 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39096 10 6452 1 2025-08-20 23:38:39.314 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51386 10 6452 1 2025-08-20 23:39:39.719 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46162 10 6452 1 2025-08-20 23:40:40.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56206 10 6452 1 2025-08-20 23:41:05.555 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:41:05.388 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:41:05.514 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:41:05.488 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:41:05.571 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 23:41:40.511 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 10 6452 1 2025-08-20 23:37:16.577 00:06:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 23:42:40.918 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56486 10 6452 1 2025-08-20 23:38:16.580 00:06:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 23:43:41.320 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54484 10 6452 1 2025-08-20 23:44:41.725 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36354 10 6452 1 2025-08-20 23:45:42.137 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47502 10 6452 1 2025-08-20 23:46:05.773 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 23:46:05.692 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:46:05.619 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:46:05.669 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:46:05.690 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:46:42.539 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 10 6452 1 2025-08-20 23:47:42.945 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59760 10 6452 1 2025-08-20 23:48:43.364 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42826 10 6452 1 2025-08-20 23:44:16.578 00:06:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 23:49:43.769 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58656 10 6452 1 2025-08-20 23:45:16.582 00:06:00.203 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 23:50:44.174 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46894 10 6452 1 2025-08-20 23:51:05.530 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 23:51:05.636 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:51:05.640 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:51:05.510 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:51:05.449 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:51:44.582 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56094 10 6452 1 2025-08-20 23:52:44.946 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:34990 10 6452 1 2025-08-20 23:53:45.366 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:48372 10 6452 1 2025-08-20 23:54:45.744 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49978 10 6452 1 2025-08-20 23:55:46.152 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:40232 12 10367 1 2025-08-20 23:56:06.089 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 23:56:05.911 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 23:56:05.911 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 23:56:05.926 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:56:06.007 00:00:00.039 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 23:51:16.581 00:06:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 23:56:46.628 00:00:10.528 TCP 1.101.0.1:3000 -> 23.104.0.1:57686 10 6452 1 2025-08-20 23:52:16.583 00:06:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 23:57:47.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47828 10 6452 1 Summary: total flows: 137, total bytes: 423081, total packets: 1029, avg bps: 895, avg pps: 0, avg bpp: 411 Time window: 2025-08-20 22:55:16 - 2025-08-20 23:58:16 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0030s User: 0.0010s Wall: 0.0019s flows/second: 73972.7 Runtime: 0.0019s