Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-21 11:59:05.736 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42148 10 6452 1 2025-08-21 12:00:06.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53698 10 6452 1 2025-08-21 12:01:06.515 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46494 10 6452 1 2025-08-21 12:01:20.964 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:01:21.069 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:01:20.886 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:01:20.360 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:01:20.882 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:02:06.921 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42116 10 6452 1 2025-08-21 12:03:07.325 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37246 10 6452 1 2025-08-21 11:59:16.819 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-21 12:04:07.736 00:00:11.055 TCP 1.101.0.1:3000 -> 23.104.0.1:49824 10 6452 1 2025-08-21 12:05:08.838 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:37278 10 6452 1 2025-08-21 12:00:16.820 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-21 12:06:09.222 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54880 10 6452 1 2025-08-21 12:06:20.448 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:06:20.572 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:06:20.527 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:06:20.453 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:06:20.535 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:07:09.584 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35702 10 6452 1 2025-08-21 12:08:09.990 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39892 10 6452 1 2025-08-21 12:09:10.351 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47630 10 6452 1 2025-08-21 12:10:10.760 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:45190 10 6452 1 2025-08-21 12:06:16.821 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-21 12:11:20.529 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:11:20.603 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:11:20.616 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:11:11.183 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39764 10 6452 1 2025-08-21 12:11:20.508 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:11:20.590 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:07:16.824 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-21 12:12:11.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46664 10 6452 1 2025-08-21 12:13:11.988 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58872 10 6452 1 2025-08-21 12:14:12.352 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38184 10 6452 1 2025-08-21 12:15:12.754 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33870 10 6452 1 2025-08-21 12:16:20.876 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:16:21.089 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:16:21.107 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:16:13.153 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56252 10 6452 1 2025-08-21 12:16:21.094 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:16:21.178 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:13:16.823 00:05:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 12:17:13.556 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44706 10 6452 1 2025-08-21 12:14:16.825 00:05:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 12:18:13.970 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39012 10 6452 1 2025-08-21 12:19:14.383 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:42272 10 6452 1 2025-08-21 12:20:14.843 00:00:10.539 TCP 1.101.0.1:3000 -> 23.104.0.1:41638 10 6452 1 2025-08-21 12:21:20.507 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:21:20.754 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:21:20.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:21:20.691 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:21:20.775 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:21:15.422 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46572 10 6452 1 2025-08-21 12:22:15.821 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37454 10 6452 1 2025-08-21 12:19:16.826 00:05:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 12:23:16.224 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34540 10 6452 1 2025-08-21 12:20:16.829 00:05:00.190 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 12:24:16.634 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54518 10 6452 1 2025-08-21 12:25:17.001 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50224 10 6452 1 2025-08-21 12:26:20.957 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:26:21.077 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:26:20.852 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:26:21.074 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:26:21.159 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:26:17.371 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35908 10 6452 1 2025-08-21 12:27:17.769 00:00:10.659 TCP 1.101.0.1:3000 -> 23.104.0.1:34868 10 6452 1 2025-08-21 12:28:18.464 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53342 10 6452 1 2025-08-21 12:25:16.829 00:05:00.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 12:29:18.821 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40990 10 6452 1 2025-08-21 12:26:16.832 00:05:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 12:30:19.221 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34326 10 6452 1 2025-08-21 12:31:21.047 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:31:20.964 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:31:21.025 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:31:20.932 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:31:20.966 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:31:19.630 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43068 10 6452 1 2025-08-21 12:32:20.039 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:39656 10 6452 1 2025-08-21 12:33:20.470 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46690 10 6452 1 2025-08-21 12:34:20.869 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39464 10 6452 1 2025-08-21 12:31:16.829 00:05:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 12:35:21.279 00:00:10.635 TCP 1.101.0.1:3000 -> 23.104.0.1:46024 10 6452 1 2025-08-21 12:36:21.180 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:36:20.905 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:36:21.011 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:36:20.898 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:32:16.833 00:05:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 12:36:20.981 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:36:21.950 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45598 10 6452 1 2025-08-21 12:37:22.362 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33748 10 6452 1 2025-08-21 12:38:22.762 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48102 10 6452 1 2025-08-21 12:39:23.178 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50304 10 6452 1 2025-08-21 12:40:23.538 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59270 10 6452 1 2025-08-21 12:37:16.830 00:05:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 12:41:21.135 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:41:21.362 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:41:21.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:41:21.092 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:41:21.052 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:41:23.938 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58618 10 6452 1 2025-08-21 12:38:16.834 00:05:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 12:42:24.358 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50948 10 6452 1 2025-08-21 12:43:24.759 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:40662 10 6452 1 2025-08-21 12:44:25.189 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50214 10 6452 1 2025-08-21 12:45:25.601 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50450 10 6452 1 2025-08-21 12:46:21.466 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:46:21.138 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:46:21.635 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:46:21.543 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:46:21.718 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:46:26.002 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53918 10 6452 1 2025-08-21 12:43:16.834 00:05:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 12:47:26.403 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54920 10 6452 1 2025-08-21 12:44:16.837 00:05:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 12:48:26.811 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:42440 10 6452 1 2025-08-21 12:49:27.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51712 10 6452 1 2025-08-21 12:50:27.588 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53364 10 6452 1 2025-08-21 12:51:21.518 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:51:21.354 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:51:21.445 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:51:21.469 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:51:21.552 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:51:27.991 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58972 10 6452 1 2025-08-21 12:52:28.358 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45648 10 6452 1 2025-08-21 12:49:16.838 00:05:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 12:53:28.764 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51262 10 6452 1 2025-08-21 12:50:16.840 00:05:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 12:54:29.230 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46362 10 6452 1 2025-08-21 12:55:29.645 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60640 10 6452 1 2025-08-21 12:56:21.330 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 12:56:21.514 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 12:56:21.425 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:56:21.554 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 12:56:21.637 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 12:56:30.074 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46428 10 6452 1 2025-08-21 12:57:30.475 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50542 10 6452 1 2025-08-21 12:58:30.883 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41528 10 6452 1 Summary: total flows: 138, total bytes: 416016, total packets: 1004, avg bps: 930, avg pps: 0, avg bpp: 414 Time window: 2025-08-21 11:59:05 - 2025-08-21 12:58:41 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0031s User: 0.0015s Wall: 0.0021s flows/second: 65558.3 Runtime: 0.0021s