Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-22 22:59:39.189 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58576 10 6452 1 2025-08-22 23:00:39.591 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58266 10 6452 1 2025-08-22 22:56:17.620 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 23:01:39.995 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56704 10 6452 1 2025-08-22 23:02:02.532 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:02:02.386 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:02:02.726 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:02:02.648 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:02:02.808 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:02:40.406 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41648 10 6452 1 2025-08-22 22:58:17.626 00:06:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 23:03:40.815 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53248 10 6452 1 2025-08-22 23:04:41.188 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44040 10 6452 1 2025-08-22 23:05:41.587 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47812 10 6452 1 2025-08-22 23:06:41.991 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39838 10 6452 1 2025-08-22 23:07:02.729 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:07:02.691 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:07:02.703 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:07:02.641 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:07:02.724 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:07:42.396 00:00:10.806 TCP 1.101.0.1:3000 -> 23.104.0.1:55674 10 6452 1 2025-08-22 23:03:17.628 00:06:00.084 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 23:08:43.244 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46328 10 6452 1 2025-08-22 23:09:43.605 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52646 10 6452 1 2025-08-22 23:05:17.628 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 23:10:44.013 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54002 10 6452 1 2025-08-22 23:11:44.415 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38992 10 6452 1 2025-08-22 23:12:02.737 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:12:03.093 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:12:02.852 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:12:02.829 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:12:02.911 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:12:44.816 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57330 10 6452 1 2025-08-22 23:13:45.226 00:00:10.468 TCP 1.101.0.1:3000 -> 23.104.0.1:35982 10 6452 1 2025-08-22 23:14:45.733 00:00:10.882 TCP 1.101.0.1:3000 -> 23.104.0.1:38726 10 6452 1 2025-08-22 23:10:17.630 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 23:15:46.653 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:47342 12 10365 1 2025-08-22 23:16:47.151 00:00:10.587 TCP 1.101.0.1:3000 -> 23.104.0.1:47484 10 6452 1 2025-08-22 23:17:02.935 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:17:02.733 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:17:02.657 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:17:02.815 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:17:02.899 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:12:17.631 00:06:00.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 23:17:47.779 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48290 10 6452 1 2025-08-22 23:18:48.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35364 10 6452 1 2025-08-22 23:19:48.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56922 10 6452 1 2025-08-22 23:20:48.994 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44850 10 6452 1 2025-08-22 23:21:49.354 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59718 10 6452 1 2025-08-22 23:22:02.920 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:22:02.708 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:22:02.835 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:22:02.921 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:22:03.004 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:17:17.630 00:06:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 23:22:49.756 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37026 10 6452 1 2025-08-22 23:23:50.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59304 10 6452 1 2025-08-22 23:19:17.632 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 23:24:50.530 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54066 10 6452 1 2025-08-22 23:25:50.933 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:49388 10 6452 1 2025-08-22 23:27:02.980 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:26:51.358 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54814 10 6452 1 2025-08-22 23:27:02.983 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:27:02.974 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:27:02.983 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:27:03.066 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:27:51.754 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:57198 10 6452 1 2025-08-22 23:28:52.183 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39020 10 6452 1 2025-08-22 23:24:17.633 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 23:29:52.557 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41460 10 6452 1 2025-08-22 23:30:52.963 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60978 10 6452 1 2025-08-22 23:26:17.638 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 23:32:03.156 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:32:03.065 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:32:03.146 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:32:03.072 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:32:03.073 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:31:53.329 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56424 10 6452 1 2025-08-22 23:32:53.740 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49986 10 6452 1 2025-08-22 23:33:54.145 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36614 10 6452 1 2025-08-22 23:34:54.548 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57712 10 6452 1 2025-08-22 23:35:54.953 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37208 10 6452 1 2025-08-22 23:31:17.638 00:06:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 23:37:03.412 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:37:03.022 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:37:03.304 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:37:03.187 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:37:03.270 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:36:55.367 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41308 10 6452 1 2025-08-22 23:37:55.775 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:49380 10 6452 1 2025-08-22 23:33:17.640 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 23:38:56.146 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43032 10 6452 1 2025-08-22 23:39:56.561 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44580 10 6452 1 2025-08-22 23:40:56.927 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:50088 10 6452 1 2025-08-22 23:42:03.387 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:42:03.386 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:42:03.095 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:42:03.148 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:42:03.232 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:41:57.348 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54724 10 6452 1 2025-08-22 23:42:57.759 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:52270 10 6452 1 2025-08-22 23:38:17.639 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 23:43:58.184 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48562 10 6452 1 2025-08-22 23:44:58.547 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55778 10 6452 1 2025-08-22 23:40:17.643 00:06:00.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 23:45:58.958 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45702 10 6452 1 2025-08-22 23:47:03.488 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:47:03.429 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:47:03.372 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:47:03.425 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:47:03.507 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:46:59.319 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 10 6452 1 2025-08-22 23:47:59.725 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56090 10 6452 1 2025-08-22 23:49:00.134 00:00:10.902 TCP 1.101.0.1:3000 -> 23.104.0.1:33888 10 6452 1 2025-08-22 23:50:01.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44000 10 6452 1 2025-08-22 23:45:17.641 00:06:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 23:51:01.507 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46230 10 6452 1 2025-08-22 23:52:03.534 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:52:03.534 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:52:03.366 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:52:03.487 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:52:03.451 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:52:01.871 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49570 10 6452 1 2025-08-22 23:47:17.643 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 23:53:02.273 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44654 10 6452 1 2025-08-22 23:54:02.678 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55422 10 6452 1 2025-08-22 23:55:03.104 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42026 10 6452 1 2025-08-22 23:56:03.467 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51922 10 6452 1 2025-08-22 23:57:03.779 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 23:57:03.950 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 23:57:03.838 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:57:03.797 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 23:57:03.880 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 23:57:03.869 00:00:10.509 TCP 1.101.0.1:3000 -> 23.104.0.1:55398 10 6452 1 2025-08-22 23:52:17.642 00:06:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 23:58:04.420 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46216 10 6452 1 Summary: total flows: 136, total bytes: 414338, total packets: 1010, avg bps: 891, avg pps: 0, avg bpp: 410 Time window: 2025-08-22 22:56:17 - 2025-08-22 23:58:17 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0020s User: 0.0020s Wall: 0.0024s flows/second: 57242.9 Runtime: 0.0024s