Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-23 08:59:12.604 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44516 10 6452 1 2025-08-23 09:00:13.003 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58632 10 6452 1 2025-08-23 09:01:13.364 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50744 10 6452 1 2025-08-23 09:02:14.576 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:02:14.536 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:02:14.476 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:02:14.471 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:02:14.554 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:02:13.772 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:43318 10 6452 1 2025-08-23 08:58:17.866 00:06:00.054 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 09:03:14.187 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36446 10 6452 1 2025-08-23 09:04:14.587 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59026 10 6452 1 2025-08-23 09:00:17.877 00:06:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-08-23 09:05:15.019 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54968 10 6452 1 2025-08-23 09:06:15.420 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56768 10 6452 1 2025-08-23 09:07:14.711 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:07:14.678 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:07:14.553 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:07:14.629 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:07:14.751 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:07:15.825 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42372 10 6452 1 2025-08-23 09:08:16.230 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50544 10 6452 1 2025-08-23 09:09:16.638 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53856 10 6452 1 2025-08-23 09:05:17.874 00:06:00.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 09:10:16.995 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50952 10 6452 1 2025-08-23 09:11:17.403 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42780 10 6452 1 2025-08-23 09:12:14.723 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:12:14.561 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:12:14.578 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:12:14.657 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:12:14.739 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:07:17.918 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-08-23 09:12:17.813 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56788 10 6452 1 2025-08-23 09:13:18.228 00:00:10.550 TCP 1.101.0.1:3000 -> 23.104.0.1:60350 10 6452 1 2025-08-23 09:14:18.813 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43700 10 6452 1 2025-08-23 09:15:19.226 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33510 10 6452 1 2025-08-23 09:16:19.624 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44972 10 6452 1 2025-08-23 09:17:14.656 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:17:14.530 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:17:14.852 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:17:14.935 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:12:17.877 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 09:17:15.260 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:17:19.988 00:00:10.625 TCP 1.101.0.1:3000 -> 23.104.0.1:36002 10 6452 1 2025-08-23 09:18:20.656 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45542 10 6452 1 2025-08-23 09:14:17.880 00:06:00.044 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 09:19:21.027 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37510 10 6452 1 2025-08-23 09:20:21.430 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46168 10 6452 1 2025-08-23 09:21:21.832 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45730 10 6452 1 2025-08-23 09:22:15.282 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:22:14.980 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:22:15.148 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:22:15.148 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:22:15.231 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:22:22.229 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35908 10 6452 1 2025-08-23 09:23:22.637 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36308 10 6452 1 2025-08-23 09:19:17.878 00:06:00.050 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 09:24:23.063 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51168 10 6452 1 2025-08-23 09:25:23.480 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56112 10 6452 1 2025-08-23 09:21:17.882 00:06:00.044 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 09:26:23.888 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34642 12 6556 1 2025-08-23 09:27:15.215 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:27:15.147 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:27:15.235 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:27:15.040 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:27:15.123 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:27:24.299 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54558 10 6452 1 2025-08-23 09:28:24.695 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55276 10 6452 1 2025-08-23 09:29:25.116 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39696 10 6452 1 2025-08-23 09:30:25.522 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50950 10 6452 1 2025-08-23 09:26:17.882 00:06:00.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 09:31:25.924 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:45276 12 10365 1 2025-08-23 09:32:14.772 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:32:14.947 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:32:15.166 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:32:15.198 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:32:15.084 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:32:26.389 00:00:10.315 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 10 6452 1 2025-08-23 09:28:17.886 00:06:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-23 09:33:26.743 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44352 10 6452 1 2025-08-23 09:34:27.146 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48418 10 6452 1 2025-08-23 09:35:27.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42468 10 6452 1 2025-08-23 09:36:27.947 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:55916 12 10365 1 2025-08-23 09:37:15.305 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:37:15.192 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:37:15.274 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:37:15.085 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:37:15.275 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:37:28.443 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35760 10 6452 1 2025-08-23 09:33:17.884 00:06:00.046 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 09:38:28.845 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:45770 10 6452 1 2025-08-23 09:39:29.236 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44576 10 6452 1 2025-08-23 09:35:17.928 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-23 09:40:29.643 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40036 10 6452 1 2025-08-23 09:41:30.073 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36430 10 6452 1 2025-08-23 09:42:15.406 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:42:15.301 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:42:15.319 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:42:15.138 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:42:15.221 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:42:30.478 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51354 10 6452 1 2025-08-23 09:43:30.898 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43656 10 6452 1 2025-08-23 09:44:31.304 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:45696 10 6452 1 2025-08-23 09:40:17.886 00:06:00.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 09:45:31.720 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:45298 10 6452 1 2025-08-23 09:46:32.102 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58204 10 6452 1 2025-08-23 09:47:15.403 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:47:15.415 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:47:15.359 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:47:15.395 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:47:15.479 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:42:17.928 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-23 09:47:32.514 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6452 1 2025-08-23 09:48:32.934 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55364 10 6452 1 2025-08-23 09:49:33.351 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:46308 10 6452 1 2025-08-23 09:50:33.749 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55056 10 6452 1 2025-08-23 09:51:34.153 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:41242 10 6452 1 2025-08-23 09:52:15.517 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:47:17.890 00:06:00.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-23 09:52:15.509 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:52:15.609 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:52:15.627 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:52:15.711 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:52:34.564 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41412 10 6452 1 2025-08-23 09:53:34.961 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51022 10 6452 1 2025-08-23 09:49:17.932 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 653 1 2025-08-23 09:54:35.372 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36082 10 6452 1 2025-08-23 09:55:35.772 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59556 10 6452 1 2025-08-23 09:56:36.181 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59594 10 6452 1 2025-08-23 09:57:15.847 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-23 09:57:15.640 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-23 09:57:15.583 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:57:15.692 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-23 09:57:15.774 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-23 09:57:36.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60246 10 6452 1 2025-08-23 09:58:36.989 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57664 10 6452 1 Summary: total flows: 136, total bytes: 422490, total packets: 982, avg bps: 931, avg pps: 0, avg bpp: 430 Time window: 2025-08-23 08:58:17 - 2025-08-23 09:58:47 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0042s User: 0.0008s Wall: 0.0019s flows/second: 73470.5 Runtime: 0.0019s