Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 14:59:06.364 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60516 10 6452 1 2025-08-28 14:59:46.377 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 14:59:46.202 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 14:59:46.414 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 14:59:46.210 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 14:59:46.293 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:00:06.765 00:00:10.734 TCP 1.101.0.1:3000 -> 23.104.0.1:58958 10 6452 1 2025-08-28 15:01:07.536 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46890 10 6452 1 2025-08-28 15:02:07.937 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58238 10 6452 1 2025-08-28 14:57:20.518 00:06:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 15:03:08.346 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58582 10 6452 1 2025-08-28 15:04:08.758 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49060 10 6452 1 2025-08-28 15:04:46.411 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 15:04:46.535 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 15:04:46.429 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:04:46.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:04:46.428 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:05:09.169 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60294 10 6452 1 2025-08-28 15:00:20.521 00:06:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 15:06:09.575 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58448 10 6452 1 2025-08-28 15:07:09.978 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37138 10 6452 1 2025-08-28 15:08:10.393 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49192 10 6452 1 2025-08-28 15:04:20.519 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 15:09:10.793 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58050 10 6452 1 2025-08-28 15:09:46.908 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 15:09:46.732 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:09:46.843 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:09:47.003 00:00:00.042 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 15:09:46.924 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:10:11.203 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60264 10 6452 1 2025-08-28 15:11:11.604 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46972 10 6452 1 2025-08-28 15:07:20.523 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 15:12:12.018 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33420 10 6452 1 2025-08-28 15:13:12.424 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34512 10 6452 1 2025-08-28 15:14:12.832 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:33156 10 6452 1 2025-08-28 15:14:47.001 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:14:46.861 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 15:14:46.740 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 15:14:46.758 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:14:46.918 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:15:13.257 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52068 10 6452 1 2025-08-28 15:16:13.667 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33620 10 6452 1 2025-08-28 15:11:20.521 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 15:17:14.098 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48470 10 6452 1 2025-08-28 15:18:14.500 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59678 10 6452 1 2025-08-28 15:14:20.523 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 15:19:14.901 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49972 12 6556 1 2025-08-28 15:19:46.744 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 15:19:46.598 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:19:46.869 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:19:46.636 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 15:19:46.953 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:20:15.312 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43080 10 6452 1 2025-08-28 15:21:15.712 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60906 10 6452 1 2025-08-28 15:22:16.136 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42966 10 6452 1 2025-08-28 15:18:20.521 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 15:23:16.534 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53910 10 6452 1 2025-08-28 15:24:16.900 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:46668 12 6556 1 2025-08-28 15:24:47.046 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:24:46.900 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 15:24:46.897 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 15:24:47.003 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:24:46.963 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:25:17.334 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47726 10 6452 1 2025-08-28 15:21:20.526 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 15:26:17.699 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36254 10 6452 1 2025-08-28 15:27:18.109 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55512 10 6452 1 2025-08-28 15:28:18.505 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52364 10 6452 1 2025-08-28 15:29:18.910 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37134 12 6556 1 2025-08-28 15:29:47.045 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:29:46.946 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 15:29:46.948 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 15:29:46.941 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:29:47.130 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:25:20.523 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 15:30:19.324 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39108 10 6452 1 2025-08-28 15:31:19.726 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60548 10 6452 1 2025-08-28 15:32:20.127 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:40780 12 10367 1 2025-08-28 15:28:20.525 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 15:33:20.609 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:57528 10 6452 1 2025-08-28 15:34:21.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57624 10 6452 1 2025-08-28 15:34:47.151 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:34:47.067 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:34:47.246 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 15:34:47.135 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 15:34:47.153 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:35:21.449 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42300 10 6452 1 2025-08-28 15:36:21.851 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:36128 10 6452 1 2025-08-28 15:32:20.523 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 15:37:22.277 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45756 10 6452 1 2025-08-28 15:38:22.636 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33456 10 6452 1 2025-08-28 15:39:23.038 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45636 10 6452 1 2025-08-28 15:39:47.498 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:39:47.439 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 15:39:47.430 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 15:39:46.922 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:39:47.416 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:35:20.529 00:06:00.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 15:40:23.442 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48544 10 6452 1 2025-08-28 15:41:23.801 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49444 10 6452 1 2025-08-28 15:42:24.207 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47912 10 6452 1 2025-08-28 15:43:24.569 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40680 10 6452 1 2025-08-28 15:39:20.529 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 15:44:24.976 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38176 10 6452 1 2025-08-28 15:44:47.405 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 15:44:47.319 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 15:44:47.308 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:44:47.320 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:44:47.402 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:45:25.378 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:41348 10 6452 1 2025-08-28 15:46:25.762 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:43340 10 6452 1 2025-08-28 15:42:20.532 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 15:47:26.138 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43824 10 6452 1 2025-08-28 15:48:26.506 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52462 10 6452 1 2025-08-28 15:49:26.916 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33246 10 6452 1 2025-08-28 15:49:47.558 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:49:47.419 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 15:49:47.474 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 15:49:47.229 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:49:47.476 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:50:27.282 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49312 10 6452 1 2025-08-28 15:46:20.528 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 15:51:27.685 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40944 10 6452 1 2025-08-28 15:52:28.106 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:37314 12 10365 1 2025-08-28 15:53:28.591 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47858 10 6452 1 2025-08-28 15:49:20.531 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-28 15:54:28.953 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54738 10 6452 1 2025-08-28 15:54:47.554 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-28 15:54:47.510 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-28 15:54:47.363 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:54:47.590 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-28 15:54:47.674 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-28 15:55:29.362 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59848 10 6452 1 2025-08-28 15:56:29.774 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34746 10 6452 1 2025-08-28 15:57:30.140 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56878 10 6452 1 2025-08-28 15:53:20.532 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-28 15:58:30.511 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43676 10 6452 1 Summary: total flows: 137, total bytes: 425017, total packets: 1028, avg bps: 913, avg pps: 0, avg bpp: 413 Time window: 2025-08-28 14:57:20 - 2025-08-28 15:59:20 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0034s User: 0.0026s Wall: 0.0030s flows/second: 45217.2 Runtime: 0.0031s