Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 19:59:26.131 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:46876 10 6452 1 2025-08-15 20:00:26.510 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34918 10 6452 1 2025-08-15 19:57:13.789 00:05:00.564 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:01:26.912 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53050 10 6452 1 2025-08-15 19:58:13.793 00:05:00.559 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:02:27.276 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48018 10 6452 1 2025-08-15 20:03:36.705 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:03:36.662 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:03:27.680 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48336 10 6452 1 2025-08-15 20:03:36.807 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:03:36.554 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:03:36.889 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:04:28.114 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:34770 10 6452 1 2025-08-15 20:05:28.478 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38608 10 6452 1 2025-08-15 20:06:28.842 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:44948 10 6452 1 2025-08-15 20:03:13.790 00:05:00.571 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:07:29.260 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40942 10 6452 1 2025-08-15 20:04:13.794 00:05:00.567 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:08:36.505 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:08:36.783 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:08:29.673 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 10 6452 1 2025-08-15 20:08:36.643 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:08:36.635 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:08:36.726 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:09:30.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41128 10 6452 1 2025-08-15 20:10:30.512 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37820 10 6452 1 2025-08-15 20:11:30.916 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59256 10 6452 1 2025-08-15 20:12:31.278 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54728 10 6452 1 2025-08-15 20:09:13.793 00:05:00.571 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:13:37.387 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:13:36.980 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:13:37.213 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:13:37.484 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:13:37.295 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:13:31.678 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58202 10 6452 1 2025-08-15 20:10:13.796 00:05:00.565 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:14:32.108 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42458 10 6452 1 2025-08-15 20:15:32.471 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42340 10 6452 1 2025-08-15 20:16:32.876 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33362 10 6452 1 2025-08-15 20:17:33.237 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49748 10 6452 1 2025-08-15 20:18:36.990 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:18:36.965 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:18:36.987 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:18:36.989 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:18:37.069 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:18:33.641 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42610 10 6452 1 2025-08-15 20:15:13.795 00:05:00.571 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:19:34.053 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37792 10 6452 1 2025-08-15 20:16:13.797 00:05:00.566 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:20:34.457 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:54256 10 6452 1 2025-08-15 20:21:34.854 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:35182 10 6452 1 2025-08-15 20:22:35.280 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45850 10 6452 1 2025-08-15 20:23:37.275 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:23:37.060 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:23:37.154 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:23:37.191 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:23:37.064 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:23:35.639 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36860 10 6452 1 2025-08-15 20:24:36.064 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49662 10 6452 1 2025-08-15 20:21:13.795 00:05:00.572 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:25:36.467 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42646 10 6452 1 2025-08-15 20:22:13.798 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:26:36.868 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43064 10 6452 1 2025-08-15 20:27:37.278 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40082 10 6452 1 2025-08-15 20:28:37.087 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:28:37.256 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:28:37.083 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:28:37.005 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:28:37.118 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:28:37.683 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58668 10 6452 1 2025-08-15 20:29:38.107 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44000 10 6452 1 2025-08-15 20:30:38.469 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53960 10 6452 1 2025-08-15 20:27:13.797 00:05:00.572 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:31:38.868 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53794 10 6452 1 2025-08-15 20:28:13.800 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:32:39.283 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48562 10 6452 1 2025-08-15 20:33:37.316 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:33:37.401 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:33:37.432 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:33:37.389 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:33:37.515 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:33:39.694 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44846 10 6452 1 2025-08-15 20:34:40.119 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48898 10 6452 1 2025-08-15 20:35:40.485 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:34366 12 10367 1 2025-08-15 20:36:40.915 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40106 10 6452 1 2025-08-15 20:33:13.798 00:05:00.575 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:37:41.328 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57956 10 6452 1 2025-08-15 20:34:13.800 00:05:00.570 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:38:37.503 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:38:37.198 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:38:37.232 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:38:37.443 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:38:37.315 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:38:41.731 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49360 10 6452 1 2025-08-15 20:39:42.140 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33156 10 6452 1 2025-08-15 20:40:42.545 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:55488 10 6452 1 2025-08-15 20:41:42.959 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59848 10 6452 1 2025-08-15 20:42:43.361 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37582 10 6452 1 2025-08-15 20:39:13.800 00:05:00.574 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:43:37.342 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:43:37.383 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:43:37.347 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:43:37.428 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:43:37.431 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:43:43.767 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:44296 10 6452 1 2025-08-15 20:40:13.803 00:05:00.569 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:44:44.143 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:57124 10 6452 1 2025-08-15 20:45:44.501 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55872 10 6452 1 2025-08-15 20:46:44.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58196 10 6452 1 2025-08-15 20:47:45.315 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53138 10 6452 1 2025-08-15 20:48:37.731 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:48:37.601 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:48:37.728 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:48:37.547 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:48:37.813 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:48:45.726 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49352 10 6452 1 2025-08-15 20:45:13.802 00:05:00.573 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:49:46.141 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50968 10 6452 1 2025-08-15 20:46:13.804 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:50:46.497 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51706 10 6452 1 2025-08-15 20:51:46.901 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58228 10 6452 1 2025-08-15 20:52:47.308 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37856 10 6452 1 2025-08-15 20:53:37.991 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:53:37.833 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:53:37.730 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:53:37.909 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:53:37.903 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:53:47.669 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43202 10 6452 1 2025-08-15 20:54:48.099 00:00:10.921 TCP 1.101.0.1:3000 -> 23.104.0.1:57982 10 6452 1 2025-08-15 20:51:13.804 00:05:00.574 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:55:49.065 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60012 10 6452 1 2025-08-15 20:52:13.806 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:56:49.469 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58314 10 6452 1 2025-08-15 20:57:49.871 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55880 10 6452 1 2025-08-15 20:58:37.828 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:58:37.972 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:58:37.896 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:58:37.746 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:58:37.844 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 414463, total packets: 1012, avg bps: 899, avg pps: 0, avg bpp: 409 Time window: 2025-08-15 19:57:13 - 2025-08-15 20:58:37 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0012s User: 0.0036s Wall: 0.0021s flows/second: 65506.5 Runtime: 0.0021s