Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-17 21:58:43.552 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55514 10 6452 1 2025-08-17 21:59:36.747 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 21:59:36.761 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 21:59:36.739 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 21:59:36.743 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 21:59:36.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 21:59:43.953 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36136 10 6452 1 2025-08-17 22:00:44.367 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37666 10 6452 1 2025-08-17 21:57:14.918 00:05:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 22:01:44.769 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:58712 10 6452 1 2025-08-17 22:02:45.144 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37976 10 6452 1 2025-08-17 21:59:14.916 00:05:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 22:03:45.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42842 10 6452 1 2025-08-17 22:04:36.916 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 22:04:36.954 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:04:36.832 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:04:36.840 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 22:04:36.834 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 22:04:45.941 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:42246 10 6452 1 2025-08-17 22:05:46.319 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42806 10 6452 1 2025-08-17 22:06:46.716 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34314 10 6452 1 2025-08-17 22:03:14.920 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 22:07:47.117 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50850 10 6452 1 2025-08-17 22:08:47.518 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53138 10 6452 1 2025-08-17 22:05:14.921 00:05:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 22:09:37.244 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 22:09:37.157 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 22:09:37.086 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:09:37.160 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:09:37.147 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 22:09:47.885 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:50580 10 6452 1 2025-08-17 22:10:48.320 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58878 10 6452 1 2025-08-17 22:11:48.689 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46576 10 6452 1 2025-08-17 22:12:49.103 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48900 10 6452 1 2025-08-17 22:09:14.925 00:05:00.386 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 22:13:49.465 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35126 10 6452 1 2025-08-17 22:14:37.341 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 22:14:37.054 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 22:14:37.072 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:14:37.257 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:14:37.056 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 22:14:49.865 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50954 10 6452 1 2025-08-17 22:11:14.922 00:05:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 22:15:50.276 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42582 10 6452 1 2025-08-17 22:16:50.680 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57076 10 6452 1 2025-08-17 22:17:51.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34028 10 6452 1 2025-08-17 22:18:51.517 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58056 10 6452 1 2025-08-17 22:15:14.926 00:05:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 22:19:37.325 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 22:19:37.110 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:19:37.063 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:19:37.292 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 22:19:37.146 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 22:19:51.877 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39136 10 6452 1 2025-08-17 22:20:52.253 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35148 10 6452 1 2025-08-17 22:17:14.925 00:05:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 22:21:52.622 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41776 10 6452 1 2025-08-17 22:22:53.030 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:44072 10 6452 1 2025-08-17 22:23:53.436 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:52798 10 6452 1 2025-08-17 22:24:37.391 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 22:24:37.234 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 22:24:37.257 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:24:37.307 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:24:37.238 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 22:24:53.812 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39084 10 6452 1 2025-08-17 22:21:14.926 00:05:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 22:25:54.221 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52202 10 6452 1 2025-08-17 22:26:54.625 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39590 10 6452 1 2025-08-17 22:23:14.924 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 22:27:54.986 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57828 10 6452 1 2025-08-17 22:28:55.397 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53712 10 6452 1 2025-08-17 22:29:37.352 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 22:29:37.075 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:29:37.426 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:29:37.360 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 22:29:37.509 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 22:29:55.802 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50308 10 6452 1 2025-08-17 22:30:56.208 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53640 10 6452 1 2025-08-17 22:27:14.928 00:05:00.405 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 22:31:56.613 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54616 10 6452 1 2025-08-17 22:32:57.029 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40602 10 6452 1 2025-08-17 22:29:14.924 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 22:33:57.433 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50390 10 6452 1 2025-08-17 22:34:37.701 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 22:34:37.591 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:34:37.709 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:34:37.699 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 22:34:37.793 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 22:34:57.807 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41006 10 6452 1 2025-08-17 22:35:58.213 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47958 10 6452 1 2025-08-17 22:36:58.572 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44046 10 6452 1 2025-08-17 22:33:14.930 00:05:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 22:37:58.976 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34996 10 6452 1 2025-08-17 22:38:59.386 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44048 10 6452 1 2025-08-17 22:35:14.928 00:05:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 22:39:37.662 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 22:39:37.578 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 22:39:37.592 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:39:37.580 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:39:37.640 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 22:39:59.790 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38802 10 6452 1 2025-08-17 22:41:00.183 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:34142 10 6452 1 2025-08-17 22:42:00.574 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39794 10 6452 1 2025-08-17 22:43:00.981 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51060 10 6452 1 2025-08-17 22:39:14.931 00:05:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 22:44:01.379 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58788 10 6452 1 2025-08-17 22:44:37.724 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:44:37.796 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:44:37.615 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 22:44:37.693 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 22:44:37.878 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 22:45:01.778 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47142 10 6452 1 2025-08-17 22:41:14.928 00:05:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 22:46:02.196 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57250 10 6452 1 2025-08-17 22:47:02.594 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58392 10 6452 1 2025-08-17 22:48:03.002 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:44580 10 6452 1 2025-08-17 22:49:03.399 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47988 10 6452 1 2025-08-17 22:45:14.932 00:05:00.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 22:49:37.927 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 22:49:37.785 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 22:49:37.731 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:49:37.844 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:49:37.791 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 22:50:03.805 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:54516 10 6452 1 2025-08-17 22:51:04.186 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34430 10 6452 1 2025-08-17 22:47:14.929 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 22:52:04.600 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37780 10 6452 1 2025-08-17 22:53:05.005 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40710 10 6452 1 2025-08-17 22:54:05.412 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47786 10 6452 1 2025-08-17 22:54:37.967 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 22:54:37.916 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:54:37.893 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 22:54:37.885 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 22:54:37.977 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 22:55:05.824 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44812 10 6452 1 2025-08-17 22:51:14.933 00:05:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 22:56:06.229 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:50776 12 10365 1 2025-08-17 22:53:14.931 00:05:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 22:57:06.722 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46642 10 6452 1 2025-08-17 22:58:07.138 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32876 10 6452 1 Summary: total flows: 140, total bytes: 420913, total packets: 1022, avg bps: 919, avg pps: 0, avg bpp: 411 Time window: 2025-08-17 21:57:14 - 2025-08-17 22:58:17 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0000s User: 0.0043s Wall: 0.0019s flows/second: 74235.5 Runtime: 0.0019s