Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-19 10:59:19.550 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51216 10 6452 1 2025-08-19 10:56:15.735 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 11:00:21.399 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:00:21.199 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:00:21.283 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:00:21.350 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:00:21.365 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:00:19.959 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56002 10 6452 1 2025-08-19 11:01:20.366 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33368 10 6452 1 2025-08-19 11:02:20.729 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51950 10 6452 1 2025-08-19 10:59:15.739 00:05:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 11:03:21.112 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49004 10 6452 1 2025-08-19 11:04:21.520 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51764 10 6452 1 2025-08-19 11:05:21.484 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:05:21.403 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:05:21.160 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:05:21.401 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:05:21.511 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:05:21.926 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:56970 10 6452 1 2025-08-19 11:02:15.736 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 11:06:22.357 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57870 10 6452 1 2025-08-19 11:07:22.764 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49636 10 6452 1 2025-08-19 11:08:23.134 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59422 10 6452 1 2025-08-19 11:05:15.740 00:05:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 11:09:23.495 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51128 10 6452 1 2025-08-19 11:10:21.684 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:10:21.360 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:10:21.513 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:10:21.513 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:10:21.595 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:10:23.901 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55134 10 6452 1 2025-08-19 11:11:24.273 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49052 10 6452 1 2025-08-19 11:08:15.738 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 11:12:24.682 00:00:10.553 TCP 1.101.0.1:3000 -> 23.104.0.1:36582 10 6452 1 2025-08-19 11:13:25.275 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39452 10 6452 1 2025-08-19 11:14:25.682 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33782 10 6452 1 2025-08-19 11:11:15.740 00:05:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 11:15:21.616 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:15:21.635 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:15:21.605 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:15:21.685 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:15:21.688 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:15:26.112 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43158 10 6452 1 2025-08-19 11:16:26.512 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53496 10 6452 1 2025-08-19 11:17:26.917 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54426 10 6452 1 2025-08-19 11:14:15.740 00:05:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 11:18:27.316 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50572 10 6452 1 2025-08-19 11:19:27.721 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56558 10 6452 1 2025-08-19 11:20:22.047 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:20:21.907 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:20:21.824 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:20:21.964 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:20:21.797 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:20:28.117 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40312 10 6452 1 2025-08-19 11:17:15.743 00:05:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 11:21:28.530 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59616 10 6452 1 2025-08-19 11:22:28.936 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:51776 10 6452 1 2025-08-19 11:23:29.359 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55548 10 6452 1 2025-08-19 11:20:15.742 00:05:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 11:24:29.723 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51866 10 6452 1 2025-08-19 11:25:21.842 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:25:21.788 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:25:21.745 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:25:22.096 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:25:21.827 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:25:30.141 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42172 10 6452 1 2025-08-19 11:26:30.548 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44644 10 6452 1 2025-08-19 11:23:15.746 00:05:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 11:27:30.971 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60448 10 6452 1 2025-08-19 11:28:31.386 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57414 10 6452 1 2025-08-19 11:29:31.789 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59306 10 6452 1 2025-08-19 11:26:15.742 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 11:30:21.964 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:30:21.916 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:30:21.695 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:30:21.695 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:30:21.777 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:30:32.199 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46350 10 6452 1 2025-08-19 11:31:32.606 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57304 10 6452 1 2025-08-19 11:32:33.017 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45810 10 6452 1 2025-08-19 11:29:15.745 00:05:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 11:33:33.421 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54872 10 6452 1 2025-08-19 11:34:33.780 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35402 10 6452 1 2025-08-19 11:35:22.062 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:35:21.870 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:35:22.167 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:35:21.946 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:35:22.249 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:35:34.186 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43226 10 6452 1 2025-08-19 11:32:15.744 00:05:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 11:36:34.596 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40050 10 6452 1 2025-08-19 11:37:35.015 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44196 10 6452 1 2025-08-19 11:38:35.421 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56586 10 6452 1 2025-08-19 11:35:15.749 00:05:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 11:39:35.827 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52598 10 6452 1 2025-08-19 11:40:22.228 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:40:21.887 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:40:22.105 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:40:22.177 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:40:22.188 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:40:36.190 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38786 10 6452 1 2025-08-19 11:41:36.591 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58858 10 6452 1 2025-08-19 11:38:15.747 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 11:42:36.992 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38562 10 6452 1 2025-08-19 11:43:37.360 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45648 10 6452 1 2025-08-19 11:44:37.726 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53488 10 6452 1 2025-08-19 11:41:15.749 00:05:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 11:45:22.261 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:45:22.397 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:45:22.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:45:22.484 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:45:22.347 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:45:38.140 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59146 10 6452 1 2025-08-19 11:46:38.502 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33308 10 6452 1 2025-08-19 11:47:38.904 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35856 10 6452 1 2025-08-19 11:44:15.748 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 11:48:39.314 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47588 10 6452 1 2025-08-19 11:49:39.723 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37026 10 6452 1 2025-08-19 11:50:22.401 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:50:22.326 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:50:22.537 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:50:22.537 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:50:22.619 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:50:40.131 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54142 10 6452 1 2025-08-19 11:47:15.750 00:05:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 11:51:40.533 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36188 10 6452 1 2025-08-19 11:52:40.947 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53008 10 6452 1 2025-08-19 11:53:41.355 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35414 10 6452 1 2025-08-19 11:50:15.748 00:05:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 11:54:41.762 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56360 10 6452 1 2025-08-19 11:55:22.354 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 11:55:22.139 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:55:22.494 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 11:55:22.367 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 11:55:22.578 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 11:55:42.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54188 10 6452 1 2025-08-19 11:56:42.595 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:32810 10 6452 1 2025-08-19 11:53:15.751 00:05:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 11:57:42.965 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55128 10 6452 1 Summary: total flows: 139, total bytes: 410548, total packets: 1010, avg bps: 882, avg pps: 0, avg bpp: 406 Time window: 2025-08-19 10:56:15 - 2025-08-19 11:58:16 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0010s Wall: 0.0019s flows/second: 72127.7 Runtime: 0.0019s