Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-19 18:58:45.716 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56882 10 6452 1 2025-08-19 18:59:46.136 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34606 10 6452 1 2025-08-19 18:56:15.923 00:05:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 19:00:30.962 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:00:30.709 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:00:30.792 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:00:31.122 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:00:30.988 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:00:46.501 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53050 10 6452 1 2025-08-19 19:01:46.905 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42370 10 6452 1 2025-08-19 19:02:47.315 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-08-19 18:59:15.927 00:05:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 19:03:47.713 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45206 10 6452 1 2025-08-19 19:04:48.120 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:38700 10 6452 1 2025-08-19 19:05:30.883 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:05:30.804 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:05:30.806 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:05:30.800 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:05:30.800 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:05:48.506 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40228 10 6452 1 2025-08-19 19:02:15.924 00:05:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 19:06:48.909 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37806 12 6556 1 2025-08-19 19:07:49.317 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44298 10 6452 1 2025-08-19 19:08:49.679 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 10 6452 1 2025-08-19 19:05:15.926 00:05:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 19:09:50.057 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50096 10 6452 1 2025-08-19 19:10:31.267 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:10:31.081 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:10:31.336 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:10:31.303 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:10:31.419 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:10:50.418 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37488 10 6452 1 2025-08-19 19:11:50.821 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39168 10 6452 1 2025-08-19 19:08:15.926 00:05:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 19:12:51.221 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48940 10 6452 1 2025-08-19 19:13:51.618 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43876 10 6452 1 2025-08-19 19:14:51.987 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35160 10 6452 1 2025-08-19 19:11:15.930 00:05:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 19:15:31.207 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:15:31.111 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:15:31.385 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:15:31.308 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:15:31.472 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:15:52.399 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51274 10 6452 1 2025-08-19 19:16:52.793 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43122 10 6452 1 2025-08-19 19:17:53.202 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34622 10 6452 1 2025-08-19 19:14:15.928 00:05:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 19:18:53.602 00:00:10.700 TCP 1.101.0.1:3000 -> 23.104.0.1:41022 10 6452 1 2025-08-19 19:19:54.341 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55008 10 6452 1 2025-08-19 19:20:31.231 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:20:31.258 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:20:31.403 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:20:31.217 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:20:31.485 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:20:54.745 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:56904 10 6452 1 2025-08-19 19:17:15.938 00:05:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 19:21:55.136 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52902 10 6452 1 2025-08-19 19:22:55.556 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58332 10 6452 1 2025-08-19 19:23:55.951 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:38636 10 6452 1 2025-08-19 19:20:15.935 00:05:00.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 19:24:56.386 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47258 10 6452 1 2025-08-19 19:25:31.676 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:25:31.914 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:25:31.493 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:25:31.594 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:25:31.509 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:25:56.790 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40158 10 6452 1 2025-08-19 19:26:57.196 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45212 10 6452 1 2025-08-19 19:23:15.938 00:05:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 19:27:57.595 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59900 10 6452 1 2025-08-19 19:28:57.958 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42564 10 6452 1 2025-08-19 19:29:58.363 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37134 10 6452 1 2025-08-19 19:26:15.936 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 19:30:31.687 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:30:31.541 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:30:31.478 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:30:31.606 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:30:31.662 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:30:58.766 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 12 10367 1 2025-08-19 19:31:59.251 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51422 10 6452 1 2025-08-19 19:32:59.663 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37876 10 6452 1 2025-08-19 19:29:15.939 00:05:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 19:34:00.101 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39840 10 6452 1 2025-08-19 19:35:00.460 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56240 10 6452 1 2025-08-19 19:35:31.607 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:35:31.446 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:35:31.760 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:35:31.728 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:35:31.842 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:36:00.861 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49626 10 6452 1 2025-08-19 19:32:15.938 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 19:37:01.274 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51046 10 6452 1 2025-08-19 19:38:01.680 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46502 10 6452 1 2025-08-19 19:39:02.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45502 10 6452 1 2025-08-19 19:35:15.940 00:05:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 19:40:02.520 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57190 10 6452 1 2025-08-19 19:40:31.763 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:40:31.440 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:40:31.765 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:40:31.768 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:40:31.848 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:41:02.883 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53242 10 6452 1 2025-08-19 19:42:03.286 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34704 10 6452 1 2025-08-19 19:38:15.938 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 19:43:03.691 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52180 10 6452 1 2025-08-19 19:44:04.113 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36530 10 6452 1 2025-08-19 19:45:04.474 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33442 10 6452 1 2025-08-19 19:41:15.943 00:05:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 19:45:31.766 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:45:31.792 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:45:31.663 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:45:31.952 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:45:31.746 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:46:04.874 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32818 10 6452 1 2025-08-19 19:47:05.285 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51948 10 6452 1 2025-08-19 19:48:05.699 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43280 10 6452 1 2025-08-19 19:44:15.941 00:05:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 19:49:06.113 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45692 10 6452 1 2025-08-19 19:50:06.534 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54004 10 6452 1 2025-08-19 19:50:32.176 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:50:32.105 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:50:32.157 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:50:32.094 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:50:32.108 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:47:15.945 00:05:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 19:51:06.938 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40574 10 6452 1 2025-08-19 19:52:07.364 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38004 10 6452 1 2025-08-19 19:53:07.728 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:34888 10 6452 1 2025-08-19 19:54:08.144 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52384 10 6452 1 2025-08-19 19:50:15.943 00:05:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-19 19:55:08.565 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:49426 11 6504 1 2025-08-19 19:55:32.166 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-19 19:55:32.130 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:55:31.922 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-19 19:55:32.003 00:00:00.050 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-19 19:55:32.006 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-19 19:56:09.019 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38838 10 6452 1 2025-08-19 19:57:09.421 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58586 10 6452 1 2025-08-19 19:53:15.946 00:05:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-19 19:58:09.786 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 Summary: total flows: 140, total bytes: 421071, total packets: 1025, avg bps: 904, avg pps: 0, avg bpp: 410 Time window: 2025-08-19 18:56:15 - 2025-08-19 19:58:20 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0031s User: 0.0010s Wall: 0.0025s flows/second: 56685.3 Runtime: 0.0025s