Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-26 00:59:29.366 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:42308 10 6438 1 2025-07-26 00:55:02.528 00:06:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-26 01:00:29.765 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39744 10 6438 1 2025-07-26 01:01:30.202 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:59406 10 6438 1 2025-07-26 01:02:30.570 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57714 10 6438 1 2025-07-26 01:03:36.575 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:03:36.664 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:03:36.660 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:03:36.729 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:03:36.492 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:03:30.972 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48956 10 6438 1 2025-07-26 01:04:31.341 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32920 10 6438 1 2025-07-26 01:00:02.527 00:06:00.403 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-26 01:05:31.745 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37380 10 6438 1 2025-07-26 01:06:32.116 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51306 10 6438 1 2025-07-26 01:02:02.528 00:06:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-26 01:07:32.526 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45000 10 6438 1 2025-07-26 01:08:36.373 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:08:36.469 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:08:36.322 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:08:36.376 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:08:36.459 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:08:32.925 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:40842 10 6438 1 2025-07-26 01:09:33.357 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51070 10 6438 1 2025-07-26 01:10:33.715 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51652 10 6438 1 2025-07-26 01:11:34.118 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59394 10 6438 1 2025-07-26 01:07:02.530 00:06:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-26 01:12:34.512 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59894 10 6438 1 2025-07-26 01:13:36.369 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:13:36.608 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:13:36.503 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:13:36.494 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:13:36.576 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:13:34.917 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57184 10 6438 1 2025-07-26 01:09:02.535 00:06:00.395 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-26 01:14:35.320 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37704 10 6438 1 2025-07-26 01:15:35.725 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44576 10 6438 1 2025-07-26 01:16:36.134 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33880 10 6438 1 2025-07-26 01:17:36.535 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47010 10 6438 1 2025-07-26 01:18:36.620 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:18:36.610 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:18:36.366 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:18:36.538 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:18:36.606 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:18:36.945 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38886 10 6438 1 2025-07-26 01:14:02.533 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-26 01:19:37.316 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60446 10 6438 1 2025-07-26 01:20:37.730 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54756 10 6438 1 2025-07-26 01:16:02.538 00:06:00.395 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-26 01:21:38.131 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50858 10 6438 1 2025-07-26 01:22:38.539 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33644 10 6438 1 2025-07-26 01:23:36.894 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:23:37.010 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:23:36.592 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:23:36.950 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:23:37.039 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:23:38.941 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33112 10 6438 1 2025-07-26 01:24:39.351 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53192 10 6438 1 2025-07-26 01:25:39.721 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:59212 10 6438 1 2025-07-26 01:21:02.535 00:06:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-26 01:26:40.149 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55802 10 6438 1 2025-07-26 01:27:40.557 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57678 10 6438 1 2025-07-26 01:23:02.537 00:06:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-26 01:28:36.982 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:28:36.599 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:28:36.888 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:28:36.841 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:28:36.899 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:28:40.984 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:33174 13 13920 1 2025-07-26 01:29:41.463 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46900 10 6438 1 2025-07-26 01:30:41.879 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43176 10 6438 1 2025-07-26 01:31:42.283 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56508 10 6438 1 2025-07-26 01:32:42.690 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33566 10 6438 1 2025-07-26 01:28:02.535 00:06:00.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-26 01:33:37.081 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:33:37.006 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:33:36.951 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:33:36.762 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:33:36.998 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:33:43.111 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:44380 12 10352 1 2025-07-26 01:34:43.550 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53304 10 6438 1 2025-07-26 01:30:02.538 00:06:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-26 01:35:43.906 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35694 12 6542 1 2025-07-26 01:36:44.309 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44950 10 6438 1 2025-07-26 01:37:44.706 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35784 10 6438 1 2025-07-26 01:38:36.743 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:38:37.027 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:38:36.962 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:38:36.990 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:38:37.076 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:38:45.098 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49458 10 6438 1 2025-07-26 01:39:45.524 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40370 10 6438 1 2025-07-26 01:35:02.537 00:06:00.407 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-26 01:40:45.928 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:32948 10 6438 1 2025-07-26 01:41:46.303 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:39254 10 6438 1 2025-07-26 01:37:02.540 00:06:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-26 01:42:46.676 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:49792 10 6438 1 2025-07-26 01:43:36.971 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:43:37.252 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:43:36.784 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:43:37.250 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:43:37.332 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:43:47.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38348 10 6438 1 2025-07-26 01:44:47.515 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41526 10 6438 1 2025-07-26 01:45:47.917 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38786 10 6438 1 2025-07-26 01:46:48.310 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44856 10 6438 1 2025-07-26 01:42:02.540 00:06:00.406 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-26 01:47:48.708 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34444 10 6438 1 2025-07-26 01:48:37.659 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:48:37.591 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:48:36.996 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:48:37.659 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:48:37.742 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:48:49.096 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54018 10 6438 1 2025-07-26 01:44:02.543 00:06:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-26 01:49:49.504 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46660 10 6438 1 2025-07-26 01:50:49.904 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59606 10 6438 1 2025-07-26 01:51:50.314 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41914 10 6438 1 2025-07-26 01:52:50.719 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60274 10 6438 1 2025-07-26 01:53:37.328 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:53:37.243 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:53:37.320 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:53:37.247 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:53:37.330 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:49:02.540 00:06:00.409 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-26 01:53:51.124 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58964 10 6438 1 2025-07-26 01:54:51.482 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:51098 10 6438 1 2025-07-26 01:51:02.543 00:06:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-26 01:55:51.854 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:48586 10 6438 1 2025-07-26 01:56:52.283 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47874 10 6438 1 2025-07-26 01:57:52.701 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36236 10 6438 1 2025-07-26 01:58:37.561 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-26 01:58:37.518 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-26 01:58:37.343 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-26 01:58:37.159 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-26 01:58:37.478 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 136, total bytes: 421099, total packets: 1015, avg bps: 883, avg pps: 0, avg bpp: 414 Time window: 2025-07-26 00:55:02 - 2025-07-26 01:58:37 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0027s User: 0.0013s Wall: 0.0025s flows/second: 53566.1 Runtime: 0.0026s