Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-31 01:58:40.982 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53088 10 6452 1 2025-07-31 01:59:41.384 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59820 10 6452 1 2025-07-31 01:55:05.194 00:06:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 02:00:41.779 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52258 10 6452 1 2025-07-31 02:01:01.802 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:01:01.809 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:01:01.901 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:01:01.896 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:01:01.884 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 01:56:05.192 00:06:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 02:01:42.185 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60618 10 6452 1 2025-07-31 02:02:42.586 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37052 10 6452 1 2025-07-31 02:03:42.993 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51286 10 6452 1 2025-07-31 02:04:43.411 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55590 10 6452 1 2025-07-31 02:05:43.817 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46360 10 6452 1 2025-07-31 02:06:01.928 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:06:01.977 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:06:01.767 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:06:01.851 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:06:01.935 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 02:06:44.220 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53340 10 6452 1 2025-07-31 02:02:05.198 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 02:07:44.625 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52708 10 6452 1 2025-07-31 02:03:05.196 00:06:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 02:08:45.028 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60468 10 6452 1 2025-07-31 02:09:45.435 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45246 10 6452 1 2025-07-31 02:10:45.842 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:43370 10 6452 1 2025-07-31 02:11:01.744 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:11:02.158 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:11:01.906 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:11:01.962 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:11:02.045 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 02:11:46.267 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46908 10 6452 1 2025-07-31 02:12:46.687 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40910 10 6452 1 2025-07-31 02:13:47.115 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48122 10 6452 1 2025-07-31 02:09:05.207 00:06:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 02:14:47.479 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59796 10 6452 1 2025-07-31 02:10:05.203 00:06:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 02:15:47.885 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58236 10 6452 1 2025-07-31 02:16:01.925 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:16:02.191 00:00:00.018 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:16:02.104 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:16:02.055 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:16:02.138 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 02:16:48.288 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37070 10 6452 1 2025-07-31 02:17:48.693 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41974 10 6452 1 2025-07-31 02:18:49.065 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45456 10 6452 1 2025-07-31 02:19:49.471 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43548 10 6452 1 2025-07-31 02:21:02.080 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:21:02.088 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:21:01.882 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:20:49.871 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38824 10 6452 1 2025-07-31 02:21:02.289 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:21:02.372 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 02:16:05.208 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 02:21:50.275 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48628 10 6452 1 2025-07-31 02:17:05.206 00:06:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 02:22:50.690 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43474 10 6452 1 2025-07-31 02:23:51.071 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34814 12 6556 1 2025-07-31 02:24:51.476 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45752 10 6452 1 2025-07-31 02:26:02.580 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 02:26:02.646 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:26:02.584 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:26:02.478 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:26:02.499 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:25:51.879 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34514 10 6452 1 2025-07-31 02:26:52.285 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34314 10 6452 1 2025-07-31 02:27:52.683 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38260 10 6452 1 2025-07-31 02:23:05.210 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 02:28:53.110 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:37264 12 10365 1 2025-07-31 02:24:05.208 00:06:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 02:29:53.586 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52502 10 6452 1 2025-07-31 02:31:02.591 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 02:31:02.554 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:31:02.301 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:31:02.167 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:30:53.953 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58360 10 6452 1 2025-07-31 02:31:02.510 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:31:54.374 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42260 10 6452 1 2025-07-31 02:32:54.775 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48242 10 6452 1 2025-07-31 02:33:55.180 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48756 10 6452 1 2025-07-31 02:30:05.211 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 02:34:55.587 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35854 10 6452 1 2025-07-31 02:36:02.409 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:36:02.568 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:36:02.546 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:36:02.413 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:36:02.497 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 02:35:55.995 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43630 10 6452 1 2025-07-31 02:31:05.210 00:06:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 02:36:56.412 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45976 10 6452 1 2025-07-31 02:37:56.818 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38898 10 6452 1 2025-07-31 02:38:57.227 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34744 10 6452 1 2025-07-31 02:39:57.627 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34080 10 6452 1 2025-07-31 02:41:02.951 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:41:02.625 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:41:02.342 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:41:02.801 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:41:02.884 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 02:40:58.035 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36878 10 6452 1 2025-07-31 02:37:05.214 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 02:41:58.394 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34068 10 6452 1 2025-07-31 02:38:05.210 00:06:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 02:42:58.795 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43780 10 6452 1 2025-07-31 02:43:59.207 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40332 10 6452 1 2025-07-31 02:44:59.608 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55430 10 6452 1 2025-07-31 02:46:02.810 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:46:02.797 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:46:02.358 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:46:02.734 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:46:02.818 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 02:46:00.018 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58842 10 6452 1 2025-07-31 02:47:00.417 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35110 10 6452 1 2025-07-31 02:48:00.828 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44352 10 6452 1 2025-07-31 02:44:05.214 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 02:49:01.268 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48622 10 6452 1 2025-07-31 02:45:05.212 00:06:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 02:50:01.628 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35268 10 6452 1 2025-07-31 02:51:02.935 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:51:02.824 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:51:02.853 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:51:02.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:51:02.916 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 02:51:01.990 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55650 10 6452 1 2025-07-31 02:52:02.399 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52972 10 6452 1 2025-07-31 02:53:02.798 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34512 10 6452 1 2025-07-31 02:54:03.213 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47450 10 6452 1 2025-07-31 02:55:03.582 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57848 10 6452 1 2025-07-31 02:56:02.856 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 02:56:02.942 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 02:56:02.968 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:56:02.943 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 02:56:03.026 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 02:51:05.216 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 02:56:03.945 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6452 1 2025-07-31 02:52:05.213 00:06:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 02:57:04.361 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44926 10 6452 1 2025-07-31 02:58:04.768 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53516 10 6452 1 Summary: total flows: 138, total bytes: 421755, total packets: 1036, avg bps: 890, avg pps: 0, avg bpp: 407 Time window: 2025-07-31 01:55:05 - 2025-07-31 02:58:15 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0030s User: 0.0015s Wall: 0.0022s flows/second: 63216.9 Runtime: 0.0022s