Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-31 14:58:55.142 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34600 10 6452 1 2025-07-31 14:59:55.565 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55592 10 6452 1 2025-07-31 15:00:55.965 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54116 10 6452 1 2025-07-31 15:01:17.463 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:01:17.609 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:01:17.211 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:01:17.597 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:01:17.681 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:01:56.367 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60390 10 6452 1 2025-07-31 15:02:56.770 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34888 10 6452 1 2025-07-31 15:03:57.184 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46178 10 6452 1 2025-07-31 14:59:05.449 00:06:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 15:00:05.450 00:06:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 15:04:57.587 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51354 10 6452 1 2025-07-31 15:05:57.994 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51958 10 6452 1 2025-07-31 15:06:17.381 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:06:17.655 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:06:17.685 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:06:17.380 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:06:17.462 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:06:58.404 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54502 10 6452 1 2025-07-31 15:07:58.805 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40816 10 6452 1 2025-07-31 15:08:59.210 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52096 10 6452 1 2025-07-31 15:09:59.611 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53982 10 6452 1 2025-07-31 15:06:05.458 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 15:11:00.017 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33250 10 6452 1 2025-07-31 15:11:17.854 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:11:17.976 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:11:17.887 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:11:17.856 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:11:17.940 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:07:05.456 00:06:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 15:12:00.421 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60600 10 6452 1 2025-07-31 15:13:00.794 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58624 10 6452 1 2025-07-31 15:14:01.155 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55076 10 6452 1 2025-07-31 15:15:01.558 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37746 10 6452 1 2025-07-31 15:16:17.817 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:16:01.959 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57710 10 6452 1 2025-07-31 15:16:17.866 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:16:17.739 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:16:17.743 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:16:17.734 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:17:02.327 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33990 10 6452 1 2025-07-31 15:13:05.459 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 15:18:02.729 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44034 10 6452 1 2025-07-31 15:14:05.458 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 15:19:03.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57266 10 6452 1 2025-07-31 15:20:03.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47042 10 6452 1 2025-07-31 15:21:18.072 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:21:03.945 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47330 10 6452 1 2025-07-31 15:21:17.700 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:21:17.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:21:17.937 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:21:17.989 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:22:04.358 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36422 10 6452 1 2025-07-31 15:23:04.762 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41932 10 6452 1 2025-07-31 15:24:05.184 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:44310 10 6452 1 2025-07-31 15:20:05.460 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 15:25:05.619 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46694 10 6452 1 2025-07-31 15:21:05.458 00:06:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 15:26:17.918 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:26:17.978 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:26:17.838 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:26:06.023 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37502 10 6452 1 2025-07-31 15:26:17.973 00:00:00.053 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:26:18.056 00:00:00.056 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:27:06.424 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58532 10 6452 1 2025-07-31 15:28:06.828 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44554 10 6452 1 2025-07-31 15:29:07.230 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47104 10 6452 1 2025-07-31 15:30:07.644 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44756 10 6452 1 2025-07-31 15:31:18.180 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:31:18.087 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:31:18.098 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:31:17.778 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:31:08.061 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36934 10 6452 1 2025-07-31 15:31:18.097 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:27:05.467 00:06:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 15:32:08.463 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46612 10 6452 1 2025-07-31 15:28:05.463 00:06:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 15:33:08.871 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35684 10 6452 1 2025-07-31 15:34:09.279 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54036 10 6452 1 2025-07-31 15:35:09.679 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37360 10 6452 1 2025-07-31 15:36:18.270 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:36:18.454 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:36:18.421 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:36:17.986 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:36:18.189 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:36:10.103 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43124 10 6452 1 2025-07-31 15:37:10.500 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52496 10 6452 1 2025-07-31 15:38:10.906 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43132 12 6556 1 2025-07-31 15:34:05.469 00:06:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 15:39:11.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39742 10 6452 1 2025-07-31 15:35:05.466 00:06:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 15:40:11.720 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42632 10 6452 1 2025-07-31 15:41:18.298 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:41:18.356 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:41:18.361 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:41:18.241 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:41:18.323 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:41:12.103 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44930 10 6452 1 2025-07-31 15:42:12.513 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54498 10 6452 1 2025-07-31 15:43:12.878 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50744 10 6452 1 2025-07-31 15:44:13.234 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34940 10 6452 1 2025-07-31 15:45:13.643 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51708 10 6452 1 2025-07-31 15:41:05.472 00:06:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 15:46:18.555 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:46:18.573 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:46:18.393 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:46:18.337 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:46:18.473 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:46:14.055 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52658 10 6452 1 2025-07-31 15:42:05.480 00:06:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 15:47:14.458 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49062 10 6452 1 2025-07-31 15:48:14.860 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55666 10 6452 1 2025-07-31 15:49:15.268 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48322 10 6452 1 2025-07-31 15:50:15.681 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54644 10 6452 1 2025-07-31 15:51:18.616 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:51:18.631 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:51:18.527 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:51:18.481 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:51:18.564 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:51:16.103 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50312 10 6452 1 2025-07-31 15:52:16.502 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36198 10 6452 1 2025-07-31 15:48:05.484 00:06:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-31 15:53:16.907 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53738 10 6452 1 2025-07-31 15:49:05.481 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-31 15:54:17.309 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43850 10 6452 1 2025-07-31 15:55:17.729 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50654 10 6452 1 2025-07-31 15:56:18.633 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-31 15:56:18.547 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-31 15:56:18.548 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-31 15:56:18.578 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:56:18.548 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-31 15:56:18.132 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46478 10 6452 1 2025-07-31 15:57:18.486 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45244 10 6452 1 2025-07-31 15:58:18.846 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:43180 10 6452 1 Summary: total flows: 136, total bytes: 416120, total packets: 1006, avg bps: 931, avg pps: 0, avg bpp: 413 Time window: 2025-07-31 14:58:55 - 2025-07-31 15:58:29 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0021s User: 0.0021s Wall: 0.0025s flows/second: 53520.9 Runtime: 0.0026s