Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 04:59:34.786 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41416 10 6452 1 2025-08-02 05:00:35.181 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48368 10 6452 1 2025-08-02 04:56:06.275 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 05:01:35.543 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59392 10 6452 1 2025-08-02 05:02:03.489 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:02:03.283 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:02:03.294 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:02:02.933 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:02:03.408 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 04:57:06.271 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 05:02:35.953 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40276 10 6452 1 2025-08-02 05:03:36.363 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54486 10 6452 1 2025-08-02 05:04:36.788 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55126 10 6452 1 2025-08-02 05:05:37.208 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51398 10 6452 1 2025-08-02 05:06:37.616 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34700 10 6452 1 2025-08-02 05:07:03.695 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:07:03.697 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:07:03.401 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:07:03.835 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:07:03.919 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:07:38.039 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35256 10 6452 1 2025-08-02 05:03:06.274 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 05:08:38.447 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56492 10 6452 1 2025-08-02 05:04:06.272 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 05:09:38.847 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:36564 11 6504 1 2025-08-02 05:10:39.332 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50600 10 6452 1 2025-08-02 05:11:39.692 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46598 10 6452 1 2025-08-02 05:12:03.330 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:12:03.401 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:12:03.275 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:12:03.453 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:12:03.536 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:12:40.110 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51370 10 6452 1 2025-08-02 05:13:40.476 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53164 10 6452 1 2025-08-02 05:14:40.834 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38028 10 6452 1 2025-08-02 05:10:06.276 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 05:15:41.245 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60430 10 6452 1 2025-08-02 05:11:06.274 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 05:16:41.650 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42980 10 6452 1 2025-08-02 05:17:03.600 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:17:03.427 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:17:03.455 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:17:03.596 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:17:03.679 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:17:42.012 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58694 10 6452 1 2025-08-02 05:18:42.409 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36682 10 6452 1 2025-08-02 05:19:42.813 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52896 10 6452 1 2025-08-02 05:20:43.222 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44892 10 6452 1 2025-08-02 05:21:43.626 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46722 10 6452 1 2025-08-02 05:22:03.749 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:22:03.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:22:03.657 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:22:03.199 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:22:03.667 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:17:06.280 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 05:22:44.029 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42516 10 6452 1 2025-08-02 05:18:06.277 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 05:23:44.427 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53150 10 6452 1 2025-08-02 05:24:44.828 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40106 10 6452 1 2025-08-02 05:25:45.234 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49048 10 6452 1 2025-08-02 05:27:03.805 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:26:45.639 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46512 10 6452 1 2025-08-02 05:27:03.649 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:27:03.724 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:27:03.327 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:27:03.722 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:27:46.043 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58190 10 6452 1 2025-08-02 05:28:46.409 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:56742 10 6452 1 2025-08-02 05:24:06.281 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 05:29:46.837 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53850 10 6452 1 2025-08-02 05:25:06.280 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 05:30:47.261 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59804 10 6452 1 2025-08-02 05:31:47.666 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55254 10 6452 1 2025-08-02 05:32:03.807 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:32:03.822 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:32:03.895 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:32:04.082 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:32:04.165 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:32:48.094 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54702 10 6452 1 2025-08-02 05:33:48.492 00:00:10.514 TCP 1.101.0.1:3000 -> 23.104.0.1:38418 14 14280 1 2025-08-02 05:34:49.058 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35346 10 6452 1 2025-08-02 05:35:49.464 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57826 10 6452 1 2025-08-02 05:31:06.284 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 05:37:03.991 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:36:49.867 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60344 10 6452 1 2025-08-02 05:37:03.910 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:37:03.967 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:37:03.906 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:37:03.829 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:32:06.283 00:06:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 05:37:50.278 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51928 10 6452 1 2025-08-02 05:38:50.681 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59208 10 6452 1 2025-08-02 05:39:51.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59230 10 6452 1 2025-08-02 05:40:51.520 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57482 10 6452 1 2025-08-02 05:42:04.172 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:42:04.084 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:41:51.924 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33580 10 6452 1 2025-08-02 05:42:03.832 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:42:04.295 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:42:04.377 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:42:52.341 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36528 10 6452 1 2025-08-02 05:38:06.285 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 05:43:52.743 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39962 10 6452 1 2025-08-02 05:39:06.282 00:06:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 05:44:53.151 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45978 10 6452 1 2025-08-02 05:45:53.556 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:40160 10 6452 1 2025-08-02 05:47:04.197 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:47:04.281 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:47:04.225 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:46:53.910 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40974 10 6452 1 2025-08-02 05:47:03.986 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:47:04.115 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:47:54.312 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48238 10 6452 1 2025-08-02 05:48:54.712 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45472 11 6492 1 2025-08-02 05:45:06.287 00:06:00.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 05:49:55.125 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34356 10 6452 1 2025-08-02 05:46:06.285 00:06:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 05:50:55.534 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32798 10 6452 1 2025-08-02 05:52:04.283 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:52:04.283 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:52:04.274 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:52:04.194 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:52:04.278 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:51:55.934 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:45978 10 6452 1 2025-08-02 05:52:56.317 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59286 10 6452 1 2025-08-02 05:53:56.680 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:55062 12 10365 1 2025-08-02 05:54:57.120 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42334 10 6452 1 2025-08-02 05:55:57.521 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36630 10 6452 1 2025-08-02 05:57:04.370 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 05:57:04.213 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 05:57:04.152 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 05:57:04.176 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:57:04.287 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 05:56:57.927 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:41642 10 6452 1 2025-08-02 05:52:06.288 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 05:57:58.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47504 10 6452 1 2025-08-02 05:53:06.286 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 137, total bytes: 423119, total packets: 1030, avg bps: 895, avg pps: 0, avg bpp: 410 Time window: 2025-08-02 04:56:06 - 2025-08-02 05:59:06 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0017s User: 0.0026s Wall: 0.0028s flows/second: 48700.7 Runtime: 0.0028s