Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 21:59:26.780 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48594 10 6452 1 2025-08-02 22:00:27.190 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46302 10 6452 1 2025-08-02 22:01:27.590 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56904 10 6452 1 2025-08-02 22:02:23.853 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:02:23.850 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:02:23.775 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:02:23.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:02:23.696 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:02:27.995 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56314 10 6452 1 2025-08-02 21:58:06.632 00:06:00.158 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 22:03:28.358 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34152 10 6452 1 2025-08-02 21:59:06.629 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 22:04:28.763 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:38340 10 6452 1 2025-08-02 22:05:29.188 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47700 10 6452 1 2025-08-02 22:06:29.608 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47638 10 6452 1 2025-08-02 22:07:23.814 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:07:23.744 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:07:23.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:07:23.736 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:07:23.820 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:07:30.010 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 10 6452 1 2025-08-02 22:08:30.376 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:60344 12 10367 1 2025-08-02 22:09:30.858 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:34728 10 6452 1 2025-08-02 22:05:06.635 00:06:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 22:10:31.278 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60864 10 6452 1 2025-08-02 22:06:06.633 00:06:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 22:11:31.683 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48916 10 6452 1 2025-08-02 22:12:23.704 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:12:23.744 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:12:23.964 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:12:23.692 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:12:23.621 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:12:32.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48946 10 6452 1 2025-08-02 22:13:32.522 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50882 10 6452 1 2025-08-02 22:14:32.889 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39478 10 6452 1 2025-08-02 22:15:33.303 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46968 10 6452 1 2025-08-02 22:16:33.704 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58102 10 6452 1 2025-08-02 22:12:06.636 00:06:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 22:17:23.719 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:17:23.846 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:17:23.742 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:17:23.590 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:17:23.638 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:17:34.114 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:34890 10 6452 1 2025-08-02 22:13:06.633 00:06:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 22:18:34.487 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56408 10 6452 1 2025-08-02 22:19:34.904 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:59398 10 6452 1 2025-08-02 22:20:35.293 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39418 10 6452 1 2025-08-02 22:21:35.705 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35372 10 6452 1 2025-08-02 22:22:24.147 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:22:24.326 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:22:23.943 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:22:24.293 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:22:24.375 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:22:36.121 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44232 10 6452 1 2025-08-02 22:23:36.530 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56032 10 6452 1 2025-08-02 22:19:06.638 00:06:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 22:24:36.934 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:54770 10 6452 1 2025-08-02 22:20:06.635 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 22:25:37.359 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40892 10 6452 1 2025-08-02 22:26:37.762 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:40110 10 6452 1 2025-08-02 22:27:24.271 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:27:24.221 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:27:23.895 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:27:24.109 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:27:24.194 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:27:38.212 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38292 10 6452 1 2025-08-02 22:28:38.610 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52006 10 6452 1 2025-08-02 22:29:38.974 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:55388 10 6452 1 2025-08-02 22:30:39.395 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54404 10 6452 1 2025-08-02 22:26:06.638 00:06:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 22:31:39.793 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38600 10 6452 1 2025-08-02 22:27:06.636 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 22:32:24.176 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:32:24.341 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:32:24.104 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:32:24.178 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:32:24.260 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:32:40.200 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38074 10 6452 1 2025-08-02 22:33:40.604 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58008 10 6452 1 2025-08-02 22:34:41.016 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34320 10 6452 1 2025-08-02 22:35:41.436 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41972 10 6452 1 2025-08-02 22:36:41.844 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:57692 10 6452 1 2025-08-02 22:37:24.487 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:37:24.134 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:37:24.133 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:37:24.477 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:37:24.561 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:37:42.269 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43436 10 6452 1 2025-08-02 22:33:06.640 00:06:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 22:38:42.639 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59222 10 6452 1 2025-08-02 22:34:06.637 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 22:39:43.042 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33632 10 6452 1 2025-08-02 22:40:43.446 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60968 10 6452 1 2025-08-02 22:41:43.847 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:48822 10 6452 1 2025-08-02 22:42:24.440 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:42:24.732 00:00:00.020 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:42:24.647 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:42:24.539 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:42:24.623 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:42:44.290 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42768 10 6452 1 2025-08-02 22:43:44.659 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54968 10 6452 1 2025-08-02 22:44:45.088 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43788 10 6452 1 2025-08-02 22:40:06.640 00:06:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 22:45:45.493 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60460 10 6452 1 2025-08-02 22:41:06.637 00:06:00.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 22:46:45.904 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48576 10 6452 1 2025-08-02 22:47:24.666 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:47:24.580 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:47:24.580 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:47:24.477 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:47:24.584 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:47:46.311 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48816 10 6452 1 2025-08-02 22:48:46.712 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33810 10 6452 1 2025-08-02 22:49:47.134 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39830 10 6452 1 2025-08-02 22:50:47.535 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55560 10 6452 1 2025-08-02 22:51:47.952 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36602 10 6452 1 2025-08-02 22:47:06.642 00:06:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 22:52:24.530 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:52:24.699 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:52:24.636 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:52:24.702 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:52:24.785 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:52:48.379 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54912 10 6452 1 2025-08-02 22:48:06.640 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 22:53:48.761 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:59928 10 6452 1 2025-08-02 22:54:49.193 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38484 10 6452 1 2025-08-02 22:55:49.594 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52482 10 6452 1 2025-08-02 22:56:50.003 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44076 10 6452 1 2025-08-02 22:57:25.630 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 22:57:24.912 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 22:57:24.922 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 22:57:24.930 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:57:25.547 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 22:57:50.404 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38314 10 6452 1 Summary: total flows: 135, total bytes: 413479, total packets: 996, avg bps: 920, avg pps: 0, avg bpp: 415 Time window: 2025-08-02 21:58:06 - 2025-08-02 22:58:00 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0026s User: 0.0017s Wall: 0.0024s flows/second: 57276.1 Runtime: 0.0024s