Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 23:59:15.272 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39224 10 6452 1 2025-08-03 00:00:15.671 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44188 10 6452 1 2025-08-03 00:01:16.105 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:42418 10 6452 1 2025-08-02 23:57:06.679 00:06:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 00:02:26.176 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:02:26.093 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:02:26.091 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:02:26.145 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:02:16.537 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41578 10 6452 1 2025-08-03 00:02:26.094 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 23:58:06.677 00:06:00.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 00:03:16.938 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:40224 10 6452 1 2025-08-03 00:04:17.325 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:40198 10 6452 1 2025-08-03 00:05:17.790 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54614 10 6452 1 2025-08-03 00:06:18.197 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58198 10 6452 1 2025-08-03 00:07:26.110 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:07:26.241 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:07:26.256 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:07:26.247 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:07:18.600 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:48648 10 6452 1 2025-08-03 00:07:26.328 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:08:19.027 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54448 10 6452 1 2025-08-03 00:04:06.684 00:06:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 00:09:19.432 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37056 10 6452 1 2025-08-03 00:05:06.681 00:06:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 00:10:19.843 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:45238 10 6452 1 2025-08-03 00:11:20.277 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38072 10 6452 1 2025-08-03 00:12:26.371 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:12:26.354 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:12:26.279 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:12:26.320 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:12:26.289 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:12:20.688 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42930 10 6452 1 2025-08-03 00:13:21.116 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47222 10 6452 1 2025-08-03 00:14:21.523 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35640 10 6452 1 2025-08-03 00:15:21.929 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50400 10 6452 1 2025-08-03 00:11:06.688 00:06:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 00:16:22.346 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43842 10 6452 1 2025-08-03 00:12:06.685 00:06:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 00:17:26.254 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:17:26.245 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:17:26.162 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:17:26.505 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:17:26.589 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:17:22.749 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44514 10 6452 1 2025-08-03 00:18:23.152 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:56826 10 6452 1 2025-08-03 00:19:23.615 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51916 10 6452 1 2025-08-03 00:20:23.976 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55710 10 6452 1 2025-08-03 00:21:24.388 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39564 10 6452 1 2025-08-03 00:22:26.516 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:22:26.572 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:22:26.548 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:22:26.437 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:22:26.519 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:22:24.788 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41362 10 6452 1 2025-08-03 00:18:06.688 00:06:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 00:23:25.193 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:34364 12 10367 1 2025-08-03 00:19:06.686 00:06:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 00:24:25.625 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33236 10 6452 1 2025-08-03 00:25:26.037 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52156 10 6452 1 2025-08-03 00:26:26.439 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47966 10 6452 1 2025-08-03 00:27:26.634 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:27:26.546 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:27:26.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:27:26.641 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:27:26.552 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:27:26.804 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33352 10 6452 1 2025-08-03 00:28:27.212 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:37944 12 10367 1 2025-08-03 00:29:27.697 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54254 10 6452 1 2025-08-03 00:25:06.690 00:06:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 00:30:28.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33074 10 6452 1 2025-08-03 00:26:06.687 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 00:31:28.517 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35784 10 6452 1 2025-08-03 00:32:26.893 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:32:26.714 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:32:26.467 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:32:26.393 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:32:26.810 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:32:28.916 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53060 10 6452 1 2025-08-03 00:33:29.280 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54054 10 6452 1 2025-08-03 00:34:29.692 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44016 10 6452 1 2025-08-03 00:35:30.104 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40666 10 6452 1 2025-08-03 00:36:30.523 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42758 10 6452 1 2025-08-03 00:32:06.691 00:06:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 00:37:26.795 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:37:26.725 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:37:26.743 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:37:26.788 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:37:26.872 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:37:30.929 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:54738 10 6452 1 2025-08-03 00:33:06.690 00:06:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 00:38:31.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57316 10 6452 1 2025-08-03 00:39:31.755 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43246 10 6452 1 2025-08-03 00:40:32.158 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52486 10 6452 1 2025-08-03 00:41:32.575 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51362 10 6452 1 2025-08-03 00:42:26.816 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:42:26.745 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:42:26.740 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:42:26.664 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:42:26.734 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:42:32.991 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34036 10 6452 1 2025-08-03 00:43:33.396 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43724 10 6452 1 2025-08-03 00:39:06.693 00:06:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 00:44:33.804 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48688 10 6452 1 2025-08-03 00:40:06.690 00:06:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 00:45:34.215 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40946 10 6452 1 2025-08-03 00:46:34.619 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60910 10 6452 1 2025-08-03 00:47:27.470 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:47:27.709 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:47:27.348 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:47:27.470 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:47:27.553 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:47:35.024 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40828 10 6452 1 2025-08-03 00:48:35.429 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44078 10 6452 1 2025-08-03 00:49:35.801 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51912 10 6452 1 2025-08-03 00:50:36.200 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58802 10 6452 1 2025-08-03 00:46:06.697 00:06:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 00:51:36.604 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55804 10 6452 1 2025-08-03 00:47:06.694 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 00:52:27.195 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:52:27.113 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:52:26.977 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:52:26.901 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:52:27.112 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:52:37.024 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41792 10 6452 1 2025-08-03 00:53:37.426 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:43090 12 10365 1 2025-08-03 00:54:37.909 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36478 10 6452 1 2025-08-03 00:55:38.309 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50720 10 6452 1 2025-08-03 00:56:38.720 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:51368 10 6452 1 2025-08-03 00:57:27.353 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 00:57:27.383 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 00:57:27.448 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 00:57:27.225 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:57:27.270 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 00:57:39.115 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33758 10 6452 1 2025-08-03 00:53:06.697 00:06:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 00:58:39.516 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35162 10 6452 1 Summary: total flows: 137, total bytes: 428620, total packets: 1024, avg bps: 921, avg pps: 0, avg bpp: 418 Time window: 2025-08-02 23:57:06 - 2025-08-03 00:59:06 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0022s User: 0.0022s Wall: 0.0020s flows/second: 68058.7 Runtime: 0.0020s