Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 12:59:27.508 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33048 10 6452 1 2025-08-04 13:00:27.870 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42956 10 6452 1 2025-08-04 13:01:28.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34116 10 6452 1 2025-08-04 13:02:28.683 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51888 10 6452 1 2025-08-04 12:58:07.517 00:06:00.013 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 13:03:10.717 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:03:10.562 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:03:10.561 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:03:10.519 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:03:10.801 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:03:29.113 00:00:17.725 TCP 1.101.0.1:3000 -> 23.104.0.1:57052 10 6452 1 2025-08-04 13:04:36.879 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49182 10 6452 1 2025-08-04 13:00:07.525 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 13:05:37.287 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34994 10 6452 1 2025-08-04 13:06:37.687 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38138 10 6452 1 2025-08-04 13:07:38.118 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33272 10 6452 1 2025-08-04 13:08:10.917 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:08:10.863 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:08:10.584 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:08:10.752 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:08:10.835 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:08:38.516 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:57736 12 10367 1 2025-08-04 13:09:38.995 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55870 10 6452 1 2025-08-04 13:05:07.520 00:06:00.012 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 13:10:39.355 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49172 10 6452 1 2025-08-04 13:11:39.759 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:54264 10 6452 1 2025-08-04 13:07:07.529 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 13:12:40.138 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44420 10 6452 1 2025-08-04 13:13:11.572 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:13:11.502 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:13:11.760 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:13:11.561 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:13:11.489 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:13:40.539 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42940 10 6452 1 2025-08-04 13:14:40.938 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39520 10 6452 1 2025-08-04 13:15:41.358 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39412 10 6452 1 2025-08-04 13:16:41.768 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58184 10 6452 1 2025-08-04 13:12:07.523 00:06:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 13:17:42.186 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45290 10 6452 1 2025-08-04 13:18:10.871 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:18:10.882 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:18:10.980 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:18:11.108 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:18:11.191 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:18:42.588 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36142 10 6452 1 2025-08-04 13:14:07.530 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-08-04 13:19:42.989 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56110 10 6452 1 2025-08-04 13:20:43.402 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47722 10 6452 1 2025-08-04 13:21:43.806 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51078 10 6452 1 2025-08-04 13:22:44.208 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35954 10 6452 1 2025-08-04 13:23:11.172 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:23:11.171 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:23:11.117 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:23:11.202 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:23:11.285 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:23:44.608 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48432 10 6452 1 2025-08-04 13:19:07.527 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 13:24:45.014 00:00:10.620 TCP 1.101.0.1:3000 -> 23.104.0.1:56524 10 6452 1 2025-08-04 13:25:45.671 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54228 10 6452 1 2025-08-04 13:21:07.531 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-08-04 13:26:46.032 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:36410 10 6452 1 2025-08-04 13:27:46.434 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59700 10 6452 1 2025-08-04 13:28:11.614 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:28:11.212 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:28:11.430 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:28:10.935 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:28:11.531 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:28:46.842 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33538 10 6452 1 2025-08-04 13:29:47.268 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40338 10 6452 1 2025-08-04 13:30:47.635 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52642 10 6452 1 2025-08-04 13:26:07.531 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 13:31:48.042 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59062 10 6452 1 2025-08-04 13:32:48.453 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52336 10 6452 1 2025-08-04 13:28:07.535 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 13:33:11.424 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:33:11.435 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:33:11.217 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:33:11.112 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:33:11.341 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:33:48.879 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41832 10 6452 1 2025-08-04 13:34:49.295 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47790 10 6452 1 2025-08-04 13:35:49.659 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47432 10 6452 1 2025-08-04 13:36:50.065 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59422 10 6452 1 2025-08-04 13:37:50.470 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:50616 10 6452 1 2025-08-04 13:33:07.533 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 13:38:11.494 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:38:11.456 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:38:11.127 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:38:11.406 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:38:11.412 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:38:50.827 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37800 10 6452 1 2025-08-04 13:39:51.226 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:55904 10 6452 1 2025-08-04 13:35:07.537 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-08-04 13:40:51.596 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55020 10 6452 1 2025-08-04 13:41:52.012 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49610 10 6452 1 2025-08-04 13:42:52.413 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34548 10 6452 1 2025-08-04 13:43:11.585 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:43:11.279 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:43:11.506 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:43:11.048 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:43:11.505 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:43:52.818 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32774 10 6452 1 2025-08-04 13:44:53.230 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36318 10 6452 1 2025-08-04 13:40:07.534 00:06:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 13:45:53.632 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60418 10 6452 1 2025-08-04 13:46:54.035 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40208 10 6452 1 2025-08-04 13:42:07.540 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 13:47:54.396 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56314 10 6452 1 2025-08-04 13:48:13.449 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:48:13.361 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:48:13.371 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:48:13.122 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:48:13.367 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:48:54.809 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53130 10 6452 1 2025-08-04 13:49:55.218 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43120 10 6452 1 2025-08-04 13:50:55.578 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:58826 10 6452 1 2025-08-04 13:51:55.934 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:42498 10 6452 1 2025-08-04 13:47:07.534 00:06:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 13:53:11.746 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:52:56.367 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37892 10 6452 1 2025-08-04 13:53:11.705 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:53:11.665 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:53:11.758 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:53:11.664 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:49:07.542 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 13:53:56.798 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60306 10 6452 1 2025-08-04 13:54:57.199 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36434 10 6452 1 2025-08-04 13:55:57.567 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49314 10 6452 1 2025-08-04 13:56:57.938 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51500 10 6452 1 2025-08-04 13:58:11.938 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 13:57:58.361 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44836 10 6452 1 2025-08-04 13:58:11.861 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 13:58:11.805 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 13:58:11.923 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 13:58:11.856 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 135, total bytes: 410879, total packets: 946, avg bps: 911, avg pps: 0, avg bpp: 434 Time window: 2025-08-04 12:58:07 - 2025-08-04 13:58:11 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0022s User: 0.0022s Wall: 0.0023s flows/second: 59710.1 Runtime: 0.0023s