Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-05 02:59:25.679 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51236 10 6452 1 2025-08-05 03:00:26.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58534 10 6452 1 2025-08-05 03:01:26.533 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49400 10 6452 1 2025-08-05 03:02:26.891 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-08-05 02:58:07.776 00:06:00.069 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 03:03:27.612 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:03:27.560 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:03:27.287 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:03:27.501 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:03:27.584 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:03:27.318 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54490 10 6452 1 2025-08-05 03:04:27.720 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46824 10 6452 1 2025-08-05 03:00:07.776 00:06:00.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 03:05:28.136 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47730 10 6452 1 2025-08-05 03:06:28.548 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57224 10 6452 1 2025-08-05 03:07:28.951 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47786 10 6452 1 2025-08-05 03:08:27.794 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:08:27.651 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:08:27.675 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:08:27.660 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:08:27.743 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:08:29.362 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54736 10 6452 1 2025-08-05 03:09:29.723 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54306 10 6452 1 2025-08-05 03:05:07.777 00:06:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 03:10:30.131 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45076 10 6452 1 2025-08-05 03:11:30.533 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46216 10 6452 1 2025-08-05 03:07:07.776 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 03:12:30.938 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:54254 10 6452 1 2025-08-05 03:13:27.857 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:13:27.816 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:13:27.652 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:13:27.688 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:13:27.772 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:13:31.364 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49690 10 6452 1 2025-08-05 03:14:31.771 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41394 10 6452 1 2025-08-05 03:15:32.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57286 10 6452 1 2025-08-05 03:16:32.588 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49418 10 6452 1 2025-08-05 03:12:07.780 00:06:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 03:17:32.986 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59292 10 6452 1 2025-08-05 03:18:27.911 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:18:27.740 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:18:27.837 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:18:27.758 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:18:27.829 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:18:33.395 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54612 10 6452 1 2025-08-05 03:14:07.779 00:06:00.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 03:19:33.808 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:59602 10 6452 1 2025-08-05 03:20:34.177 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58640 10 6452 1 2025-08-05 03:21:34.597 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56724 10 6452 1 2025-08-05 03:22:35.001 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36866 10 6452 1 2025-08-05 03:23:27.963 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:23:28.175 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:23:27.954 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:23:27.825 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:23:27.882 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:23:35.359 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44170 10 6452 1 2025-08-05 03:19:07.779 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 03:24:35.758 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54042 12 6556 1 2025-08-05 03:25:36.170 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60788 10 6452 1 2025-08-05 03:21:07.778 00:06:00.074 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 03:26:36.570 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54826 10 6452 1 2025-08-05 03:27:36.937 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:50640 10 6452 1 2025-08-05 03:28:28.114 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:28:27.974 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:28:27.740 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:28:28.030 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:28:27.980 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:28:37.360 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44210 10 6452 1 2025-08-05 03:29:37.761 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35702 10 6452 1 2025-08-05 03:30:38.178 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38316 10 6452 1 2025-08-05 03:26:07.781 00:06:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 03:31:38.583 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48374 10 6452 1 2025-08-05 03:32:39.003 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52898 10 6452 1 2025-08-05 03:28:07.779 00:06:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 03:33:28.049 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:33:28.210 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:33:28.262 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:33:27.927 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:33:27.966 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:33:39.407 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38148 10 6452 1 2025-08-05 03:34:39.810 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51742 10 6452 1 2025-08-05 03:35:40.212 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35244 10 6452 1 2025-08-05 03:36:40.575 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54716 10 6452 1 2025-08-05 03:37:40.981 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48670 10 6452 1 2025-08-05 03:33:07.783 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 03:38:28.209 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:38:28.127 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:38:28.223 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:38:28.125 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:38:28.182 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:38:41.384 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:41610 12 10367 1 2025-08-05 03:39:41.865 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51808 10 6452 1 2025-08-05 03:35:07.781 00:06:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 03:40:42.267 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41240 10 6452 1 2025-08-05 03:41:42.686 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52682 10 6452 1 2025-08-05 03:42:43.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44236 10 6452 1 2025-08-05 03:43:28.343 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:43:28.269 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:43:28.052 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:43:28.145 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:43:28.262 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:43:43.513 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50120 10 6452 1 2025-08-05 03:44:43.916 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:55334 10 6452 1 2025-08-05 03:40:07.787 00:06:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 03:45:44.311 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34868 10 6452 1 2025-08-05 03:46:44.724 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37946 10 6452 1 2025-08-05 03:42:07.784 00:06:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 03:47:45.140 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55872 10 6452 1 2025-08-05 03:48:28.533 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:48:28.349 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:48:28.239 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:48:28.425 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:48:28.450 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:48:45.551 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60462 10 6452 1 2025-08-05 03:49:45.952 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46752 10 6452 1 2025-08-05 03:50:46.312 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50336 10 6452 1 2025-08-05 03:51:46.715 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52608 10 6452 1 2025-08-05 03:47:07.790 00:06:00.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 03:52:47.141 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47302 10 6452 1 2025-08-05 03:53:28.310 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:53:28.353 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:53:28.337 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:53:28.287 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:53:28.228 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:53:47.544 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:56012 12 10365 1 2025-08-05 03:49:07.788 00:06:00.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 03:54:48.027 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33040 10 6452 1 2025-08-05 03:55:48.431 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44876 10 6452 1 2025-08-05 03:56:48.794 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36170 10 6452 1 2025-08-05 03:57:49.196 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52424 10 6452 1 2025-08-05 03:58:28.731 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 03:58:28.702 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 03:58:28.564 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 03:58:28.596 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 03:58:28.642 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 135, total bytes: 417496, total packets: 1000, avg bps: 922, avg pps: 0, avg bpp: 417 Time window: 2025-08-05 02:58:07 - 2025-08-05 03:58:28 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0022s User: 0.0011s Wall: 0.0014s flows/second: 96841.3 Runtime: 0.0014s