Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 06:59:21.184 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39850 10 6452 1 2025-08-14 07:00:21.597 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38796 10 6452 1 2025-08-14 07:01:22.003 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60822 10 6452 1 2025-08-14 06:58:12.842 00:05:00.791 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 06:58:12.839 00:05:00.796 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 07:02:22.406 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58114 10 6452 1 2025-08-14 07:02:51.974 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:02:52.288 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:02:52.012 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:02:52.186 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:02:52.270 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:03:22.808 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59406 10 6452 1 2025-08-14 07:04:23.206 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48282 10 6452 1 2025-08-14 07:05:23.610 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52884 10 6452 1 2025-08-14 07:06:24.013 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36990 10 6452 1 2025-08-14 07:07:24.410 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43430 10 6452 1 2025-08-14 07:07:52.009 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:07:52.264 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:07:52.205 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:07:51.997 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:07:51.926 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:04:12.843 00:05:00.790 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 07:04:12.843 00:05:00.794 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 07:08:24.816 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48534 10 6452 1 2025-08-14 07:09:25.224 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56918 10 6452 1 2025-08-14 07:10:25.639 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42952 10 6452 1 2025-08-14 07:11:26.041 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38956 10 6452 1 2025-08-14 07:12:26.439 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48168 10 6452 1 2025-08-14 07:12:52.197 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:12:52.472 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:12:52.215 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:12:52.352 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:12:52.435 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:13:26.840 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:40894 10 6452 1 2025-08-14 07:10:12.844 00:05:00.791 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 07:10:12.841 00:05:00.796 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 07:14:27.267 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43530 10 6452 1 2025-08-14 07:15:27.632 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:48778 10 6452 1 2025-08-14 07:16:28.064 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55498 10 6452 1 2025-08-14 07:17:28.466 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35386 10 6452 1 2025-08-14 07:17:52.416 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:17:52.477 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:17:52.245 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:17:52.289 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:17:52.333 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:18:28.870 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40948 10 6452 1 2025-08-14 07:19:29.283 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39124 10 6452 1 2025-08-14 07:16:12.845 00:05:00.791 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 07:16:12.842 00:05:00.797 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 07:20:29.688 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34340 10 6452 1 2025-08-14 07:21:30.115 00:00:10.462 TCP 1.101.0.1:3000 -> 23.104.0.1:52694 10 6452 1 2025-08-14 07:22:30.614 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57090 10 6452 1 2025-08-14 07:22:52.758 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:22:52.559 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:22:52.558 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:22:52.309 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:22:52.676 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:23:31.016 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52528 10 6452 1 2025-08-14 07:24:31.389 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33052 10 6452 1 2025-08-14 07:25:31.760 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41616 10 6452 1 2025-08-14 07:22:12.844 00:05:00.798 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 07:22:12.847 00:05:00.793 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 07:26:32.180 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57548 10 6452 1 2025-08-14 07:27:32.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-08-14 07:27:52.970 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:27:52.880 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:27:52.927 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:27:52.609 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:27:52.889 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:28:32.993 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:53002 10 6452 1 2025-08-14 07:29:33.423 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47712 10 6452 1 2025-08-14 07:30:33.826 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60080 10 6452 1 2025-08-14 07:31:34.232 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54844 10 6452 1 2025-08-14 07:28:12.845 00:05:00.798 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 07:28:12.848 00:05:00.793 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 07:32:34.593 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33226 10 6452 1 2025-08-14 07:32:52.735 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:32:52.791 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:32:52.505 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:32:52.735 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:32:52.817 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:33:35.002 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60306 10 6452 1 2025-08-14 07:34:35.366 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:60476 10 6452 1 2025-08-14 07:35:35.735 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43548 10 6452 1 2025-08-14 07:36:36.143 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49126 10 6452 1 2025-08-14 07:37:36.543 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43522 10 6452 1 2025-08-14 07:37:52.746 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:37:52.828 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:37:52.673 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:37:52.825 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:37:52.910 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:34:12.848 00:05:00.794 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 07:34:12.846 00:05:00.798 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 07:38:36.946 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40878 10 6452 1 2025-08-14 07:39:37.354 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60460 12 6556 1 2025-08-14 07:40:37.762 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45750 10 6452 1 2025-08-14 07:41:38.183 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49086 10 6452 1 2025-08-14 07:42:38.588 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56772 10 6452 1 2025-08-14 07:42:53.244 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:42:52.826 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:42:52.667 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:42:53.045 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:42:53.128 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:43:38.988 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47422 10 6452 1 2025-08-14 07:40:12.847 00:05:00.799 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 07:40:12.849 00:05:00.794 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 07:44:39.350 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55332 10 6452 1 2025-08-14 07:45:39.711 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42920 10 6452 1 2025-08-14 07:46:40.117 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37286 10 6452 1 2025-08-14 07:47:53.376 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:47:53.064 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:47:53.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:47:52.940 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:47:53.293 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:47:40.476 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55088 10 6452 1 2025-08-14 07:48:40.880 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52856 10 6452 1 2025-08-14 07:49:41.245 00:00:10.587 TCP 1.101.0.1:3000 -> 23.104.0.1:34338 11 6504 1 2025-08-14 07:46:12.851 00:05:00.794 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 07:46:12.848 00:05:00.799 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 07:50:41.873 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46770 10 6452 1 2025-08-14 07:51:42.235 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:59808 10 6452 1 2025-08-14 07:52:53.133 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:52:42.675 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47048 10 6452 1 2025-08-14 07:52:52.905 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:52:53.156 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:52:53.183 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:52:53.267 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:53:43.134 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58274 10 6452 1 2025-08-14 07:54:43.543 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35332 10 6452 1 2025-08-14 07:55:43.939 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33410 10 6452 1 2025-08-14 07:52:12.853 00:05:00.795 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 07:52:12.852 00:05:00.800 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 07:56:44.358 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34188 10 6452 1 2025-08-14 07:57:53.279 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 07:57:53.404 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 07:57:53.517 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:57:53.188 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 07:57:53.402 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 07:57:44.767 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6452 1 Summary: total flows: 139, total bytes: 410704, total packets: 1013, avg bps: 917, avg pps: 0, avg bpp: 405 Time window: 2025-08-14 06:58:12 - 2025-08-14 07:57:55 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0043s User: 0.0007s Wall: 0.0027s flows/second: 52100.8 Runtime: 0.0027s