Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 09:59:35.413 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54768 10 6452 1 2025-08-02 09:55:06.381 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 10:00:35.829 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37798 10 6452 1 2025-08-02 09:56:06.384 00:06:00.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 10:01:36.234 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54038 10 6452 1 2025-08-02 10:02:09.934 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:02:09.704 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:02:09.433 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:02:09.851 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:02:09.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:02:36.632 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56428 10 6452 1 2025-08-02 10:03:37.047 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54120 10 6452 1 2025-08-02 10:04:37.455 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36422 10 6452 1 2025-08-02 10:05:37.818 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50560 10 6452 1 2025-08-02 10:06:38.219 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49492 10 6452 1 2025-08-02 10:07:09.182 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:07:09.293 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:07:09.189 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:07:09.275 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:02:06.389 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 10:07:09.272 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:07:38.579 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54232 10 6452 1 2025-08-02 10:03:06.391 00:06:00.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 10:08:38.982 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41842 10 6452 1 2025-08-02 10:09:39.392 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34314 10 6452 1 2025-08-02 10:10:39.814 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59298 10 6452 1 2025-08-02 10:11:40.236 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38550 10 6452 1 2025-08-02 10:12:09.758 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:12:09.533 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:12:09.677 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:12:09.689 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:12:09.759 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:12:40.636 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34026 10 6452 1 2025-08-02 10:13:40.996 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43330 10 6452 1 2025-08-02 10:09:06.390 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 10:14:41.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38192 10 6452 1 2025-08-02 10:10:06.392 00:06:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 10:15:41.769 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41416 10 6452 1 2025-08-02 10:16:42.183 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:59910 10 6452 1 2025-08-02 10:17:09.627 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:17:09.454 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:17:09.334 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:17:09.584 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:17:09.417 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:17:42.604 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43962 10 6452 1 2025-08-02 10:18:42.964 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:39132 13 13937 1 2025-08-02 10:19:43.450 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57248 10 6452 1 2025-08-02 10:20:43.817 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45816 10 6452 1 2025-08-02 10:16:06.393 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 10:21:44.224 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45096 10 6452 1 2025-08-02 10:22:09.565 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:22:09.535 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:22:09.481 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:22:09.482 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:17:06.398 00:06:00.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 10:22:09.564 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:22:44.627 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43982 10 6452 1 2025-08-02 10:23:44.993 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47526 10 6452 1 2025-08-02 10:24:45.401 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54732 10 6452 1 2025-08-02 10:25:45.809 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45772 10 6452 1 2025-08-02 10:26:46.224 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40722 10 6452 1 2025-08-02 10:27:09.700 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:27:09.649 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:27:09.769 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:27:09.693 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:27:09.851 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:27:46.625 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44392 10 6452 1 2025-08-02 10:23:06.395 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 10:28:47.031 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:53772 12 10367 1 2025-08-02 10:24:06.398 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 10:29:47.511 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39376 10 6452 1 2025-08-02 10:30:47.913 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53892 10 6452 1 2025-08-02 10:31:48.327 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53072 10 6452 1 2025-08-02 10:32:10.106 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:32:09.790 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:32:10.162 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:32:10.096 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:32:10.244 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:32:48.732 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53016 10 6452 1 2025-08-02 10:33:49.109 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50060 10 6452 1 2025-08-02 10:34:49.513 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34056 10 6452 1 2025-08-02 10:30:06.396 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 10:35:49.871 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51034 10 6452 1 2025-08-02 10:31:06.399 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 10:36:50.276 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56680 10 6452 1 2025-08-02 10:37:10.106 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:37:09.582 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:37:09.934 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:37:10.188 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:37:10.019 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:37:50.635 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:53214 10 6452 1 2025-08-02 10:38:50.992 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47074 10 6452 1 2025-08-02 10:39:51.407 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56710 10 6452 1 2025-08-02 10:40:51.815 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:49334 10 6452 1 2025-08-02 10:41:52.199 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:32888 10 6452 1 2025-08-02 10:42:10.137 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:42:10.063 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:42:09.942 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:42:10.027 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:37:06.397 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 10:42:10.027 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:42:52.572 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41854 10 6452 1 2025-08-02 10:38:06.401 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 10:43:53.006 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42724 10 6452 1 2025-08-02 10:44:53.406 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41922 10 6452 1 2025-08-02 10:45:53.813 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50652 10 6452 1 2025-08-02 10:47:10.470 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:46:54.186 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60938 10 6452 1 2025-08-02 10:47:10.324 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:47:10.330 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:47:10.388 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:47:10.386 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:47:54.588 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34382 10 6452 1 2025-08-02 10:48:54.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52534 10 6452 1 2025-08-02 10:44:06.400 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 10:49:55.401 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44266 10 6452 1 2025-08-02 10:45:06.402 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 10:50:55.800 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:55488 10 6452 1 2025-08-02 10:52:10.426 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:52:10.441 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:51:56.184 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57904 10 6452 1 2025-08-02 10:52:10.331 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:52:10.233 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:52:10.414 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:52:56.591 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:55590 10 6452 1 2025-08-02 10:53:56.951 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52126 10 6452 1 2025-08-02 10:54:57.357 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38172 10 6452 1 2025-08-02 10:55:57.769 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50472 10 6452 1 2025-08-02 10:51:06.401 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 10:57:10.390 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 10:57:10.194 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:56:58.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54686 10 6452 1 2025-08-02 10:57:10.313 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 10:57:10.306 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 10:52:06.404 00:06:00.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 10:57:10.395 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 10:57:58.588 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51360 10 6452 1 Summary: total flows: 137, total bytes: 422686, total packets: 1027, avg bps: 893, avg pps: 0, avg bpp: 411 Time window: 2025-08-02 09:55:06 - 2025-08-02 10:58:08 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0028s User: 0.0009s Wall: 0.0020s flows/second: 69718.5 Runtime: 0.0020s