Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 14:59:18.577 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:39900 10 6452 1 2025-08-03 15:00:18.975 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55022 10 6452 1 2025-08-03 15:01:19.393 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44440 10 6452 1 2025-08-03 14:57:07.046 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 15:02:19.796 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60666 10 6452 1 2025-08-03 15:02:44.593 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:02:44.343 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:02:44.212 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:02:44.510 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:02:44.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:03:20.199 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57938 10 6452 1 2025-08-03 14:59:07.045 00:06:00.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 15:04:20.601 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53878 10 6452 1 2025-08-03 15:05:21.006 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55412 10 6452 1 2025-08-03 15:06:21.412 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42100 10 6452 1 2025-08-03 15:07:21.823 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55490 10 6452 1 2025-08-03 15:07:44.392 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:07:44.315 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:07:44.259 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:07:44.311 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:07:44.314 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:08:22.227 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57726 10 6452 1 2025-08-03 15:04:07.049 00:06:00.071 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 15:09:22.630 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33082 10 6452 1 2025-08-03 15:10:23.037 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44862 10 6452 1 2025-08-03 15:06:07.051 00:06:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 15:11:23.440 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41094 10 6452 1 2025-08-03 15:12:23.844 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:51900 10 6452 1 2025-08-03 15:12:44.636 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:12:44.629 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:12:44.626 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:12:44.481 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:12:44.719 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:13:24.219 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59780 10 6452 1 2025-08-03 15:14:24.582 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33426 10 6452 1 2025-08-03 15:15:24.977 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46904 10 6452 1 2025-08-03 15:11:07.055 00:06:00.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 15:16:25.382 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53412 10 6452 1 2025-08-03 15:17:25.794 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60020 10 6452 1 2025-08-03 15:17:44.372 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:17:44.311 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:17:44.372 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:17:44.454 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:17:44.454 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:13:07.054 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 15:18:26.202 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-08-03 15:19:26.605 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34754 10 6452 1 2025-08-03 15:20:27.008 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50894 10 6452 1 2025-08-03 15:21:27.374 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46614 10 6452 1 2025-08-03 15:22:27.777 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51588 10 6452 1 2025-08-03 15:22:44.670 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:22:44.642 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:22:44.570 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:22:44.561 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:22:44.652 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:18:07.057 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 15:23:28.205 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43640 10 6452 1 2025-08-03 15:24:28.616 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33958 10 6452 1 2025-08-03 15:20:07.058 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 15:25:29.081 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34782 10 6452 1 2025-08-03 15:26:29.444 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52036 10 6452 1 2025-08-03 15:27:29.841 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:46524 11 6504 1 2025-08-03 15:27:44.746 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:27:44.719 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:27:44.529 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:27:44.664 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:27:44.658 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:28:30.327 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51992 10 6452 1 2025-08-03 15:29:30.729 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55272 10 6452 1 2025-08-03 15:25:07.061 00:06:00.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 15:30:31.141 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60382 10 6452 1 2025-08-03 15:31:31.544 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57582 10 6452 1 2025-08-03 15:27:07.058 00:06:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 15:32:31.941 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45928 10 6452 1 2025-08-03 15:32:44.890 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:32:44.599 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:32:44.810 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:32:44.855 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:32:44.891 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:33:32.353 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36386 10 6452 1 2025-08-03 15:34:32.752 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60546 10 6452 1 2025-08-03 15:35:33.154 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44330 10 6452 1 2025-08-03 15:36:33.564 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60802 10 6452 1 2025-08-03 15:32:07.065 00:06:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 15:37:45.048 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:37:44.961 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:37:44.590 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:37:44.966 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:37:44.970 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:37:33.971 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34624 10 6452 1 2025-08-03 15:38:34.339 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45124 10 6452 1 2025-08-03 15:34:07.062 00:06:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 15:39:34.699 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57044 10 6452 1 2025-08-03 15:40:35.119 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60284 10 6452 1 2025-08-03 15:41:35.524 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39024 10 6452 1 2025-08-03 15:42:44.947 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:42:44.867 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:42:44.923 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:42:44.864 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:42:44.779 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:42:35.937 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:42622 10 6452 1 2025-08-03 15:43:36.359 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43726 10 6452 1 2025-08-03 15:39:07.067 00:06:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 15:44:36.766 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45378 10 6452 1 2025-08-03 15:45:37.183 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59888 10 6452 1 2025-08-03 15:41:07.065 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 15:46:37.592 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:57552 10 6452 1 2025-08-03 15:47:45.292 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:47:45.137 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:47:45.189 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:47:45.209 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:47:44.905 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:47:38.033 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:51800 10 6452 1 2025-08-03 15:48:38.432 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54746 10 6452 1 2025-08-03 15:49:38.840 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:35480 10 6452 1 2025-08-03 15:50:39.235 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37038 10 6452 1 2025-08-03 15:46:07.072 00:06:00.066 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 15:51:39.642 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52600 10 6452 1 2025-08-03 15:52:45.148 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:52:44.927 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:52:45.144 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:52:45.335 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:52:45.226 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:52:40.063 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50332 10 6452 1 2025-08-03 15:48:07.070 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 15:53:40.472 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35880 10 6452 1 2025-08-03 15:54:40.879 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:58208 10 6452 1 2025-08-03 15:55:41.278 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47058 10 6452 1 2025-08-03 15:56:41.707 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:49490 10 6452 1 2025-08-03 15:57:45.911 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 15:57:46.225 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 15:57:46.041 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:57:46.142 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 15:57:46.202 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 15:57:42.136 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58790 10 6452 1 2025-08-03 15:53:07.075 00:06:00.064 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 136, total bytes: 410477, total packets: 1009, avg bps: 882, avg pps: 0, avg bpp: 406 Time window: 2025-08-03 14:57:07 - 2025-08-03 15:59:07 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0026s User: 0.0013s Wall: 0.0044s flows/second: 31079.1 Runtime: 0.0044s