Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-19 07:58:42.687 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40660 10 6438 1 2025-07-19 07:54:58.882 00:05:00.646 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 07:59:43.114 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60606 10 6438 1 2025-07-19 08:00:22.442 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:00:22.371 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:00:22.323 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:00:22.554 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:00:22.638 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:00:43.516 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55060 10 6438 1 2025-07-19 08:01:43.890 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:46192 12 6542 1 2025-07-19 08:02:44.338 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35072 10 6438 1 2025-07-19 07:59:58.886 00:05:00.641 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 08:03:44.744 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:53122 12 10352 1 2025-07-19 08:04:45.222 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51354 10 6438 1 2025-07-19 08:00:58.884 00:05:00.646 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 08:05:22.593 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:05:22.659 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:05:22.532 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:05:22.177 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:05:22.676 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:05:45.624 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34524 10 6438 1 2025-07-19 08:06:46.025 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36832 10 6438 1 2025-07-19 08:07:46.424 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43412 10 6438 1 2025-07-19 08:08:46.826 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6438 1 2025-07-19 08:09:47.226 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60016 10 6438 1 2025-07-19 08:05:58.886 00:05:00.642 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 08:10:22.615 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:10:22.457 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:10:22.491 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:10:22.617 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:10:22.699 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:10:47.634 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40640 10 6438 1 2025-07-19 08:06:58.884 00:05:00.647 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 08:11:48.037 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54822 10 6438 1 2025-07-19 08:12:48.401 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 10 6438 1 2025-07-19 08:13:48.778 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:53914 10 6438 1 2025-07-19 08:14:49.214 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36576 10 6438 1 2025-07-19 08:15:23.079 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:15:23.184 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:15:22.911 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:15:23.194 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:15:23.162 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:15:49.639 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58298 10 6438 1 2025-07-19 08:11:58.887 00:05:00.644 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 08:12:58.887 00:05:00.648 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 08:16:50.063 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57566 10 6438 1 2025-07-19 08:17:50.468 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55042 10 6438 1 2025-07-19 08:18:50.876 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47464 10 6438 1 2025-07-19 08:19:51.281 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59988 10 6438 1 2025-07-19 08:20:22.792 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:20:22.708 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:20:22.785 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:20:22.675 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:20:22.711 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:20:51.682 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38548 10 6438 1 2025-07-19 08:17:58.890 00:05:00.646 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 08:21:52.041 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58826 10 6438 1 2025-07-19 08:18:58.888 00:05:00.651 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 08:22:52.453 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40310 10 6438 1 2025-07-19 08:23:52.864 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59524 10 6438 1 2025-07-19 08:24:53.230 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37758 10 6438 1 2025-07-19 08:25:22.876 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:25:22.787 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:25:22.963 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:25:22.851 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:25:22.792 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:25:53.594 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34212 10 6438 1 2025-07-19 08:26:54.003 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40692 10 6438 1 2025-07-19 08:23:58.892 00:05:00.645 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 08:27:54.400 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60720 10 6438 1 2025-07-19 08:24:58.889 00:05:00.650 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 08:28:54.757 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51534 10 6438 1 2025-07-19 08:29:55.174 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33664 10 6438 1 2025-07-19 08:30:22.958 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:30:22.959 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:30:22.711 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:30:22.889 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:30:22.973 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:30:55.543 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49336 10 6438 1 2025-07-19 08:31:55.952 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46966 10 6438 1 2025-07-19 08:32:56.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49516 10 6438 1 2025-07-19 08:29:58.895 00:05:00.642 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 08:33:56.762 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:52522 10 6438 1 2025-07-19 08:30:58.895 00:05:00.647 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 08:34:57.145 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:37378 11 6490 1 2025-07-19 08:35:23.242 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:35:22.994 00:00:00.052 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:35:23.100 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:35:23.043 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:35:23.159 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:35:57.602 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60414 10 6438 1 2025-07-19 08:36:57.969 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56610 10 6438 1 2025-07-19 08:37:58.381 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42332 10 6438 1 2025-07-19 08:38:58.790 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59480 10 6438 1 2025-07-19 08:35:58.897 00:05:00.647 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 08:39:59.150 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59828 10 6438 1 2025-07-19 08:40:23.229 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:40:23.255 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:40:23.309 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:40:23.154 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:40:23.143 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:36:58.897 00:05:00.649 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 08:40:59.553 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6438 1 2025-07-19 08:41:59.953 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49520 10 6438 1 2025-07-19 08:43:00.364 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40044 10 6438 1 2025-07-19 08:44:00.789 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58032 10 6438 1 2025-07-19 08:45:01.201 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49790 10 6438 1 2025-07-19 08:45:23.286 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:45:23.477 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:45:23.160 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:45:23.146 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:45:23.228 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:41:58.902 00:05:00.644 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 08:46:01.602 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58658 10 6438 1 2025-07-19 08:42:58.899 00:05:00.649 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 08:47:02.001 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34732 10 6438 1 2025-07-19 08:48:02.411 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54360 10 6438 1 2025-07-19 08:49:02.813 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60762 10 6438 1 2025-07-19 08:50:03.215 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40364 10 6438 1 2025-07-19 08:50:23.437 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:50:23.372 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:50:23.207 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:50:23.368 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:50:23.450 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:51:03.621 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55680 10 6438 1 2025-07-19 08:47:58.902 00:05:00.644 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 08:52:04.027 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46300 10 6438 1 2025-07-19 08:48:58.900 00:05:00.649 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-19 08:53:04.441 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40724 10 6438 1 2025-07-19 08:54:04.839 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:33854 10 6438 1 2025-07-19 08:55:05.280 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52490 10 6438 1 2025-07-19 08:55:24.262 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 08:55:24.091 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 08:55:24.260 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 08:55:23.989 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:55:24.180 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 08:56:05.692 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43802 10 6438 1 2025-07-19 08:57:06.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47588 10 6438 1 2025-07-19 08:53:58.903 00:05:00.646 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-19 08:58:06.516 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:35758 12 10352 1 Summary: total flows: 140, total bytes: 424144, total packets: 1027, avg bps: 883, avg pps: 0, avg bpp: 412 Time window: 2025-07-19 07:54:58 - 2025-07-19 08:58:59 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0042s User: 0.0000s Wall: 0.0021s flows/second: 66667.0 Runtime: 0.0021s