Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 08:58:47.543 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43220 10 6438 1 2025-07-20 08:59:47.954 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43096 10 6438 1 2025-07-20 09:00:52.558 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:00:52.473 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:00:52.658 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:00:52.430 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:00:52.474 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:00:48.358 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46280 10 6438 1 2025-07-20 08:56:59.456 00:05:00.667 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 08:56:59.459 00:05:00.661 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 09:01:48.762 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41234 10 6438 1 2025-07-20 09:02:49.180 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44014 10 6438 1 2025-07-20 09:03:49.589 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:57354 10 6438 1 2025-07-20 09:04:50.016 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46626 10 6438 1 2025-07-20 09:05:53.213 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:05:52.435 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:05:52.932 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:05:52.800 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:05:52.883 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:05:50.421 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37120 10 6438 1 2025-07-20 09:02:59.465 00:05:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 09:06:50.826 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57352 10 6438 1 2025-07-20 09:02:59.467 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 09:07:51.197 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44270 10 6438 1 2025-07-20 09:08:51.599 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:32874 10 6438 1 2025-07-20 09:09:51.964 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35122 10 6438 1 2025-07-20 09:10:52.727 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:10:52.731 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:10:52.719 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:10:52.548 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:10:52.630 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:10:52.322 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:45746 10 6438 1 2025-07-20 09:11:52.679 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34116 10 6438 1 2025-07-20 09:08:59.467 00:05:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 09:12:53.058 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51770 10 6438 1 2025-07-20 09:08:59.469 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 09:13:53.460 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45794 10 6438 1 2025-07-20 09:14:53.863 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41470 10 6438 1 2025-07-20 09:15:52.891 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:15:52.655 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:15:52.752 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:15:52.670 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:15:52.835 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:15:54.276 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60858 10 6438 1 2025-07-20 09:16:54.680 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36534 10 6438 1 2025-07-20 09:17:55.112 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58374 10 6438 1 2025-07-20 09:14:59.470 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 09:14:59.467 00:05:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 09:18:55.518 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40460 10 6438 1 2025-07-20 09:19:55.881 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56504 10 6438 1 2025-07-20 09:20:52.938 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:20:53.046 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:20:52.864 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:20:53.041 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:20:53.125 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:20:56.283 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50620 10 6438 1 2025-07-20 09:21:56.684 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53368 10 6438 1 2025-07-20 09:22:57.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51372 10 6438 1 2025-07-20 09:23:57.510 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51220 10 6438 1 2025-07-20 09:20:59.472 00:05:00.658 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 09:20:59.469 00:05:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 09:24:57.872 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59326 10 6438 1 2025-07-20 09:25:53.020 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:25:52.802 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:25:52.958 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:25:53.005 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:25:53.087 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:25:58.286 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43982 10 6438 1 2025-07-20 09:26:58.688 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45678 10 6438 1 2025-07-20 09:27:59.104 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39632 10 6438 1 2025-07-20 09:28:59.508 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60654 10 6438 1 2025-07-20 09:29:59.917 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44586 10 6438 1 2025-07-20 09:30:52.999 00:00:00.038 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:30:53.147 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:30:52.897 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:30:53.145 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:30:53.229 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:26:59.471 00:05:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 09:26:59.473 00:05:00.658 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 09:31:00.320 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37290 10 6438 1 2025-07-20 09:32:00.723 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53650 10 6438 1 2025-07-20 09:33:01.142 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:42488 10 6438 1 2025-07-20 09:34:01.499 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35510 10 6438 1 2025-07-20 09:35:01.908 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55162 10 6438 1 2025-07-20 09:35:53.212 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:35:53.307 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:35:52.958 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:35:53.140 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:35:53.130 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:36:02.315 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:59826 12 6542 1 2025-07-20 09:32:59.472 00:05:00.665 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 09:32:59.474 00:05:00.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 09:37:02.748 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:55156 10 6438 1 2025-07-20 09:38:03.123 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54282 10 6438 1 2025-07-20 09:39:03.535 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38164 10 6438 1 2025-07-20 09:40:03.934 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36268 10 6438 1 2025-07-20 09:40:53.564 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:40:53.374 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:40:53.069 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:40:53.346 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:40:53.482 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:41:04.358 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:58414 10 6438 1 2025-07-20 09:42:04.712 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 10 6438 1 2025-07-20 09:38:59.477 00:05:00.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 09:38:59.475 00:05:00.670 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 09:43:05.115 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54588 10 6438 1 2025-07-20 09:44:05.528 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50068 10 6438 1 2025-07-20 09:45:05.931 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53596 10 6438 1 2025-07-20 09:45:53.534 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:45:53.455 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:45:53.360 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:45:53.082 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:45:53.451 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:46:06.356 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 10 6438 1 2025-07-20 09:47:06.766 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45926 10 6438 1 2025-07-20 09:48:07.172 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42042 10 6438 1 2025-07-20 09:44:59.475 00:05:00.665 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 09:44:59.478 00:05:00.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 09:49:07.536 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46696 10 6438 1 2025-07-20 09:50:07.947 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39920 10 6438 1 2025-07-20 09:50:53.817 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:50:53.736 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:50:53.689 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:50:53.577 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:50:53.734 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:51:08.356 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38612 10 6438 1 2025-07-20 09:52:08.753 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36838 10 6438 1 2025-07-20 09:53:09.178 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46024 10 6438 1 2025-07-20 09:54:09.580 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51738 10 6438 1 2025-07-20 09:50:59.483 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 09:50:59.481 00:05:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 09:55:09.981 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40170 10 6438 1 2025-07-20 09:55:53.728 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 09:55:53.635 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 09:55:53.549 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 09:55:53.654 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:55:53.645 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 09:56:10.385 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39490 10 6438 1 2025-07-20 09:57:10.786 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59690 10 6438 1 2025-07-20 09:58:11.199 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37046 10 6438 1 Summary: total flows: 140, total bytes: 416264, total packets: 1022, avg bps: 904, avg pps: 0, avg bpp: 407 Time window: 2025-07-20 08:56:59 - 2025-07-20 09:58:21 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0032s User: 0.0011s Wall: 0.0024s flows/second: 58231.1 Runtime: 0.0024s