Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 23:58:48.401 00:00:10.484 TCP 1.101.0.1:3000 -> 23.104.0.1:56962 10 6438 1 2025-07-20 23:59:48.916 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49404 10 6438 1 2025-07-21 00:00:49.327 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49346 10 6438 1 2025-07-20 23:56:59.870 00:05:00.560 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 23:56:59.868 00:05:00.566 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-21 00:01:10.581 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:01:10.503 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:01:10.444 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:01:10.498 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:01:10.582 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:01:49.739 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36908 10 6438 1 2025-07-21 00:02:50.105 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49424 10 6438 1 2025-07-21 00:03:50.511 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49788 10 6438 1 2025-07-21 00:04:50.917 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59106 10 6438 1 2025-07-21 00:05:51.323 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51012 10 6438 1 2025-07-21 00:06:10.795 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:06:10.669 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:06:10.485 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:06:10.675 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:06:10.756 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:02:59.872 00:05:00.567 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-21 00:02:59.869 00:05:00.572 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-21 00:06:51.728 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42708 10 6438 1 2025-07-21 00:07:52.134 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58838 10 6438 1 2025-07-21 00:08:52.549 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41250 10 6438 1 2025-07-21 00:09:52.959 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49700 10 6438 1 2025-07-21 00:10:53.364 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42402 10 6438 1 2025-07-21 00:11:10.697 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:11:10.709 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:11:10.882 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:11:10.612 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:11:10.694 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:11:53.763 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52490 10 6438 1 2025-07-21 00:08:59.870 00:05:00.572 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-21 00:12:54.177 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40726 10 6438 1 2025-07-21 00:08:59.873 00:05:00.567 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-21 00:13:54.553 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36144 10 6438 1 2025-07-21 00:14:54.970 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40778 10 6438 1 2025-07-21 00:15:55.389 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34644 10 6438 1 2025-07-21 00:16:10.802 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:16:10.780 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:16:10.803 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:16:10.629 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:16:10.708 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:16:55.791 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46096 10 6438 1 2025-07-21 00:17:56.153 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33602 10 6438 1 2025-07-21 00:14:59.872 00:05:00.572 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-21 00:14:59.874 00:05:00.566 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-21 00:18:56.561 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6438 1 2025-07-21 00:19:56.966 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48108 10 6438 1 2025-07-21 00:20:57.345 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44300 10 6438 1 2025-07-21 00:21:11.008 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:21:11.021 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:21:11.140 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:21:11.093 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:21:11.175 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:21:57.710 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40154 10 6438 1 2025-07-21 00:22:58.124 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42894 10 6438 1 2025-07-21 00:23:58.518 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58600 10 6438 1 2025-07-21 00:20:59.877 00:05:00.565 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-21 00:20:59.874 00:05:00.570 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-21 00:24:58.925 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57270 10 6438 1 2025-07-21 00:25:59.348 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49140 10 6438 1 2025-07-21 00:26:11.337 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:26:11.325 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:26:10.969 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:26:11.099 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:26:11.182 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:26:59.753 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:43660 10 6438 1 2025-07-21 00:28:00.115 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47648 10 6438 1 2025-07-21 00:29:00.521 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54524 10 6438 1 2025-07-21 00:30:00.926 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34438 10 6438 1 2025-07-21 00:26:59.878 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-21 00:26:59.877 00:05:00.573 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-21 00:31:11.117 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:31:01.342 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35072 10 6438 1 2025-07-21 00:31:11.120 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:31:11.493 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:31:10.904 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:31:11.201 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:32:01.742 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49442 10 6438 1 2025-07-21 00:33:02.145 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33964 10 6438 1 2025-07-21 00:34:02.551 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46210 10 6438 1 2025-07-21 00:35:02.955 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40520 10 6438 1 2025-07-21 00:36:11.291 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:36:11.186 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:36:11.268 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:36:03.368 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49140 10 6438 1 2025-07-21 00:36:11.351 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:36:11.434 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:32:59.877 00:05:00.573 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-21 00:32:59.878 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-21 00:37:03.774 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56190 10 6438 1 2025-07-21 00:38:04.180 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57134 10 6438 1 2025-07-21 00:39:04.588 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:48008 10 6438 1 2025-07-21 00:40:05.032 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36672 10 6438 1 2025-07-21 00:41:11.331 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:41:11.247 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:41:11.518 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:41:11.347 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:41:11.287 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:41:05.440 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35192 10 6438 1 2025-07-21 00:42:05.845 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:55424 10 6438 1 2025-07-21 00:38:59.892 00:05:00.558 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-21 00:38:59.890 00:05:00.564 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-21 00:43:06.222 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58458 10 6438 1 2025-07-21 00:44:06.637 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46032 10 6438 1 2025-07-21 00:45:07.057 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57542 10 6438 1 2025-07-21 00:46:11.501 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:46:11.611 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:46:11.420 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:46:11.464 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:46:11.582 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:46:07.484 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50728 10 6438 1 2025-07-21 00:47:07.892 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:46556 10 6438 1 2025-07-21 00:48:08.279 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45452 10 6438 1 2025-07-21 00:44:59.891 00:05:00.564 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-21 00:44:59.893 00:05:00.559 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-21 00:49:08.679 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41692 10 6438 1 2025-07-21 00:50:09.110 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44212 10 6438 1 2025-07-21 00:51:11.653 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:51:11.885 00:00:00.019 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:51:11.821 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:51:11.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:51:11.737 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:51:09.521 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45018 10 6438 1 2025-07-21 00:52:09.926 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35488 10 6438 1 2025-07-21 00:53:10.341 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56992 10 6438 1 2025-07-21 00:54:10.751 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49800 10 6438 1 2025-07-21 00:50:59.895 00:05:00.563 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-21 00:50:59.897 00:05:00.558 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-21 00:55:11.151 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53644 10 6438 1 2025-07-21 00:56:11.975 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 00:56:11.508 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 00:56:11.867 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 00:56:11.636 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:56:11.893 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 00:56:11.552 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:51798 10 6438 1 2025-07-21 00:57:11.950 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35848 10 6438 1 2025-07-21 00:58:12.358 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50648 10 6438 1 Summary: total flows: 140, total bytes: 416160, total packets: 1020, avg bps: 904, avg pps: 0, avg bpp: 408 Time window: 2025-07-20 23:56:59 - 2025-07-21 00:58:22 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0031s User: 0.0010s Wall: 0.0023s flows/second: 61429.3 Runtime: 0.0023s