Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 08:59:02.186 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52352 10 6438 1 2025-07-22 09:00:02.587 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58638 10 6438 1 2025-07-22 08:57:00.612 00:05:00.580 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 09:01:03.001 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35104 10 6438 1 2025-07-22 09:01:50.426 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:01:50.128 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:01:50.141 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:01:50.263 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:01:50.343 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:02:03.403 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44850 10 6438 1 2025-07-22 09:03:03.803 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:39422 12 10352 1 2025-07-22 09:00:00.615 00:05:00.575 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 09:04:04.284 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38724 10 6438 1 2025-07-22 09:05:04.687 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45728 10 6438 1 2025-07-22 09:06:05.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43900 10 6438 1 2025-07-22 09:06:50.346 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:06:50.449 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:06:50.012 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:06:50.341 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:06:50.425 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:03:00.613 00:05:00.582 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 09:07:05.533 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39982 10 6438 1 2025-07-22 09:08:05.936 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:36888 10 6438 1 2025-07-22 09:09:06.318 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36572 10 6438 1 2025-07-22 09:06:00.619 00:05:00.573 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 09:10:06.686 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:41414 10 6438 1 2025-07-22 09:11:07.097 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34208 10 6438 1 2025-07-22 09:11:50.422 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:11:50.624 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:11:50.428 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:11:50.514 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:11:50.510 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:12:07.509 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40970 10 6438 1 2025-07-22 09:09:00.617 00:05:00.580 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 09:13:07.916 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38378 10 6438 1 2025-07-22 09:14:08.283 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49380 10 6438 1 2025-07-22 09:15:08.685 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 10 6438 1 2025-07-22 09:12:00.619 00:05:00.575 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 09:16:09.053 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:42368 10 6438 1 2025-07-22 09:16:50.726 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:16:50.638 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:16:50.436 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:16:50.658 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:16:50.643 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:17:09.407 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49410 10 6438 1 2025-07-22 09:18:09.812 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39942 10 6438 1 2025-07-22 09:15:00.617 00:05:00.582 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 09:19:10.220 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:44064 10 6438 1 2025-07-22 09:20:10.615 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60228 10 6438 1 2025-07-22 09:21:11.021 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:33910 10 6438 1 2025-07-22 09:21:50.564 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:21:50.482 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:21:50.755 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:21:50.806 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:21:50.680 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:18:00.620 00:05:00.578 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 09:22:11.417 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55952 10 6438 1 2025-07-22 09:23:11.833 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:43542 10 6438 1 2025-07-22 09:24:12.278 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49382 10 6438 1 2025-07-22 09:21:00.621 00:05:00.580 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 09:25:12.694 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59618 10 6438 1 2025-07-22 09:26:13.110 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46870 10 6438 1 2025-07-22 09:26:50.860 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:26:51.004 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:26:50.826 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:26:50.688 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:26:50.771 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:27:13.517 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41002 10 6438 1 2025-07-22 09:24:00.626 00:05:00.574 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 09:28:13.914 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45044 10 6438 1 2025-07-22 09:29:14.326 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35268 10 6438 1 2025-07-22 09:30:14.690 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42642 10 6438 1 2025-07-22 09:27:00.625 00:05:00.577 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 09:31:15.117 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36736 10 6438 1 2025-07-22 09:31:50.808 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:31:50.804 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:31:50.749 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:31:50.899 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:31:50.981 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:32:15.484 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51068 10 6438 1 2025-07-22 09:33:15.886 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:41752 10 6438 1 2025-07-22 09:30:00.630 00:05:00.577 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 09:34:16.274 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48950 10 6438 1 2025-07-22 09:35:16.680 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53730 10 6438 1 2025-07-22 09:36:17.114 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41502 10 6438 1 2025-07-22 09:36:50.802 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:36:50.849 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:36:51.069 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:36:50.974 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:36:51.152 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:33:00.630 00:05:00.580 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 09:37:17.517 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54528 10 6438 1 2025-07-22 09:38:17.927 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42292 10 6438 1 2025-07-22 09:39:18.334 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49636 10 6438 1 2025-07-22 09:36:00.633 00:05:00.577 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 09:40:18.738 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44148 10 6438 1 2025-07-22 09:41:19.143 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42294 10 6438 1 2025-07-22 09:41:51.302 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:41:51.169 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:41:51.199 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:41:51.220 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:41:51.173 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:42:19.505 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60960 10 6438 1 2025-07-22 09:39:00.631 00:05:00.582 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 09:43:19.915 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51644 10 6438 1 2025-07-22 09:44:20.329 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37096 10 6438 1 2025-07-22 09:45:20.730 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34732 10 6438 1 2025-07-22 09:42:00.635 00:05:00.577 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 09:46:21.149 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33494 10 6438 1 2025-07-22 09:46:51.224 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:46:51.341 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:46:51.100 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:46:51.026 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:46:51.107 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:47:21.554 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60542 10 6438 1 2025-07-22 09:48:21.959 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:50766 12 10352 1 2025-07-22 09:45:00.633 00:05:00.583 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 09:49:22.437 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:58446 10 6438 1 2025-07-22 09:50:22.790 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37230 10 6438 1 2025-07-22 09:51:23.193 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57320 10 6438 1 2025-07-22 09:51:51.061 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:51:51.425 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:51:51.424 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:51:51.183 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:51:50.979 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:48:00.637 00:05:00.578 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 09:52:23.594 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38594 10 6438 1 2025-07-22 09:53:23.955 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36478 10 6438 1 2025-07-22 09:54:24.376 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44920 10 6438 1 2025-07-22 09:51:00.636 00:05:00.581 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 09:55:24.779 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49844 10 6438 1 2025-07-22 09:56:25.194 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37384 10 6438 1 2025-07-22 09:56:51.535 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 09:56:51.364 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:56:51.455 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 09:56:51.526 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 09:56:51.538 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 09:57:25.560 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39080 10 6438 1 2025-07-22 09:54:00.639 00:05:00.577 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 09:58:25.961 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46904 10 6438 1 Summary: total flows: 140, total bytes: 423988, total packets: 1024, avg bps: 911, avg pps: 0, avg bpp: 414 Time window: 2025-07-22 08:57:00 - 2025-07-22 09:59:01 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0031s User: 0.0006s Wall: 0.0020s flows/second: 69131.5 Runtime: 0.0020s