Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 09:59:26.377 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45984 10 6438 1 2025-07-22 10:00:26.778 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57212 10 6438 1 2025-07-22 09:57:00.636 00:05:00.582 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 10:01:27.145 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59122 10 6438 1 2025-07-22 10:01:51.611 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:01:51.730 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:01:51.517 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:01:51.730 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:01:51.812 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:02:27.551 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44922 10 6438 1 2025-07-22 10:03:27.922 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:33150 10 6438 1 2025-07-22 10:00:00.640 00:05:00.578 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 10:04:28.298 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:51676 10 6438 1 2025-07-22 10:05:28.735 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34498 10 6438 1 2025-07-22 10:06:29.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49374 10 6438 1 2025-07-22 10:06:51.603 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:06:51.653 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:06:51.560 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:06:51.595 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:06:51.677 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:03:00.637 00:05:00.583 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 10:07:29.511 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40416 10 6438 1 2025-07-22 10:08:29.916 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42178 10 6438 1 2025-07-22 10:09:30.325 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58148 10 6438 1 2025-07-22 10:06:00.640 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 10:10:30.731 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44884 10 6438 1 2025-07-22 10:11:31.139 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51274 10 6438 1 2025-07-22 10:11:51.736 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:11:51.652 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:11:51.752 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:11:51.654 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:11:51.726 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:12:31.539 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43182 10 6438 1 2025-07-22 10:09:00.638 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 10:13:31.898 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45370 10 6438 1 2025-07-22 10:14:32.307 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59356 10 6438 1 2025-07-22 10:15:32.720 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52766 10 6438 1 2025-07-22 10:12:00.641 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 10:16:33.127 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43366 10 6438 1 2025-07-22 10:16:51.993 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:16:51.832 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:16:51.910 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:16:51.630 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:16:51.911 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:17:33.535 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36902 10 6438 1 2025-07-22 10:18:33.939 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:59848 10 6438 1 2025-07-22 10:15:00.639 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 10:19:34.360 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33510 10 6438 1 2025-07-22 10:20:34.758 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40690 10 6438 1 2025-07-22 10:21:35.163 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46006 10 6438 1 2025-07-22 10:21:51.907 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:21:51.827 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:21:51.959 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:21:51.899 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:21:51.981 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:18:00.643 00:05:00.585 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 10:22:35.525 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43208 10 6438 1 2025-07-22 10:23:35.930 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51844 10 6438 1 2025-07-22 10:24:36.353 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39934 10 6438 1 2025-07-22 10:21:00.640 00:05:00.591 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 10:25:36.707 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:54002 10 6438 1 2025-07-22 10:26:52.125 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:26:37.154 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45606 10 6438 1 2025-07-22 10:26:51.970 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:26:51.966 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:26:51.898 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:26:52.043 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:27:37.565 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56844 10 6438 1 2025-07-22 10:24:00.644 00:05:00.588 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 10:28:37.972 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:36602 10 6438 1 2025-07-22 10:29:38.353 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34572 10 6438 1 2025-07-22 10:30:38.755 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43554 10 6438 1 2025-07-22 10:27:00.641 00:05:00.595 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 10:31:39.156 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40150 10 6438 1 2025-07-22 10:31:51.900 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:31:51.803 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:31:51.900 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:31:52.004 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:31:51.982 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:32:39.568 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38226 10 6438 1 2025-07-22 10:33:39.984 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:59498 12 10350 1 2025-07-22 10:30:00.644 00:05:00.589 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 10:34:40.466 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52170 10 6438 1 2025-07-22 10:35:40.865 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:38794 10 6438 1 2025-07-22 10:36:52.236 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:36:52.153 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:36:41.250 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57384 10 6438 1 2025-07-22 10:36:52.203 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:36:52.324 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:36:51.931 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:33:00.643 00:05:00.593 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 10:37:41.608 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46076 10 6438 1 2025-07-22 10:38:42.023 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33518 10 6438 1 2025-07-22 10:39:42.420 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:49832 11 6490 1 2025-07-22 10:36:00.647 00:05:00.588 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 10:40:42.878 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37690 10 6438 1 2025-07-22 10:41:52.177 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:41:43.259 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:38544 10 6438 1 2025-07-22 10:41:52.144 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:41:52.080 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:41:52.274 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:41:52.358 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:42:43.622 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47896 10 6438 1 2025-07-22 10:39:00.645 00:05:00.592 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 10:43:44.027 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33894 10 6438 1 2025-07-22 10:44:44.386 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36168 10 6438 1 2025-07-22 10:45:44.794 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53716 10 6438 1 2025-07-22 10:42:00.648 00:05:00.587 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 10:46:52.592 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:46:52.510 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:46:52.450 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:46:52.521 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:46:52.335 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:46:45.209 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:60662 10 6438 1 2025-07-22 10:47:45.568 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59184 10 6438 1 2025-07-22 10:48:45.932 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:42370 10 6438 1 2025-07-22 10:45:00.646 00:05:00.593 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 10:49:46.362 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41158 10 6438 1 2025-07-22 10:50:46.764 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:54214 10 6438 1 2025-07-22 10:51:52.688 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:51:52.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:51:52.451 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:51:52.516 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:51:52.598 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:51:47.190 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55726 10 6438 1 2025-07-22 10:48:00.649 00:05:00.587 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 10:52:47.592 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46384 10 6438 1 2025-07-22 10:53:48.001 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33148 10 6438 1 2025-07-22 10:54:48.401 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38192 10 6438 1 2025-07-22 10:51:00.647 00:05:00.594 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 10:55:48.806 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33494 10 6438 1 2025-07-22 10:56:52.797 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 10:56:52.480 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 10:56:52.711 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 10:56:52.697 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:56:52.714 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 10:56:49.213 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57684 10 6438 1 2025-07-22 10:57:49.576 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37314 10 6438 1 2025-07-22 10:54:00.652 00:05:00.592 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 413686, total packets: 1013, avg bps: 889, avg pps: 0, avg bpp: 408 Time window: 2025-07-22 09:57:00 - 2025-07-22 10:59:01 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0014s User: 0.0027s Wall: 0.0029s flows/second: 47165.1 Runtime: 0.0030s