Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 12:59:38.649 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48318 10 6438 1 2025-07-22 13:00:39.010 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46274 10 6438 1 2025-07-22 12:57:00.705 00:05:00.571 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 13:01:39.414 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36596 10 6438 1 2025-07-22 13:01:55.459 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:01:55.117 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:01:55.414 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:01:55.343 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:01:55.376 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:02:39.842 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:54868 10 6438 1 2025-07-22 13:03:40.270 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41712 10 6438 1 2025-07-22 13:00:00.708 00:05:00.566 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 13:04:40.676 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57456 10 6438 1 2025-07-22 13:05:41.104 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59446 10 6438 1 2025-07-22 13:06:55.309 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:06:41.512 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60164 10 6438 1 2025-07-22 13:06:55.319 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:06:55.328 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:06:55.092 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:06:55.228 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:03:00.707 00:05:00.572 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 13:07:41.928 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57996 10 6438 1 2025-07-22 13:08:42.346 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37564 10 6438 1 2025-07-22 13:09:42.709 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54220 10 6438 1 2025-07-22 13:06:00.712 00:05:00.567 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 13:10:43.104 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42942 10 6438 1 2025-07-22 13:11:43.461 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52334 10 6438 1 2025-07-22 13:11:55.439 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:11:55.383 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:11:55.340 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:11:55.390 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:11:55.473 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:12:43.862 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51592 10 6438 1 2025-07-22 13:09:00.709 00:05:00.573 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 13:13:44.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60972 10 6438 1 2025-07-22 13:14:44.691 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55044 10 6438 1 2025-07-22 13:15:45.063 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45112 10 6438 1 2025-07-22 13:12:00.713 00:05:00.569 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 13:16:55.459 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:16:55.455 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:16:45.447 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57920 10 6438 1 2025-07-22 13:16:55.217 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:16:55.375 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:16:55.457 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:17:45.850 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37746 10 6438 1 2025-07-22 13:18:46.269 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35376 10 6438 1 2025-07-22 13:15:00.711 00:05:00.574 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 13:19:46.675 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36412 10 6438 1 2025-07-22 13:20:47.110 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54042 10 6438 1 2025-07-22 13:21:55.725 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:21:55.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:21:47.514 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57122 10 6438 1 2025-07-22 13:21:55.420 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:21:55.482 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:21:55.642 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:18:00.715 00:05:00.570 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 13:22:47.915 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:45674 11 6490 1 2025-07-22 13:23:48.363 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46322 10 6438 1 2025-07-22 13:24:48.726 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42562 10 6438 1 2025-07-22 13:21:00.714 00:05:00.585 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 13:25:49.139 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48352 10 6438 1 2025-07-22 13:26:55.542 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:26:55.558 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:26:55.550 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:26:55.656 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:26:49.545 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43818 10 6438 1 2025-07-22 13:26:55.459 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:27:49.950 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49450 10 6438 1 2025-07-22 13:24:00.716 00:05:00.579 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 13:28:50.355 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56876 10 6438 1 2025-07-22 13:29:50.766 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56944 10 6438 1 2025-07-22 13:27:00.720 00:05:00.579 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 13:30:51.175 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38540 10 6438 1 2025-07-22 13:31:55.795 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:31:55.800 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:31:55.735 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:31:55.963 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:31:56.045 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:31:51.577 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49168 10 6438 1 2025-07-22 13:32:51.985 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48998 10 6438 1 2025-07-22 13:30:00.727 00:05:00.571 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 13:33:52.389 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40020 10 6438 1 2025-07-22 13:34:52.790 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33552 10 6438 1 2025-07-22 13:35:53.195 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40982 10 6438 1 2025-07-22 13:36:55.790 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:36:55.803 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:36:55.915 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:36:55.880 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:36:55.963 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:36:53.594 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39838 10 6438 1 2025-07-22 13:33:00.727 00:05:00.574 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 13:37:54.001 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:35572 10 6438 1 2025-07-22 13:38:54.357 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48950 10 6438 1 2025-07-22 13:36:00.730 00:05:00.569 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 13:39:54.764 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51932 10 6438 1 2025-07-22 13:40:55.178 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52564 10 6438 1 2025-07-22 13:41:56.267 00:00:00.019 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:41:55.879 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:41:56.102 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:41:55.705 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:41:56.179 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:41:55.539 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53596 10 6438 1 2025-07-22 13:39:00.728 00:05:00.573 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 13:42:55.955 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56864 10 6438 1 2025-07-22 13:43:56.364 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46358 10 6438 1 2025-07-22 13:44:56.796 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39348 10 6438 1 2025-07-22 13:42:00.731 00:05:00.571 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 13:45:57.205 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54738 10 6438 1 2025-07-22 13:46:56.042 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:46:55.967 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:46:55.864 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:46:55.771 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:46:55.960 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:46:57.570 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43730 10 6438 1 2025-07-22 13:47:57.980 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:55578 12 10352 1 2025-07-22 13:45:00.741 00:05:00.563 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 13:48:58.459 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47180 10 6438 1 2025-07-22 13:49:58.862 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56024 10 6438 1 2025-07-22 13:50:59.279 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48680 10 6438 1 2025-07-22 13:51:55.979 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:51:56.150 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:51:56.151 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:51:56.043 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:51:55.897 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:48:00.744 00:05:00.559 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 13:51:59.706 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:35296 10 6438 1 2025-07-22 13:53:00.101 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35358 10 6438 1 2025-07-22 13:54:00.506 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52988 10 6438 1 2025-07-22 13:51:00.743 00:05:00.564 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-22 13:55:00.919 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33320 10 6438 1 2025-07-22 13:56:01.321 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60390 10 6438 1 2025-07-22 13:56:55.990 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-22 13:56:56.548 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-22 13:56:55.929 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:56:56.480 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-22 13:56:56.562 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-22 13:57:01.727 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44194 10 6438 1 2025-07-22 13:54:00.747 00:05:00.559 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-22 13:58:02.133 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58078 10 6438 1 Summary: total flows: 139, total bytes: 413688, total packets: 1013, avg bps: 889, avg pps: 0, avg bpp: 408 Time window: 2025-07-22 12:57:00 - 2025-07-22 13:59:01 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0020s User: 0.0020s Wall: 0.0019s flows/second: 73733.2 Runtime: 0.0019s