Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 00:59:27.595 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47054 10 6438 1 2025-07-23 01:00:27.997 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45934 10 6438 1 2025-07-23 00:56:01.034 00:06:00.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 01:01:28.359 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:59134 10 6438 1 2025-07-23 01:02:09.652 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:02:09.715 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:02:09.569 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:02:09.508 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:02:09.570 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:02:28.711 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57012 10 6438 1 2025-07-23 00:58:01.035 00:06:00.508 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 01:03:29.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38298 10 6438 1 2025-07-23 01:04:29.519 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46736 10 6438 1 2025-07-23 01:05:29.929 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:59234 10 6438 1 2025-07-23 01:06:30.374 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34516 10 6438 1 2025-07-23 01:07:09.763 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:07:09.498 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:07:09.571 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:07:09.682 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:07:09.769 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:07:30.790 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35692 10 6438 1 2025-07-23 01:03:01.037 00:06:00.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 01:08:31.193 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55658 10 6438 1 2025-07-23 01:09:31.600 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41094 10 6438 1 2025-07-23 01:05:01.036 00:06:00.509 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 01:10:32.009 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48500 10 6438 1 2025-07-23 01:11:32.413 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36376 10 6438 1 2025-07-23 01:12:09.858 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:12:09.952 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:12:09.821 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:12:09.920 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:12:10.002 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:12:32.821 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:60390 10 6438 1 2025-07-23 01:13:33.190 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46352 10 6438 1 2025-07-23 01:14:33.549 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38688 10 6438 1 2025-07-23 01:10:01.040 00:06:00.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 01:15:33.951 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:38038 10 6438 1 2025-07-23 01:16:34.328 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55772 10 6438 1 2025-07-23 01:12:01.038 00:06:00.508 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 01:17:09.897 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:17:09.812 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:17:09.959 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:17:09.647 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:17:09.814 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:17:34.732 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47504 10 6438 1 2025-07-23 01:18:35.110 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57018 10 6438 1 2025-07-23 01:19:35.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47426 10 6438 1 2025-07-23 01:20:35.914 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59246 10 6438 1 2025-07-23 01:21:36.318 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56650 10 6438 1 2025-07-23 01:17:01.042 00:06:00.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 01:22:09.928 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:22:09.841 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:22:09.776 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:22:10.011 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:22:09.978 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:22:36.680 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42106 10 6438 1 2025-07-23 01:23:37.109 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:38016 12 10352 1 2025-07-23 01:19:01.044 00:06:00.504 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 01:24:37.596 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33636 10 6438 1 2025-07-23 01:25:37.954 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51444 10 6438 1 2025-07-23 01:26:38.363 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42864 10 6438 1 2025-07-23 01:27:09.974 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:27:09.889 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:27:09.765 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:27:09.972 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:27:09.982 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:27:38.725 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42190 10 6438 1 2025-07-23 01:28:39.133 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46622 10 6438 1 2025-07-23 01:24:01.051 00:06:00.499 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 01:29:39.496 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57630 10 6438 1 2025-07-23 01:30:39.900 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35736 10 6438 1 2025-07-23 01:26:01.049 00:06:00.501 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 01:31:40.309 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53850 10 6438 1 2025-07-23 01:32:09.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:32:10.131 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:32:10.142 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:32:10.125 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:32:10.209 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:32:40.709 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33014 10 6438 1 2025-07-23 01:33:41.118 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53376 10 6438 1 2025-07-23 01:34:41.478 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60700 10 6438 1 2025-07-23 01:35:41.842 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:39468 10 6438 1 2025-07-23 01:31:01.055 00:06:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 01:36:42.235 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46560 10 6438 1 2025-07-23 01:37:10.664 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:37:10.583 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:37:10.382 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:37:10.476 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:37:10.582 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:37:42.636 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48458 10 6438 1 2025-07-23 01:33:01.054 00:06:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 01:38:43.038 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:50072 10 6438 1 2025-07-23 01:39:43.433 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48606 10 6438 1 2025-07-23 01:40:43.864 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46048 10 6438 1 2025-07-23 01:41:44.283 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53862 10 6438 1 2025-07-23 01:42:10.584 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:42:10.047 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:42:10.502 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:42:10.452 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:42:10.378 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:42:44.651 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32962 10 6438 1 2025-07-23 01:38:01.057 00:06:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 01:43:45.052 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46320 10 6438 1 2025-07-23 01:44:45.452 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44824 10 6438 1 2025-07-23 01:40:01.055 00:06:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 01:45:45.853 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:32838 10 6438 1 2025-07-23 01:46:46.277 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44250 10 6438 1 2025-07-23 01:47:10.330 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:47:10.450 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:47:10.455 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:47:10.735 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:47:10.818 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:47:46.676 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52090 10 6438 1 2025-07-23 01:48:47.103 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:49284 10 6438 1 2025-07-23 01:49:47.487 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38064 10 6438 1 2025-07-23 01:45:01.057 00:06:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 01:50:47.894 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 10 6438 1 2025-07-23 01:51:48.314 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34762 10 6438 1 2025-07-23 01:47:01.056 00:06:00.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 01:52:10.653 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:52:10.433 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:52:10.548 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:52:10.531 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:52:10.615 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:52:48.717 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44578 10 6438 1 2025-07-23 01:53:49.132 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43370 10 6438 1 2025-07-23 01:54:49.544 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56922 10 6438 1 2025-07-23 01:55:49.912 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43442 10 6438 1 2025-07-23 01:56:50.271 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38384 10 6438 1 2025-07-23 01:52:01.067 00:06:00.489 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 01:57:10.694 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 01:57:11.435 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 01:57:10.854 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:57:11.093 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 01:57:11.175 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 01:57:50.677 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51392 10 6438 1 Summary: total flows: 136, total bytes: 413513, total packets: 1010, avg bps: 889, avg pps: 0, avg bpp: 409 Time window: 2025-07-23 00:56:01 - 2025-07-23 01:58:01 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0019s User: 0.0019s Wall: 0.0018s flows/second: 73831.9 Runtime: 0.0019s