Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 02:59:15.530 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47576 10 6438 1 2025-07-23 02:55:01.081 00:06:00.492 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 03:00:15.930 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6438 1 2025-07-23 03:01:16.344 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59856 10 6438 1 2025-07-23 02:57:01.079 00:06:00.497 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 03:02:11.780 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:02:11.875 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:02:11.635 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:02:11.863 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:02:11.947 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:02:16.746 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37958 10 6438 1 2025-07-23 03:03:17.150 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40732 10 6438 1 2025-07-23 03:04:17.558 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58058 10 6438 1 2025-07-23 03:05:17.957 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53504 10 6438 1 2025-07-23 03:06:18.359 00:00:10.599 TCP 1.101.0.1:3000 -> 23.104.0.1:34918 10 6438 1 2025-07-23 03:02:01.084 00:06:00.494 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 03:07:12.057 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:07:12.168 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:07:11.935 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:07:12.037 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:07:12.120 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:07:18.999 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44788 10 6438 1 2025-07-23 03:08:19.412 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53250 10 6438 1 2025-07-23 03:04:01.081 00:06:00.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 03:09:19.819 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50684 10 6438 1 2025-07-23 03:10:20.217 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46134 10 6438 1 2025-07-23 03:11:20.624 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51442 10 6438 1 2025-07-23 03:12:12.145 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:12:12.088 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:12:11.908 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:12:12.146 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:12:12.230 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:12:20.988 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43828 10 6438 1 2025-07-23 03:13:21.396 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54370 10 6438 1 2025-07-23 03:09:01.085 00:06:00.494 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 03:14:21.813 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:43422 10 6438 1 2025-07-23 03:15:22.242 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35218 10 6438 1 2025-07-23 03:11:01.083 00:06:00.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 03:16:22.596 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41476 10 6438 1 2025-07-23 03:17:12.298 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:17:12.147 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:17:12.215 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:17:12.279 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:17:12.275 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:17:22.998 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45592 10 6438 1 2025-07-23 03:18:23.406 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:42806 12 10352 1 2025-07-23 03:19:23.888 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38676 12 6542 1 2025-07-23 03:20:24.305 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42922 10 6438 1 2025-07-23 03:16:01.085 00:06:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 03:21:24.700 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:35140 11 6490 1 2025-07-23 03:22:12.451 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:22:12.215 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:22:12.304 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:22:12.130 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:22:12.368 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:22:25.150 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35530 10 6438 1 2025-07-23 03:18:01.084 00:06:00.502 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 03:23:25.556 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33408 10 6438 1 2025-07-23 03:24:25.963 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60220 10 6438 1 2025-07-23 03:25:26.368 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42294 10 6438 1 2025-07-23 03:26:26.796 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45492 10 6438 1 2025-07-23 03:27:12.651 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:27:12.604 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:27:12.504 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:27:12.435 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:27:12.569 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:27:27.203 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44572 12 6542 1 2025-07-23 03:23:01.088 00:06:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 03:28:27.605 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38622 10 6438 1 2025-07-23 03:29:28.012 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46078 10 6438 1 2025-07-23 03:25:01.085 00:06:00.503 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 03:30:28.419 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45164 10 6438 1 2025-07-23 03:31:28.826 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50714 10 6438 1 2025-07-23 03:32:12.547 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:32:12.605 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:32:12.268 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:32:12.544 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:32:12.465 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:32:29.232 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56096 10 6438 1 2025-07-23 03:33:29.633 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36612 10 6438 1 2025-07-23 03:34:30.036 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35384 10 6438 1 2025-07-23 03:30:01.089 00:06:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 03:35:30.443 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42218 10 6438 1 2025-07-23 03:36:30.844 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:57774 10 6438 1 2025-07-23 03:32:01.086 00:06:00.504 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 03:37:12.698 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:37:12.615 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:37:12.744 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:37:12.473 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:37:12.616 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:37:31.271 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:35700 10 6438 1 2025-07-23 03:38:31.645 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59664 10 6438 1 2025-07-23 03:39:32.055 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51846 10 6438 1 2025-07-23 03:40:32.461 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46418 10 6438 1 2025-07-23 03:41:32.826 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60220 10 6438 1 2025-07-23 03:37:01.089 00:06:00.502 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 03:42:12.953 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:42:12.734 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:42:12.733 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:42:12.699 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:42:12.872 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:42:33.233 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38220 10 6438 1 2025-07-23 03:43:33.642 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51268 11 6490 1 2025-07-23 03:39:01.087 00:06:00.507 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 03:44:34.090 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51116 10 6438 1 2025-07-23 03:45:34.507 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43112 10 6438 1 2025-07-23 03:46:34.916 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:50894 10 6438 1 2025-07-23 03:47:12.921 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:47:12.915 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:47:12.866 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:47:13.002 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:47:13.086 00:00:00.039 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:47:35.316 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56310 10 6438 1 2025-07-23 03:48:35.680 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42802 10 6438 1 2025-07-23 03:44:01.092 00:06:00.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 03:49:36.115 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33054 10 6438 1 2025-07-23 03:50:36.525 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37160 10 6438 1 2025-07-23 03:46:01.090 00:06:00.509 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 03:51:36.927 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38454 10 6438 1 2025-07-23 03:52:12.831 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:52:12.979 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:52:12.842 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:52:12.827 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:52:12.909 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:52:37.339 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39166 10 6438 1 2025-07-23 03:53:37.744 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51438 10 6438 1 2025-07-23 03:54:38.145 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57062 10 6438 1 2025-07-23 03:55:38.550 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43560 10 6438 1 2025-07-23 03:51:01.094 00:06:00.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 03:56:38.954 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40390 10 6438 1 2025-07-23 03:57:13.142 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 03:57:12.939 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 03:57:12.877 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:57:13.060 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 03:57:13.142 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 03:57:39.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34296 10 6438 1 2025-07-23 03:53:01.092 00:06:00.510 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 137, total bytes: 414686, total packets: 1030, avg bps: 863, avg pps: 0, avg bpp: 402 Time window: 2025-07-23 02:55:01 - 2025-07-23 03:59:01 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0034s User: 0.0009s Wall: 0.0025s flows/second: 54956.0 Runtime: 0.0025s