Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 16:58:53.572 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51220 10 6438 1 2025-07-23 16:59:53.977 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34406 10 6438 1 2025-07-23 16:55:01.375 00:06:00.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 17:00:54.384 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48772 10 6438 1 2025-07-23 16:57:01.373 00:06:00.472 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 17:01:54.796 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40826 10 6438 1 2025-07-23 17:02:28.901 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:02:28.817 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:02:28.919 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:02:28.822 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:02:28.818 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:02:55.206 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:38378 10 6438 1 2025-07-23 17:03:55.571 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56362 10 6438 1 2025-07-23 17:04:55.980 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:43602 10 6438 1 2025-07-23 17:05:56.413 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44348 10 6438 1 2025-07-23 17:02:01.377 00:06:00.467 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 17:06:56.821 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51846 10 6438 1 2025-07-23 17:07:29.184 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:07:29.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:07:29.201 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:07:28.880 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:07:29.102 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:07:57.248 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50876 10 6438 1 2025-07-23 17:04:01.374 00:06:00.474 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 17:08:57.651 00:00:10.720 TCP 1.101.0.1:3000 -> 23.104.0.1:53100 10 6438 1 2025-07-23 17:09:58.408 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51118 10 6438 1 2025-07-23 17:10:58.819 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34376 10 6438 1 2025-07-23 17:11:59.222 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51536 10 6438 1 2025-07-23 17:12:29.122 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:12:29.174 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:12:29.169 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:12:28.904 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:12:29.258 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:12:59.625 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:37346 12 10557 1 2025-07-23 17:09:01.378 00:06:00.469 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 17:14:00.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53214 10 6645 1 2025-07-23 17:15:00.518 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33712 10 6645 1 2025-07-23 17:11:01.376 00:06:00.476 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 17:16:00.940 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44714 10 6645 1 2025-07-23 17:17:01.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35346 10 6645 1 2025-07-23 17:17:29.109 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:17:29.115 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:17:28.856 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:17:29.153 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:17:29.237 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:18:01.756 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:34886 10 6645 1 2025-07-23 17:19:02.181 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35998 10 6645 1 2025-07-23 17:20:02.588 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49870 10 6645 1 2025-07-23 17:16:01.379 00:06:00.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 17:21:02.955 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41942 10 6645 1 2025-07-23 17:22:03.364 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43504 10 6645 1 2025-07-23 17:22:29.504 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:22:29.567 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:22:29.212 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:22:29.497 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:22:29.579 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:18:01.377 00:06:00.476 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 17:23:03.766 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44180 10 6645 1 2025-07-23 17:24:04.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35774 10 6645 1 2025-07-23 17:25:04.601 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:56744 10 6645 1 2025-07-23 17:26:05.002 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50576 10 6645 1 2025-07-23 17:27:05.407 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44794 10 6645 1 2025-07-23 17:27:29.368 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:27:29.243 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:27:29.182 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:27:29.367 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:27:29.265 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:23:01.380 00:06:00.470 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 17:28:05.829 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52134 10 6645 1 2025-07-23 17:29:06.241 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60582 10 6645 1 2025-07-23 17:25:01.378 00:06:00.476 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 17:30:06.643 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59680 10 6645 1 2025-07-23 17:31:07.047 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49832 10 6645 1 2025-07-23 17:32:07.445 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35424 10 6645 1 2025-07-23 17:32:29.598 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:32:29.452 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:32:29.454 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:32:29.479 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:32:29.515 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:33:07.847 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36580 10 6645 1 2025-07-23 17:34:08.273 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34896 10 6645 1 2025-07-23 17:30:01.381 00:06:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 17:35:08.676 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47138 10 6645 1 2025-07-23 17:36:09.112 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:42976 10 6645 1 2025-07-23 17:32:01.380 00:06:00.476 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 17:37:09.475 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51980 10 6645 1 2025-07-23 17:37:29.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:37:29.487 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:37:29.291 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:37:29.523 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:37:29.575 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:38:09.886 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54612 12 6749 1 2025-07-23 17:39:10.302 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39412 10 6645 1 2025-07-23 17:40:10.714 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51068 10 6645 1 2025-07-23 17:41:11.112 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55886 10 6645 1 2025-07-23 17:37:01.383 00:06:00.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 17:42:11.525 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36872 10 6645 1 2025-07-23 17:42:29.749 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:42:29.457 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:42:29.577 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:42:29.473 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:42:29.661 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:43:11.930 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:54574 10 6645 1 2025-07-23 17:39:01.381 00:06:00.476 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 17:44:12.305 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43576 10 6645 1 2025-07-23 17:45:12.709 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48200 10 6645 1 2025-07-23 17:46:13.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36362 10 6645 1 2025-07-23 17:47:13.511 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33226 10 6645 1 2025-07-23 17:47:29.941 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:47:29.858 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:47:29.700 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:47:29.862 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:47:29.781 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:48:13.872 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50356 10 6645 1 2025-07-23 17:44:01.385 00:06:00.470 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 17:49:14.277 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36958 10 6645 1 2025-07-23 17:50:14.696 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52064 10 6645 1 2025-07-23 17:46:01.383 00:06:00.476 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 17:51:15.108 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52362 10 6645 1 2025-07-23 17:52:29.832 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:52:29.834 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:52:29.678 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:52:15.518 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42514 10 6645 1 2025-07-23 17:52:29.830 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:52:29.914 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:53:15.929 00:00:10.461 TCP 1.101.0.1:3000 -> 23.104.0.1:49454 12 10352 1 2025-07-23 17:54:16.430 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49442 10 6438 1 2025-07-23 17:55:16.796 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32830 10 6438 1 2025-07-23 17:51:01.386 00:06:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 17:56:17.199 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48810 10 6438 1 2025-07-23 17:57:29.901 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 17:57:29.831 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:57:29.792 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 17:57:17.597 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47666 10 6438 1 2025-07-23 17:57:29.875 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 17:57:29.980 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 17:53:01.385 00:06:00.476 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 17:58:17.959 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54402 10 6438 1 Summary: total flows: 138, total bytes: 433108, total packets: 1038, avg bps: 902, avg pps: 0, avg bpp: 417 Time window: 2025-07-23 16:55:01 - 2025-07-23 17:59:01 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0011s User: 0.0035s Wall: 0.0031s flows/second: 43962.8 Runtime: 0.0032s