Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-24 09:58:45.632 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55460 10 6438 1 2025-07-24 09:59:46.040 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39784 10 6438 1 2025-07-24 10:00:46.449 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46646 10 6438 1 2025-07-24 09:57:01.700 00:05:00.471 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 10:01:46.862 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36240 10 6438 1 2025-07-24 09:58:01.703 00:05:00.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 10:02:49.353 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:02:49.269 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:02:49.250 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:02:49.244 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:02:49.401 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:02:47.279 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45170 10 6438 1 2025-07-24 10:03:47.694 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33116 10 6438 1 2025-07-24 10:04:48.102 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:36736 10 6438 1 2025-07-24 10:05:48.500 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46222 10 6438 1 2025-07-24 10:06:48.860 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55746 10 6438 1 2025-07-24 10:03:01.701 00:05:00.471 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 10:07:49.447 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:07:49.095 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:07:49.134 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:07:49.404 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:07:49.216 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:07:49.274 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53488 10 6438 1 2025-07-24 10:04:01.702 00:05:00.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 10:08:49.678 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34222 10 6438 1 2025-07-24 10:09:50.099 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39662 10 6438 1 2025-07-24 10:10:50.459 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57994 10 6438 1 2025-07-24 10:11:50.858 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:33802 10 6438 1 2025-07-24 10:12:49.618 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:12:49.664 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:12:49.533 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:12:49.638 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:12:49.535 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:09:01.702 00:05:00.472 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 10:12:51.232 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:35130 12 10352 1 2025-07-24 10:13:51.704 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:54122 10 6438 1 2025-07-24 10:10:01.706 00:05:00.467 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 10:14:52.140 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54594 10 6438 1 2025-07-24 10:15:52.544 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37180 10 6438 1 2025-07-24 10:16:52.906 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48782 10 6438 1 2025-07-24 10:17:49.666 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:17:49.529 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:17:49.316 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:17:49.588 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:17:49.671 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:17:53.319 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:50064 12 10352 1 2025-07-24 10:15:01.704 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 10:18:53.810 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56372 10 6438 1 2025-07-24 10:19:54.176 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:54460 10 6438 1 2025-07-24 10:16:01.705 00:05:00.469 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 10:20:54.582 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52826 10 6438 1 2025-07-24 10:21:54.985 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:48390 10 6438 1 2025-07-24 10:22:49.755 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:22:49.910 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:22:49.763 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:22:49.846 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:22:50.085 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:22:55.352 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:36840 12 10352 1 2025-07-24 10:23:55.844 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47486 10 6438 1 2025-07-24 10:21:01.704 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 10:24:56.255 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41948 10 6438 1 2025-07-24 10:22:01.707 00:05:00.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 10:25:56.654 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42806 10 6438 1 2025-07-24 10:26:57.018 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59938 10 6438 1 2025-07-24 10:27:49.618 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:27:49.840 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:27:49.923 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:27:50.117 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:27:50.043 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:27:57.431 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:34900 12 10350 1 2025-07-24 10:28:57.933 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:32794 10 6438 1 2025-07-24 10:29:58.345 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:59462 10 6438 1 2025-07-24 10:27:01.706 00:05:00.472 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 10:30:58.724 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33064 10 6438 1 2025-07-24 10:28:01.709 00:05:00.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 10:31:59.100 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50344 10 6438 1 2025-07-24 10:32:49.934 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:32:49.658 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:32:49.938 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:32:50.022 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:32:49.993 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:32:59.503 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53476 10 6438 1 2025-07-24 10:33:59.914 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:49668 10 6438 1 2025-07-24 10:35:00.338 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36720 10 6438 1 2025-07-24 10:36:00.742 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46078 10 6438 1 2025-07-24 10:33:01.707 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 10:37:01.113 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55250 10 6438 1 2025-07-24 10:37:49.773 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:37:50.147 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:37:50.062 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:37:50.068 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:37:50.065 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:34:01.709 00:05:00.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 10:38:01.473 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:43190 12 10352 1 2025-07-24 10:39:01.944 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50558 10 6438 1 2025-07-24 10:40:02.352 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59876 10 6438 1 2025-07-24 10:41:02.754 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:46472 10 6438 1 2025-07-24 10:42:03.127 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52668 10 6438 1 2025-07-24 10:42:49.895 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:42:49.978 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:42:50.087 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:42:50.060 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:42:49.995 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:39:01.708 00:05:00.472 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 10:43:03.526 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48276 10 6438 1 2025-07-24 10:40:01.712 00:05:00.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 10:44:03.929 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60050 10 6438 1 2025-07-24 10:45:04.350 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55584 10 6438 1 2025-07-24 10:46:04.750 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:55194 10 6438 1 2025-07-24 10:47:05.153 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59518 10 6438 1 2025-07-24 10:47:50.462 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:47:50.624 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:47:50.415 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:47:50.539 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:47:50.622 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:48:05.557 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:55136 12 10557 1 2025-07-24 10:45:01.713 00:05:00.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 10:49:05.990 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49970 10 6645 1 2025-07-24 10:46:01.716 00:05:00.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 10:50:06.393 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46232 10 6645 1 2025-07-24 10:51:06.808 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6645 1 2025-07-24 10:52:07.232 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:57186 10 6645 1 2025-07-24 10:52:50.342 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:52:50.424 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:52:50.181 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:52:50.334 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:52:50.416 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:53:07.604 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58734 10 6645 1 2025-07-24 10:54:08.001 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37034 10 6645 1 2025-07-24 10:51:01.716 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 10:55:08.425 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39666 10 6645 1 2025-07-24 10:52:01.719 00:05:00.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 10:56:08.791 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33796 10 6645 1 2025-07-24 10:57:09.192 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54134 10 6645 1 2025-07-24 10:57:50.352 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 10:57:50.419 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 10:57:50.363 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:57:50.424 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 10:57:50.506 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 10:58:09.590 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42094 10 6645 1 Summary: total flows: 140, total bytes: 441917, total packets: 1032, avg bps: 961, avg pps: 0, avg bpp: 428 Time window: 2025-07-24 09:57:01 - 2025-07-24 10:58:19 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0021s User: 0.0021s Wall: 0.0022s flows/second: 63146.9 Runtime: 0.0022s