Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-24 16:59:33.592 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33444 10 6438 1 2025-07-24 17:00:33.947 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56954 10 6438 1 2025-07-24 16:57:01.850 00:05:00.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 17:01:34.316 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45296 10 6438 1 2025-07-24 16:58:01.853 00:05:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 17:02:34.730 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34204 10 6438 1 2025-07-24 17:02:57.728 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:02:57.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:02:57.562 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:02:57.666 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:02:57.750 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:03:35.117 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48074 10 6438 1 2025-07-24 17:04:35.517 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44602 10 6438 1 2025-07-24 17:05:35.931 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:55510 10 6438 1 2025-07-24 17:06:36.356 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33360 10 6438 1 2025-07-24 17:03:01.853 00:05:00.460 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 17:07:36.763 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37204 10 6438 1 2025-07-24 17:07:58.061 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:07:58.067 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:07:57.973 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:07:57.878 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:07:57.978 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:04:01.858 00:05:00.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 17:08:37.181 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 10 6438 1 2025-07-24 17:09:37.588 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54940 10 6438 1 2025-07-24 17:10:37.988 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42658 10 6438 1 2025-07-24 17:11:38.354 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39278 10 6438 1 2025-07-24 17:12:38.758 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:59224 10 6438 1 2025-07-24 17:12:57.780 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:12:57.969 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:12:57.742 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:12:57.698 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:12:57.872 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:09:01.855 00:05:00.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 17:13:39.187 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60790 10 6438 1 2025-07-24 17:10:01.857 00:05:00.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 17:14:39.601 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60034 10 6438 1 2025-07-24 17:15:40.010 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55864 10 6438 1 2025-07-24 17:16:40.409 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51392 10 6438 1 2025-07-24 17:17:40.814 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36152 10 6438 1 2025-07-24 17:17:58.053 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:17:58.099 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:17:58.151 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:17:57.719 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:17:57.970 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:18:41.229 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44018 10 6438 1 2025-07-24 17:15:01.855 00:05:00.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 17:19:41.625 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43048 10 6438 1 2025-07-24 17:16:01.858 00:05:00.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 17:20:42.029 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55496 10 6438 1 2025-07-24 17:21:42.435 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46866 10 6438 1 2025-07-24 17:22:42.841 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:47768 10 6438 1 2025-07-24 17:22:58.184 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:22:58.177 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:22:58.214 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:22:58.101 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:22:58.182 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:23:43.222 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41344 10 6438 1 2025-07-24 17:24:43.622 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60392 10 6438 1 2025-07-24 17:21:01.858 00:05:00.460 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 17:25:44.027 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44414 10 6438 1 2025-07-24 17:22:01.860 00:05:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 17:26:44.431 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43936 10 6438 1 2025-07-24 17:27:58.188 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:27:58.108 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:27:58.315 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:27:58.125 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:27:44.835 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46148 10 6438 1 2025-07-24 17:27:58.105 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:28:45.235 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51034 10 6438 1 2025-07-24 17:29:45.640 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34126 10 6438 1 2025-07-24 17:30:46.056 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58740 10 6438 1 2025-07-24 17:27:01.858 00:05:00.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 17:31:46.458 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59678 10 6438 1 2025-07-24 17:28:01.861 00:05:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 17:32:58.316 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:32:58.193 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:32:58.311 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:32:46.866 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54294 10 6438 1 2025-07-24 17:32:58.432 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:32:58.393 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:33:47.273 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60048 10 6438 1 2025-07-24 17:34:47.682 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45272 10 6438 1 2025-07-24 17:35:48.041 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60928 10 6438 1 2025-07-24 17:36:48.455 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52326 10 6438 1 2025-07-24 17:33:01.860 00:05:00.464 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 17:37:58.585 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:37:58.782 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:37:58.242 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:37:58.527 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:37:48.855 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:56922 10 6438 1 2025-07-24 17:37:58.610 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:34:01.862 00:05:00.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 17:38:49.281 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59162 10 6438 1 2025-07-24 17:39:49.689 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52216 10 6438 1 2025-07-24 17:40:50.113 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39894 10 6438 1 2025-07-24 17:41:50.533 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58516 10 6438 1 2025-07-24 17:42:58.627 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:42:58.401 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:42:58.647 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:42:58.424 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:42:58.544 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:42:50.893 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:50946 10 6438 1 2025-07-24 17:39:01.860 00:05:00.464 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 17:40:01.864 00:05:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 17:43:51.312 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:42222 10 6438 1 2025-07-24 17:44:51.678 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55492 10 6438 1 2025-07-24 17:45:52.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51674 10 6438 1 2025-07-24 17:46:52.523 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:46872 10 6438 1 2025-07-24 17:47:58.743 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:47:58.541 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:47:58.666 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:47:58.582 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:47:58.660 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:47:52.897 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40028 10 6438 1 2025-07-24 17:48:53.308 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59222 10 6438 1 2025-07-24 17:45:01.863 00:05:00.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 17:46:01.866 00:05:00.463 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 17:49:53.709 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41828 10 6438 1 2025-07-24 17:50:54.096 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39770 10 6438 1 2025-07-24 17:51:54.498 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49486 10 6438 1 2025-07-24 17:52:58.823 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:52:58.741 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:52:58.746 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:52:58.667 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:52:58.740 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:52:54.901 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41836 10 6438 1 2025-07-24 17:53:55.316 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40432 10 6438 1 2025-07-24 17:51:01.864 00:05:00.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-24 17:54:55.681 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48764 10 6438 1 2025-07-24 17:52:01.867 00:05:00.463 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-24 17:55:56.119 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50786 10 6438 1 2025-07-24 17:56:56.528 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49860 10 6438 1 2025-07-24 17:57:58.865 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-24 17:57:58.853 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-24 17:57:58.782 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-24 17:57:58.785 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:57:58.783 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-24 17:57:56.930 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34784 10 6438 1 Summary: total flows: 139, total bytes: 409722, total packets: 1010, avg bps: 894, avg pps: 0, avg bpp: 405 Time window: 2025-07-24 16:57:01 - 2025-07-24 17:58:07 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0009s User: 0.0028s Wall: 0.0021s flows/second: 67020.1 Runtime: 0.0021s