Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 10:58:50.640 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59492 10 6438 1 2025-07-25 10:55:02.221 00:06:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 10:59:51.042 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60552 10 6438 1 2025-07-25 11:00:51.440 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59300 10 6438 1 2025-07-25 11:01:51.847 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47634 10 6438 1 2025-07-25 11:02:52.261 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38424 10 6438 1 2025-07-25 11:03:19.387 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:03:19.510 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:03:19.452 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:03:19.400 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:03:19.303 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:03:52.623 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41528 10 6438 1 2025-07-25 11:00:02.219 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 11:04:53.026 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38130 10 6438 1 2025-07-25 11:05:53.387 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60144 10 6438 1 2025-07-25 11:02:02.222 00:06:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 11:06:53.795 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35576 10 6438 1 2025-07-25 11:07:54.198 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60832 10 6438 1 2025-07-25 11:08:19.636 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:08:19.842 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:08:19.552 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:08:19.623 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:08:19.708 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:08:54.604 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36306 10 6438 1 2025-07-25 11:09:54.964 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38190 10 6438 1 2025-07-25 11:10:55.331 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57994 10 6438 1 2025-07-25 11:07:02.222 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 11:11:55.750 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51588 10 6438 1 2025-07-25 11:12:56.155 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38188 10 6438 1 2025-07-25 11:13:19.661 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:13:19.686 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:13:19.579 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:13:19.614 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:13:19.578 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:09:02.229 00:06:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 11:13:56.520 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:36868 10 6438 1 2025-07-25 11:14:56.965 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60856 10 6438 1 2025-07-25 11:15:57.371 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39906 10 6438 1 2025-07-25 11:16:57.786 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39376 10 6438 1 2025-07-25 11:17:58.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45114 10 6438 1 2025-07-25 11:18:19.832 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:18:19.794 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:18:19.857 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:18:19.940 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:18:20.023 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:14:02.228 00:06:00.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 11:18:58.599 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34830 10 6438 1 2025-07-25 11:19:59.019 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37910 10 6438 1 2025-07-25 11:16:02.232 00:06:00.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 11:20:59.430 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53804 10 6438 1 2025-07-25 11:21:59.855 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:36250 10 6438 1 2025-07-25 11:23:00.282 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54504 10 6438 1 2025-07-25 11:23:19.960 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:23:19.916 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:23:19.877 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:23:19.945 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:23:19.877 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:24:00.681 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55144 10 6438 1 2025-07-25 11:25:01.042 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42450 10 6438 1 2025-07-25 11:21:02.230 00:06:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 11:26:01.449 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46458 10 6438 1 2025-07-25 11:27:01.848 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:52772 10 6438 1 2025-07-25 11:23:02.233 00:06:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 11:28:02.273 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35732 10 6438 1 2025-07-25 11:28:19.946 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:28:19.878 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:28:19.899 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:28:19.948 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:28:20.032 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:29:02.678 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60202 10 6438 1 2025-07-25 11:30:03.105 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54302 10 6438 1 2025-07-25 11:31:03.472 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59040 10 6438 1 2025-07-25 11:32:03.831 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38290 10 6438 1 2025-07-25 11:28:02.233 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 11:33:04.236 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44828 10 6438 1 2025-07-25 11:33:20.410 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:33:20.517 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:33:20.457 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:33:20.636 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:33:20.720 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:34:04.643 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44960 10 6438 1 2025-07-25 11:30:02.236 00:06:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 11:35:05.048 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41736 10 6438 1 2025-07-25 11:36:05.446 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58494 10 6438 1 2025-07-25 11:37:05.848 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:47816 10 6438 1 2025-07-25 11:38:06.262 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50608 10 6438 1 2025-07-25 11:38:20.276 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:38:20.214 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:38:20.129 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:38:20.225 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:38:20.307 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:39:06.664 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50870 10 6438 1 2025-07-25 11:35:02.235 00:06:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 11:40:07.101 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48422 10 6438 1 2025-07-25 11:41:07.505 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43506 10 6438 1 2025-07-25 11:37:02.236 00:06:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 11:42:07.910 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34490 10 6438 1 2025-07-25 11:43:08.320 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:34652 10 6438 1 2025-07-25 11:43:20.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:43:20.397 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:43:20.204 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:43:20.319 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:43:20.402 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:44:08.682 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38978 10 6438 1 2025-07-25 11:45:09.040 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36384 10 6438 1 2025-07-25 11:46:09.463 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:52538 10 6438 1 2025-07-25 11:42:02.234 00:06:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 11:47:09.853 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:58846 10 6438 1 2025-07-25 11:48:20.254 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:48:10.275 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60550 10 6438 1 2025-07-25 11:48:20.328 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:48:20.075 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:48:20.254 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:48:20.338 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:44:02.240 00:06:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 11:49:10.647 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50344 10 6438 1 2025-07-25 11:50:11.065 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54294 10 6438 1 2025-07-25 11:51:11.472 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39934 10 6438 1 2025-07-25 11:52:11.873 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33114 10 6438 1 2025-07-25 11:53:21.592 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:53:21.510 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:53:21.509 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:53:21.211 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:53:21.509 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:53:12.276 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45454 10 6438 1 2025-07-25 11:49:02.239 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 11:54:12.678 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53858 10 6438 1 2025-07-25 11:55:13.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42722 10 6438 1 2025-07-25 11:51:02.241 00:06:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 11:56:13.513 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41290 10 6438 1 2025-07-25 11:57:13.915 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42400 10 6438 1 2025-07-25 11:58:20.812 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 11:58:20.644 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 11:58:20.691 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 11:58:20.322 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 11:58:14.320 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41714 10 6438 1 2025-07-25 11:58:20.729 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 137, total bytes: 416037, total packets: 1018, avg bps: 875, avg pps: 0, avg bpp: 408 Time window: 2025-07-25 10:55:02 - 2025-07-25 11:58:24 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0017s User: 0.0017s Wall: 0.0013s flows/second: 101792.7 Runtime: 0.0014s