Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-29 05:58:49.867 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48614 10 6452 1 2025-07-29 05:55:04.229 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 05:59:50.278 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37120 10 6452 1 2025-07-29 06:00:09.212 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:00:08.924 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:00:09.029 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:00:08.851 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:00:09.129 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:00:50.683 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48156 10 6452 1 2025-07-29 06:01:51.111 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37988 10 6452 1 2025-07-29 05:59:04.226 00:04:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 06:02:51.512 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54486 11 6504 1 2025-07-29 06:00:04.230 00:04:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 06:03:51.932 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:50402 10 6452 1 2025-07-29 06:05:08.847 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:04:52.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57642 10 6452 1 2025-07-29 06:05:08.764 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:05:08.877 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:05:08.816 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:05:08.763 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:05:52.759 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35340 10 6452 1 2025-07-29 06:06:53.180 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37496 10 6452 1 2025-07-29 06:04:04.230 00:04:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 06:07:53.587 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59302 10 6452 1 2025-07-29 06:05:04.232 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 06:08:53.991 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41892 10 6452 1 2025-07-29 06:09:54.387 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39042 10 6452 1 2025-07-29 06:10:09.038 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:10:09.197 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:10:09.271 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:10:09.063 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:10:08.955 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:10:54.794 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56282 10 6452 1 2025-07-29 06:11:55.196 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50970 10 6452 1 2025-07-29 06:09:04.232 00:04:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 06:12:55.612 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36302 10 6452 1 2025-07-29 06:10:04.234 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 06:13:55.973 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40862 10 6452 1 2025-07-29 06:15:09.069 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:15:09.244 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:14:56.373 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:40514 10 6452 1 2025-07-29 06:15:08.975 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:15:09.068 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:15:08.985 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:15:04.235 00:01:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-29 06:15:56.731 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42500 10 6452 1 2025-07-29 06:16:57.139 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33048 10 6452 1 2025-07-29 06:14:04.233 00:04:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 06:17:57.505 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57772 10 6452 1 2025-07-29 06:17:04.238 00:02:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-29 06:18:57.915 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58986 10 6452 1 2025-07-29 06:20:09.363 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:20:09.454 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:19:58.311 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47566 10 6452 1 2025-07-29 06:20:09.455 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:20:09.412 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:20:09.264 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:20:04.238 00:01:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-29 06:20:58.671 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33928 10 6452 1 2025-07-29 06:21:59.103 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43616 10 6452 1 2025-07-29 06:19:04.235 00:04:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 06:22:59.507 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33532 10 6452 1 2025-07-29 06:23:59.907 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47532 12 6556 1 2025-07-29 06:24:04.237 00:01:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-29 06:25:09.566 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:25:09.323 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:25:09.483 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:25:09.353 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:25:09.484 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:25:00.308 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60192 10 6452 1 2025-07-29 06:22:04.238 00:04:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 06:26:00.679 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39922 10 6452 1 2025-07-29 06:27:01.109 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46140 10 6452 1 2025-07-29 06:26:04.237 00:02:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-29 06:28:01.521 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37654 10 6452 1 2025-07-29 06:29:01.946 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:44366 12 10365 1 2025-07-29 06:29:04.238 00:01:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-29 06:30:09.561 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:30:09.553 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:30:09.477 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:30:09.479 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:30:09.478 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:30:02.426 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56498 10 6452 1 2025-07-29 06:27:04.240 00:04:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 06:31:02.833 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:59508 10 6452 1 2025-07-29 06:32:03.263 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59716 10 6452 1 2025-07-29 06:31:04.241 00:02:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-29 06:33:03.633 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47900 10 6452 1 2025-07-29 06:34:04.034 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55444 10 6452 1 2025-07-29 06:34:04.244 00:01:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-29 06:35:09.556 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:35:09.655 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:35:09.619 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:35:09.331 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:35:09.473 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:35:04.436 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46170 10 6452 1 2025-07-29 06:32:04.247 00:04:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 06:36:04.842 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:35908 10 6452 1 2025-07-29 06:37:05.233 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41754 10 6452 1 2025-07-29 06:38:05.643 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51096 10 6452 1 2025-07-29 06:39:06.050 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51884 10 6452 1 2025-07-29 06:36:04.245 00:04:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 06:40:09.799 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:40:09.636 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:40:09.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:40:09.669 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:40:09.718 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:40:06.458 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40564 10 6452 1 2025-07-29 06:37:04.248 00:04:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 06:41:06.858 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34342 10 6452 1 2025-07-29 06:42:07.281 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44674 10 6452 1 2025-07-29 06:42:04.249 00:01:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-29 06:43:07.683 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52266 10 6452 1 2025-07-29 06:44:08.106 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41882 10 6452 1 2025-07-29 06:41:04.245 00:04:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 06:45:09.912 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:45:09.839 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:45:09.879 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:45:09.445 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:45:09.830 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:45:08.513 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55662 10 6452 1 2025-07-29 06:44:04.248 00:02:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-29 06:46:08.914 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:49880 10 6452 1 2025-07-29 06:47:09.288 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35234 10 6452 1 2025-07-29 06:47:04.250 00:01:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-29 06:48:09.687 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:35098 11 6504 1 2025-07-29 06:49:10.141 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40676 10 6452 1 2025-07-29 06:46:04.247 00:04:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 06:50:09.927 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:50:09.794 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:50:09.886 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:50:09.627 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:50:09.845 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:50:10.544 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49098 10 6452 1 2025-07-29 06:49:04.249 00:02:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-29 06:51:10.911 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33104 10 6452 1 2025-07-29 06:52:11.316 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36740 10 6452 1 2025-07-29 06:52:04.252 00:01:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-29 06:53:11.718 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:39336 12 10365 1 2025-07-29 06:54:12.205 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43976 10 6452 1 2025-07-29 06:51:04.248 00:04:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-29 06:55:09.861 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-29 06:55:09.800 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:55:10.230 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-29 06:55:10.224 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-29 06:55:10.306 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-29 06:55:12.610 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44164 10 6452 1 2025-07-29 06:56:12.970 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:57982 10 6452 1 2025-07-29 06:57:13.392 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:39020 10 6452 1 2025-07-29 06:54:04.253 00:04:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-29 06:58:13.759 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:35460 10 6452 1 Summary: total flows: 151, total bytes: 425157, total packets: 1030, avg bps: 895, avg pps: 0, avg bpp: 412 Time window: 2025-07-29 05:55:04 - 2025-07-29 06:58:24 Total flows processed: 151, passed: 151, Blocks skipped: 0, Bytes read: 15768 Sys: 0.0025s User: 0.0017s Wall: 0.0019s flows/second: 77596.2 Runtime: 0.0020s