Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-19 20:58:57.473 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37410 10 6438 1 2025-07-19 20:59:57.884 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59270 10 6438 1 2025-07-19 21:00:38.228 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:00:38.005 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:00:38.171 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:00:38.146 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:00:38.216 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 20:55:59.190 00:06:00.645 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-19 21:00:58.290 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35404 10 6438 1 2025-07-19 21:01:58.658 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41582 10 6438 1 2025-07-19 20:57:59.188 00:06:00.650 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-19 21:02:59.045 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:42934 12 10352 1 2025-07-19 21:03:59.486 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43842 10 6438 1 2025-07-19 21:04:59.885 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54708 12 6542 1 2025-07-19 21:05:38.253 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:05:38.176 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:05:38.086 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:05:38.170 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:05:38.294 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 21:06:00.296 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58726 10 6438 1 2025-07-19 21:07:00.698 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56186 10 6438 1 2025-07-19 21:02:59.192 00:06:00.645 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-19 21:08:01.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48034 10 6438 1 2025-07-19 21:09:01.529 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55104 10 6438 1 2025-07-19 21:04:59.189 00:06:00.655 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-19 21:10:01.936 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:37060 10 6438 1 2025-07-19 21:10:38.325 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:10:38.252 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:10:38.266 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:10:38.243 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:10:38.128 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 21:11:02.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57456 10 6438 1 2025-07-19 21:12:02.763 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43020 10 6438 1 2025-07-19 21:13:03.183 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60862 10 6438 1 2025-07-19 21:14:03.605 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60576 10 6438 1 2025-07-19 21:09:59.193 00:06:00.650 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-19 21:15:03.967 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34820 10 6438 1 2025-07-19 21:15:38.942 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:15:38.663 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:15:38.947 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:15:38.839 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 21:15:39.031 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:16:04.376 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37868 10 6438 1 2025-07-19 21:11:59.193 00:06:00.654 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-19 21:17:04.782 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59402 10 6438 1 2025-07-19 21:18:05.200 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37508 10 6438 1 2025-07-19 21:19:05.602 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56288 10 6438 1 2025-07-19 21:20:05.962 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55580 10 6438 1 2025-07-19 21:20:38.613 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:20:38.589 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:20:38.486 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:20:38.531 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:20:38.432 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 21:21:06.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40824 10 6438 1 2025-07-19 21:16:59.196 00:06:00.648 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-19 21:22:06.776 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:56940 10 6438 1 2025-07-19 21:23:07.143 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:59356 10 6438 1 2025-07-19 21:18:59.195 00:06:00.654 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-19 21:24:07.519 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50036 10 6438 1 2025-07-19 21:25:07.930 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44984 10 6438 1 2025-07-19 21:25:38.639 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:25:38.550 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:25:38.414 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:25:38.557 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:25:38.390 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 21:26:08.347 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52008 10 6438 1 2025-07-19 21:27:08.744 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43354 10 6438 1 2025-07-19 21:28:09.115 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52782 10 6438 1 2025-07-19 21:23:59.197 00:06:00.648 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-19 21:29:09.519 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60198 10 6438 1 2025-07-19 21:30:09.921 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35954 10 6438 1 2025-07-19 21:30:38.993 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:30:38.772 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:30:38.684 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:30:38.910 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:30:38.908 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 21:25:59.197 00:06:00.654 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-19 21:31:10.340 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56742 10 6438 1 2025-07-19 21:32:10.703 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38354 10 6438 1 2025-07-19 21:33:11.109 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:49324 11 6490 1 2025-07-19 21:34:11.561 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55254 10 6438 1 2025-07-19 21:35:11.981 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59230 10 6438 1 2025-07-19 21:35:38.855 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:35:38.938 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:35:38.876 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:35:38.772 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:35:38.843 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 21:30:59.200 00:06:00.652 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-19 21:36:12.392 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33882 10 6438 1 2025-07-19 21:37:12.786 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54378 10 6438 1 2025-07-19 21:32:59.199 00:06:00.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-19 21:38:13.150 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52222 10 6438 1 2025-07-19 21:39:13.555 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40108 10 6438 1 2025-07-19 21:40:13.964 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52978 10 6438 1 2025-07-19 21:40:38.797 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:40:38.827 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:40:38.856 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:40:38.691 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 21:40:38.940 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:41:14.364 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58298 10 6438 1 2025-07-19 21:42:14.729 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40444 10 6438 1 2025-07-19 21:37:59.203 00:06:00.653 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-19 21:43:15.139 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36760 10 6438 1 2025-07-19 21:44:15.541 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60034 10 6438 1 2025-07-19 21:39:59.202 00:06:00.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-19 21:45:15.958 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:47770 10 6438 1 2025-07-19 21:45:39.130 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:45:38.885 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:45:38.609 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:45:39.047 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:45:39.046 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 21:46:16.379 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39324 10 6438 1 2025-07-19 21:47:16.775 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35882 10 6438 1 2025-07-19 21:48:17.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57072 10 6438 1 2025-07-19 21:49:17.586 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59600 10 6438 1 2025-07-19 21:44:59.205 00:06:00.658 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-19 21:50:17.984 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:58402 10 6438 1 2025-07-19 21:50:39.315 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:50:39.003 00:00:00.036 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:50:39.164 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:50:39.181 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 21:50:39.248 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:51:18.436 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:32828 11 6490 1 2025-07-19 21:46:59.203 00:06:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-19 21:52:18.903 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54028 10 6438 1 2025-07-19 21:53:19.316 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56972 10 6438 1 2025-07-19 21:54:19.726 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:57842 10 6438 1 2025-07-19 21:55:20.119 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58258 10 6438 1 2025-07-19 21:55:39.236 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-19 21:55:38.948 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-19 21:55:38.998 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:55:39.154 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-19 21:55:39.277 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-19 21:56:20.484 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51760 10 6438 1 2025-07-19 21:51:59.206 00:06:00.661 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-19 21:57:20.852 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52368 10 6438 1 2025-07-19 21:58:21.273 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55596 10 6438 1 Summary: total flows: 137, total bytes: 420159, total packets: 1024, avg bps: 895, avg pps: 0, avg bpp: 410 Time window: 2025-07-19 20:55:59 - 2025-07-19 21:58:31 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0031s User: 0.0008s Wall: 0.0022s flows/second: 61077.8 Runtime: 0.0023s