Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 01:58:58.405 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:56278 10 6438 1 2025-07-20 01:59:58.760 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35790 10 6438 1 2025-07-20 02:00:44.186 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:00:44.196 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:00:44.210 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:00:44.105 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:00:44.296 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:00:59.171 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33606 10 6438 1 2025-07-20 01:56:59.310 00:06:00.627 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 02:01:59.535 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:33978 10 6438 1 2025-07-20 02:02:59.894 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52364 10 6438 1 2025-07-20 01:58:59.307 00:06:00.632 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 02:04:00.309 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38298 10 6438 1 2025-07-20 02:05:00.711 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44382 10 6438 1 2025-07-20 02:05:44.280 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:05:44.187 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:05:43.985 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:05:44.197 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:05:44.120 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:06:01.117 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41550 10 6438 1 2025-07-20 02:07:01.483 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42330 10 6438 1 2025-07-20 02:08:01.885 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49090 10 6438 1 2025-07-20 02:03:59.311 00:06:00.626 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 02:09:02.250 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49614 10 6438 1 2025-07-20 02:10:02.669 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49292 10 6438 1 2025-07-20 02:10:44.470 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:10:44.327 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:10:44.295 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:10:44.387 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:10:44.378 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:05:59.310 00:06:00.630 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 02:11:03.097 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40092 10 6438 1 2025-07-20 02:12:03.483 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39092 10 6438 1 2025-07-20 02:13:03.885 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:38304 12 10352 1 2025-07-20 02:14:04.361 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42506 10 6438 1 2025-07-20 02:15:04.739 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33304 10 6438 1 2025-07-20 02:15:44.466 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:15:44.341 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:15:44.569 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:15:44.560 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:15:44.652 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:10:59.316 00:06:00.623 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 02:16:05.149 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49370 10 6438 1 2025-07-20 02:17:05.571 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50078 10 6438 1 2025-07-20 02:12:59.316 00:06:00.625 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 02:18:05.974 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39426 10 6438 1 2025-07-20 02:19:06.381 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42488 10 6438 1 2025-07-20 02:20:06.792 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44642 10 6438 1 2025-07-20 02:20:44.565 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:20:44.417 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:20:44.505 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:20:44.484 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:20:44.290 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:21:07.192 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58854 10 6438 1 2025-07-20 02:22:07.592 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:32850 10 6438 1 2025-07-20 02:17:59.326 00:06:00.614 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 02:23:08.003 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34986 10 6438 1 2025-07-20 02:24:08.406 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43804 10 6438 1 2025-07-20 02:19:59.325 00:06:00.620 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 02:25:08.814 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37378 10 6438 1 2025-07-20 02:25:44.526 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:25:44.639 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:25:44.300 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:25:44.543 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:25:44.382 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:26:09.223 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57720 10 6438 1 2025-07-20 02:27:09.631 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37484 10 6438 1 2025-07-20 02:28:10.033 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58552 10 6438 1 2025-07-20 02:29:10.437 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44010 10 6438 1 2025-07-20 02:24:59.328 00:06:00.615 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 02:30:10.847 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43348 10 6438 1 2025-07-20 02:30:44.535 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:30:44.652 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:30:44.681 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:30:44.519 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:30:44.765 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:31:11.269 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56592 10 6438 1 2025-07-20 02:26:59.326 00:06:00.620 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 02:32:11.677 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39768 10 6438 1 2025-07-20 02:33:12.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40984 10 6438 1 2025-07-20 02:34:12.514 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43434 10 6438 1 2025-07-20 02:35:12.923 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58580 10 6438 1 2025-07-20 02:35:44.922 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:35:44.980 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:35:44.703 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:35:44.838 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:35:44.774 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:36:13.295 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35006 10 6438 1 2025-07-20 02:31:59.331 00:06:00.615 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 02:37:13.699 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52416 10 6438 1 2025-07-20 02:38:14.109 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33588 10 6438 1 2025-07-20 02:33:59.331 00:06:00.619 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 02:39:14.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58486 10 6438 1 2025-07-20 02:40:14.920 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39424 10 6438 1 2025-07-20 02:40:44.754 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:40:44.653 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:40:44.901 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:40:44.990 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:40:44.984 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:41:15.329 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48534 10 6438 1 2025-07-20 02:42:15.710 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55484 10 6438 1 2025-07-20 02:43:16.114 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35838 10 6438 1 2025-07-20 02:38:59.334 00:06:00.614 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 02:44:16.517 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35352 10 6438 1 2025-07-20 02:45:16.917 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47468 10 6438 1 2025-07-20 02:45:45.028 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:45:44.943 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:45:44.594 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:45:44.944 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:45:44.945 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:40:59.332 00:06:00.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 02:46:17.321 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46064 10 6438 1 2025-07-20 02:47:17.726 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45220 10 6438 1 2025-07-20 02:48:18.139 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56272 10 6438 1 2025-07-20 02:49:18.537 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59894 10 6438 1 2025-07-20 02:50:18.950 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42498 10 6438 1 2025-07-20 02:50:45.007 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:50:44.919 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:50:45.212 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:50:45.050 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:50:45.294 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:45:59.335 00:06:00.615 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 02:51:19.316 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49610 10 6438 1 2025-07-20 02:52:19.729 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43300 10 6438 1 2025-07-20 02:47:59.333 00:06:00.621 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 02:53:20.142 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:32842 10 6438 1 2025-07-20 02:54:20.545 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58916 10 6438 1 2025-07-20 02:55:20.945 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48328 10 6438 1 2025-07-20 02:55:45.212 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 02:55:45.212 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 02:55:45.075 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:55:45.130 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 02:55:45.262 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 02:56:21.358 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:35482 10 6438 1 2025-07-20 02:57:21.753 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38042 10 6438 1 2025-07-20 02:52:59.337 00:06:00.615 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 02:58:22.169 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40890 10 6438 1 Summary: total flows: 137, total bytes: 419951, total packets: 1020, avg bps: 902, avg pps: 0, avg bpp: 411 Time window: 2025-07-20 01:56:59 - 2025-07-20 02:58:59 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0019s User: 0.0019s Wall: 0.0023s flows/second: 59178.1 Runtime: 0.0023s