Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 03:58:46.715 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:44998 12 10352 1 2025-07-20 03:59:47.195 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43502 10 6438 1 2025-07-20 04:00:46.759 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:00:46.728 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:00:46.706 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:00:46.678 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:00:46.675 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 03:55:59.362 00:06:00.621 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 04:00:47.592 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57496 10 6438 1 2025-07-20 04:01:47.999 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59806 10 6438 1 2025-07-20 04:02:48.398 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44014 10 6438 1 2025-07-20 03:57:59.361 00:06:00.625 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 04:03:48.807 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:48514 10 6438 1 2025-07-20 04:04:49.178 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39806 10 6438 1 2025-07-20 04:05:46.738 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:05:46.795 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:05:46.677 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:05:46.657 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:05:46.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 04:05:49.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45544 10 6438 1 2025-07-20 04:06:49.986 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35780 10 6438 1 2025-07-20 04:07:50.354 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36112 10 6438 1 2025-07-20 04:02:59.364 00:06:00.620 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 04:08:50.762 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45258 10 6438 1 2025-07-20 04:04:59.362 00:06:00.629 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 04:09:51.179 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57898 10 6438 1 2025-07-20 04:10:47.092 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:10:46.547 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:10:47.144 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:10:47.197 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 04:10:47.225 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:10:51.580 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44510 10 6438 1 2025-07-20 04:11:51.991 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:34646 10 6438 1 2025-07-20 04:12:52.349 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:45518 10 6438 1 2025-07-20 04:13:52.711 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45026 10 6438 1 2025-07-20 04:09:59.366 00:06:00.623 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 04:14:53.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47344 10 6438 1 2025-07-20 04:15:47.168 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:15:47.129 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:15:46.809 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:15:47.086 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:15:47.075 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 04:15:53.517 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51814 10 6438 1 2025-07-20 04:11:59.363 00:06:00.628 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 04:16:53.885 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57078 10 6438 1 2025-07-20 04:17:54.301 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43448 10 6438 1 2025-07-20 04:18:54.714 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53688 10 6438 1 2025-07-20 04:19:55.124 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33138 10 6438 1 2025-07-20 04:20:46.802 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:20:46.884 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:20:46.802 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:20:46.921 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 04:20:46.885 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:20:55.531 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49528 10 6438 1 2025-07-20 04:16:59.369 00:06:00.625 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 04:21:55.895 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60132 10 6438 1 2025-07-20 04:22:56.305 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48524 10 6438 1 2025-07-20 04:18:59.367 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-07-20 04:23:56.709 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:59804 11 6490 1 2025-07-20 04:24:57.201 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57686 10 6438 1 2025-07-20 04:25:46.952 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:25:46.611 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:25:46.858 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:25:47.200 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 04:25:46.941 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:25:57.601 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46030 10 6438 1 2025-07-20 04:26:58.013 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:44384 10 6438 1 2025-07-20 04:27:58.369 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49014 10 6438 1 2025-07-20 04:23:59.369 00:06:00.624 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 04:28:58.770 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41622 10 6438 1 2025-07-20 04:24:59.994 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-07-20 04:29:59.176 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45368 10 6438 1 2025-07-20 04:30:47.337 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:30:47.182 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:30:47.095 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:30:47.256 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:30:47.220 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 04:30:59.584 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45310 10 6438 1 2025-07-20 04:31:59.985 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39034 10 6438 1 2025-07-20 04:33:00.396 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34570 10 6438 1 2025-07-20 04:34:00.795 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39516 10 6438 1 2025-07-20 04:35:01.202 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:38254 10 6438 1 2025-07-20 04:35:47.212 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:35:47.125 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:35:47.206 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:35:47.127 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:35:47.057 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 04:30:59.371 00:06:00.623 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 04:36:01.628 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44008 10 6438 1 2025-07-20 04:31:59.369 00:06:00.628 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 04:37:02.035 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41034 10 6438 1 2025-07-20 04:38:02.442 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43660 10 6438 1 2025-07-20 04:39:02.848 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40182 10 6438 1 2025-07-20 04:40:03.266 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47712 10 6438 1 2025-07-20 04:40:47.570 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:40:47.326 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:40:47.229 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:40:47.487 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:40:47.327 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 04:41:03.666 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33982 10 6438 1 2025-07-20 04:42:04.087 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48946 10 6438 1 2025-07-20 04:37:59.371 00:06:00.624 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 04:43:04.492 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38022 10 6438 1 2025-07-20 04:38:59.369 00:06:00.631 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-20 04:44:04.898 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52464 10 6438 1 2025-07-20 04:45:05.311 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33386 10 6438 1 2025-07-20 04:45:47.360 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:45:47.447 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:45:47.431 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:45:47.259 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 04:45:47.515 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:46:05.713 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50190 10 6438 1 2025-07-20 04:47:06.115 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35222 10 6438 1 2025-07-20 04:48:06.516 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48584 10 6438 1 2025-07-20 04:49:06.921 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58468 10 6438 1 2025-07-20 04:45:59.373 00:05:00.629 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 04:44:59.376 00:06:00.622 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 04:50:07.320 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56638 10 6438 1 2025-07-20 04:50:47.626 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:50:47.655 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:50:47.461 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:50:47.543 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:50:47.623 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 04:51:07.721 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52134 10 6438 1 2025-07-20 04:52:08.106 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48672 10 6438 1 2025-07-20 04:53:08.521 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47456 10 6438 1 2025-07-20 04:54:08.923 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:49262 10 6438 1 2025-07-20 04:55:09.333 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42152 10 6438 1 2025-07-20 04:55:47.769 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 04:55:48.089 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 04:55:47.836 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:55:47.687 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 04:55:47.963 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 04:51:59.375 00:05:00.627 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 04:56:09.737 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57828 10 6438 1 2025-07-20 04:51:59.378 00:06:00.622 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-20 04:57:10.143 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43108 10 6438 1 2025-07-20 04:58:10.508 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45272 10 6438 1 Summary: total flows: 138, total bytes: 420495, total packets: 1029, avg bps: 899, avg pps: 0, avg bpp: 408 Time window: 2025-07-20 03:55:59 - 2025-07-20 04:58:20 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0029s User: 0.0007s Wall: 0.0019s flows/second: 71388.0 Runtime: 0.0020s