Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 11:58:59.820 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:32998 10 6438 1 2025-07-20 12:00:00.218 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49742 10 6438 1 2025-07-20 12:00:55.896 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:00:56.249 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:00:56.114 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:00:56.164 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:00:56.158 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:01:00.584 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40438 10 6438 1 2025-07-20 11:57:59.531 00:05:00.681 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 12:02:01.005 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45094 10 6438 1 2025-07-20 11:58:59.533 00:05:00.676 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 12:03:01.424 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54206 10 6438 1 2025-07-20 12:04:01.832 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60864 10 6438 1 2025-07-20 12:05:02.252 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43024 10 6438 1 2025-07-20 12:05:56.197 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:05:56.354 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:05:56.281 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:05:56.114 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:05:56.191 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:06:02.651 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:42286 10 6438 1 2025-07-20 12:07:03.030 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51614 10 6438 1 2025-07-20 12:03:59.532 00:05:00.682 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 12:08:03.438 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38700 10 6438 1 2025-07-20 12:04:59.536 00:05:00.677 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 12:09:03.840 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:39756 10 6438 1 2025-07-20 12:10:04.224 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44844 10 6438 1 2025-07-20 12:10:56.376 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:10:56.042 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:10:56.230 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:10:56.294 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:10:56.436 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:11:04.590 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46684 10 6438 1 2025-07-20 12:12:04.950 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43676 10 6438 1 2025-07-20 12:13:05.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35510 10 6438 1 2025-07-20 12:09:59.545 00:05:00.671 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 12:14:05.765 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40876 10 6438 1 2025-07-20 12:10:59.547 00:05:00.666 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 12:15:06.177 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35152 10 6438 1 2025-07-20 12:15:56.500 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:15:56.285 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:15:56.508 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:15:56.512 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:15:56.591 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:16:06.585 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48902 10 6438 1 2025-07-20 12:17:06.982 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49732 10 6438 1 2025-07-20 12:18:07.389 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41532 10 6438 1 2025-07-20 12:19:07.794 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33292 10 6438 1 2025-07-20 12:15:59.546 00:05:00.669 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 12:20:08.154 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45158 10 6438 1 2025-07-20 12:20:56.687 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:16:59.547 00:05:00.664 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 12:20:56.611 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:20:56.559 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:20:56.605 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:20:56.614 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:21:08.513 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55116 10 6438 1 2025-07-20 12:22:08.919 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43844 10 6438 1 2025-07-20 12:23:09.278 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35000 10 6438 1 2025-07-20 12:24:09.688 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46000 10 6438 1 2025-07-20 12:25:10.115 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34468 10 6438 1 2025-07-20 12:25:56.629 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:25:56.646 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:25:56.754 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:25:56.546 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:25:56.545 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:21:59.545 00:05:00.674 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 12:26:10.479 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44388 10 6438 1 2025-07-20 12:22:59.548 00:05:00.669 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 12:27:10.882 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48760 10 6438 1 2025-07-20 12:28:11.251 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45152 10 6438 1 2025-07-20 12:29:11.667 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52444 10 6438 1 2025-07-20 12:30:12.093 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 10 6438 1 2025-07-20 12:30:56.782 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:30:56.730 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:30:56.942 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:30:56.853 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:30:57.025 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:31:12.497 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53856 10 6438 1 2025-07-20 12:27:59.547 00:05:00.673 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 12:32:12.900 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38804 10 6438 1 2025-07-20 12:28:59.550 00:05:00.668 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 12:33:13.269 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45972 10 6438 1 2025-07-20 12:34:13.671 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50832 10 6438 1 2025-07-20 12:35:14.104 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48462 10 6438 1 2025-07-20 12:35:56.910 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:35:56.925 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:35:56.648 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:35:56.826 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:35:56.820 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:36:14.508 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37786 10 6438 1 2025-07-20 12:37:14.929 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:45318 10 6438 1 2025-07-20 12:33:59.549 00:05:00.673 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 12:38:15.320 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38570 10 6438 1 2025-07-20 12:34:59.552 00:05:00.668 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 12:39:15.724 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49992 10 6438 1 2025-07-20 12:40:16.144 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55330 10 6438 1 2025-07-20 12:40:57.025 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:40:56.854 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:40:56.976 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:40:57.188 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:40:57.059 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:41:16.547 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39892 10 6438 1 2025-07-20 12:42:16.954 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48458 10 6438 1 2025-07-20 12:43:17.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47510 10 6438 1 2025-07-20 12:39:59.549 00:05:00.673 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 12:44:17.725 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33294 10 6438 1 2025-07-20 12:40:59.552 00:05:00.668 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 12:45:18.136 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48590 10 6438 1 2025-07-20 12:45:57.030 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:45:56.892 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:45:56.853 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:45:56.935 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:45:56.935 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:46:18.544 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46510 10 6438 1 2025-07-20 12:47:18.951 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58338 10 6438 1 2025-07-20 12:48:19.372 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:50934 10 6438 1 2025-07-20 12:49:19.735 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57322 10 6438 1 2025-07-20 12:45:59.551 00:05:00.675 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 12:50:20.149 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48950 10 6438 1 2025-07-20 12:50:57.295 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:50:57.001 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:50:57.061 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:50:57.252 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:46:59.556 00:05:00.669 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 12:50:57.146 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:51:20.555 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40522 10 6438 1 2025-07-20 12:52:20.961 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:49422 10 6438 1 2025-07-20 12:53:21.318 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50612 10 6438 1 2025-07-20 12:54:21.687 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43426 10 6438 1 2025-07-20 12:55:22.107 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38944 10 6438 1 2025-07-20 12:55:57.207 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 12:55:57.137 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 12:55:56.781 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:55:57.124 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 12:55:57.258 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 12:51:59.553 00:05:00.675 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 12:56:22.511 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36026 10 6438 1 2025-07-20 12:52:59.556 00:05:00.670 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 12:57:22.920 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36208 10 6438 1 2025-07-20 12:58:23.324 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56714 10 6438 1 Summary: total flows: 140, total bytes: 416160, total packets: 1020, avg bps: 916, avg pps: 0, avg bpp: 408 Time window: 2025-07-20 11:57:59 - 2025-07-20 12:58:33 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0013s User: 0.0027s Wall: 0.0035s flows/second: 39831.9 Runtime: 0.0035s