Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 20:59:36.223 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51402 12 6542 1 2025-07-20 21:00:36.625 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33652 10 6438 1 2025-07-20 21:01:07.061 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:01:07.071 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:01:06.882 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:01:06.979 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:01:07.109 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:01:37.021 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45506 10 6438 1 2025-07-20 20:57:59.776 00:05:00.610 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 21:02:37.380 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36636 10 6438 1 2025-07-20 20:58:59.781 00:05:00.601 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 21:03:37.786 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33338 10 6438 1 2025-07-20 21:04:38.194 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57332 10 6438 1 2025-07-20 21:05:38.595 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:32832 10 6438 1 2025-07-20 21:06:07.052 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:06:06.860 00:00:00.035 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:06:06.868 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:06:06.968 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:06:07.100 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:06:38.970 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58950 10 6438 1 2025-07-20 21:07:39.374 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51822 10 6438 1 2025-07-20 21:03:59.781 00:05:00.605 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 21:08:39.777 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:37494 10 6438 1 2025-07-20 21:04:59.784 00:05:00.599 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 21:09:40.150 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49530 10 6438 1 2025-07-20 21:10:40.551 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33472 10 6438 1 2025-07-20 21:11:07.280 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:11:07.278 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:11:07.064 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:11:07.198 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:11:07.250 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:11:40.967 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47044 10 6438 1 2025-07-20 21:12:41.373 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49152 10 6438 1 2025-07-20 21:13:41.781 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57058 10 6438 1 2025-07-20 21:09:59.784 00:05:00.606 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 21:14:42.198 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34804 10 6438 1 2025-07-20 21:10:59.785 00:05:00.602 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 21:15:42.606 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39036 10 6438 1 2025-07-20 21:16:07.407 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:16:07.328 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:16:07.081 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:16:07.325 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:16:07.047 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:16:43.013 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46758 10 6438 1 2025-07-20 21:17:43.412 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:44306 10 6438 1 2025-07-20 21:18:43.786 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58980 10 6438 1 2025-07-20 21:19:44.192 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57896 10 6438 1 2025-07-20 21:15:59.785 00:05:00.607 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 21:20:44.602 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41184 10 6438 1 2025-07-20 21:16:59.787 00:05:00.602 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 21:21:07.418 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:21:07.339 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:21:07.391 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:21:07.336 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:21:07.376 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:21:45.011 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45470 10 6438 1 2025-07-20 21:22:45.414 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52162 10 6438 1 2025-07-20 21:23:45.815 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:56996 12 10352 1 2025-07-20 21:24:46.288 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45020 10 6438 1 2025-07-20 21:25:46.693 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54220 10 6438 1 2025-07-20 21:21:59.786 00:05:00.610 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 21:26:08.255 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:26:07.367 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:26:07.736 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:26:07.737 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:26:07.820 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:26:47.109 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52018 10 6438 1 2025-07-20 21:22:59.788 00:05:00.604 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 21:27:47.512 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43826 10 6438 1 2025-07-20 21:28:47.873 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45670 10 6438 1 2025-07-20 21:29:48.281 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56222 10 6438 1 2025-07-20 21:30:48.686 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49030 10 6438 1 2025-07-20 21:31:07.600 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:31:07.582 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:31:07.474 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:31:07.517 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:31:07.414 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:31:49.104 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:43590 10 6438 1 2025-07-20 21:27:59.788 00:05:00.607 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 21:32:49.466 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35906 10 6438 1 2025-07-20 21:28:59.791 00:05:00.602 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 21:33:49.873 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39114 10 6438 1 2025-07-20 21:34:50.244 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36308 10 6438 1 2025-07-20 21:35:50.653 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35696 10 6438 1 2025-07-20 21:36:07.675 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:36:07.282 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:36:07.675 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:36:07.739 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:36:07.757 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:36:51.064 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51338 10 6438 1 2025-07-20 21:37:51.435 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37084 10 6438 1 2025-07-20 21:33:59.789 00:05:00.608 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 21:34:59.792 00:05:00.603 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 21:38:51.838 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:60042 10 6438 1 2025-07-20 21:39:52.272 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47718 10 6438 1 2025-07-20 21:40:52.678 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:38182 10 6438 1 2025-07-20 21:41:07.773 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:41:07.637 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:41:07.689 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:41:07.871 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:41:07.772 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:41:53.105 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41224 10 6438 1 2025-07-20 21:42:53.467 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:36970 10 6438 1 2025-07-20 21:39:59.793 00:05:00.606 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 21:43:53.842 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45622 10 6438 1 2025-07-20 21:44:54.251 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40718 10 6438 1 2025-07-20 21:40:59.795 00:05:00.601 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 21:46:07.918 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:45:54.660 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55644 10 6438 1 2025-07-20 21:46:07.921 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:46:07.684 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:46:07.836 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:46:07.924 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:46:55.020 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54880 10 6438 1 2025-07-20 21:47:55.423 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34290 10 6438 1 2025-07-20 21:48:55.827 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37112 10 6438 1 2025-07-20 21:45:59.797 00:05:00.603 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 21:49:56.231 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 10 6438 1 2025-07-20 21:46:59.799 00:05:00.598 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 21:51:08.225 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:50:56.634 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48600 10 6438 1 2025-07-20 21:51:07.943 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:51:07.959 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:51:08.137 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:51:08.002 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:51:57.033 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42576 10 6438 1 2025-07-20 21:52:57.435 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37696 10 6438 1 2025-07-20 21:53:57.852 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45022 10 6438 1 2025-07-20 21:54:58.269 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52460 10 6438 1 2025-07-20 21:51:59.796 00:05:00.605 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-20 21:56:07.995 00:00:00.049 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-20 21:55:58.677 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59402 10 6438 1 2025-07-20 21:56:07.718 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:56:08.178 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-20 21:56:07.979 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-20 21:56:08.260 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-20 21:52:59.800 00:05:00.599 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-20 21:56:59.107 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:56578 10 6438 1 2025-07-20 21:57:59.551 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43442 10 6438 1 Summary: total flows: 139, total bytes: 413740, total packets: 1014, avg bps: 916, avg pps: 0, avg bpp: 408 Time window: 2025-07-20 20:57:59 - 2025-07-20 21:58:09 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0026s User: 0.0009s Wall: 0.0016s flows/second: 88589.6 Runtime: 0.0016s