Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-21 09:58:48.811 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60018 10 6438 1 2025-07-21 09:59:49.218 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36456 10 6438 1 2025-07-21 09:57:00.175 00:04:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 10:00:49.620 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35434 10 6438 1 2025-07-21 10:01:22.677 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:01:22.760 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:01:22.534 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:01:22.594 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:01:22.761 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:01:50.030 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:55888 10 6438 1 2025-07-21 09:59:00.177 00:04:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 10:02:50.409 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55204 10 6438 1 2025-07-21 10:03:50.808 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40396 10 6438 1 2025-07-21 10:04:51.215 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42836 10 6438 1 2025-07-21 10:02:00.175 00:04:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 10:05:51.579 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36646 10 6438 1 2025-07-21 10:06:22.803 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:06:22.662 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:06:22.466 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:06:22.722 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:06:22.792 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:06:51.984 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47590 10 6438 1 2025-07-21 10:04:00.177 00:04:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 10:07:52.386 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57620 10 6438 1 2025-07-21 10:08:52.748 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:58274 10 6438 1 2025-07-21 10:09:00.182 00:01:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-21 10:09:53.167 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40020 10 6438 1 2025-07-21 10:07:00.180 00:04:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 10:10:53.576 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52434 10 6438 1 2025-07-21 10:11:22.923 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:11:22.792 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:11:22.749 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:11:22.841 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:11:22.713 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:11:53.982 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34692 10 6438 1 2025-07-21 10:12:54.394 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34250 10 6438 1 2025-07-21 10:13:54.761 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51196 10 6438 1 2025-07-21 10:11:00.183 00:04:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 10:14:55.172 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58242 10 6438 1 2025-07-21 10:12:00.182 00:04:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 10:15:55.575 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56566 10 6438 1 2025-07-21 10:16:22.777 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:16:22.635 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:16:22.906 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:16:22.845 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:16:22.988 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:16:55.935 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49740 10 6438 1 2025-07-21 10:17:56.354 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:48526 12 10352 1 2025-07-21 10:18:56.830 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45170 10 6438 1 2025-07-21 10:16:00.185 00:04:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 10:19:57.231 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:39762 10 6438 1 2025-07-21 10:17:00.182 00:04:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 10:20:57.607 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47930 10 6438 1 2025-07-21 10:21:23.644 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:21:23.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:21:23.634 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:21:23.563 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:21:23.558 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:21:58.010 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59828 10 6438 1 2025-07-21 10:22:58.412 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:50992 12 10350 1 2025-07-21 10:23:58.892 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60654 12 6542 1 2025-07-21 10:21:00.185 00:04:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 10:24:59.302 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41962 10 6438 1 2025-07-21 10:22:00.184 00:04:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 10:25:59.719 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46132 10 6438 1 2025-07-21 10:26:23.023 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:26:23.179 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:26:22.962 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:26:22.940 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:26:23.174 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:27:00.156 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:53246 10 6438 1 2025-07-21 10:28:00.539 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56094 10 6438 1 2025-07-21 10:29:00.936 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:43630 10 6438 1 2025-07-21 10:26:00.186 00:04:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 10:30:01.368 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38920 10 6438 1 2025-07-21 10:31:01.774 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60196 10 6438 1 2025-07-21 10:31:23.126 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:31:23.335 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:31:23.255 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:31:23.043 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:31:23.361 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:27:00.184 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-07-21 10:32:02.187 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41932 10 6438 1 2025-07-21 10:33:00.637 00:00:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 1 52 1 2025-07-21 10:33:02.584 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43160 10 6438 1 2025-07-21 10:34:02.988 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45212 10 6438 1 2025-07-21 10:31:00.187 00:04:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 10:35:03.409 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35622 10 6438 1 2025-07-21 10:36:03.827 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42152 10 6438 1 2025-07-21 10:36:23.349 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:36:23.422 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:36:23.312 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:36:23.267 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:36:23.278 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:37:04.225 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40840 10 6438 1 2025-07-21 10:34:00.184 00:04:00.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 10:38:04.630 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59656 10 6438 1 2025-07-21 10:39:05.030 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55108 10 6438 1 2025-07-21 10:36:00.188 00:04:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 10:40:05.430 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:59890 10 6438 1 2025-07-21 10:41:05.803 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:34708 10 6438 1 2025-07-21 10:41:23.528 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:41:23.527 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:41:23.490 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:41:23.445 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:41:23.529 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:41:00.190 00:01:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-21 10:42:06.190 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48536 10 6438 1 2025-07-21 10:39:00.187 00:04:00.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 10:43:06.597 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51878 10 6438 1 2025-07-21 10:44:06.968 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55098 10 6438 1 2025-07-21 10:45:07.380 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43816 10 6438 1 2025-07-21 10:46:07.786 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55870 10 6438 1 2025-07-21 10:46:23.580 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:46:23.565 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:46:23.427 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:46:23.496 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:46:23.565 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:43:00.192 00:04:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 10:47:08.190 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53680 10 6438 1 2025-07-21 10:44:00.189 00:04:00.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 10:48:08.589 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:38220 12 10352 1 2025-07-21 10:49:09.073 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36732 10 6438 1 2025-07-21 10:50:09.477 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43064 10 6438 1 2025-07-21 10:51:09.880 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41338 10 6438 1 2025-07-21 10:51:23.777 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:51:23.493 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:51:23.667 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:51:23.696 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:51:23.796 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:48:00.191 00:04:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 10:52:10.284 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59502 10 6438 1 2025-07-21 10:49:00.191 00:04:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 10:53:10.686 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:35308 12 10352 1 2025-07-21 10:54:11.178 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36458 10 6438 1 2025-07-21 10:55:11.583 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43032 10 6438 1 2025-07-21 10:56:23.791 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 10:56:23.709 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:56:23.559 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 10:56:11.985 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:36340 10 6438 1 2025-07-21 10:56:23.636 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 10:56:23.647 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 10:53:00.202 00:04:00.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 10:57:12.382 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46294 10 6438 1 2025-07-21 10:54:00.191 00:04:00.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 10:58:12.809 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55226 10 6438 1 Summary: total flows: 146, total bytes: 432041, total packets: 1032, avg bps: 938, avg pps: 0, avg bpp: 418 Time window: 2025-07-21 09:57:00 - 2025-07-21 10:58:23 Total flows processed: 146, passed: 146, Blocks skipped: 0, Bytes read: 15248 Sys: 0.0027s User: 0.0009s Wall: 0.0016s flows/second: 89790.1 Runtime: 0.0016s