Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-21 12:59:01.532 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34526 10 6438 1 2025-07-21 12:55:00.219 00:06:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 13:00:01.934 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:36256 10 6438 1 2025-07-21 13:01:02.307 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48864 10 6438 1 2025-07-21 13:01:26.232 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:01:26.359 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:01:26.327 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:01:26.312 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:01:26.394 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 12:57:00.223 00:06:00.484 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 13:02:02.703 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59954 10 6438 1 2025-07-21 13:03:03.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41468 10 6438 1 2025-07-21 13:04:03.515 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57422 10 6438 1 2025-07-21 13:05:03.923 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:60670 10 6438 1 2025-07-21 13:06:04.312 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60320 10 6438 1 2025-07-21 13:06:26.289 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:06:25.915 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:06:26.289 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:06:26.424 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:06:26.372 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:02:00.222 00:06:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 13:07:04.719 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49530 10 6438 1 2025-07-21 13:08:05.134 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48216 10 6438 1 2025-07-21 13:04:00.225 00:06:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 13:09:05.494 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:41812 11 6490 1 2025-07-21 13:10:05.962 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33280 10 6438 1 2025-07-21 13:11:06.376 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44308 10 6438 1 2025-07-21 13:11:26.407 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:11:26.440 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:11:26.522 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:11:26.527 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:11:26.606 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:12:06.792 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37748 10 6438 1 2025-07-21 13:13:07.205 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49850 10 6438 1 2025-07-21 13:09:00.225 00:06:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 13:14:07.618 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33404 10 6438 1 2025-07-21 13:15:08.016 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35028 10 6438 1 2025-07-21 13:11:00.227 00:06:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 13:16:08.423 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36254 10 6438 1 2025-07-21 13:16:26.741 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:16:26.657 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:16:26.696 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:16:26.311 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:16:26.659 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:17:08.833 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:38122 10 6438 1 2025-07-21 13:18:09.223 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53808 10 6438 1 2025-07-21 13:19:09.622 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:57052 10 6438 1 2025-07-21 13:20:10.028 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:51762 10 6438 1 2025-07-21 13:16:00.225 00:06:00.489 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 13:21:10.453 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36054 10 6438 1 2025-07-21 13:21:26.803 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:21:26.751 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:21:26.463 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:21:26.672 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:21:26.755 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:22:10.852 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60694 10 6438 1 2025-07-21 13:18:00.230 00:06:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 13:23:11.268 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:35498 12 10352 1 2025-07-21 13:24:11.707 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:59170 10 6438 1 2025-07-21 13:25:12.129 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36978 10 6438 1 2025-07-21 13:26:12.540 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 10 6438 1 2025-07-21 13:26:26.770 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:26:26.851 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:26:26.551 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:26:26.773 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:26:26.855 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:27:12.962 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36028 10 6438 1 2025-07-21 13:23:00.227 00:06:00.489 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 13:28:13.362 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35570 10 6438 1 2025-07-21 13:29:13.762 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:58876 10 6438 1 2025-07-21 13:25:00.232 00:06:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 13:30:14.175 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41956 10 6438 1 2025-07-21 13:31:14.579 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57970 10 6438 1 2025-07-21 13:31:26.800 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:31:26.874 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:31:26.934 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:31:26.998 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:31:26.957 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:32:14.995 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50746 10 6438 1 2025-07-21 13:33:15.395 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50450 10 6438 1 2025-07-21 13:34:15.802 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60718 10 6438 1 2025-07-21 13:30:00.230 00:06:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 13:35:16.205 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38354 10 6438 1 2025-07-21 13:36:27.040 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:36:26.843 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:36:26.910 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:36:26.644 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:36:16.612 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41728 10 6438 1 2025-07-21 13:36:26.957 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:32:00.232 00:06:00.487 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 13:37:17.013 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60362 10 6438 1 2025-07-21 13:38:17.411 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:40762 12 10352 1 2025-07-21 13:39:17.895 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35952 12 6542 1 2025-07-21 13:40:18.310 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 10 6438 1 2025-07-21 13:41:26.937 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:41:26.938 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:41:18.738 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34260 10 6438 1 2025-07-21 13:41:26.941 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:41:27.103 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:41:26.854 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:37:00.231 00:06:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 13:42:19.160 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43498 10 6438 1 2025-07-21 13:43:19.558 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42908 10 6438 1 2025-07-21 13:39:00.233 00:06:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 13:44:19.957 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59176 10 6438 1 2025-07-21 13:45:20.324 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50160 10 6438 1 2025-07-21 13:46:27.737 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:46:27.665 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:46:27.815 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:46:27.461 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:46:27.656 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:46:20.727 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46420 10 6438 1 2025-07-21 13:47:21.101 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59964 10 6438 1 2025-07-21 13:48:21.503 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37500 10 6438 1 2025-07-21 13:44:00.230 00:06:00.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 13:49:21.904 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55596 12 6542 1 2025-07-21 13:50:22.318 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53724 10 6438 1 2025-07-21 13:46:00.233 00:06:00.488 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 13:51:27.611 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:51:27.307 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:51:27.373 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:51:27.349 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:51:27.528 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:51:22.731 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42666 10 6438 1 2025-07-21 13:52:23.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57282 10 6438 1 2025-07-21 13:53:23.544 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40648 10 6438 1 2025-07-21 13:54:23.952 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39418 10 6438 1 2025-07-21 13:55:24.363 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50120 10 6438 1 2025-07-21 13:51:00.233 00:06:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 13:56:27.207 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:56:27.355 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:56:27.289 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:56:27.322 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:56:27.289 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:56:24.718 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37862 10 6438 1 2025-07-21 13:57:25.123 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55934 10 6438 1 2025-07-21 13:53:00.235 00:06:00.494 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 13:58:25.524 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35384 10 6438 1 Summary: total flows: 138, total bytes: 424986, total packets: 1041, avg bps: 885, avg pps: 0, avg bpp: 408 Time window: 2025-07-21 12:55:00 - 2025-07-21 13:59:00 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0024s User: 0.0016s Wall: 0.0018s flows/second: 77745.3 Runtime: 0.0018s