Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-21 13:59:25.924 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39034 10 6438 1 2025-07-21 14:00:26.347 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41222 10 6438 1 2025-07-21 14:01:27.346 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:01:27.217 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:01:27.518 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:01:27.426 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:01:27.509 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:01:26.753 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50108 10 6438 1 2025-07-21 14:02:27.122 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55554 10 6438 1 2025-07-21 13:58:00.234 00:06:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 14:03:27.487 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55400 10 6438 1 2025-07-21 14:04:27.889 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:47662 10 6438 1 2025-07-21 14:00:00.238 00:06:00.492 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 14:05:28.308 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39410 10 6438 1 2025-07-21 14:06:27.640 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:06:27.527 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:06:27.411 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:06:27.516 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:06:27.599 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:06:28.668 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47674 10 6438 1 2025-07-21 14:07:29.099 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40044 10 6438 1 2025-07-21 14:08:29.501 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34752 10 6438 1 2025-07-21 14:09:29.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53668 10 6438 1 2025-07-21 14:05:00.236 00:06:00.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 14:10:30.316 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58878 10 6438 1 2025-07-21 14:11:27.758 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:11:27.542 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:11:27.810 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:11:27.757 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:11:27.840 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:11:30.680 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50218 10 6438 1 2025-07-21 14:07:00.239 00:06:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 14:12:31.112 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35620 10 6438 1 2025-07-21 14:13:31.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42368 10 6438 1 2025-07-21 14:14:31.931 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:39090 10 6438 1 2025-07-21 14:15:32.367 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40990 10 6438 1 2025-07-21 14:16:27.607 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:16:27.593 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:16:27.740 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:16:27.590 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:16:27.673 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:16:32.780 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56662 10 6438 1 2025-07-21 14:12:00.237 00:06:00.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 14:17:33.181 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36790 10 6438 1 2025-07-21 14:18:33.586 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34508 10 6438 1 2025-07-21 14:14:00.241 00:06:00.495 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 14:19:33.994 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 10 6438 1 2025-07-21 14:20:34.368 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38752 10 6438 1 2025-07-21 14:21:28.018 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:21:28.057 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:21:27.857 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:21:27.863 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:21:27.935 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:21:34.783 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33568 10 6438 1 2025-07-21 14:22:35.186 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:44646 10 6438 1 2025-07-21 14:23:35.605 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55670 10 6438 1 2025-07-21 14:19:00.241 00:06:00.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 14:24:36.015 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56598 10 6438 1 2025-07-21 14:25:36.436 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40066 10 6438 1 2025-07-21 14:21:00.243 00:06:00.495 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 14:26:27.861 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:26:27.936 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:26:28.091 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:26:28.126 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:26:28.175 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:26:36.801 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34976 10 6438 1 2025-07-21 14:27:37.206 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32964 10 6438 1 2025-07-21 14:28:37.607 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41110 10 6438 1 2025-07-21 14:29:37.973 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51006 10 6438 1 2025-07-21 14:30:38.379 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54488 10 6438 1 2025-07-21 14:26:00.243 00:06:00.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 14:31:27.826 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:31:27.826 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:31:27.913 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:31:27.871 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:31:27.908 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:31:38.785 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60924 10 6438 1 2025-07-21 14:32:39.189 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42574 10 6438 1 2025-07-21 14:28:00.245 00:06:00.496 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 14:33:39.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51454 10 6438 1 2025-07-21 14:34:39.994 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35146 10 6438 1 2025-07-21 14:35:40.358 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:32884 10 6438 1 2025-07-21 14:36:28.134 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:36:28.209 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:36:27.998 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:36:27.868 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:36:27.951 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:36:40.725 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45570 10 6438 1 2025-07-21 14:37:41.151 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57462 10 6438 1 2025-07-21 14:33:00.243 00:06:00.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 14:38:41.561 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58738 10 6438 1 2025-07-21 14:39:41.956 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49466 10 6438 1 2025-07-21 14:35:00.254 00:06:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 14:40:42.362 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35106 10 6438 1 2025-07-21 14:41:28.300 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:41:28.306 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:41:28.404 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:41:28.299 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:41:28.382 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:41:42.719 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44640 10 6438 1 2025-07-21 14:42:43.132 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57468 10 6438 1 2025-07-21 14:43:43.537 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45976 10 6438 1 2025-07-21 14:44:43.932 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56378 10 6438 1 2025-07-21 14:40:00.254 00:06:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 14:45:44.349 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:52808 11 6490 1 2025-07-21 14:46:28.213 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:46:28.422 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:46:28.243 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:46:28.422 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:46:28.506 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:46:44.809 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:45914 10 6438 1 2025-07-21 14:42:00.258 00:06:00.487 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 14:47:45.184 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33622 10 6438 1 2025-07-21 14:48:45.589 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36938 10 6438 1 2025-07-21 14:49:46.008 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34590 10 6438 1 2025-07-21 14:50:46.419 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36084 10 6438 1 2025-07-21 14:51:28.251 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:51:28.393 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:51:28.497 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:51:28.312 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:51:28.169 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:51:46.826 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44810 10 6438 1 2025-07-21 14:47:00.256 00:06:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-21 14:52:47.228 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33728 10 6438 1 2025-07-21 14:53:47.627 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48926 10 6438 1 2025-07-21 14:49:00.260 00:06:00.487 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-21 14:54:47.990 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46798 10 6438 1 2025-07-21 14:55:48.353 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54830 10 6438 1 2025-07-21 14:56:28.563 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 14:56:28.556 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 14:56:28.356 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:56:28.501 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 14:56:28.584 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 14:56:48.788 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52126 10 6438 1 2025-07-21 14:57:49.197 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54094 10 6438 1 Summary: total flows: 135, total bytes: 408790, total packets: 995, avg bps: 908, avg pps: 0, avg bpp: 410 Time window: 2025-07-21 13:58:00 - 2025-07-21 14:57:59 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0026s User: 0.0017s Wall: 0.0016s flows/second: 83281.5 Runtime: 0.0017s