Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-16 12:58:42.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40756 10 6438 1 2025-07-16 12:53:57.340 00:06:00.575 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 12:59:01.819 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 12:59:01.625 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 12:59:01.819 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 12:59:01.755 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 12:59:01.912 00:00:00.015 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 12:59:42.756 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54652 10 6438 1 2025-07-16 13:00:43.119 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47626 10 6438 1 2025-07-16 13:01:43.550 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44776 10 6438 1 2025-07-16 13:02:43.924 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51932 10 6438 1 2025-07-16 13:03:44.338 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59990 10 6438 1 2025-07-16 13:04:01.595 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 13:04:01.527 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:04:01.613 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:04:01.589 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 13:04:01.696 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 13:04:44.696 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46252 10 6438 1 2025-07-16 12:59:57.339 00:06:00.581 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 13:05:45.107 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49398 10 6438 1 2025-07-16 13:00:57.341 00:06:00.576 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 13:06:45.469 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35212 10 6438 1 2025-07-16 13:07:45.894 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:42308 13 13924 1 2025-07-16 13:08:46.371 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51492 10 6438 1 2025-07-16 13:09:01.736 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:09:01.956 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 13:09:01.737 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 13:09:01.854 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:09:01.819 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 13:09:46.778 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34432 10 6438 1 2025-07-16 13:10:47.151 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35912 10 6438 1 2025-07-16 13:11:47.509 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53332 10 6438 1 2025-07-16 13:06:57.342 00:06:00.579 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 13:07:57.346 00:06:00.573 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 13:12:47.869 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:41234 12 10350 1 2025-07-16 13:13:48.353 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44678 10 6438 1 2025-07-16 13:14:02.307 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 13:14:02.413 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:14:02.304 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:14:02.743 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 13:14:02.386 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 13:14:48.758 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:41670 10 6438 1 2025-07-16 13:15:49.175 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36232 10 6438 1 2025-07-16 13:16:49.543 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41604 10 6438 1 2025-07-16 13:17:49.952 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49670 10 6438 1 2025-07-16 13:18:50.360 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59626 10 6438 1 2025-07-16 13:13:57.344 00:06:00.579 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 13:19:02.049 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 13:19:02.082 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 13:19:02.179 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:19:01.956 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:19:02.281 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 13:14:57.347 00:06:00.574 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 13:19:50.762 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35690 10 6438 1 2025-07-16 13:20:51.185 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51538 10 6438 1 2025-07-16 13:21:51.547 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36830 10 6438 1 2025-07-16 13:22:51.948 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:48032 10 6438 1 2025-07-16 13:24:02.213 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 13:24:02.155 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:24:02.282 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:24:02.283 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 13:23:52.330 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35150 10 6438 1 2025-07-16 13:24:02.365 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 13:24:52.733 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39232 10 6438 1 2025-07-16 13:20:57.347 00:06:00.578 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 13:25:53.144 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37740 10 6438 1 2025-07-16 13:21:57.349 00:06:00.574 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 13:26:53.552 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 10 6438 1 2025-07-16 13:27:53.953 00:00:10.460 TCP 1.101.0.1:3000 -> 23.104.0.1:48786 12 10350 1 2025-07-16 13:29:02.200 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 13:28:54.438 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46150 10 6438 1 2025-07-16 13:29:02.007 00:00:00.048 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:29:02.403 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:29:02.455 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 13:29:02.485 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 13:29:54.839 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:59960 10 6438 1 2025-07-16 13:30:55.266 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:41674 10 6438 1 2025-07-16 13:31:55.648 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54700 10 6438 1 2025-07-16 13:27:57.348 00:06:00.591 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 13:32:56.101 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59884 10 6438 1 2025-07-16 13:28:57.352 00:06:00.586 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 13:34:02.446 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 13:34:02.361 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 13:34:02.561 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:34:02.490 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:34:02.572 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 13:33:56.502 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32944 10 6438 1 2025-07-16 13:34:56.902 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45110 10 6438 1 2025-07-16 13:35:57.318 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53608 10 6438 1 2025-07-16 13:36:57.731 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56434 10 6438 1 2025-07-16 13:37:58.144 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:58782 12 10352 1 2025-07-16 13:39:02.738 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 13:39:02.784 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 13:39:02.649 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:39:02.657 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:39:02.656 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 13:38:58.633 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54642 10 6438 1 2025-07-16 13:34:57.350 00:06:00.592 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 13:39:59.037 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34228 10 6438 1 2025-07-16 13:35:57.352 00:06:00.586 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 13:40:59.441 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36246 10 6438 1 2025-07-16 13:41:59.839 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:38850 10 6438 1 2025-07-16 13:43:00.214 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49962 10 6438 1 2025-07-16 13:44:02.705 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 13:44:02.422 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:44:02.554 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:44:02.706 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 13:44:02.638 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 13:44:00.577 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42552 10 6438 1 2025-07-16 13:45:00.985 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41292 10 6438 1 2025-07-16 13:46:01.388 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 10 6438 1 2025-07-16 13:41:57.353 00:06:00.590 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 13:47:01.802 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39872 10 6438 1 2025-07-16 13:42:57.356 00:06:00.584 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 13:48:02.214 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37936 10 6438 1 2025-07-16 13:49:02.758 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 13:49:02.673 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 13:49:02.735 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:49:02.677 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:49:02.857 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 13:49:02.623 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39914 10 6438 1 2025-07-16 13:50:02.984 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34758 10 6438 1 2025-07-16 13:51:03.390 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:60712 10 6438 1 2025-07-16 13:52:03.764 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:50280 10 6438 1 2025-07-16 13:53:04.187 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:42730 10 6438 1 2025-07-16 13:48:57.356 00:06:00.589 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 13:54:02.877 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 13:54:02.851 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:54:02.820 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 13:54:02.825 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 13:54:02.902 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 13:54:04.582 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55496 10 6438 1 2025-07-16 13:49:57.357 00:06:00.584 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 13:55:04.945 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58752 10 6438 1 2025-07-16 13:56:05.355 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42760 10 6438 1 2025-07-16 13:57:05.748 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39294 10 6438 1 2025-07-16 13:58:06.156 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52526 10 6438 1 Summary: total flows: 137, total bytes: 435261, total packets: 1027, avg bps: 902, avg pps: 0, avg bpp: 423 Time window: 2025-07-16 12:53:57 - 2025-07-16 13:58:16 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0022s User: 0.0022s Wall: 0.0020s flows/second: 69718.5 Runtime: 0.0020s