Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-21 12:59:01.533 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34526 10 6438 1 2025-07-21 12:56:00.222 00:04:00.484 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 13:00:01.935 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:36256 10 6438 1 2025-07-21 12:57:00.220 00:04:00.489 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 13:01:02.306 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48864 10 6438 1 2025-07-21 13:01:26.394 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:01:26.232 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:01:26.328 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:01:26.313 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:01:26.360 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:02:02.703 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59954 10 6438 1 2025-07-21 13:02:00.222 00:01:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-21 13:03:03.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41468 10 6438 1 2025-07-21 13:04:03.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57422 10 6438 1 2025-07-21 13:01:00.224 00:04:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 13:05:03.923 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:60670 10 6438 1 2025-07-21 13:06:04.311 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60320 10 6438 1 2025-07-21 13:06:25.916 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:06:26.423 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:06:26.289 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:06:26.289 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:06:26.372 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:07:04.720 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49530 10 6438 1 2025-07-21 13:04:00.222 00:04:00.489 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 13:08:05.133 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48216 10 6438 1 2025-07-21 13:09:05.493 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:41812 11 6490 1 2025-07-21 13:06:00.226 00:04:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 13:10:05.962 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33280 10 6438 1 2025-07-21 13:11:06.375 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44308 10 6438 1 2025-07-21 13:11:26.527 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:11:26.440 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:11:26.523 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:11:26.408 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:11:26.606 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:12:06.792 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37748 10 6438 1 2025-07-21 13:09:00.226 00:04:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 13:13:07.205 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49850 10 6438 1 2025-07-21 13:14:07.619 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33404 10 6438 1 2025-07-21 13:11:00.228 00:04:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 13:15:08.017 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35028 10 6438 1 2025-07-21 13:16:08.422 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36254 10 6438 1 2025-07-21 13:16:26.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:16:26.310 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:16:26.658 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:16:26.695 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:16:26.741 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:17:08.834 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:38122 10 6438 1 2025-07-21 13:14:00.225 00:04:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 13:18:09.222 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53808 10 6438 1 2025-07-21 13:19:09.623 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57052 10 6438 1 2025-07-21 13:16:00.228 00:04:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 13:20:10.028 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51762 10 6438 1 2025-07-21 13:21:10.452 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36054 10 6438 1 2025-07-21 13:21:26.803 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:21:26.463 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:21:26.672 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:21:26.751 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:21:26.754 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:21:00.230 00:01:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-21 13:22:10.851 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60694 10 6438 1 2025-07-21 13:19:00.226 00:04:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 13:23:11.269 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:35498 12 10352 1 2025-07-21 13:24:11.708 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:59170 10 6438 1 2025-07-21 13:23:00.230 00:02:00.481 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-21 13:25:12.129 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36978 10 6438 1 2025-07-21 13:26:26.855 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:26:12.540 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 10 6438 1 2025-07-21 13:26:26.770 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:26:26.551 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:26:26.772 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:26:26.850 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:26:00.229 00:01:00.484 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-07-21 13:27:12.962 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36028 10 6438 1 2025-07-21 13:24:00.227 00:04:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 13:28:13.363 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35570 10 6438 1 2025-07-21 13:29:13.762 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:58876 10 6438 1 2025-07-21 13:29:00.229 00:01:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-21 13:30:14.175 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41956 10 6438 1 2025-07-21 13:31:14.579 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57970 10 6438 1 2025-07-21 13:31:26.957 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:31:26.934 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:31:26.800 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:31:26.874 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:31:26.999 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:28:00.231 00:04:00.484 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 13:32:14.994 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:50746 10 6438 1 2025-07-21 13:31:00.230 00:02:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-21 13:33:15.396 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50450 10 6438 1 2025-07-21 13:34:15.803 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60718 10 6438 1 2025-07-21 13:34:00.230 00:01:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-07-21 13:35:16.206 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38354 10 6438 1 2025-07-21 13:36:26.841 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:36:26.643 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:36:16.611 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41728 10 6438 1 2025-07-21 13:36:26.956 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:36:26.909 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:36:27.040 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:33:00.231 00:04:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 13:37:17.014 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60362 10 6438 1 2025-07-21 13:38:17.411 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:40762 12 10352 1 2025-07-21 13:39:17.895 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35952 12 6542 1 2025-07-21 13:36:00.230 00:04:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 13:40:18.311 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 10 6438 1 2025-07-21 13:41:26.937 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:41:26.939 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:41:27.103 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:41:18.738 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34260 10 6438 1 2025-07-21 13:41:26.855 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:41:26.941 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:38:00.233 00:04:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 13:42:19.159 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43498 10 6438 1 2025-07-21 13:43:19.556 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42908 10 6438 1 2025-07-21 13:44:19.958 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59176 10 6438 1 2025-07-21 13:41:00.231 00:04:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 13:45:20.325 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50160 10 6438 1 2025-07-21 13:46:27.663 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:46:27.459 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:46:27.654 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:46:27.813 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:46:27.737 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:46:20.727 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46420 10 6438 1 2025-07-21 13:43:00.235 00:04:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 13:47:21.102 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59964 10 6438 1 2025-07-21 13:48:21.505 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37500 10 6438 1 2025-07-21 13:49:21.904 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55596 12 6542 1 2025-07-21 13:46:00.232 00:04:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 13:50:22.317 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53724 10 6438 1 2025-07-21 13:51:27.611 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:51:27.307 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:51:27.349 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:51:27.528 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:51:27.374 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:51:22.731 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42666 10 6438 1 2025-07-21 13:48:00.236 00:04:00.487 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 13:52:23.138 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57282 10 6438 1 2025-07-21 13:53:23.544 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40648 10 6438 1 2025-07-21 13:54:23.951 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39418 10 6438 1 2025-07-21 13:51:00.232 00:04:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-21 13:55:24.363 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50120 10 6438 1 2025-07-21 13:56:27.355 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-21 13:56:27.321 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:56:27.206 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-21 13:56:27.289 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-21 13:56:27.288 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-21 13:56:24.718 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37862 10 6438 1 2025-07-21 13:53:00.236 00:04:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-21 13:57:25.124 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55934 10 6438 1 2025-07-21 13:58:25.526 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35384 10 6438 1 Summary: total flows: 148, total bytes: 424371, total packets: 1031, avg bps: 903, avg pps: 0, avg bpp: 411 Time window: 2025-07-21 12:56:00 - 2025-07-21 13:58:35 Total flows processed: 148, passed: 148, Blocks skipped: 0, Bytes read: 15456 Sys: 0.0017s User: 0.0026s Wall: 0.0022s flows/second: 67210.6 Runtime: 0.0022s