Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-17 06:54:57.760 00:05:00.660 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 06:58:55.806 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:58194 10 6438 1 2025-07-17 06:59:23.428 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 06:59:23.643 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 06:59:23.531 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:59:23.507 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 06:59:23.591 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 06:59:56.179 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45620 10 6438 1 2025-07-17 06:56:57.757 00:05:00.666 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 07:00:56.541 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47136 10 6438 1 2025-07-17 07:01:56.955 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42608 10 6438 1 2025-07-17 07:02:57.322 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:55680 12 10352 1 2025-07-17 07:03:57.802 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:45026 10 6438 1 2025-07-17 07:04:23.433 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 07:04:23.385 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:04:23.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:04:23.527 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 07:04:23.612 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 07:00:57.760 00:05:00.664 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 07:04:58.225 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56762 12 6542 1 2025-07-17 07:05:58.638 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46568 10 6438 1 2025-07-17 07:02:57.758 00:05:00.668 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 07:06:59.053 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58426 10 6438 1 2025-07-17 07:07:59.458 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43104 10 6438 1 2025-07-17 07:08:59.867 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52816 10 6438 1 2025-07-17 07:09:23.820 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 07:09:23.644 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:09:23.632 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:09:23.859 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 07:09:23.714 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 07:10:00.282 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50204 10 6438 1 2025-07-17 07:06:57.764 00:05:00.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 07:11:00.678 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57984 10 6438 1 2025-07-17 07:12:01.109 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35836 10 6438 1 2025-07-17 07:08:57.761 00:05:00.668 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 07:13:01.507 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38534 10 6438 1 2025-07-17 07:14:01.908 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33538 10 6438 1 2025-07-17 07:14:23.939 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 07:14:23.581 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 07:14:23.814 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 07:14:23.610 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:14:23.857 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:15:02.311 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52804 10 6438 1 2025-07-17 07:16:02.718 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:44324 10 6438 1 2025-07-17 07:12:57.766 00:05:00.661 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 07:17:03.148 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47400 10 6438 1 2025-07-17 07:18:03.568 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41568 10 6438 1 2025-07-17 07:14:57.763 00:05:00.667 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 07:19:03.962 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48918 10 6438 1 2025-07-17 07:19:23.957 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 07:19:23.749 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 07:19:23.837 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 07:19:23.681 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:19:23.874 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:20:04.362 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51482 10 6438 1 2025-07-17 07:21:04.772 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37466 10 6438 1 2025-07-17 07:22:05.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37180 10 6438 1 2025-07-17 07:18:57.766 00:05:00.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 07:23:05.588 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47408 10 6438 1 2025-07-17 07:24:05.997 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36844 10 6438 1 2025-07-17 07:24:24.586 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 07:24:24.649 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 07:24:24.608 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:24:24.275 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:24:24.358 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 07:20:57.764 00:05:00.667 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 07:25:06.398 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56626 10 6438 1 2025-07-17 07:26:06.808 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39148 10 6438 1 2025-07-17 07:27:07.207 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44880 10 6438 1 2025-07-17 07:28:07.610 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42306 10 6438 1 2025-07-17 07:24:57.767 00:05:00.663 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 07:29:08.010 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39122 10 6438 1 2025-07-17 07:29:24.067 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 07:29:24.157 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 07:29:23.903 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:29:24.067 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:29:24.150 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 07:30:08.412 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57572 10 6438 1 2025-07-17 07:26:57.765 00:05:00.667 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 07:31:08.780 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55086 10 6438 1 2025-07-17 07:32:09.185 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54226 10 6438 1 2025-07-17 07:33:09.585 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50010 10 6438 1 2025-07-17 07:34:24.408 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 07:34:24.287 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 07:34:24.116 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 07:34:24.083 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:34:24.321 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:34:09.985 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52298 10 6438 1 2025-07-17 07:30:57.769 00:05:00.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 07:35:10.389 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53938 10 6438 1 2025-07-17 07:36:10.789 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45128 10 6438 1 2025-07-17 07:32:57.767 00:05:00.666 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 07:37:11.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52574 10 6438 1 2025-07-17 07:38:11.594 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44312 10 6438 1 2025-07-17 07:39:24.168 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 07:39:12.010 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35676 10 6438 1 2025-07-17 07:39:24.087 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 07:39:24.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 07:39:24.301 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:39:24.085 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:40:12.412 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45350 10 6438 1 2025-07-17 07:36:57.770 00:05:00.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 07:41:12.825 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38214 10 6438 1 2025-07-17 07:42:13.225 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60718 10 6438 1 2025-07-17 07:38:57.767 00:05:00.667 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 07:43:13.632 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38766 10 6438 1 2025-07-17 07:44:24.552 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 07:44:14.031 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42332 10 6438 1 2025-07-17 07:44:24.444 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 07:44:24.383 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:44:24.446 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:44:24.530 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 07:45:14.424 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41046 10 6438 1 2025-07-17 07:46:14.836 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:51578 10 6438 1 2025-07-17 07:42:57.771 00:05:00.663 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 07:47:15.220 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55354 10 6438 1 2025-07-17 07:48:15.629 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:48966 12 10350 1 2025-07-17 07:44:57.768 00:05:00.672 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 07:49:24.571 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 07:49:24.280 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 07:49:24.490 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 07:49:24.193 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:49:24.488 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:49:16.116 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:44112 11 6490 1 2025-07-17 07:50:16.577 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:35474 10 6438 1 2025-07-17 07:51:16.981 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57288 10 6438 1 2025-07-17 07:52:17.420 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52796 10 6438 1 2025-07-17 07:48:57.773 00:05:00.667 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 07:53:17.820 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:42102 10 6438 1 2025-07-17 07:54:24.599 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 07:54:24.644 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 07:54:24.431 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 07:54:24.139 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:54:24.516 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 07:54:18.263 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51898 10 6438 1 2025-07-17 07:50:57.773 00:05:00.672 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 07:55:18.667 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44342 10 6438 1 2025-07-17 07:56:19.096 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51764 10 6438 1 2025-07-17 07:57:19.499 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59976 10 6438 1 2025-07-17 07:58:19.905 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34800 12 6542 1 Summary: total flows: 140, total bytes: 424246, total packets: 1029, avg bps: 890, avg pps: 0, avg bpp: 412 Time window: 2025-07-17 06:54:57 - 2025-07-17 07:58:30 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0010s Wall: 0.0020s flows/second: 69204.8 Runtime: 0.0020s