Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-17 09:54:57.808 00:05:00.688 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 09:59:08.878 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58306 10 6438 1 2025-07-17 09:59:27.211 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 09:59:27.240 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 09:59:27.270 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 09:59:27.321 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 09:59:27.353 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:00:09.277 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40964 10 6438 1 2025-07-17 09:56:57.806 00:05:00.692 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 10:01:09.642 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42928 10 6438 1 2025-07-17 10:02:10.017 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39248 10 6438 1 2025-07-17 10:03:10.422 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47454 10 6438 1 2025-07-17 10:04:10.852 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54352 10 6438 1 2025-07-17 10:04:27.174 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:04:26.917 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 10:04:27.137 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 10:04:27.108 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:04:27.255 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:00:57.810 00:05:00.689 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 10:05:11.269 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47270 10 6438 1 2025-07-17 10:06:11.670 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58228 10 6438 1 2025-07-17 10:02:57.807 00:05:00.695 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 10:07:12.027 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49444 10 6438 1 2025-07-17 10:08:12.432 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47510 10 6438 1 2025-07-17 10:09:12.833 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40130 10 6438 1 2025-07-17 10:09:27.398 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:09:27.006 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 10:09:27.225 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 10:09:27.236 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:09:27.314 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:10:13.228 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44700 10 6438 1 2025-07-17 10:06:57.810 00:05:00.690 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 10:11:13.639 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46026 10 6438 1 2025-07-17 10:12:14.053 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:42806 10 6438 1 2025-07-17 10:08:57.807 00:05:00.695 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 10:13:14.465 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:35064 10 6438 1 2025-07-17 10:14:27.561 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 10:14:27.280 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 10:14:27.588 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:14:14.833 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6438 1 2025-07-17 10:14:27.651 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:14:27.734 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:15:15.261 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59796 10 6438 1 2025-07-17 10:16:15.664 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34698 10 6438 1 2025-07-17 10:12:57.821 00:05:00.682 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 10:17:16.100 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39318 10 6438 1 2025-07-17 10:18:16.509 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38302 10 6438 1 2025-07-17 10:14:57.821 00:05:00.685 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 10:19:27.723 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:19:27.593 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 10:19:27.435 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:19:16.925 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47060 10 6438 1 2025-07-17 10:19:27.641 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:19:27.393 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 10:20:17.341 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60916 10 6438 1 2025-07-17 10:21:17.742 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54852 10 6438 1 2025-07-17 10:22:18.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33030 10 6438 1 2025-07-17 10:18:57.824 00:05:00.682 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 10:23:18.545 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33238 10 6438 1 2025-07-17 10:24:27.485 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:24:27.489 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 10:24:18.949 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35584 10 6438 1 2025-07-17 10:24:27.503 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 10:24:27.597 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:24:27.401 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:20:57.822 00:05:00.687 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 10:25:19.360 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60778 10 6438 1 2025-07-17 10:26:19.762 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37912 10 6438 1 2025-07-17 10:27:20.133 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:33780 10 6438 1 2025-07-17 10:28:20.541 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36008 10 6438 1 2025-07-17 10:24:57.824 00:05:00.682 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 10:29:27.621 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 10:29:27.662 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 10:29:27.391 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:29:27.547 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:29:27.631 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:29:20.939 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45428 10 6438 1 2025-07-17 10:30:21.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56612 10 6438 1 2025-07-17 10:26:57.824 00:05:00.686 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 10:31:21.764 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34376 10 6438 1 2025-07-17 10:32:22.187 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:60842 10 6438 1 2025-07-17 10:33:22.580 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44916 10 6438 1 2025-07-17 10:34:27.698 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 10:34:27.757 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 10:34:27.525 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:34:27.701 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:34:27.784 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:34:23.005 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56320 10 6438 1 2025-07-17 10:30:57.827 00:05:00.680 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 10:35:23.411 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53108 10 6438 1 2025-07-17 10:36:23.820 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:33272 10 6438 1 2025-07-17 10:32:57.825 00:05:00.685 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 10:37:24.187 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40062 10 6438 1 2025-07-17 10:38:24.596 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55844 10 6438 1 2025-07-17 10:39:27.987 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 10:39:27.793 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 10:39:27.812 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:39:27.915 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:39:27.998 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:39:25.004 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33874 10 6438 1 2025-07-17 10:40:25.409 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 10 6438 1 2025-07-17 10:36:57.829 00:05:00.680 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 10:41:25.816 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46968 10 6438 1 2025-07-17 10:42:26.222 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60336 10 6438 1 2025-07-17 10:38:57.827 00:05:00.685 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 10:43:26.627 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60206 10 6438 1 2025-07-17 10:44:28.060 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:44:27.896 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 10:44:28.050 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 10:44:27.919 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:44:27.977 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:44:27.052 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32796 10 6438 1 2025-07-17 10:45:27.458 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59390 10 6438 1 2025-07-17 10:46:27.863 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55812 10 6438 1 2025-07-17 10:42:57.829 00:05:00.680 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 10:47:28.273 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54374 10 6438 1 2025-07-17 10:48:28.688 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57036 10 6438 1 2025-07-17 10:44:57.828 00:05:00.684 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 10:49:28.271 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:49:27.875 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:49:28.188 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:49:28.127 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 10:49:28.027 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 10:49:29.110 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:36466 10 6438 1 2025-07-17 10:50:29.485 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39516 10 6438 1 2025-07-17 10:51:29.893 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:53150 10 6438 1 2025-07-17 10:52:30.270 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45870 10 6438 1 2025-07-17 10:48:57.833 00:05:00.677 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 10:53:30.669 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53036 10 6438 1 2025-07-17 10:54:28.267 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 10:54:28.189 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 10:54:27.827 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:54:28.267 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 10:54:28.350 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 10:54:31.090 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53002 10 6438 1 2025-07-17 10:50:57.831 00:05:00.682 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 10:55:31.461 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42356 10 6438 1 2025-07-17 10:56:31.822 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48898 10 6438 1 2025-07-17 10:57:32.231 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56442 10 6438 1 2025-07-17 10:58:32.633 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39178 10 6438 1 Summary: total flows: 140, total bytes: 416160, total packets: 1020, avg bps: 870, avg pps: 0, avg bpp: 408 Time window: 2025-07-17 09:54:57 - 2025-07-17 10:58:42 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0015s Wall: 0.0026s flows/second: 53886.6 Runtime: 0.0026s