Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-17 16:54:57.978 00:05:00.686 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 16:58:57.509 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44594 10 6438 1 2025-07-17 16:59:35.469 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 16:59:35.463 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 16:59:35.428 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 16:59:35.510 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 16:59:35.592 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 16:59:57.914 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37046 10 6438 1 2025-07-17 16:56:57.978 00:05:00.690 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 17:00:58.316 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39896 10 6438 1 2025-07-17 17:01:58.723 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53546 10 6438 1 2025-07-17 17:02:59.153 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54584 10 6438 1 2025-07-17 17:03:59.554 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55676 10 6438 1 2025-07-17 17:04:35.823 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 17:04:35.841 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 17:04:35.860 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 17:04:35.800 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:04:35.740 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:00:57.983 00:05:00.685 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 17:04:59.955 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39188 10 6438 1 2025-07-17 17:06:00.324 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59118 10 6438 1 2025-07-17 17:02:57.981 00:05:00.690 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 17:07:00.726 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57050 10 6438 1 2025-07-17 17:08:01.142 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:53064 12 10352 1 2025-07-17 17:09:01.573 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37510 10 6438 1 2025-07-17 17:09:35.686 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 17:09:35.688 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 17:09:35.615 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:09:35.687 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:09:35.770 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 17:10:01.939 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:44362 10 6438 1 2025-07-17 17:06:57.983 00:05:00.686 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 17:11:02.320 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58808 10 6438 1 2025-07-17 17:12:02.724 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58266 10 6438 1 2025-07-17 17:08:57.985 00:05:00.688 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 17:13:03.145 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60134 10 6438 1 2025-07-17 17:14:03.548 00:00:10.425 TCP 1.101.0.1:3000 -> 23.104.0.1:40814 11 6490 1 2025-07-17 17:14:35.642 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 17:14:35.821 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 17:14:35.742 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:14:35.651 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:14:35.733 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 17:15:04.016 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:53562 10 6438 1 2025-07-17 17:16:04.418 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56338 10 6438 1 2025-07-17 17:12:57.989 00:05:00.682 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 17:17:04.784 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 10 6438 1 2025-07-17 17:18:05.155 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42316 10 6438 1 2025-07-17 17:14:57.986 00:05:00.687 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 17:19:05.560 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56890 10 6438 1 2025-07-17 17:19:35.902 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 17:19:35.941 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 17:19:35.588 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:19:35.813 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:19:35.896 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 17:20:05.968 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:38854 11 6490 1 2025-07-17 17:21:06.431 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51104 10 6438 1 2025-07-17 17:22:06.834 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57622 10 6438 1 2025-07-17 17:18:57.990 00:05:00.688 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 17:23:07.250 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:59072 12 10352 1 2025-07-17 17:24:07.742 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33960 10 6438 1 2025-07-17 17:24:35.786 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 17:24:35.955 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 17:24:35.596 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:24:35.947 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:24:36.030 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 17:20:57.987 00:05:00.694 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 17:25:08.147 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41148 10 6438 1 2025-07-17 17:26:08.552 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48464 10 6438 1 2025-07-17 17:27:08.963 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49806 10 6438 1 2025-07-17 17:28:09.369 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:53180 12 10352 1 2025-07-17 17:24:57.991 00:05:00.690 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 17:29:09.847 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 10 6438 1 2025-07-17 17:29:36.513 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 17:29:36.418 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 17:29:36.474 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 17:29:36.247 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:29:36.429 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:30:10.269 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48884 10 6438 1 2025-07-17 17:26:57.990 00:05:00.695 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 17:31:10.680 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32840 10 6438 1 2025-07-17 17:32:11.109 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45868 10 6438 1 2025-07-17 17:33:11.508 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36462 10 6438 1 2025-07-17 17:34:11.917 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44120 10 6438 1 2025-07-17 17:34:36.328 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 17:34:36.030 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 17:34:36.004 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 17:34:36.043 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:34:36.245 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:30:57.994 00:05:00.687 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 17:35:12.323 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52566 10 6438 1 2025-07-17 17:36:12.740 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44930 10 6438 1 2025-07-17 17:32:57.991 00:05:00.693 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 17:37:13.148 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46264 10 6438 1 2025-07-17 17:38:13.563 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:43352 12 10352 1 2025-07-17 17:39:14.061 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59100 10 6438 1 2025-07-17 17:39:36.336 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 17:39:36.201 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 17:39:36.264 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 17:39:36.209 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:39:36.253 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:40:14.467 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43132 10 6438 1 2025-07-17 17:36:57.997 00:05:00.687 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 17:41:14.871 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37460 10 6438 1 2025-07-17 17:42:15.278 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53618 10 6438 1 2025-07-17 17:38:57.995 00:05:00.692 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-17 17:43:15.680 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49780 10 6438 1 2025-07-17 17:44:16.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56498 10 6438 1 2025-07-17 17:44:36.511 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 17:44:36.402 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:44:36.611 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:44:36.562 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 17:44:36.695 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 17:45:16.518 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50734 10 6438 1 2025-07-17 17:46:16.934 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39058 10 6438 1 2025-07-17 17:42:57.998 00:05:00.687 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-17 17:47:17.358 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:42598 10 6438 1 2025-07-17 17:48:17.717 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:57326 10 6438 1 2025-07-17 17:49:18.102 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:44132 11 6490 1 2025-07-17 17:49:36.508 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 17:49:36.395 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 17:49:36.413 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:49:36.289 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:49:36.372 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 17:44:58.018 00:06:00.670 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-17 17:50:18.570 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42480 10 6438 1 2025-07-17 17:51:18.976 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44590 10 6438 1 2025-07-17 17:52:19.384 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48690 10 6438 1 2025-07-17 17:53:19.788 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59222 10 6438 1 2025-07-17 17:48:58.037 00:06:00.650 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-17 17:54:20.196 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40922 10 6438 1 2025-07-17 17:54:36.842 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-17 17:54:36.509 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-17 17:54:36.399 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-17 17:54:36.349 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:54:36.759 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-17 17:55:20.561 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56232 10 6438 1 2025-07-17 17:56:20.971 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56352 10 6438 1 2025-07-17 17:51:58.033 00:06:00.656 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-17 17:57:21.378 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39544 10 6438 1 2025-07-17 17:58:21.779 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46994 10 6438 1 Summary: total flows: 140, total bytes: 432341, total packets: 1037, avg bps: 906, avg pps: 0, avg bpp: 416 Time window: 2025-07-17 16:54:57 - 2025-07-17 17:58:32 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0021s User: 0.0021s Wall: 0.0021s flows/second: 67900.4 Runtime: 0.0021s