Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-18 08:54:58.358 00:05:00.688 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 08:59:23.821 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58078 10 6438 1 2025-07-18 08:59:54.679 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 08:59:54.690 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 08:59:54.446 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 08:59:54.704 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 08:59:54.787 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:00:24.184 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53360 10 6438 1 2025-07-18 09:01:24.582 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39140 10 6438 1 2025-07-18 09:02:24.989 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56346 10 6438 1 2025-07-18 09:03:25.390 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33094 10 6438 1 2025-07-18 08:59:58.361 00:05:00.683 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 09:04:25.796 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:54988 10 6438 1 2025-07-18 09:04:54.923 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:04:54.837 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 09:04:54.843 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 09:04:54.867 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:04:54.840 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:00:58.361 00:05:00.688 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 09:05:26.180 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50286 10 6438 1 2025-07-18 09:06:26.541 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34400 10 6438 1 2025-07-18 09:07:26.950 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53152 10 6438 1 2025-07-18 09:08:27.356 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36100 10 6438 1 2025-07-18 09:09:27.766 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:42112 10 6438 1 2025-07-18 09:09:54.963 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 09:09:54.958 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 09:09:54.902 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:09:54.968 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:09:55.050 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:05:58.362 00:05:00.684 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 09:10:28.191 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51454 10 6438 1 2025-07-18 09:06:58.361 00:05:00.689 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 09:11:28.553 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42340 10 6438 1 2025-07-18 09:12:28.955 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37174 10 6438 1 2025-07-18 09:13:29.361 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45154 10 6438 1 2025-07-18 09:14:29.765 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60316 10 6438 1 2025-07-18 09:14:54.940 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 09:14:54.972 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:14:54.940 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:14:55.024 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:14:55.096 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 09:15:30.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32856 10 6438 1 2025-07-18 09:11:58.363 00:05:00.685 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 09:16:30.597 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42890 10 6438 1 2025-07-18 09:12:58.362 00:05:00.689 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 09:17:30.994 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58828 10 6438 1 2025-07-18 09:18:31.401 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42676 10 6438 1 2025-07-18 09:19:31.812 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51332 10 6438 1 2025-07-18 09:19:55.079 00:00:00.056 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:19:54.895 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 09:19:55.209 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 09:19:55.120 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:19:54.996 00:00:00.056 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:20:32.215 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50912 10 6438 1 2025-07-18 09:21:32.618 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37690 10 6438 1 2025-07-18 09:17:58.366 00:05:00.684 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 09:22:33.033 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45552 10 6438 1 2025-07-18 09:18:58.364 00:05:00.687 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 09:23:33.430 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56070 10 6438 1 2025-07-18 09:24:33.843 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:48288 10 6438 1 2025-07-18 09:24:55.421 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 09:24:55.472 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 09:24:55.036 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:24:55.423 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:24:55.507 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:25:34.285 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54340 10 6438 1 2025-07-18 09:26:34.685 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36876 10 6438 1 2025-07-18 09:27:35.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48444 10 6438 1 2025-07-18 09:23:58.374 00:05:00.676 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 09:28:35.516 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:43824 12 10352 1 2025-07-18 09:24:58.371 00:05:00.681 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 09:29:35.953 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53706 10 6438 1 2025-07-18 09:29:55.142 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 09:29:55.145 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 09:29:55.093 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:29:55.286 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:29:55.370 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:30:36.384 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54154 10 6438 1 2025-07-18 09:31:36.787 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33598 10 6438 1 2025-07-18 09:32:37.192 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58066 10 6438 1 2025-07-18 09:33:37.593 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35688 10 6438 1 2025-07-18 09:29:58.376 00:05:00.675 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 09:34:38.011 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42456 10 6438 1 2025-07-18 09:34:55.210 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 09:34:55.226 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:34:55.608 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:34:55.561 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 09:30:58.374 00:05:00.679 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 09:34:55.691 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:35:38.388 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60950 10 6438 1 2025-07-18 09:36:38.787 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37920 10 6438 1 2025-07-18 09:37:39.187 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58404 10 6438 1 2025-07-18 09:38:39.594 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6438 1 2025-07-18 09:39:39.997 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33942 10 6438 1 2025-07-18 09:39:55.925 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:35:58.377 00:05:00.675 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 09:39:55.647 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 09:39:55.322 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 09:39:55.416 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:39:55.840 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:40:40.394 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36934 10 6438 1 2025-07-18 09:36:58.376 00:05:00.679 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 09:41:40.790 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57138 10 6438 1 2025-07-18 09:42:41.152 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54146 10 6438 1 2025-07-18 09:43:41.553 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43194 10 6438 1 2025-07-18 09:44:41.952 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:50444 10 6438 1 2025-07-18 09:44:55.722 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 09:44:55.731 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 09:44:55.637 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:44:55.608 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:44:55.692 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:45:42.372 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37096 10 6438 1 2025-07-18 09:41:58.379 00:05:00.676 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 09:46:42.787 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56336 10 6438 1 2025-07-18 09:42:58.378 00:05:00.680 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 09:47:43.190 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57176 10 6438 1 2025-07-18 09:48:43.591 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39822 10 6438 1 2025-07-18 09:49:43.993 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54638 10 6438 1 2025-07-18 09:49:55.958 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 09:49:55.613 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 09:49:55.772 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:49:55.493 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:49:55.576 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:50:44.395 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58316 10 6438 1 2025-07-18 09:51:44.813 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53978 10 6438 1 2025-07-18 09:47:58.383 00:05:00.676 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 09:48:58.380 00:05:00.681 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 09:52:45.219 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56598 10 6438 1 2025-07-18 09:53:45.630 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:51600 12 10352 1 2025-07-18 09:54:55.817 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 09:54:55.868 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 09:54:55.870 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 09:54:55.772 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:54:46.120 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59580 10 6438 1 2025-07-18 09:54:55.736 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 09:55:46.539 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46408 10 6438 1 2025-07-18 09:56:46.944 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56270 10 6438 1 2025-07-18 09:57:47.352 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:34298 10 6438 1 2025-07-18 09:53:58.384 00:05:00.677 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 417550, total packets: 1014, avg bps: 869, avg pps: 0, avg bpp: 411 Time window: 2025-07-18 08:54:58 - 2025-07-18 09:58:59 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0000s Wall: 0.0021s flows/second: 65720.7 Runtime: 0.0021s