Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-18 17:54:58.564 00:05:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 17:59:00.807 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37752 10 6438 1 2025-07-18 18:00:05.613 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:00:05.552 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:00:05.569 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:00:05.449 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:00:05.531 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:00:01.222 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54718 10 6438 1 2025-07-18 18:01:01.626 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56330 10 6438 1 2025-07-18 18:02:02.030 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44638 10 6438 1 2025-07-18 18:03:02.433 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52804 10 6438 1 2025-07-18 17:59:58.568 00:05:00.659 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 18:04:02.847 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:50650 10 6438 1 2025-07-18 18:00:58.566 00:05:00.664 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 18:05:05.842 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:05:05.686 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:05:05.593 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:05:05.726 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:05:05.759 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:05:03.284 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46878 10 6438 1 2025-07-18 18:06:03.680 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50352 10 6438 1 2025-07-18 18:07:04.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46434 10 6438 1 2025-07-18 18:08:04.510 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52094 10 6438 1 2025-07-18 18:09:04.919 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33548 10 6438 1 2025-07-18 18:05:58.569 00:05:00.659 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 18:10:05.765 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:10:05.772 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:10:05.694 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:10:05.715 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:10:05.848 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:10:05.335 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60348 10 6438 1 2025-07-18 18:06:58.567 00:05:00.664 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 18:11:05.744 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39922 10 6438 1 2025-07-18 18:12:06.149 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42096 10 6438 1 2025-07-18 18:13:06.554 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41766 10 6438 1 2025-07-18 18:14:06.966 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54096 10 6438 1 2025-07-18 18:15:05.827 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:15:05.945 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:15:05.657 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:15:05.614 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:15:05.744 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:15:07.371 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33376 10 6438 1 2025-07-18 18:11:58.571 00:05:00.659 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 18:16:07.789 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43660 10 6438 1 2025-07-18 18:12:58.568 00:05:00.666 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 18:17:08.191 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55178 10 6438 1 2025-07-18 18:18:08.598 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:52674 11 6490 1 2025-07-18 18:19:09.067 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52238 10 6438 1 2025-07-18 18:20:05.973 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:20:05.881 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:20:06.113 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:20:05.902 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:20:05.985 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:20:09.469 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55970 10 6438 1 2025-07-18 18:21:09.868 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40224 10 6438 1 2025-07-18 18:17:58.571 00:05:00.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 18:22:10.235 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:39266 10 6438 1 2025-07-18 18:18:58.568 00:05:00.668 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 18:23:10.641 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34576 10 6438 1 2025-07-18 18:24:11.052 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59262 10 6438 1 2025-07-18 18:25:06.046 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:25:05.782 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:25:06.129 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:25:06.127 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:25:06.213 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:25:11.463 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60746 10 6438 1 2025-07-18 18:26:11.870 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48448 10 6438 1 2025-07-18 18:27:12.280 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34934 10 6438 1 2025-07-18 18:23:58.571 00:05:00.664 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 18:28:12.643 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57272 10 6438 1 2025-07-18 18:24:58.570 00:05:00.669 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 18:29:13.050 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:37788 11 6490 1 2025-07-18 18:30:06.205 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:30:06.152 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:30:05.955 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:30:06.092 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:30:06.175 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:30:13.503 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57246 10 6438 1 2025-07-18 18:31:13.912 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47164 10 6438 1 2025-07-18 18:32:14.327 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42734 10 6438 1 2025-07-18 18:33:14.729 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53410 10 6438 1 2025-07-18 18:29:58.576 00:05:00.663 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 18:34:15.140 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50808 10 6438 1 2025-07-18 18:30:58.571 00:05:00.669 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 18:35:06.287 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:35:06.287 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:35:06.425 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:35:06.437 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:35:06.520 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:35:15.548 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46130 10 6438 1 2025-07-18 18:36:15.971 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59686 10 6438 1 2025-07-18 18:37:16.376 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60808 10 6438 1 2025-07-18 18:38:16.774 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51926 10 6438 1 2025-07-18 18:39:17.180 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45002 10 6438 1 2025-07-18 18:35:58.575 00:05:00.663 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 18:40:06.323 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:40:06.320 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:40:06.126 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:40:06.323 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:40:06.407 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:40:17.591 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60914 10 6438 1 2025-07-18 18:36:58.573 00:05:00.669 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 18:41:17.969 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49884 10 6438 1 2025-07-18 18:42:18.376 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55804 10 6438 1 2025-07-18 18:43:18.771 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35104 10 6438 1 2025-07-18 18:44:19.195 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39290 10 6438 1 2025-07-18 18:45:06.277 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:45:06.479 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:45:05.996 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:45:06.480 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:45:06.563 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:45:19.599 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:59640 10 6438 1 2025-07-18 18:41:58.575 00:05:00.667 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 18:46:19.980 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37198 10 6438 1 2025-07-18 18:42:58.572 00:05:00.671 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 18:47:20.385 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48716 10 6438 1 2025-07-18 18:48:20.749 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46618 10 6438 1 2025-07-18 18:49:21.149 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60422 10 6438 1 2025-07-18 18:50:06.826 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:50:06.611 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:50:06.643 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:50:06.778 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:50:06.862 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:50:21.510 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40016 10 6438 1 2025-07-18 18:51:21.915 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57158 10 6438 1 2025-07-18 18:47:58.576 00:05:00.666 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 18:52:22.324 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56002 10 6438 1 2025-07-18 18:48:58.574 00:05:00.672 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 18:53:22.689 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33056 10 6438 1 2025-07-18 18:54:23.107 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34060 10 6438 1 2025-07-18 18:55:06.873 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 18:55:06.693 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 18:55:06.671 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 18:55:06.635 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:55:06.790 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 18:55:23.470 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59308 10 6438 1 2025-07-18 18:56:23.877 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42460 10 6438 1 2025-07-18 18:57:24.239 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:49048 10 6438 1 2025-07-18 18:53:58.578 00:05:00.666 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 18:58:24.649 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34262 10 6438 1 Summary: total flows: 140, total bytes: 416264, total packets: 1022, avg bps: 867, avg pps: 0, avg bpp: 407 Time window: 2025-07-18 17:54:58 - 2025-07-18 18:58:59 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0020s User: 0.0020s Wall: 0.0021s flows/second: 67759.4 Runtime: 0.0021s