Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-18 18:54:58.576 00:05:00.671 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 18:59:25.062 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52160 10 6438 1 2025-07-18 19:00:06.932 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:00:06.538 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:00:06.801 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:00:06.727 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:00:06.850 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:00:25.466 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41920 10 6438 1 2025-07-18 19:01:25.880 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51158 10 6438 1 2025-07-18 19:02:26.289 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54214 10 6438 1 2025-07-18 19:03:26.686 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60120 10 6438 1 2025-07-18 18:59:58.580 00:05:00.665 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 19:04:27.110 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42038 10 6438 1 2025-07-18 19:00:58.578 00:05:00.669 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 19:05:06.751 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:05:06.748 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:05:06.851 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:05:06.878 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:05:06.961 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:05:27.520 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45096 11 6490 1 2025-07-18 19:06:27.931 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:38292 10 6438 1 2025-07-18 19:07:28.378 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57174 10 6438 1 2025-07-18 19:08:28.778 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39058 10 6438 1 2025-07-18 19:09:29.149 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36034 10 6438 1 2025-07-18 19:05:58.582 00:05:00.667 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 19:10:06.932 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:10:07.101 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:10:06.746 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:10:06.997 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:10:07.080 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:10:29.557 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37864 10 6438 1 2025-07-18 19:06:58.579 00:05:00.670 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 19:11:29.961 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:36102 10 6438 1 2025-07-18 19:12:30.333 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48072 10 6438 1 2025-07-18 19:13:30.694 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46690 10 6438 1 2025-07-18 19:14:31.112 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34050 10 6438 1 2025-07-18 19:15:06.966 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:15:07.060 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:15:07.149 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:15:07.178 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:15:06.884 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:15:31.515 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60666 10 6438 1 2025-07-18 19:11:58.582 00:05:00.665 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 19:16:31.876 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:51320 10 6438 1 2025-07-18 19:12:58.581 00:05:00.670 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 19:17:32.301 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60830 10 6438 1 2025-07-18 19:18:32.701 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:41418 12 10350 1 2025-07-18 19:19:33.185 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43104 10 6438 1 2025-07-18 19:20:07.082 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:20:07.327 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:20:07.123 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:20:07.330 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:20:07.414 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:20:33.589 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41032 10 6438 1 2025-07-18 19:21:33.994 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55436 10 6438 1 2025-07-18 19:17:58.585 00:05:00.664 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 19:22:34.424 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46260 10 6438 1 2025-07-18 19:18:58.585 00:05:00.668 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 19:23:34.830 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:55902 12 10350 1 2025-07-18 19:24:35.311 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41174 10 6438 1 2025-07-18 19:25:07.398 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:25:07.264 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:25:07.190 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:25:07.224 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:25:07.315 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:25:35.716 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55322 10 6438 1 2025-07-18 19:26:36.118 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34056 10 6438 1 2025-07-18 19:27:36.480 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37496 10 6438 1 2025-07-18 19:23:58.593 00:05:00.658 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 19:28:36.853 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57970 10 6438 1 2025-07-18 19:24:58.593 00:05:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 19:29:37.272 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45152 10 6438 1 2025-07-18 19:30:07.337 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:30:07.533 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:30:07.536 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:30:07.536 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:30:07.618 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:30:37.676 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51970 10 6438 1 2025-07-18 19:31:38.107 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54010 10 6438 1 2025-07-18 19:32:38.508 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49512 10 6438 1 2025-07-18 19:33:38.915 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57668 12 6542 1 2025-07-18 19:29:58.599 00:05:00.653 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 19:34:39.322 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43860 10 6438 1 2025-07-18 19:30:58.595 00:05:00.659 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 19:35:07.661 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:35:07.241 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:35:07.835 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:35:07.296 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:35:07.579 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:35:39.727 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47982 10 6438 1 2025-07-18 19:36:40.140 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:43760 10 6438 1 2025-07-18 19:37:40.499 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34592 10 6438 1 2025-07-18 19:38:40.918 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:57766 12 10352 1 2025-07-18 19:39:41.411 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52060 10 6438 1 2025-07-18 19:35:58.599 00:05:00.653 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 19:40:07.502 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:40:07.421 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:40:07.570 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:40:07.430 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:40:07.433 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:40:41.816 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32878 10 6438 1 2025-07-18 19:36:58.598 00:05:00.657 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 19:41:42.233 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37170 10 6438 1 2025-07-18 19:42:42.644 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46664 10 6438 1 2025-07-18 19:43:43.071 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54866 10 6438 1 2025-07-18 19:44:43.473 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40796 10 6438 1 2025-07-18 19:45:07.876 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:45:07.615 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:45:07.837 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:45:07.713 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:45:07.793 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:45:43.835 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:42232 10 6438 1 2025-07-18 19:41:58.602 00:05:00.652 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 19:46:44.264 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51922 10 6438 1 2025-07-18 19:42:58.599 00:05:00.657 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 19:47:44.628 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45422 10 6438 1 2025-07-18 19:48:45.049 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54326 10 6438 1 2025-07-18 19:49:45.460 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33930 10 6438 1 2025-07-18 19:50:07.687 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:50:07.712 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:50:07.838 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:50:07.724 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:50:07.605 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:50:45.868 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48880 10 6438 1 2025-07-18 19:51:46.285 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55534 10 6438 1 2025-07-18 19:47:58.605 00:05:00.652 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-18 19:48:58.603 00:05:00.656 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-18 19:52:46.701 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37636 10 6438 1 2025-07-18 19:53:47.114 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:59876 10 6438 1 2025-07-18 19:54:47.487 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42908 10 6438 1 2025-07-18 19:55:08.004 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-18 19:55:07.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-18 19:55:07.658 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-18 19:55:07.646 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:55:07.921 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-18 19:55:47.895 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58402 10 6438 1 2025-07-18 19:56:48.305 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55860 10 6438 1 2025-07-18 19:57:48.707 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35100 10 6438 1 2025-07-18 19:53:58.609 00:05:00.649 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 421616, total packets: 1019, avg bps: 878, avg pps: 0, avg bpp: 413 Time window: 2025-07-18 18:54:58 - 2025-07-18 19:58:59 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0040s User: 0.0000s Wall: 0.0014s flows/second: 98514.4 Runtime: 0.0014s